Lexus
May 4, 2026
•[ ransomware, manufacturing, automotive ]
Lexus was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Manufacturing. Country: Ukraine. Website: www.lexus.ua.
Foxstone Financial
May 4, 2026
•[ ransomware, finance ]
Foxstone Financial was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Financial Services. Country: Australia. Website: www.foxstonefinancial.com.
Law Office of Steven R Smith
May 4, 2026
•[ ransomware, leak ]
Law Office of Steven R Smith was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Professional Services. Country: United States of America. Website: www.newyorkattorneyatlaw.com.
Morning Star Tours
April 30, 2026
•[ ransomware, retail ]
Morning Star Tours was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Hospitality. Country: United States of America. Website: morningstartours.com. Journeys that can change lives
Seagate Capital Construction
May 4, 2026
•[ ransomware, manufacturing ]
Seagate Capital Construction was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Manufacturing. Country: United States of America. Website: www.seagatecapitalconstruction.com.
zonaovest.to.it
May 4, 2026
•[ ransomware, government ]
zonaovest.to.it was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Other. Country: Italy. Website: zonaovest.to.it. Is likely an Italian regional organization or consortium based in the Turin (Torino) area. Entities with similar naming conventions in
maiadouro.pt
May 4, 2026
•[ ransomware, manufacturing ]
maiadouro.pt was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Agriculture and Food Production. Country: Portugal. Website: maiadouro.pt. Appears to be a Portuguese company connected to the Douro region, which is internationally known for wine production and agriculture.
dahlgrenscement.se
May 4, 2026
•[ ransomware, manufacturing ]
dahlgrenscement.se was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Manufacturing. Country: Sweden. Website: dahlgrenscement.se. Is a Swedish company operating in the construction materials sector, particularly focused on cement and related building products. Companies in
bootstransport.ca
March 7, 2026
•[ ransomware, manufacturing ]
bootstransport.ca was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-03-07. Sector: Transportation. Country: Canada. Website: bootstransport.ca. Is a Canadian transportation and logistics company specializing in freight delivery and supply chain services. The company primarily operates in
hokuyo2006.co.jp
May 4, 2026
•[ ransomware, manufacturing ]
hokuyo2006.co.jp was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Manufacturing. Country: Japan. Website: hokuyo2006.co.jp. Is a Japanese company that operates as part of a larger industrial group connected to packaging, logistics, and housing-related businesses.
Thompson Builders Corporation
May 4, 2026
•[ ransomware, manufacturing, leak ]
Thompson Builders Corporation was listed as a victim on the leak site of the securotrop ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Manufacturing. Country: United States of America. Website: www.tbcorp.com. Status: AWAITING
Size: 3633 GB
Studio Marchi - Studio Professionale Associato
May 5, 2026
•[ ransomware, finance ]
Studio Marchi - Studio Professionale Associato was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: Italy.
foodsmart.com.do
May 5, 2026
•[ ransomware, leak ]
foodsmart.com.do was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Agriculture and Food Production. Country: Dominican Republic. Website: foodsmart.com.do. Foodsmart Dominicana, S.R.L
A company operating in the food industry
Specializing in flour derivative products (harina...
childplace.org
April 17, 2026
•[ ransomware, education ]
childplace.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Education. Country: United States of America. Website: childplace.org. Childplace Family Services is dedicated to nurturing children and empowering families through a range of services including fostering, adoption, counseling, and community support. The organization aims to serve children and families at risk, particularly those who have experienced abandonment, abuse, or neglect. With a history of over 50 years, Childplace has successfully helped thousands of children find loving homes and provided essential support to families in need. Their mission is rooted in promoting hope and healing within the community, guided by a spirit of Christian love.
Employees: 100
Revenue: $7.2 Million
Industry: Non-Profit & Charitable Organizations
Phone Number: (812) 282-8248
sanver.com.mx
May 4, 2026
•[ ransomware, retail, manufacturing ]
sanver.com.mx was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Professional Services. Country: Mexico. Website: sanver.com.mx. Sanver Forte is a leading hardware wholesaler with over 30 years of experience in the northeastern, central, and Bajo regions of Mexico. The company offers a wide range of products and services related to hardware and construction, focusing on meeting the needs and expectations of its clients through timely deliveries and excellent customer service. Their mission is to simplify the distribution of leading brands, ensuring satisfaction and profitability for customers, collaborators, and shareholders. Sanver Forte aims to be the most comprehensive and secure provider of hardware and home preservation products, contributing to the growth of its employees and the community.
Employees: 1000
Revenue: $30 Million
Industry: Home Improvement & Hardware Retail
Phone Number: +52 7898933030
Erla Technologies SAS
April 9, 2026
•[ ransomware, technology, government ]
Erla Technologies SAS was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-04-09. Sector: Technology. Country: France. Website: www.erla.fr. Our company, Erla Technologies SAS, has specialised for more than 30 years in designing, manufacturing, installing and maintaining a huge range of innovative equipment with Guaranteed French Producedcertification and intended for storage, distribution and management of petroleum products, biofuel, Adblue and industrial and chemical fluids.Aware of environmental issues, new energies are at the heart of the innovations and solutions brought by Erla Technologies.-One of the clients is the French army, documentation.-Personal information of employees and clients-Financial documents-Other files https://www.erla.fr
Adelante Soluciones Financieras (Addi.com)
May 5, 2026
•[ ransomware, finance, leak ]
Adelante Soluciones Financieras (Addi.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Financial Services. Country: Colombia. Website: Addi.com. Over 16M unique persons records containing significant PII, financial/transactions (credit cards), KYC and data from TransUnion and Experian (background checks) . The company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 518GB+ (compressed) | Updated: 5 May 2026 | SHA256: 520d50dc384fc474e419fdd19cb3517ed6ce778a187ae7d6f44b93ccef5687db
EXPEDITOR
May 5, 2026
•[ ransomware, healthcare, technology ]
EXPEDITOR was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Transportation. Country: United States of America. Expeditor Systems specializes in improving patient flow through innovative light signaling systems designed for medical practices and institutions.
Their solutions, including the LEAN Patient Flow System and Life Safety Nurse Call Systems, aim to enhance patient experience, increase operational efficiency, and boost revenues.
With over 40 years of experience and a client base exceeding 8,000
Laek: 50GB
WE HAS COLLECTED SUCH DATA AS:
- Confidential documents
- Clients Data
- NDA
- Financial data
- Operations
- Corporate data
- Business Agreements
- Development
- Financial databases, all transactions, all clients
And a lot of other VERY IMPORTANT information!
Ahorramas
May 5, 2026
•[ ransomware, retail ]
Ahorramas was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Spain. Website: www.ahorramas.com.
GRANDHOME
May 5, 2026
•[ ransomware, retail ]
GRANDHOME was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Bangladesh. Website: grandhomemart.com. GRANDHOME is a leading Thai retailer specializing in construction materials, home decor, and furnishing products. Established in 1973, it has grown into a major hub for high-quality tiles, sanitary ware, and kitchen innovations
