TAURUS INVESTMENT HOLDINGS
May 19, 2026
•[ ransomware, finance, leak ]
TAURUS INVESTMENT HOLDINGS was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-19. Sector: Financial Services. Country: Cyprus. Website: tiholdings.com. Established in 1976, Taurus is a global real estate private equity firm with over 40 years of experience as a general partner, investor, and operator. Currently active in the United States, Western Europe, Asia, and South America, the firm makes strategic investments into value-add, core-plus, and development opportunities. Throughout North America and Europe, Taurus is consistently recognized as one of the premier owner operators of both directly managed and joint venture commercial real estate. To date, Taurus has purchased and developed more than 54 million square feet (5.01 million square meters) of residential, office, industrial, retail and other commercial real estate assets throughout the world with a total acquisition value of over $8 billion. www.tiholdings.com
ZFG ALTHERM Engineering
May 19, 2026
•[ ransomware, manufacturing, technology ]
ZFG ALTHERM Engineering was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-19. Sector: Manufacturing. Country: Austria. Website: zfg-altherm.at. ZFG ALTHERM Engineering GmbH specializes in engineering services for technical building equipment. The company focuses on providing high-quality planning and consulting solutions tailored to complex and technically demanding projects. With a commitment to precision, know-how, and experience, they strive to develop individualized solutions for each client. Their target clients include those seeking specialized engineering services in the field of technical building infrastructure.
Nothing
May 19, 2026
•[ ransomware, technology, financial ]
Nothing was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-19. Sector: Technology. Country: Taiwan. Website: nothing.tech. NOTHING
Website: https://nothing.tech/
https://www.zoominfo.com/c/nothing/557232902
WE HAS COLLECTED SUCH DATA AS:
- Confidential documents
- Clients Data
- NDA
- Financial data
- Operations
- Corporate data
- Business Agreements
- Technology
- Total: 52GB
And a lot of other VERY IMPORTANT information!
olipes.com
May 19, 2026
•[ ransomware, retail, manufacturing ]
olipes.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-19. Sector: Retail & E-Commerce. Country: Spain. Website: olipes.com. Founded in 1993 and headquartered in Campo Real, Madrid, the company has become an important independent manufacturer in the European
Exchange Group
May 13, 2026
•[ ransomware, finance, hack ]
Exchange Group was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Financial Services. Country: Canada. Website: exg.ca. Professional Accounting and Consulting firms in the province of Manitoba
Indian Creek Valley Water Authority
May 13, 2026
•[ ransomware, government ]
Indian Creek Valley Water Authority was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Government & Defense. Country: United States of America. Website: icvwater.org. Indian Creek Valley Water Authority
Fana Jewelry Inc
May 14, 2026
•[ ransomware, retail ]
Fana Jewelry Inc was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Retail & E-Commerce. Country: United States of America. Website: fanajewelry.com. Crafting jewelry for countless generations
Pro Farm Group Inc
May 14, 2026
•[ ransomware, manufacturing ]
Pro Farm Group Inc was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-05-14. Sector: Agriculture and Food Production. Country: United States of America. Website: profarm.com. Experts at discovering, developing, and commercializing naturally derived technologies
Sid Harvey's
September 22, 2025
•[ ransomware, retail, financial ]
Sid Harvey's was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-09-22. Sector: Retail & E-Commerce. Country: United States of America. Website: sidharvey.com. Sid Harvey Industries is a wholesale distributor of refrigeration, air conditioning, and heatin
g equipment and parts for contractors in the United States.
We will upload 740gb of corporate data soon. Detailed employee personal information (~500 ppl p
assports, DLs, SSNs, personal financials, death certs, confidential agreements, credit cards an
d so on), contracts and agreements, financials, clients and partners, etc.
Air Conditioning Florida & Mrdsllc & RTE Stucco & MR Drywall Services
May 20, 2026
•[ ransomware, leak, manufacturing ]
Air Conditioning Florida & Mrdsllc & RTE Stucco & MR Drywall Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-20. Sector: Professional Services. Country: United States of America. Website: www.airconditioning-florida.com, www.mrdsllc.com, www.rtesllc.com, www.mrdrywallservices.com.
Cz Collections
May 20, 2026
•[ ransomware, retail ]
Cz Collections was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-20. Sector: Retail & E-Commerce. Country: Czechia. Website: www.czcollections.com.
CJ Architects
May 20, 2026
•[ ransomware, technology ]
CJ Architects was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-20. Sector: Professional Services. Country: United States of America. Website: www.cjarchitects.net.
StarBucks Company
April 1, 2026
•[ ransomware, misconfiguration, retail ]
StarBucks Company was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-04-01. Sector: Hospitality. Country: United States of America. Website: StarBucks.com. StarBucks Failed to reach out to us and didn't pay even $500,000 when we know they can afford it. It's not even that much we were asking for. Since you didn't contact is no negotiations and this is now in the hands of cybercriminals. This is a warning to all companies if you see yourself posted here to reach us. This is the only ammount we have on are servers due to migrating dmca and ignore abuse infrastructure. They were breached on 04/01/2026 and they know they were breached because they closed the s3 bucket starbucks-prod.
YMCA of Columbia
May 21, 2026
•[ ransomware, leak ]
YMCA of Columbia was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-21. Sector: Retail & E-Commerce. Country: United States of America. Website: columbiaymca.org. columbiaymca.org zoominfo.com/c/ymca-of-columbia/8912958 Founded in 1854, the YMCA of Columbia is a cornerstone charitable organization dedicated to building healthy spirit, mind, and body for all across South Carolina's Midlands. Through five community branches, they deliver impactful youth development, wellness programs, and social responsibility initiatives rooted in Christian values of caring, respect, and inclusion. Every day, the Y empowers neighbors of all ages and backgrounds to learn, grow, and thrive together
MBM Corp
May 21, 2026
•[ ransomware, manufacturing, technology ]
MBM Corp was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-21. Country: United States of America. Website: mbmcorp.com. mbmcorp.com rocketreach.co/mbm-corp-profile_b5efe288f42e7251 MBM Corporation, founded in 1936 and headquartered in Charleston, South Carolina, is a trusted leader in professional print finishing and document security solutions. Renowned for Destroyit shredders, Triumph cutters, and AeroCut digital finishing systems, MBM empowers print shops and businesses with precision-engineered equipment backed by expert support and industry-leading warranties
Grupo Pasquel
May 21, 2026
•[ ransomware, retail, manufacturing ]
Grupo Pasquel was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-21. Sector: Agriculture and Food Production. Country: Ecuador. Website: grupopasquel.com. grupopasquel.com zoominfo.com/c/grupo-pasquel/430007218 Grupo Pasquel is a well-established Ecuadorian enterprise from Quito, with over three decades of excellence in construction and hardware retail. Through its Mi Ferre brand, it delivers quality products and integrated solutions, empowering builders and DIY enthusiasts nationwide with trusted service and logistics
Robinsons
May 21, 2026
•[ ransomware, retail ]
Robinsons was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-05-21. Sector: Retail & E-Commerce. Country: Singapore. Founded in 1858, Robinsons established itself to become a household name in Singapore, and as a mecca for elevated shopper experiences with their extraordinary product and service innovations. The first flagship - Robinsons The Heeren - opened in November 1858, redefined a new standard for retail experiences in Singapore.
Internal Medicine and Pediatrics of Cullman
May 21, 2026
•[ ransomware, healthcare ]
Internal Medicine and Pediatrics of Cullman was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-05-21. Sector: Healthcare. Country: United States of America. Website: impcullman.com. Internal Medicine and Pediatrics of Cullman provides comprehensive healthcare services for families, focusing on both internal medicine and pediatrics. The practice is staffed by board-certified physicians dedicated to delivering high-quality care using modern medical equipment. They offer a range of services including preventative medicine, in-house lab and radiology, and same-day appointments.
A-Sonic Logistic Solutions
May 21, 2026
•[ ransomware, technology ]
A-Sonic Logistic Solutions was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-05-21. Sector: Transportation. Website: asonic-logisticsolutions.com. Founded in 1993, A-Sonic Logistic Solutions is a supply chain management service provider that specializes in international and domestic multimodal transportation and warehousing, airside logistics services, air cargo general sales and marketing for international airlines, and more. The company is headquartered in Singapore.
G Theodor Freese
May 21, 2026
•[ ransomware, manufacturing ]
G Theodor Freese was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-05-21. Sector: Manufacturing. Country: Germany. Website: gtf-freese.de. GTF Freese is a family-owned company with over 110 years of experience, specializing in ship deck coverings, flooring technology, building protection, and coating systems. The company prides itself on its motto 'We make floors good,' ensuring high-quality products like TEFROTEX and TEFROKA are manufactured under strict quality control according to DIN ISO 9001 standards.