DigiGround
August 28, 2026
•[ ransomware, technology ]
DigiGround was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: Australia. Website: www.digiground.com.au.
ProCare
August 28, 2026
•[ ransomware, healthcare ]
ProCare was listed as a victim on the leak site of the moneymessage ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Healthcare. Country: United States of America. [AI generated] N/A
ProCare is a relatively common business name used by multiple unrelated companies across different industries and countries. Without additional context such as industry sector, country, or full legal name, it is not possible to identify a specific organization with confidence and provide accurate threat intelligence relevant information.
JRT Mechanical
August 28, 2026
•[ ransomware, manufacturing ]
JRT Mechanical was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. JRT Mechanical is a full-service mechanical contractor specializing in plumbing, HVAC, hydronic
s, and mechanical insulation, serving the Pacific Northwest for over 30 years. Founded in 1992,
the company has expanded from a small plumbing business to a robust team of over 160 employees
, focusing primarily on commercial and industrial projects.
We will upload 46gb of corporate data soon. Detailed employee personal information (SSNs, passp
orts, DLs, resumes, and another personal docs scans), medical information, client information,
projects, financials, confidential files, contrast and agreements, NDAs and so on.
BEPeterson
August 28, 2026
•[ ransomware, manufacturing, technology ]
BEPeterson was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. BEPeterson is a full-service metal fabricator specializing in custom solutions for vessels, tan
ks, and heavy-gauge metal parts since 1935. The company serves a diverse range of industries in
cluding defense, medical, energy, and industrial sectors, providing high-quality products throu
gh advanced manufacturing techniques.
We will upload 20gb of corporate data soon. Employee personal information, client information,
projects, financials, NDAs and so on.
Berlin, Germany
August 28, 2026
•[ ransomware, government, technology ]
Berlin, Germany was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-08-28. Country: Germany. Berlin, Germany Total capacity 5.79 TBArchive scale: ~1.44 million files scanned; by category Maps/Geo 124,823, Legal/complaints 77,939, Financial 55,553, Contracts 46,522, HR 27,299,Government supervisory 13,142, Confidential 11,777, Infrastructure 8,110, Passwords 5,941, Health 2,738, Contacts 2,287.PII leak: 16,389 e-mails, 11,963 phone numbers, 12,076 individuals, 148 IBANs.Credentials in plaintext: GebudeAtlas, the ePayment PAYONE payment database, personal 'password safes' (danz, kramell Z_ADMIN database accounts, franssen), leadership credentials.Disciplinary proceedings: the ANDERSON case (432 files, 20252026, lawsuit at VG Berlin administrative court), the politically motivated misconduct case involving the LKA Staatsschutz (state security police), the forestry cases BLAUTH/MLLER/FIELICKE.State secrets: Bundesrat committee protocols with declassification correspondence, Geheimschutz (classified-material handling) data.Passports/IDs (recent, from personnel files and GI-Vertraulich).KRITIS: vulnerability analyses of Berlin's water supply.Mass personal data: Personalakten (personnel files) >5,000, Convotis payroll, OWi (administrative-offence) files >5,000, Postbuch SQL dumps 20202026, PST archives, leadership private data (IBANs, ID cards, Behrendt's bank card).NDA: 3,226 documentsLegal violation map (GDPR Art. 32/9/33, VSA/StGB upon VS classification confirmation, BSIG/KRITIS) More
Alumax
August 28, 2026
•[ ransomware, manufacturing, leak ]
Alumax was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: United States of America. Alumax Alumnios specializes in the distribution of aluminum and accessories for the constructi
on industry, focusing on providing tailored solutions for builders and metalworkers. The compan
y prides itself on its partnership with Hydro, a global leader in sustainable aluminum, allowin
g them to offer high-quality products that meet the market's demanding needs.
We will upload 58gb of corporate data soon. Detailed employee personal information (passports,
IDs, and another personal docs scans), client information, projects, financials, confidential f
iles, contrast and agreements, NDAs and so on.
Hangzhou Qihan Biotech Co., Ltd.
August 12, 2026
•[ ransomware, healthcare, technology ]
Hangzhou Qihan Biotech Co., Ltd. was listed as a victim on the leak site of the global ransomware group; the attack is estimated to have taken place on 2026-08-12. Sector: Healthcare. Country: China. Website: www.qihanbio.com. Qihan Biotech is a Hangzhoubased biotech company specializing in gene editing and cell/organ therapies. It develops immuneprivileged cells and xenogeneic organs to treat cancer and organ failure. The company aims to make these therapies accessible worldwide.
Vigilia
August 6, 2026
•[ ransomware, technology, healthcare ]
Vigilia was listed as a victim on the leak site of the global ransomware group; the attack is estimated to have taken place on 2026-08-06. Sector: Technology. Country: Uruguay. Website: vigilia.com.uy. VIGILIA is a company that provides support and care services for people.
It offers assistance in medical facilities, home care, ambulance transportation, and related administrative support.
The company also provides insurance policies and helps coordinate medical consultations and tests.
Newton County School System
August 28, 2026
•[ ransomware, education ]
Newton County School System was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Education. Country: United States of America. Website: www.newtoncountyschools.org.
macallister.com
August 28, 2026
•[ ransomware, leak ]
macallister.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-08-28. Country: United Kingdom of Great Britain and Northern Ireland. Website: macallister.com. MacAllister (macallister.com) Countdown to Publication
Management at MacAllister has chosen to completely ignore all attempts to establish a constructive dialogue regarding their security breach. Silence will not make this situation go away.
Since leadership refuses to engage, we are moving fo
corematerials.com
August 28, 2026
•[ ransomware, manufacturing ]
corematerials.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Manufacturing. Country: United States of America. Website: corematerials.com. Core Materials (corematerials.com) Countdown to Publication
Management at Core Materials has chosen to completely ignore all attempts to establish a constructive dialogue regarding their security breach. Silence will not make this situation go away.
Since leadership refuses to engage, we are m
Elekta AB
August 28, 2026
•[ ransomware, healthcare, leak ]
Elekta AB was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Healthcare. Country: Sweden. This is a final warning to reach out by 1 Sep 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 29 Aug 2026 | Warning: FINAL WARNING
Akpera Gayrimenkul Yatırım A.Ş.
August 28, 2026
•[ ransomware, retail ]
Akpera Gayrimenkul Yatrm A.. was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Other. Country: Turkey. Status: upcoming | Data size: | Files: 0 files | Deadline: 2026-09-15T00:00:00Z
SITTNAK Lojistik A.Ş.
August 28, 2026
•[ ransomware, manufacturing ]
SITTNAK Lojistik A.. was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Transportation. Country: Turkey. Status: upcoming | Data size: | Files: 0 files | Deadline: 2026-09-15T00:00:00Z
Oilquip Inc
August 28, 2026
•[ ransomware, energy, manufacturing ]
Oilquip Inc was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Energy & Utilities. Country: United States of America. Oilquip Inc, established in 1960, is a comprehensive fluid power distributor that specializes in hydraulics, pneumatics, oil conditioning, and system integration. The company is dedicated to providing innovative electro-hydraulic and electro-mechanical solutions while exceeding customer expectations. Their services include design and engineering, fluid conditioning, power generation, and repairs and upgrades, catering to a diverse range of clients. Oilquip prides itself on its customer-focused approach, flexibility, and commitment to excellence in all aspects of its operations.
cutlercapital
August 27, 2026
•[ ransomware, finance ]
cutlercapital was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Financial Services. Cutler Capital Management, LLC of Worcester, MA is an investment advisory firm registered with the Securities and Exchange Commission, specializing primarily in investing in convertible securities, community banks and real estate investment trusts to provide growth and income to high-net-worth investors, corporations, family offices, endowments and charitable foundations. Cutler currently manages $300 million in assets.
trc-companies
August 29, 2026
•[ ransomware, leak, technology ]
trc-companies was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-08-29. Sector: Professional Services. Country: United States of America. Size: 4.2 TiB
MONTCAU
August 29, 2026
•[ ransomware, education ]
MONTCAU was listed as a victim on the leak site of the majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-29. PUBLICATION SCHEDULED. [LEAK / 6341 FILES]
South Pacific Hotel Limited
August 29, 2026
•[ ransomware, retail ]
South Pacific Hotel Limited was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-29. Sector: Hospitality. Country: Hong Kong. Website: www.southpacifichotel.com.hk/tw/index.html. The hotel has a unique glass curtain wall and an oval building appearance. The building is 28 floors high, with 293 rooms and suites.
AUM Construction
August 29, 2026
•[ ransomware, manufacturing ]
AUM Construction was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-29. Sector: Manufacturing. Country: United States of America. Website: www.auminc.us.