Power Moendas
July 25, 2026
•[ ransomware, manufacturing, energy ]
Power Moendas was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-07-25. Sector: Other. Country: Brazil. Website: powermoendas.com.br. Based in the sugar-energy industrial hub, in the city of Sertozinho/SP, Power Empral has Deadline: 2026-08-01 21:06:00.000000
Brazer Ingenierie
July 25, 2026
•[ ransomware, manufacturing, technology ]
Brazer Ingenierie was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-07-25. Sector: Manufacturing. Country: Morocco. Website: brazeringenierie.com. Brazer Ingnierie is a professional integrator specializing in IT and telecommunications s Deadline: 2026-08-01 21:06:00.000000
UK Department for Education
July 26, 2026
•[ ransomware, government, education ]
UK Department for Education was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: education.gov.uk. DATA SUMMARY:
Help Portal (~600K records) Parent and staff contact records containing full names, email addresses, phone numbers, and job titles.
Turing Portal (~7K records) Contact records containing full names, email addresses, phone numbers, and job titles.
Police National Legal Database
July 26, 2026
•[ ransomware, government ]
Police National Legal Database was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. DATA SUMMARY:
135k law enforcement contact records with first/last name, email, police force area, etc.
Microsoft
July 26, 2026
•[ ransomware, technology, leak ]
Microsoft was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Technology. Country: United States of America. Website: microsoft.com. Revenue: $318B
DATA SUMMARY:
8M~ records containing: significant PII, employee and customer contact information, authentication data, password hashes, portal identities, corporate account information, business leads, facilities management records, internal service tickets, and access permissions.
Allstate
July 26, 2026
•[ ransomware, finance, leak ]
Allstate was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Financial Services. Country: United States of America. Website: allstate.com. Revenue: $67B
DATA SUMMARY:
657K~ records containing: significant PII, recruitment and licensing information, onboarding data, and internal employee account information.
TaylorMade & Sun Day Red golf
July 26, 2026
•[ ransomware, leak, retail ]
TaylorMade & Sun Day Red golf was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Retail & E-Commerce. Country: United States of America. Website: taylormadegolf.com. Revenue: $1.5B
DATA SUMMARY:
2M~ records containing: significant PII, customer support history, orders, shipping information, business account data, financial/account information, internal notes, attachments, and AI support chat transcripts.
Frontier Airlines
July 26, 2026
•[ ransomware, technology ]
Frontier Airlines was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Transportation. Country: United States of America. Website: flyfrontier.com. Revenue: $1.5B
DATA SUMMARY:
2.4M~ records containing: significant PII, customer support cases, flight and travel information, complaint records, baggage details, and customer support email communications.
Zenith Bank Plc
July 26, 2026
•[ ransomware, finance, leak ]
Zenith Bank Plc was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Financial Services. Country: Nigeria. Website: zenithbank.com. Revenue: 2.3T
DATA SUMMARY:
90M~ records containing: extensive PII, banking relationships, account information, financial data, government identifiers, customer contact information, and banking support cases.
District of Columbia Public Schools
July 26, 2026
•[ ransomware, education, government ]
District of Columbia Public Schools was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Education. Country: United States of America. Website: dcps.dc.gov. [AI generated] District of Columbia Public Schools (DCPS) is a public school district serving Washington, D.C., USA. It operates as the primary government-run K-12 educational system for the nation's capital, overseeing dozens of schools, thousands of students, and a large workforce of educators and administrators. DCPS falls under the education sector and is governed by the D.C. government, focusing on curriculum development, student achievement, and community engagement.
Newcastle University
July 26, 2026
•[ ransomware, education ]
Newcastle University was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: ncl.ac.uk. DATA SUMMARY:
440K~ records containing: applicant and student contact information, significant PII, and admissions data.
City of Houston
July 26, 2026
•[ ransomware, government ]
City of Houston was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Government & Defense. Country: United States of America. Website: houstontx.gov. DATA SUMMARY:
6M~ records containing: significant PII, resident contact details, service requests, complaint descriptions, addresses, location data, case/ticket metadata, department routing, service status, resolution information, and extensive CRM metadata.
City of Atlanta
July 26, 2026
•[ ransomware, government ]
City of Atlanta was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Government & Defense. Country: United States of America. Website: atlantaga.gov. DATA SUMMARY:
3M~ records containing: significant PII, citizen service requests, addresses, municipal case history, and internal case management data.
Bonava
July 26, 2026
•[ ransomware, manufacturing ]
Bonava was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Manufacturing. Country: Sweden. Website: bonava.se. Revenue: SEK 8B
DATA SUMMARY:
842K~ records containing: significant PII, property ownership/interests, warranty and repair cases, contractor information, marketing preferences, and customer service history.
Analog Devices
July 26, 2026
•[ ransomware, technology ]
Analog Devices was listed as a victim on the leak site of the ExfilSquad ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Technology. Country: United States of America. Website: analog.com. Revenue: $12.7B
DATA SUMMARY:
570K~ records containing: customer PII and addresses.
servicebypremier.com
July 26, 2026
•[ ransomware, leak, technology ]
servicebypremier.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Professional Services. Country: United States of America. Website: servicebypremier.com. +1(954) 646-0016 , This local HVAC and Refrigeration company, established in 2007, provides services across South Florida, from Florida City to Port St. Lucie. They specialize in commercial HVAC and refrigeration repairs, including maintenance for A/C and refrigeration equipment. The company prides itself on delivering honest service at reasonable prices, ensuring complete customer satisfaction. Their commitment to integrity and efficiency makes them a trusted choice for businesses in the region. Stolen: --
createinfor.pt
July 26, 2026
•[ ransomware, technology ]
createinfor.pt was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Professional Services. Country: Portugal. Website: createinfor.pt. +351 262187684 , CreateInfor is a company that operates in the Repair Services industry. It employs 10to19 people and has 500Kto1M of revenue. The company is headquartered in Caldas da Rainha, Leiria, Portugal. Stolen: --
hydraulic-components.net
July 26, 2026
•[ ransomware, manufacturing, technology ]
hydraulic-components.net was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Manufacturing. Country: Germany. Website: hydraulic-components.net. +44 1142764430 , VHS Hydraulics is a prominent supplier of hydraulic components and power packs, featuring products from renowned brands like Rexroth, Walvoil, and Casappa. With over 25 years of experience, they specialize in engineering bespoke power packs for demanding applications. Based in Sheffield, they offer extensive stock and provide same-day and next-day delivery services across the UK. Their team is equipped to assist clients with both individual components and complete hydraulic system solutions tailored to specific requirements. Stolen: 215 GB 226,961 Files
Universitatea de Vest „Vasile Goldiș” din Arad
July 26, 2026
•[ ransomware, education ]
Universitatea de Vest Vasile Goldi din Arad was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Education. Country: Romania. Website: www.uvvg.ro.
Contacto Garantido
July 26, 2026
•[ ransomware, leak ]
Contacto Garantido was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-26. Sector: Professional Services. Country: Mexico. Website: www.contactogarantido.com.