iql-nog.com
May 21, 2026
•[ ransomware, manufacturing ]
iql-nog.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-21. Country: Spain. Website: iql-nog.com. Founded in 1947, the company specializes in the production of oleochemical products, particularly fatty acid esters and specialty chemicals derived
trrac.net
May 28, 2026
•[ ransomware, manufacturing ]
trrac.net was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-28. Sector: Transportation. Country: United States of America. Website: trrac.net. 150gb
katholiekamersfoort.nl
June 2, 2026
•[ ransomware, leak, education ]
katholiekamersfoort.nl was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-06-02. Sector: Education. Country: Netherlands. Website: katholiekamersfoort.nl. The church website's network (katholiekamersfoort.nl/) has been breached, resulting in the exfiltration of over 10 GB of data. This data pertains to donors, staff, and the personal information of a large number of individuals. The compromised data includes: Databases and Personally Identifiable Information (PII), internal network shares and document, contact lists, board and committee data, as well as system metadata.
Lead Company (Leadership Boulevard)
June 3, 2026
•[ ransomware, education, leak ]
Lead Company (Leadership Boulevard) was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Professional Services. Company Site: leadschool.in size: 765.9MB This is will be quick. The following schools are affected: The specific schools explicitly named in the exfiltrated folders include: - Arya Vidyapith - Aakarsh International Public School - Students High School - Rainbow International Matric Hr. Sec. School - Vignan Private School The following info was stolen: 1. Personally Identifiable Information (PII) of Students - Full Names and Demographics: Complete names of children sorted by gender and admission numbers. - Academic Progression: Exact tracking of student grade levels (e.g., SKG, Class 1, Class 2) and division assignments - Age and Vital Records: Exact dates of birth (DOB) for all enrolled students. - Physical Locations: Full residential addresses, cities/districts (such as Nampally, Telangana), and exact localized postal pincodes 2. Guardian and Parent Contact Registries - Parent Identity: Full names of both fathers and mothers linked directly to their children. - Direct Contact Methods: Active personal mobile numbers for parents, creating a severe vulnerability for automated spam or voice-phishing attacks. - Digital Contact: Parent email addresses intended for formal school updates. - Student Led Events - Teacher Certificates - gac-reports - Assessments 3. Proprietary LEAD School Academic Metrics - ELGA Placement Data: Internal academic tracking metrics, showing specific curriculum tiers like "ELGA Class" (e.g., ELGA02, ELGA06) and "ELGA Division" for individual students. - Classroom Analytics: Operational performance data exfiltrated directly from the nucleus.leadschool.in administrative portal. - Teacher Resources: Lesson plans, training modules, and classroom resources that form the core commercial assets of the LEAD platform.
acehospital.in
June 3, 2026
•[ ransomware, healthcare ]
acehospital.in was listed as a victim on the leak site of the killsec ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Healthcare. Country: India. Website: acehospital.in. Price ??? Disclosures 0/1
csinsurance.mx
June 3, 2026
•[ ransomware, finance ]
csinsurance.mx was listed as a victim on the leak site of the killsec ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Financial Services. Country: Mexico. Website: csinsurance.mx. Price ??? Disclosures 0/1
MEISA - Sines
June 3, 2026
•[ ransomware, energy ]
MEISA - Sines was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Energy & Utilities. Country: Portugal. Website: www.meisa-e.com.
Eat Salad
June 3, 2026
•[ ransomware, retail ]
Eat Salad was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Agriculture and Food Production. Country: Brazil. Website: www.eatsalad.com.
MarketJoy
June 3, 2026
•[ ransomware, retail, hack ]
MarketJoy was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Retail & E-Commerce. Website: www.marketjoy.com.
JNP ENG
June 3, 2026
•[ ransomware, manufacturing ]
JNP ENG was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Manufacturing. Country: South Korea. Website: www.jnpeng.co.kr.
smarty.arpinet.am
June 3, 2026
•[ ransomware, technology ]
smarty.arpinet.am was listed as a victim on the leak site of the apt73 ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Technology. Country: Armenia. Website: smarty.arpinet.am. ***.am - it is an online platform for managing real estate data in the Armenian market, provi...
Oztugotomotiv
June 3, 2026
•[ ransomware, manufacturing, financial ]
Oztugotomotiv was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Manufacturing. Country: Turkey. ztu Otomotiv & Endstri is a Turkish company established in 1990 in Bursa, specializing in the production of high-precision components for the automotive, industrial, defense, and aerospace sectors.
The company offers comprehensive services including design, mold manufacturing, and serial production of plastic, metal, and rubber parts, as well as industrial seals and vibration dampers.
ztu Otomotiv utilizes modern equipment (high-tonnage presses, progressive dies) and adheres to international quality standards, including a zero-defect principle and compliance with OEM standards.
Financial performance (not publicly disclosed, but the company positions itself as a stable business):
As of 2025, the company reports over 35 years of successful operations, more than 300 employees, and three production facilities with a total enclosed area of 12,000 m.
Structure and facilities:
The company operates three production sites in Hasantla, Nilfer (Bursa), and Adapazar.
As of 2025, the workforce comprises over 300 specialists. Production capabilities include plastic injection, metal forming, and rubber molding lines.
Laek: 100GB
WE HAS COLLECTED SUCH DATA AS:
- Confidential documents
- Clients Data
- NDA
- Financial data
- Operations
- Corporate data
- Business Agreements
- Development
- Financial databases, all transactions, all clients
And a lot of other VERY IMPORTANT information!
Hal Otey Financial
June 3, 2026
•[ ransomware, financial, leak ]
Hal Otey Financial was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Financial Services. Hal Otey Financial offers a range of financial services including wealth management, financial
planning, retirement planning, investment management, estate planning, and tax planning.
We will upload corporate data soon. Lots client data (passports, DLs, social security numbers,
health and insurance files and so on), contracts and agreements, detailed financials, projects,
etc.
Colina Financial Advisors
June 1, 2026
•[ ransomware, leak, finance ]
Colina Financial Advisors was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Financial Services. Country: Bahamas. Colina Financial Advisors Limited (CFAL) is a prominent, independent wealth management and investment advisory firm based in Nassau, The Bahamas. Established in 1997, it serves as the investment arm of Colina Holdings Ltd.. The firm provides diverse financial services to both individual and institutional clients.
While customers continue to entrust the company with their money, senior executives are actively working to cover up a major data breach involving approximately 500 GB of highly confidential data.
The leak includes, but is not limited to:
1. Client Personally Identifiable Information (PII)
2. Client Financial Profiles & Asset Data
3. Proprietary Business Intel & System Data
4. Holistic Estate & Legal Planning
5. Regulatory & Compliance Records
Stay tuned for further updates.
Geske Haus- und Versorgungstechnik GmbH
May 7, 2026
•[ ransomware, manufacturing, leak ]
Geske Haus- und Versorgungstechnik GmbH was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-05-07. Sector: Manufacturing. Country: Germany. Website: www.geske-shk.de. Your partner for construction and technology ***.We are your partner for all your heating, plumbing, and sheet metal work needs. Our family-run business, now in its third generation, has stood for quality, innovation, and customer focus for over half a century. Whatever your needs, we are happy to help and look forward to your ***.Our company specializes in its expertise in increasingly complex technologies. From simple liquid fuel heating systems to heat pumps, any customer request can be met quickly and efficiently.-Database-Personal information of employees and clients-Other files https://www.***.de/
Sunrise, Toscana Country Club, AndalusiaCountry Club.
June 3, 2026
•[ ransomware, retail, leak ]
Sunrise, Toscana Country Club, AndalusiaCountry Club. was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Hospitality. Country: Spain. Sunrise Company is a renowned real estate developer and builder specializing in resort and gol
f course communities. Established in 1963, the company has developed over 16,000 homes and con
dominiums, along with creating multiple resort hotels and commercial structures.
Toscana Country Club is a luxury private equity club and residential community located in Indi
an Wells, California, offering an exceptional lifestyle amidst beautiful olive and cypress lan
dscapes.
Andalusia Country Club is a luxurious community near Palm Springs, offering distinctive golf c
ourse homes and a premier country club experience.
Here is the access to 13gb of corporate data of the above mentioned entities. Employee persona
l information including family of the CEO (passports, DLs, death records and so on), contracts
and agreements, detailed financials, clients information, projects, etc.
Click the download button.
You will find several password-free archives. Click on any of them to start the download.
Pyramid
June 3, 2026
•[ ransomware, retail ]
Pyramid was listed as a victim on the leak site of the nitrogen ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Professional Services. Country: United States of America. Website: www.pyramidmg.com. Ownership and management of shopping center. Development and redevelopment of real estate properties. Leasing of space to retail chains, restaurants, and entertainment venues
SETS Solutions
June 3, 2026
•[ ransomware, technology ]
SETS Solutions was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Professional Services. Country: Lebanon. Website: sets.com.lb. SETS Solutions is a prominent information technology company based in Lebanon, serving the Middle East since 1990. The company specializes in a diverse range of technology solutions, including its flagship Human Resources Management System, People365, which encompasses Time Attendance, Payroll, and HR modules. Additionally, SETS offers services in data center solutions, security, cloud computing, and end-user computing, catering to various industries. With over 25 years of experience, SETS aims to enhance organizational efficiency and productivity through innovative technology solutions.
Copamex
June 3, 2026
•[ ransomware, manufacturing ]
Copamex was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Agriculture and Food Production. Country: Mexico. Website: copamex.com. Copamex, headquartered in Monterrey, Mexico, and established in 1928, is a paper manufacturing company offering writing and printing, special, corrugated, and kraft paper solutions.
Singing River Health System
June 3, 2026
•[ ransomware, healthcare ]
Singing River Health System was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-06-03. Sector: Healthcare. Country: United States of America. New data breach at a large health system provider.
