Pacific Lamp & Supply
June 20, 2026
•[ ransomware, manufacturing ]
Pacific Lamp & Supply was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Manufacturing. Country: United States of America. Website: www.pacificlamp.com.
Newspaper Media Group
June 20, 2026
•[ ransomware, retail ]
Newspaper Media Group was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Retail & E-Commerce. Country: United States of America. Newspaper Media Group is a local news organization that provides comprehensive coverage of news, sports, entertainment, and community events across various regions, including Central Jersey and South Jersey. They publish multiple newspapers and magazines, ensuring that they reach more households than their competitors in nearly every zip code they cover. Their services are aimed at local communities, delivering news that is often not found elsewhere. With a commitment to connecting readers to the communities they care about, NMG stands out for its focus on local reporting.
Nhà Thành Phố
June 21, 2026
•[ ransomware, leak, technology ]
Nh Thnh Ph was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-21. Sector: Other. Country: Vietnam. nhathanhpho.com.vn is an Vietnamese real estate listing platform operated by an individual, on Vinh, which allowed users to buy, sell, and rent properties - Nova Provide tree and samples from stolen data to the company with decrypt 1 file as sample when its get in touch with support department.
Artistic Smiles
June 19, 2026
•[ ransomware, retail ]
Artistic Smiles was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-06-19. Sector: Retail & E-Commerce. Country: United States of America. Website: artisticsmiles.org.
Lockers IT
June 21, 2026
•[ ransomware, technology, leak ]
Lockers IT was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-06-21. Sector: Technology. LockersIT is a self-owned Bangladeshi IT company founded in 2013, headquartered in Chandpur, that specializes in custom software development with a team of 11-50 employees - allcashdealer.com dealmart24.com dev1.lockersit.com erp.lockersit.com sales.lockersit.com brm.lockersit.com debnathashu.com dev2.lockersit.com eshop.lockersit.com cloud.debnathashu.com dev.allcashdealer.com dev3.lockersit.com lockersit.com cloud.lockersit.com dev.lockersit.com emailer.debnathashu.com project.debnathashu.com effected with the encryption, Data From the server has been taken, Nova Provide tree and samples from stolen data to the company with decrypt 1 file as sample when its get in touch with support department.
jktornel
June 21, 2026
•[ ransomware, manufacturing ]
jktornel was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-21. Country: Mexico. Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation.
jaggroup.com UPDATE-FULL DATA DUMP
June 20, 2026
•[ ransomware, technology, finance ]
jaggroup.com UPDATE-FULL DATA DUMP was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-20. Full database containing corporate emails (@jaggroup.com), Active Directory domain logins, and clear plain-text passwords.Complete Microsoft Dynamics GP databases, software license keys, financial reports, and system configuration Multiple compressed archives (zBackups.zip, wetransfer packages), SQL server connection data, and IM.mdb database files.Internal project management sheets (Jag Project.xlsx), user listings, purchasing, and sales import logs.
Florida Engineering Services
June 21, 2026
•[ ransomware, technology ]
Florida Engineering Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-21. Sector: Professional Services. Country: United States of America. Website: www.florida-engineering-services.com.
Tri-tec
June 21, 2026
•[ ransomware, technology ]
Tri-tec was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-21. Country: United States of America. Website: www.tri-tec.com.
Wall ISD
June 21, 2026
•[ ransomware, education ]
Wall ISD was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-06-21. Sector: Education. Country: United States of America. Website: www.wallisd.net. Wall ISD is an educational institution that serves students in the Wall, Texas area, providing a range of programs and activities for elementary, middle, and high school students. The district emphasizes inclusivity and equal access to education, ensuring that all students, regardless of their background, have the opportunity to participate in school activities. Wall ISD is committed to fostering a supportive learning environment and offers resources for both new and returning students. The intended clients are students and their families within the Wall community.
Sivatel Bangkok
June 21, 2026
•[ ransomware, technology ]
Sivatel Bangkok was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-21. Sector: Technology. Country: Thailand. Website: www.sivatelbangkok.com.
Taiwan Sintong Machinery Co., Ltd
June 21, 2026
•[ ransomware, manufacturing ]
Taiwan Sintong Machinery Co., Ltd was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-21. Sector: Manufacturing. Country: Taiwan. Website: www.twsinto.com.tw.
NationsBuilders Insurance Services
June 22, 2026
•[ ransomware, finance, leak ]
NationsBuilders Insurance Services was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Financial Services. [insurance] *** (NBIS) is the premier US underwriter of crane & rigging, concrete-pumping, heavy-haul, and residential-builder insurance a specialty managing general underwriter founded in Atlanta in 2001, acquired by Align Financial / DUAL North America (Howden Group) in August 2021. 2,748,845 filetree entries across 24 shares (AIM, IMAGERIGHT, the claims and policy-admin stores, HR, finance, IT, and a decade of M&A diligence rooms).
NTP B.V. Civil Engineering Construction
June 22, 2026
•[ ransomware, manufacturing, leak ]
NTP B.V. Civil Engineering Construction was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Manufacturing. Country: Netherlands. [engineering] NTP B.V. (trading as NTP Infra / NTP Groep) is a Dutch civil engineering contractor headquartered in Hattem, Gelderland. They build roads, lay cables, install sewers, and perform ground works across the Netherlands. With 150200 employees, offices in Hattem, Enschede, and Zevenaar, and a 2024/2025 acquisition of Aannemingsbedrijf Dubbink B.V., they are a typical mid-market Dutch aannemingsbedrijf government contracts, municipal works, private developments.
Their file server contained everything: 10+ years of operations, every employee's personal files, the complete HR/payroll system exports, every network device configuration, every project bid, and every financial record.
Union Tractor
June 22, 2026
•[ ransomware, manufacturing, retail ]
Union Tractor was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Agriculture and Food Production. Country: United States of America. Website: www.uniontractor.com. Union Tractor Ltd. is an independent business selling aftermarket parts and accessories for construction and transportation equipment. It engages in the distribution of undercarriage components, ground engaging tools, engine and drive train parts, hydraulic system parts, exchange compoUnion Tractor Ltd. is an independent business selling aftermarket parts and accessories for construction and transportation equipment. It engages in the distribution of undercarriage components, ground engaging tools, engine and drive train parts, hydraulic system parts, exchange components, and used parts. The company was founded in 1927 and is headquartered in Nisku, Canada.nents, and used parts. The company was founded in 1927 and is headquartered in Nisku, Canada.
mihana-v.com
June 20, 2026
•[ ransomware, manufacturing, technology ]
mihana-v.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-20. Country: Russian Federation. Website: mihana-v.com. Here is the comprehensive corporate overview of MIHANA Seisakusho Co., Ltd. based on their official company profiles, technical catalogs, and industrial registries
bits-pilani.ac.in
June 20, 2026
•[ ransomware, education, leak ]
bits-pilani.ac.in was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-20. Sector: Education. Country: India. Website: bits-pilani.ac.in. BITS Pilani is a premier Indian private research university and "Institution of Eminence" known for elite engineering and science programs across five campuses. Founded in 1964, it is highly selective with a 1.47% acceptance rate and offers a 0% attendance policy with mandatory industry immersion.
Central Bank of Libya
June 22, 2026
•[ ransomware, finance, government ]
Central Bank of Libya was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Financial Services. Country: Libya. Website: www.cbl.gov.ly.
Aerospace & Advanced Composites GmbH
June 22, 2026
•[ ransomware, manufacturing, technology ]
Aerospace & Advanced Composites GmbH was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Manufacturing. Country: Germany. *** (AAC) an Austrian space-materials R&D company headquartered in Wiener Neustadt, with deep ties to the European Space Agency.
Obtained two complete NAS snapshots spanning 30+ years of operations:
aacdata (31 December 2022) 123 GB: the complete Testhouse, R&D, and engineering share, including the ESA thermal vacuum test archive, polymer composites formulations, and 22 Outlook PST email backups.
aacdata1 (14 January 2025) 86 GB: the administrative share, including managing director's full PC backup (browser credentials, passport scans), 15 years of financial statements, shareholder agreements, and the IT credentials master spreadsheet.
BMD_DATA 34 MB: the complete BMD business software accounting database with employee payroll, SEPA payments, and VAT declarations.
done/ Bitlocker recovery keys for 12 endpoints and WMI system dumps.
The exposed material includes:
4 passport scans, 1 social security number, 25 employees' complete HR files, 50100+ job applicant CVs the full identity-theft toolkit for the workforce plus third-party data subjects.
The IT credentials master spreadsheet (AAC CODES.xlsx) containing every system password, plus browser-stored logins for ESA SSO, the company's IT provider, and industrial suppliers.
12 Bitlocker recovery keys enabling full-disk decryption of 6 company laptops.
123 GB of ESA thermal vacuum test data 30+ years of space-grade materials testing that represents the company's core competitive advantage and cannot be recreated.
137 executed NDAs with partners including Airbus, RUAG, Safran, Thales, ESA, BMW, Tesla, Google, Samsung SDI, CERN, DLR, and 126 others.
15 years of annual financial statements, bank records, insurance policies, and shareholder agreements the company's entire financial anatomy laid bare.
Ntd Apparel
June 22, 2026
•[ ransomware, retail, leak ]
Ntd Apparel was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-22. Sector: Retail & E-Commerce. NTD Apparel specializes in creating high-quality apparel that connects with pop culture, offeri
ng a range of licensed products and in-house labels. They provide comprehensive services includ
ing market analysis, price point management, and visual merchandising to retailers.
We will upload 62gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, medic
al information, phones, addresses and so on), projects, client information, confidential agreem
ents and so on.
