Forestdale
May 11, 2026
•[ ransomware, hack ]
Forestdale was listed as a victim on the leak site of the moneymessage ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland.
International Customer Care Services
March 29, 2026
•[ ransomware, technology ]
International Customer Care Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-29. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: iccs.global.
Keller Williams Real Estate - Exton
May 11, 2026
•[ ransomware, leak, retail ]
Keller Williams Real Estate - Exton was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Retail & E-Commerce. Country: United States of America. Website: www.kwphillysuburbs.com.
lalsgroup.com
May 10, 2026
•[ ransomware, leak, retail ]
lalsgroup.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-10. Sector: Other. Country: United Arab Emirates. Website: lalsgroup.com. Lals Group is a large UAE-based family business group operating in retail, FMCG, distribution, home goods, and lifestyle brands across the GCC region. Founded in 1979, the company manages well-known brands and retail chains including Homes r Us, Daiso Japan, Carters, Mom Store, and others. Lals Group operates across the UAE, Qatar, Bahrain, Oman, Kuwait, and Saudi Arabia, with activities spanning retail stores, shopping malls, and logistics services.
--
400 gb
AppDirect
May 11, 2026
•[ ransomware, technology ]
AppDirect was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Technology. Country: Canada. Website: www.appdirect.com.
Ben F. Barcus and associates pllc
May 9, 2026
•[ ransomware, finance ]
Ben F. Barcus and associates pllc was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-09. Sector: Professional Services. Country: United States of America. Website: usattorneys.com. A law firm from Tacoma, WA.
Integrated Process Engineers & Constructors.
May 8, 2026
•[ ransomware, leak, manufacturing ]
Integrated Process Engineers & Constructors. was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Manufacturing. Country: United States of America. Website: ipec-inc.com. Specializes in custom modular process systems, offering a wide range of products including bioreactors, filtration systems, and utility stations.
Fargo Moorhead West Fargo Chamber
May 8, 2026
•[ ransomware, technology ]
Fargo Moorhead West Fargo Chamber was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Professional Services. Country: United States of America. Website: fmwfchamber.com. A business services provider.
Casino Gaming Commission
May 8, 2026
•[ ransomware, government, leak ]
Casino Gaming Commission was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Government & Defense. Country: Jamaica. Website: cgc.gov.jm. Official Casino Gaming Commission of Jamaica.
rbh aerospace inc
May 11, 2026
•[ ransomware, manufacturing, espionage ]
rbh aerospace inc was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Manufacturing. Country: United States of America. Website: rbhaerospace.com. RBH Aerospace, Inc.
-is a manufacturing company located in Long Beach, California, specializing in the production of aerospace components. Established in January 2005, the company focuses on providing high-quality parts for both commercial and military aircraft. Their product offerings include aircraft frames, fuselages, wings, and various metal alloy components such as steel, aluminum, and titanium.
2708 Seaboard Lane, Long Beach, CA 90805
http://www.rbhaerospace.com/
Leaked data 240 GB:
Corporate information, including electronic correspondence with counterparties, contracts including NDAs, transactions and payments related to them, STP (STEP) files, part drawings (including those for F-15, F-22), manuals and instructions.
Pequod Associates
May 11, 2026
•[ ransomware, finance ]
Pequod Associates was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Professional Services. Country: United States of America. Website: pequodassociates.com. A global leader in the provision of Marine Claims TPA and Recovery services.
SmilePoint Dental Group
April 14, 2026
•[ ransomware, healthcare ]
SmilePoint Dental Group was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Healthcare. Country: United States of America. Website: www.smilepoint.us. SmilePoint Dental Group is a fast-growing dental organization operating 2628 offices across Texas and New Mexico.The group runs multiple family dental clinics and orthodontics practices in smaller communities under various brands such as Crosby Family Dental, Liberty Family Dental, Jasper Family Dental, SmilePoint Dental, and others.They offer comprehensive services including general dentistry, orthodontics, cosmetic care, implants, and preventive treatments with modern equipment.- Patient database with social security numbers and medical histories- Access to the local EagleSoft database- Financial reportsThe data provided will allow you to deploy the company's database on any PC with full access to SmilePoint's EagleSoft functionality. https://www.smilepoint.us
Rivadeneyra Treviño
May 12, 2026
•[ ransomware, leak ]
Rivadeneyra Trevio was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Other. Country: Mexico. Website: rivtrev.com. Rivadeneyra Trevio provides expert corporate legal advice, specializing in regulatory law, contract law, foreign trade, and intellectual property for national and international clients.
NorthWest Handling Systems
April 23, 2026
•[ ransomware, leak, manufacturing ]
NorthWest Handling Systems was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-04-23. Sector: Transportation. Country: Canada. [warehouse] NorthWest Handling Systems a 55-year-old forklift and warehouse equipment company headquartered in Renton, Washington, with branches across WA, OR, and AK. The dump is the entire corporate file share going back to 1988. 337,000+ files spanning every branch, every department, every era of the company. It includes: Plaintext credit card numbers in an Excel spreadsheet literally titled C.O.D. info (CREDIT CARD INFO).xlsx stored at the root of the file server, unencrypted, for years. Social Security numbers and Taxpayer IDs on W-9 forms and certified payroll documents for government-contract work (USPS, Oregon DHS, public schools). 3+ years of plaintext passwords for Target Corporations vendor portal (TARS), stored in Word documents titled TARGET PASSWORD & SECURITY QUESTIONS. Each password rotation was saved as a new file. Home Depot Maximo DC billing credentials plaintext, in a Word document, enabling fraudulent invoicing against a Fortune 50 company. Albertsons/Safeway Corrigo facility-management portal credentials again, plaintext in a .docx file. 33 GB of customer warehouse CAD files facility layouts, equipment placement, security-zone dimensions, and fire-protection drawings for approximately 50200 companies including Nike, Google, Costco, and Umpqua Bank. 24,669 rows of fixed-asset data in ExportFile.csv the complete equipment inventory, revealing the companys financial structure, depreciation schedules, and capital-investment history. Corporate bank routing and account numbers (ACH authorization forms), employee direct-deposit details, time cards, disciplinary records, accident reports, and decades of invoices.
Saharuang
May 12, 2026
•[ ransomware, manufacturing ]
Saharuang was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Other. Country: Thailand. Website: saharuang.com. Company operates a large-scale sugar mill and refinery in the Saraburi province, producing various types of sugar for both domestic and export markets.
NaRaYa
May 12, 2026
•[ ransomware, retail ]
NaRaYa was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Retail & E-Commerce. Country: Thailand. Website: naraya.com. NaRaYa is a famous Thai brand recognized worldwide for its distinctive fabric bags and accessories. Founded in 1989, it has grown into one of Asia's most influential brands, specializing in high-quality, handcrafted products that showcase Thai crafts
Vision 3 Architects
April 24, 2026
•[ ransomware, leak, technology ]
Vision 3 Architects was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-24. Sector: Professional Services. Country: United States of America. Website: vision3architects.com. Vision 3 Architects is a collaborative and responsive design studio specializing in architectur
e and interior design projects. They focus on crafting spaces that reflect each client's vision
and values, ensuring a design environment that fosters creativity and collaboration.
We will upload 31gb of corporate data soon. Detailed employee personal information (passports,
DLs, SSNs and so on), contracts and agreements, client information, projects, NDAs, etc.
Manhattan Broadcasting
May 6, 2026
•[ ransomware, technology, leak ]
Manhattan Broadcasting was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Technology. Country: United States of America. Website: manhattanbroadcasting.com. Manhattan Broadcasting Company is a leading source of local and regional news, sports, weather,
and entertainment in Northeast Kansas, engaging over 100,000 listeners weekly.
We will upload of corporate data soon. Employee personal informatics, contracts, lots of pictur
es and other files.
Mediapost Spain
May 12, 2026
•[ ransomware, technology ]
Mediapost Spain was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-12. Sector: Professional Services. Country: Spain. Website: www.mediapost.es.
Kaplan Companies
April 7, 2026
•[ ransomware, financial, leak ]
Kaplan Companies was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-07. Sector: Professional Services. Country: United States of America. Website: thinkkaplan.com. Kaplan Companies specializes in providing rental and commercial properties, focusing on new hom
es and maintenance services for current residents. The company aims to cater to individuals and
families seeking quality housing solutions.
We will upload 45gb of corporate data soon. Employee and owners personal information (passports
, DLs, SSNs, and other personal docs), contracts and agreements, client information, financials
, payment details, projects files, drawings and specifications and so on.