OTEIS Conseil & Ingénierie
August 22, 2026
•[ ransomware, manufacturing, technology ]
OTEIS Conseil & Ingnierie was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Professional Services. Country: France. Website: oteis.fr. [AI generated] OTEIS Conseil & Ingnierie is a French engineering and consulting firm specializing in building and infrastructure design. Operating in France, the company provides technical expertise across disciplines including structural engineering, fluids, electricity, and project management. It serves sectors such as real estate, public works, and urban development, supporting both public and private clients throughout project lifecycle phases.
Flecha Bus
August 22, 2026
•[ ransomware, leak ]
Flecha Bus was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Transportation. Country: Argentina. Website: flechabus.com.ar. [AI generated] Flecha Bus is an Argentine intercity bus company operating in the passenger transportation industry. Founded in the mid-20th century, it provides long-distance coach services connecting Buenos Aires with various provinces across Argentina. Known for offering multiple service categories including standard and premium seating options, Flecha Bus is one of the prominent operators in Argentina's extensive national road transport network.
Tower Insurance
August 22, 2026
•[ ransomware, financial ]
Tower Insurance was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Financial Services. Country: New Zealand. Website: tower.co.nz. [AI generated] Tower Insurance is a New Zealand-based insurance company offering a range of personal and business insurance products, including home, contents, car, travel, and commercial coverage. Founded in 1869, it operates primarily in New Zealand and the Pacific Islands. Tower is listed on the New Zealand Stock Exchange and is known for its digital-first approach, providing customers with online policy management and claims services.
RXPE Group
August 22, 2026
•[ ransomware, manufacturing ]
RXPE Group was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Manufacturing. Country: China. Website: rxpe.com.
Integrated Health Systems
August 22, 2026
•[ ransomware, healthcare ]
Integrated Health Systems was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Healthcare. Country: United States of America. Website: ihs911.com.
NovoCure Limited
August 22, 2026
•[ ransomware, healthcare ]
NovoCure Limited was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Healthcare. Country: Israel. Website: novocure.com. This is a final warning to reach out by end of day 24 Aug 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 22 Aug 2026 | Warning: FINAL WARNING PAY OR LEAK
Vietnam Electricity(EVNHANOI)
August 22, 2026
•[ ransomware, energy, government ]
Vietnam Electricity(EVNHANOI) was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Energy & Utilities. Country: Vietnam. Website: evn.com.vn. Vietnam Electricity (EVN), legally known as Tp on in lc Vit Nam, is the largest power company and the sole national electric utility in Vietnam. Fully owned and controlled by the Vietnamese government since its inception in 1994, EVN operates as a vertically integrated monopoly responsible for the nationwide generation, transmission, and distribution of electricity, as well as international power exchanges. The group oversees all major power plants and regional distribution subsidiaries, including EVNHANOI. Serving as a crucial pillar for Vietnam's macroeconomic stability and industrial expansion, EVN is currently undertaking extensive grid digitalization and spearheading the national transition from coal dependency toward clean and renewable energy integration.
The data content exceeds 300GB, comprising 13.36 million rows of customer details, 6.99 million subscriptions, 2.26 million account records, and other miscellaneous data.The price is open to negotiation.
Session:054e5b6edf03e8ba012626b5dcd83a7dd47a046760bcd9b9b32d02a039d24d9608
Tox:852E34CBEBA2D40FD21BAC9F9E588B5194DBA9F31CACF9ECE316403120BE18765D22A8A453C4 [Size: 300.0 GB | Sector: Government, Energy]
AmSpec
August 22, 2026
•[ ransomware, hack, energy ]
AmSpec was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Energy & Utilities. Country: United States of America. Website: amspecgroup.com. AmSpec is live. T1 unlocks on the current 24-hour cadence, then 24 hours per remaining tier.
el-group
August 22, 2026
•[ ransomware, manufacturing ]
el-group was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Other. Country: Switzerland. Website: el-group.ch. Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation.
ReliaQuest, LLC
August 23, 2026
•[ ransomware, technology ]
ReliaQuest, LLC was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Technology. Country: United States of America. Website: reliaquest.com. This time the post is about you , not us. Let Mandiant report and advise on us accurately, go away. DISCLAIMER: This information is being provided "as is" for informational purposes only. We do not endorse any commercial entity, product, company, or service, including any entities, products, or services linked within this post. Any reference to specific commercial entities, products, processes, or services by service mark, trademark, manufacturer, or otherwise, does not constitute or imply endorsement, recommendation, or favour by us. | Updated: 23 Aug 2026
Layher
August 21, 2026
•[ ransomware, manufacturing, leak ]
Layher was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Manufacturing. Country: Chile. Website: layher.cl. layher.cl zoominfo.com/c/layher-del-pacifico-sa--layher-chile/1319092699 Layher Chile is the local branch of the globally renowned German manufacturer specializing in scaffolding and access systems.
They supply high-quality scaffolding solutions, safety equipment, and event structures for the construction, industrial, and infrastructure sectors.
The company provides comprehensive services, including product sales, equipment rentals, custom engineering design, and technical support for complex projects across the country.
Espac
August 21, 2026
•[ ransomware, technology, manufacturing ]
Espac was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Technology. Country: Chile. Website: espac.cl. espac.cl zoominfo.com/c/espac/425816287 ESPAC Construccin is a leading Chilean company based in Santiago that manufactures and distributes specialized products for the building industry.
They produce high-quality construction materials, including steel shores, heavy-duty pallets, scaffolding systems, and material handling carts.
Additionally, the firm offers comprehensive rental services for formwork and structural support equipment to assist large-scale construction projects across the country.
Gould Sherwood Consulting
August 21, 2026
•[ ransomware, technology ]
Gould Sherwood Consulting was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Professional Services. Country: United States of America. Website: gouldsherwood.com. gouldsherwood.com zoominfo.com/c/gould-sherwood-consulting-llc/347553210 Gould-Sherwood Consulting is a boutique IT support and services firm based in Lexington, Massachusetts, serving the Greater Boston area since 2005.
They specialize in comprehensive computer and network support, including planning, maintenance, and troubleshooting for both Mac and PC environments.
The company primarily caters to small-to-medium businesses, creative professionals, and home users, ensuring their technology infrastructure runs smoothly and securely.
Eyecare Center of Snohomish
August 21, 2026
•[ ransomware, healthcare ]
Eyecare Center of Snohomish was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Healthcare. Country: United States of America. Website: eyecarecenterofsnohomish.com. eyecarecenterofsnohomish.com zoominfo.com/c/eyecare-center-of-snohomish/442336650 Eyecare Center of Snohomish is a trusted optometry clinic in Snohomish, Washington, proudly serving its community since 1964.
They offer comprehensive vision and medical eye exams, diagnosing and treating various eye diseases to ensure long-term ocular health.
The clinic also features a full-service optical boutique offering custom-fitted contact lenses and designer eyewear frames from top global brands.
Crystal Pharmatech
August 21, 2026
•[ ransomware, healthcare, technology ]
Crystal Pharmatech was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Healthcare. Country: United States of America. Website: www.crystalpharmatech.com. Crystal Pharmatech is a technology-driven contract research organization (CRO) that focuses on materials science and engineering for drug development. Established in 2010 and have R&D centers located in Suzhou (China), New Jersey, San Francisco (USA), and Toronto (Canada). Also its key differentiator is integrated and specialized services, including API solid-state research, crystallization, preformulation, formulation development and manufacturing, clinical supply.
Schardein Mechanical
August 21, 2026
•[ ransomware, manufacturing, healthcare ]
Schardein Mechanical was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Manufacturing. Country: United States of America. Website: schardein.com. Schardein Mechanical is a trusted mechanical contractor providing top-of-the-line engineering services to commercial clients in Kentucky and Southern Indiana. Their offerings include design, installation, maintenance, and replacement of HVAC, plumbing, and process piping systems, with 24/7 availability for emergency services. The company caters to a diverse range of industries, including healthcare, education, and manufacturing, ensuring high-quality installations by skilled professionals. With multiple locations in Louisville, Elizabethtown, and Bowling Green, Schardein Mechanical has been delivering innovative solutions since 1984.
The company headquarters is located in 1810 Outer Loop, Louisville, KY 40219, United States.. 51-200 Employees
Phoenix Group of Companies
August 21, 2026
•[ ransomware, manufacturing ]
Phoenix Group of Companies was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Other. Country: United States of America. Website: phoenixlitho.com. The Phoenix Group of Companies is a leading single-source provider of print solutions from concept to completion that produces high quality communications to help businesses rise above the competition and overcome everyday challenges.
The company headquarters is located in 11631 Caroline Road, Philadelphia, PA 19154, United States. 201-500 Employees
Pinnacle Hospital
August 21, 2026
•[ ransomware, healthcare ]
Pinnacle Hospital was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Healthcare. Country: United States of America. Website: pinnaclehealthcare.net. Pinnacle Healthcare / Pinnacle Hospital is a physician-owned, patient-centered healthcare organization operating an 18-bed acute care hospital in Crown Point, Indiana. The company provides a wide range of medical and surgical services through a network of more than 150 physicians and medical specialists. Its services include family medicine, internal medicine, gastroenterology, general surgery, gynecology, orthopedics, pain management, urology, breast care, specialty clinics, and walk-in care. Pinnacle Healthcare focuses on delivering personalized, high-quality care in a smaller hospital environment, emphasizing patient satisfaction, efficient treatment, personal service, and respect for patients and their families.
The company headquarters is located in 9301 Connecticut Drive, Crown Point, IN 46307, United States. 201-500 Employees
Proveli
August 20, 2026
•[ ransomware, technology ]
Proveli was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-20. Sector: Technology. Country: United States of America. Website: proveli.com. Proveli is a privately held business founded by two brothers: Reinhardt and Thomas. Proveli prides itself on having an entrepreneurial culture that encourages and rewards innovative thinking, collaboration, and ownership. The company's greatest asset is the company's passionate and dedicated team; it's their drive and passion for developing and executing strategies that have lead to the company being recognized for its accomplishments. Proveli is constantly searching for and evaluating organic and acquisition growth opportunities. If you have an investment opportunity that you feel would be a good fit for Proveli, please contact the company. The company encourage you to read about how we've cultivated a unique and dynamic culture at Proveli - one that helps the company build companies that make a difference.
The company headquarters is 1900 S Liberty Drive, Bloomington, IN 47403, United States. 51-200 Employees
AutoDie
August 21, 2026
•[ ransomware, manufacturing ]
AutoDie was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Manufacturing. Country: United States of America. Website: autodie-llc.com. Founded in 1962 and headquartered in Grand Rapids, MI, Autodie LLC is a company that specializes in design and manufacture large-scale dies for metal stamping.
The company headquarters is located in 44 Coldbrook Street NW, Grand Rapids, MI 49503, United States. 201-500 Employees
