Punch & Associates Investment Management
May 5, 2026
•[ ransomware, finance, leak ]
Punch & Associates Investment Management was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Financial Services. Country: United States of America. Punch & Associates is a boutique investment advisory firm based in Edina, MN. They offer specia
lized investment advisory services tailored for private clients and institutions. The firm focu
ses on providing personalized financial strategies to meet the unique needs of their clients. W
ith a commitment to excellence, Punch & Associates aims to help clients achieve their financial
goals.
We will upload 10gb of corporate data soon. Detailed client personal information (passports, SS
Ns, DLs and so on for almost 80 ppl), employee personal files, lots of confidential files (fina
ncials and personal docs), contracts and agreements, projects, NDAs, etc.
Maximum Mold
May 5, 2026
•[ ransomware, manufacturing, leak ]
Maximum Mold was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Manufacturing. Maximum Mold is a specialized provider of tooling and machining solutions, focusing on the des
ign, engineering, and manufacturing of die cast dies, trim dies, and plastic injection molds.
Here is the access to upload company data. Employee personal information (passports, and other
docs), customer files, contracts and agreements, projects, NDAs, etc.
You will find several password-free archives. Click on any of them to start the download.
Download link
https://3i7uisihrgv3v7kjafmhahhcmtjfepckhw5vournekuamhbt37liplid.onion/LEAKS_1/maximummold.com
/
Unre3d
May 5, 2026
•[ ransomware, technology ]
Unre3d was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Unre3d is a company that operates in the Information & Document Management industry. UNRE Technology was established in 2017.As a full-stack solution provider, we offer advanced 3D laser scanner, measurement and semantic modeling solutions.We specialize in making connections between the digital and physical worlds.Our mission is to give service throughout the whole life cycle of building projects, including civil construction,decoration and maintenance.We have successfully co-worked with more than 500 projects (more than 5 million square meters).
Bay State Land Services
May 5, 2026
•[ ransomware, technology ]
Bay State Land Services was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: United States of America. Bay State Land Services Inc is a company that operates in the Architecture, Engineering & Design industry.
Positiwise Infotech Pvt
May 5, 2026
•[ ransomware, technology, healthcare ]
Positiwise Infotech Pvt was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Technology. Country: India. Positiwise Software Pvt Ltd is a software development company based in India and the USA, specializing in a wide range of services including web development, eCommerce solutions, mobile app development, and custom software development. They cater to various industries such as healthcare, retail, real estate, finance, and hospitality, providing tailored solutions to meet specific business needs. With over two decades of experience, their team of top-tier developers is dedicated to delivering high-quality, scalable, and innovative software solutions. Positiwise aims to help businesses digitize their operations effectively while ensuring data security and timely project delivery.
Cazh.id
May 5, 2026
•[ ransomware, finance, technology ]
Cazh.id was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Financial Services. Country: Indonesia. Website: bkdp.cazh.id. - User DB: 300,000 Users (Email, Hash, Phone, Address, DOB) for https://bkdp.cazh.id/.
- KYC Vault: 7,800 Government IDs + 4,200 Selfies (including "Hold-to-Face" ID selfies).
- 34 SQL Databases for associated schools (Students/Parents/Staff).
- Corporate/Financial: Full Investor Database + partner documents
- Collateral documents (Vehicle Registration Documents & Property Deeds)
- Billing Proofs
- Full src code of their services
Data stolen: PII, SOURCE CODE, KYC
ovextech.com
May 4, 2026
•[ ransomware, technology ]
ovextech.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Technology. Country: United States of America. Website: ovextech.com. Ovex Tech specializes in providing comprehensive BPO services and call center solutions, including inbound and outbound ...
Raycolighting
May 5, 2026
•[ ransomware, manufacturing ]
Raycolighting was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: raycolighting.com. Organization with 2 emails extracted. Domain: raycolighting.com
Colegio María Inmaculada (CMI)
May 5, 2026
•[ ransomware, education ]
Colegio Mara Inmaculada (CMI) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Education. Country: Costa Rica. Website: mariainmaculada.ed.cr. Catholic school in Moravia, Costa Rica. Domain cmi.local / mariainmaculada.ed.cr. Servers: CMI-DC01, CMI-APP, CMI-HTTP2, main-server1/2.
Académie de Montpellier / CSJM
May 5, 2026
•[ ransomware, education, government ]
Acadmie de Montpellier / CSJM was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Education. Country: France. Website: ac-montpellier.fr. French public school network. Domain CSJM.BEZIERS, part of Acadmie de Montpellier (ac-montpellier.fr). Occitanie region (laregion.fr). Teacher and admin staff credentials.
Palmers Relocations
May 5, 2026
•[ ransomware, leak ]
Palmers Relocations was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Australian international removals & relocation company. FIDI accredited, ISO 9001:2015 certified. Services: household moves, storage, customs, immigration (IMMI/VEVO). Operates Melbourne area (Pascoe Vale, Dandenong, Caulfield).
ActionAid / TACOSA
May 5, 2026
•[ ransomware, government ]
ActionAid / TACOSA was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: actionaid.org. NGO sector. Domains: actionaid.org, tacosa.org.za, immigration.go.tz.
Hathcock (Personal)
May 5, 2026
•[ ransomware ]
Hathcock (Personal) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Personal comprehensive reports. Individuals: Noel Ray Hathcock, Trinity John Hathcock.
CourtSmart
May 5, 2026
•[ ransomware, technology, government ]
CourtSmart was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: United States of America. Website: courtsmart.com. Court technology company. Domain courtsmart.com / COURTSMART2. Dev server: dev-rich20.courtsmart.com. Connections to JIS.org, nashville.org.
Magnolia (Israel)
May 5, 2026
•[ ransomware, retail, leak ]
Magnolia (Israel) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Israel. Website: magnolia-jewellery.com. Israeli jewelry company. Silver & accessories, participates in Vicenza jewelry fair (2025/2026). Sells via buyme.co.il gift cards. ~38k files, invoices in Hebrew (SI/IN/OV prefix).
Bandeirante Supermercados
May 5, 2026
•[ ransomware, retail ]
Bandeirante Supermercados was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Brazil. Website: bandeirantesupermercados.com.br. Brazilian supermarket chain.
Elken Sdn Bhd
May 5, 2026
•[ ransomware, retail ]
Elken Sdn Bhd was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Malaysia. Website: elken.com. MLM / health & beauty products company. ~16k emails extracted.
Sysco
May 5, 2026
•[ ransomware, manufacturing ]
Sysco was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Agriculture and Food Production. Country: United States of America. Website: www.sysco.com.
Scales and Associates Inc
May 5, 2026
•[ ransomware, technology ]
Scales and Associates Inc was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: United States of America. Website: scalesassoc.com. Scales & Associates, Inc. is a firm that specializes in engineering and architecture, focusing on creating intelligent and economical solutions for their clients. They adopt a strategic, big-picture perspective, ensuring that all components of a project work together efficiently for overall success. Their services are designed to meet both current needs and future demands. The company is DBE certified and operates from Detroit, MI.
Ropers Majeski
April 23, 2026
•[ ransomware, leak, finance ]
Ropers Majeski was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-04-23. Sector: Professional Services. Country: United States of America. Website: ropers.com. [AI generated] Ropers Majeski is a law firm based in the United States, operating primarily in California. The firm provides legal services across a range of practice areas including litigation, insurance defense, business law, employment law, and professional liability. It serves corporate clients, insurers, and individuals, with offices in multiple California cities. The firm is known for its work in complex civil litigation and risk management counsel.
