DoAllTech
July 21, 2026
•[ ransomware, technology, financial ]
DoAllTech was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Technology. Country: South Korea. Website: doalltech.com. The Company is leading the construction IT industry with the best technology and various experiences, and striving to grow with avarious customers in pursuit of technology platform change and innovation through persistent research and development in introduction ofWeb Services, H/W Services, BIM Services, and new technologies.-Personal information of employees and clients -Financial documents -Other files https://***.com/en/
PinnPACK
July 21, 2026
•[ ransomware, manufacturing ]
PinnPACK was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Manufacturing. Country: United States of America. Website: pinnpack.com.
St. Francis Xavier Catholic School System
July 21, 2026
•[ ransomware, leak, education ]
St. Francis Xavier Catholic School System was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Education. Country: United States of America. Website: xaviercatholicschools.org. [AI generated] St. Francis Xavier Catholic School System is a private religious educational organization operating in the United States. It provides Catholic-based primary and secondary education, integrating faith formation with academic instruction. Operating under the Roman Catholic Church's educational mission, it serves students across multiple grade levels, emphasizing values-based learning, community involvement, and spiritual development alongside standard curriculum requirements.
Kyowa Singapore Pte Ltd
July 21, 2026
•[ ransomware, technology, manufacturing ]
Kyowa Singapore Pte Ltd was listed as a victim on the leak site of the morpheus ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Professional Services. Country: Singapore. Website: kyowasingapore.com. **Website**: kyowasingapore.com
**Revenue**: $15 Million
Founded in 1979 and headquartered at Benoi Road, Singapore, they primarily supply global consumer electronics, grooming, and automotive indus
Finer & Finer
July 21, 2026
•[ ransomware, finance, leak ]
Finer & Finer was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Retail & E-Commerce. Country: United States of America. Finer & Finer CPA is a leading accounting firm based in Randolph, MA, offering a wide range of
services including tax preparation, personal financial planning, and business accounting. They
cater to business owners, executives, and independent professionals, providing personalized and
professional attention to each client.
We will upload 50gb corporate data soon. Employee information (personal docs and health informa
tion, tests and so on), contracts, client information and other internal information.
Novasport s.r.o.
July 21, 2026
•[ ransomware, retail, manufacturing ]
Novasport s.r.o. was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Retail & E-Commerce. Country: Czechia. Novasport spol. s r.o. We are a global manufacturer of LEKI brand ski, hiking, and Nordic walki
ng poles. Novasport was founded in 1992 by Klaus Lenhart, the owner of the LEKI brand. LEKI has
a long history of collaborating with the worlds top athletes.
We will upload 17gb corporate data soon. Detailed employee information (passports and other inf
ormation), projects, contracts, financials, clients information and so on.
Koperasi Karyawan PT Aplikanusa Lintasarta
July 21, 2026
•[ ransomware, technology ]
Koperasi Karyawan PT Aplikanusa Lintasarta was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Technology. Country: Indonesia. Kopkarla.org is the website of KOPKARLA (Koperasi Karyawan PT Aplikanusa Lintasarta), an Indonesian employee cooperative that provides savings, loans, telecommunications engineering, network installation, and related business services for its members and customers - Nova Provide Tree and samples and proofs only when company get in touch with support department in channels provided in recovery file.
Tèrra Aventura
July 21, 2026
•[ ransomware, leak, technology ]
Trra Aventura was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Hospitality. Country: Portugal. Trra Aventura is a free, app-based outdoor treasure hunt in France's Nouvelle-Aquitaine region where players solve riddles, follow walking routes, and find hidden geocaches while exploring local heritage and nature - Nova Provide Tree and samples and proofs only when company get in touch with support department in channels provided in recovery file.
RehaVital Gesundheitsservice GmbH
July 21, 2026
•[ ransomware, healthcare ]
RehaVital Gesundheitsservice GmbH was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Healthcare. Country: Germany. Website: www.rehavital.de.
argonautms.com
July 21, 2026
•[ ransomware, technology, leak ]
argonautms.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Technology. Country: Russian Federation. Website: argonautms.com. Target Organization: argonautms.com (Argonaut Manufacturing Services)
Status: Unauthorized Access & Data Exfiltration Confirmed
Volume: 295 GB of Critical Corporate, Technical & Operational Data
Countdown: 48 Hours to establish contact before public release.
Executive Summary
The internal infras
La Financière d'Orion (finorion)
July 21, 2026
•[ ransomware, finance ]
La Financire d'Orion (finorion) was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Financial Services. Country: France. Since 2009, we have been helping to create a privileged relationship between wealth professionals and their clients. The wealth of our experience allows us to deploy innovative, coherent financial engineering levers that are perfectly tailored to your aspirations and objectives - Nova have 20GB of clients documents data and company finance informations, for example convestion ERES.pdf, secrets is here, Contact us for more details, Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
Kreysler & Associates
July 21, 2026
•[ ransomware, manufacturing ]
Kreysler & Associates was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-07-21. Sector: Professional Services. Country: United States of America. Website: www.kreysler.com. United States
Tax MT
March 6, 2024
•[ ransomware, finance ]
Tax MT was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2024-03-06. Sector: Professional Services. Country: Malta. Website: www.tax-mt.com. United States
Canal 9 Litoral
July 22, 2026
•[ ransomware, technology, leak ]
Canal 9 Litoral was listed as a victim on the leak site of the nova ransomware group; the attack is estimated to have taken place on 2026-07-22. Sector: Technology. Country: Argentina. AHORA Entre Ros is a news platform that provides the latest updates and urgent news from Entre Ros, Santa Fe, and the Litoral region. The service covers a wide range of topics including society, politics, sports, economy, and health. It aims to keep its audience informed with minute-by-minute news coverage. The intended clients are residents and individuals interested in current events in the specified regions - MXF secret files at risk, Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
issvc.com
July 22, 2026
•[ ransomware, technology ]
issvc.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-07-22. Sector: Technology. Country: United States of America. Website: issvc.com. issvc.com
Official Notice to Management and Stakeholders
The time window has expired. Exactly 24 hours remain until the final deadline. If an agreement is not reached by the end of this period, the complete confidential dataset totaling 262 GB will be published into the public domain.
Compromised
Koshkaryan Law Group
July 22, 2026
•[ ransomware, leak ]
Koshkaryan Law Group was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-07-22. Sector: Professional Services. Country: United States of America. Website: koshlaw.com. Koshkaryan Law Group is a legal firm specializing in personal injury and criminal defense cases. They prioritize client service and provide personalized attention to ensure favorable outcomes for their clients. The firm offers free initial consultations and is dedicated to keeping clients informed about their legal options. With a strong track record of recovering over $138 million for clients, they aim to advocate vigorously on behalf of those they represent.
University Sprinkler Systems
July 22, 2026
•[ ransomware, leak, manufacturing ]
University Sprinkler Systems was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-22. Sector: Professional Services. Country: Canada. University Sprinklers is BC's largest irrigation company, specializing in the installation of i
rrigation sprinkler systems and landscape lighting for both residential and commercial clients.
With over 40 years of experience, they provide tailored irrigation solutions that ensure healt
hy lawns and gardens while conserving water.
We will upload corporate data soon. Employee information (DLs and other files), client informat
ion and and other internal files.
Kruse Construction
July 22, 2026
•[ ransomware, leak, manufacturing ]
Kruse Construction was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-22. Sector: Manufacturing. Kruse Construction is a mechanical contractor with over 50 years of experience in the petroleum
and petrochemical industry, specializing in the construction and maintenance of liquid petrole
um truck, rail, and pipeline terminals. The company also provides services for bulk plants, pip
eline pump stations, lube oil plants, and underground pipelines.
We will upload 10gb corporate data soon. Employee information (passports, lots of DLs), project
s, contracts, financials, customer files and so on.
Vibonum Technologies Private Limited
July 22, 2026
•[ ransomware, technology ]
Vibonum Technologies Private Limited was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-07-22. Sector: Technology. Country: India. Website: Vibonum Technologies Private Limited. *** is a recently incorporated Indian private limited company established on March 27, ...
dhli.in
July 22, 2026
•[ ransomware, healthcare ]
dhli.in was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-07-22. Country: India. Website: dhli.in. Delhi Heart & Lung Institute (DHLI) is a tertiary care 100-bedded super specialty hospital established in 2003 in New De...