LSM Lee
May 2, 2026
•[ ransomware, manufacturing ]
LSM Lee was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Manufacturing. Country: Canada. Website: www.golsm.com.
Photonic
May 2, 2026
•[ ransomware, technology ]
Photonic was listed as a victim on the leak site of the mnt6 ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Technology. Country: Canada. Website: photonic.com. Photonic is delivering scalable, distributed, and fault-tolerant quantum computing and networking technologies. With proven silicon spin qubits, and a native telecom networking interface, Photonic will deliver solutions for previously intractable problems and unlock solutions for tomorrows problem sets. [Revenue: $32.6M]
cgcsa.co.za
May 3, 2026
•[ ransomware, leak, finance ]
cgcsa.co.za was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: South Africa. Website: cgcsa.co.za. endor & Corporate Data ( Name-Email-Numbers/PMS NAME ), Financial Accounting Records , sales Order Reports , Database Systems , SQL Server , Sage 200 Evolutuion SQL, operational Security Data Full Sage 200 Evolution backups including all transaction history, tax records, and payroll.CRM & Legal Archives Over 151,000 sensitive documents, contracts, and internal communications from the CRM database.Full access to GS1 South Africa SharePoint, including GDSN protocols and partnership data with global entities like Unilever, Nestle, and L'Oreal.Complete PII (Personally Identifiable Information) of administrative staff and executive members, including private emails and mobile numbers.
or-technology.com
May 3, 2026
•[ ransomware, technology, financial ]
or-technology.com was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Technology. Country: Germany. Website: or-technology.com. Financial & Sales Intelligence Sales Statistics by Quarter (Q1, Q2, Q3, Q4) Corporate & Strategic Planning SQL Project Reports
Cushman & Wakefield Inc.
May 3, 2026
•[ ransomware, technology ]
Cushman & Wakefield Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: United States of America. Website: cushmanwakefield.com. Over 500k Salesforce records containing PII and other internal corporate data have been compromised. This is a final warning to reach out by 6 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 3 May 2026 | Warning: FINAL WARNING
manateeair.com
May 3, 2026
•[ ransomware, retail ]
manateeair.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Transportation. Country: United States of America. Website: manateeair.com. +1 9417582323 . Manatee Air Heating & Cooling Inc has been providing expert HVAC services in Manatee and Sarasota counties since 1988, specializing in heating and air conditioning installation, repair, and maintenance. The company prides itself on its commitment to quality work, customer satisfaction, and competitive pricing, offering financing options and a 1-year labor warranty. With a team of certified, licensed, and insured technicians, they ensure fast turnaround times and emergency services to keep homes and businesses comfortable year-round. Manatee Air Heating & Cooling is recognized for its reliability and community-focused approach, making it a trusted choice for HVAC solutions. Stolen: --
it-freitag.de
May 3, 2026
•[ ransomware, technology ]
it-freitag.de was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Technology. Country: Germany. Website: it-freitag.de. +49 493526000000 . Freitag IT GmbH specializes in providing scalable and reliable IT solutions, including cloud computing, virtualization, and managed services. Their offerings cater to agile businesses, focusing on modern technologies such as hybrid multi-cloud architectures and machine learning. The company aims to enhance productivity and efficiency through tailored IT services, including remote management, security solutions, and unified communication systems. Their target clients include organizations seeking comprehensive IT support and innovative digital transformation solutions. Stolen: --
emtco.com
May 3, 2026
•[ ransomware, manufacturing ]
emtco.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: United States of America. Website: emtco.com. +1 3169426147 . Engineered Machine Tool, Inc., based in Wichita, Kansas, specializes in providing manufacturing firms with custom machinery and tooling designed to enhance production efficiency. Since 1987, the company has developed a range of automated machines and equipment, including Automatic Storage and Retrieval Systems and Large Tool Palletizing Systems. EMT offers comprehensive services from initial concept through to complete installation, ensuring tailored solutions for their clients' specific needs. Their focus is on delivering high-performance automation tools for various industrial applications Stolen: 180gb 698k files
Instructure Holdings, Inc. (Canva LMS, instructure.com)
May 3, 2026
•[ ransomware, education, technology ]
Instructure Holdings, Inc. (Canva LMS, instructure.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Education. Country: United States of America. Website: instructure.com. Nearly 9,000 schools worldwide affected. 275 million individuals data ranging from students, teachers, and other staff containing PII. Several billions of private messages among students and teachers and students and other students involved, containing personal conversations and other PII. Your Salesforce instance was also breached and a lot more other data is involved. Pay or Leak. This is a final warning to reach out by 6 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Size: 3.65TB+ (uncompressed) | Updated: 3 May 2026 | Warning: FINAL WARNING PAY OR LEAK
Cult Wines
May 4, 2026
•[ ransomware, retail, finance ]
Cult Wines was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: cultwines.com. Cult Wines is revolutionizing the fine wine industry by leveraging expertise, digital platforms, and innovative technology to enhance the buying, selling, investing, and collecting experience for producers and consumers. Their services support the entire life cycle of fine wine, ensuring transparency and secure transactions. Recognizing fine wine as a unique investment, Cult Wine Investment provides clients with a wealth of possibilities, combining heritage with cutting-edge technology to enrich portfolios and enhance lives. Targeting both new generations of wine drinkers and seasoned collectors, Cult Wines aims to build a global community around fine wine appreciation.
City of Sandstone
May 4, 2026
•[ ransomware, government ]
City of Sandstone was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Government & Defense. Country: United States of America. Website: sandstone.govoffice.com.
Luna Group
May 4, 2026
•[ ransomware, manufacturing, healthcare ]
Luna Group was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Manufacturing. Country: Egypt. Website: lunagroupeg.com. Luna Group is a major Egyptian conglomerate established in 1966. It operates across the Middle East and North Africa (MENA) region, primarily focusing on pharmaceuticals, cosmetics, perfumes, and industrial raw materials.
Johnson & Johnson Innovative Medicine
April 26, 2026
•[ ransomware, healthcare ]
Johnson & Johnson Innovative Medicine was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-04-26. Sector: Healthcare. Country: United States of America. Website: www.jnj.com/innovativemedicine. Johnson & Johnson Innovative Medicine (formerly known as Janssen Pharmaceuticals) is the pharmaceutical division of the American corporation Johnson & Johnson, specializing in the development and production of revolutionary medicines. The company focuses on creating treatments for the most complex diseases, transforming the future of healthcare.-CAR-T Research https://www.jnj.com/innovativemedicine/
Standard Bank Group
February 27, 2026
•[ ransomware, leak, finance ]
Standard Bank Group was listed as a victim on the leak site of the PrinzEugen ransomware group; the attack is estimated to have taken place on 2026-02-27. Sector: Financial Services. Country: South Africa. Website: standardbank.com. Beginning on February 27th 2026, The 3 week long attack on both Standard Bank and Liberty has resulted in 1.2TB of data being exfiltrated from internal servers.
Lonestar Truck Group & Tag Truck Center
May 4, 2026
•[ ransomware, leak, financial ]
Lonestar Truck Group & Tag Truck Center was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Transportation. Country: United States of America. Website: tntxtruck.com. Lonestar Truck Group consists of multiple dealerships that sell new and used trucks and trailers, as well as providing service and parts. They work with a vast number of customers and businesses, yet they have failed to prioritize security. As a result, personal data of employees, contact information for the companies they work with, and a significant number of customer records have been leaked online. We are also presenting their confidential and financial documents for your review.
www.cswindustrials.com
May 4, 2026
•[ ransomware, manufacturing ]
www.cswindustrials.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Manufacturing. Country: United States of America. Website: www.cswindustrials.com. If the company's management does not contact us within 24 hours, we will publish 540 GB of the company's internal files.
CSW Industrials, Inc. is a diversified industrial growth company that operates across contractor solutions, specialized reliability solutions, and engineered building solutions.
vacaero.com
May 4, 2026
•[ ransomware, manufacturing, technology ]
vacaero.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Hospitality. Country: Mexico. Website: vacaero.com. If the company's management does not reach an agreement with us within 4 days, we will publish 250 GB of the company's internal data.
Founded in 1959, VAC AERO provides vacuum heat treating and thermal & paint coating services as well as vacuum furnace systems and controls to aerospace and high-tec
Cushman & Wakefield
May 3, 2026
•[ ransomware ]
Cushman & Wakefield was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: United States of America. Website: www.cushmanwakefield.com.
General Hardware
May 4, 2026
•[ ransomware, manufacturing ]
General Hardware was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Manufacturing. Country: Colombia. Website: www.generalhardware.co.
Rizzuto Law Firm
May 4, 2026
•[ ransomware, finance ]
Rizzuto Law Firm was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Professional Services. Country: United States of America. Website: www.rizzutolawfirm.com.
