https://pacific-construction.com/
August 13, 2026
•[ ransomware, manufacturing, leak ]
https://pacific-construction.com/ was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: pacific-construction.com. project data client data contract
Reminger
August 13, 2026
•[ ransomware, finance ]
Reminger was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Professional Services. Country: Germany. Website: reminger.com. Reminger Attorneys at Law is a law firm with a strong presence in Ohio, Kentucky, and Indiana, operati
ASCOM S.p.A. ascom-italy.it serviced by an IT company Emilcom S.r.l.
August 7, 2026
•[ ransomware, manufacturing, technology ]
ASCOM S.p.A. ascom-italy.it serviced by an IT company Emilcom S.r.l. was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-08-07. Sector: Manufacturing. Country: Italy. Website: www.emilcom.it. ASCOM S.p.A. is an Italian manufacturer of heavy lifting equipment for the marine (marinas & shipyards) and industrial sectors. Founded in 1972 by Gian Franco Schedoni in Formigine (Modena), the company began with overhead cranes and expanded into boat hoists (travel lifts) around 1982.Today it is a global specialist in travel lifts, gantry cranes, overhead cranes, and fully customized lifting solutions, with thousands of machines operating in over 50 countries. Production is fully in-house (9,000 m facility), supported by its own engineering team using FEM analysis and modern CAD tools.Key facts:Certified ISO 9001, 14001 & 45001; all equipment CE-markedFocus on quality, customization, and sustainabilityServes marinas, shipyards, infrastructure, steel mills, renewable energy, mining, and moreHeadquarters: Via Della Fornace 16, 41043 Formigine (MO), ItalyPhone: +39 059 558038Email: info@ascom-italy.itWebsite: ascom-italy.it
Vector Two Technology
August 14, 2026
•[ ransomware, technology, retail ]
Vector Two Technology was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Technology. Country: Brazil. Website: vtt.com.br. vtt.com.br zoominfo.com/c/vtt/372441609 VTT is a pioneering Brazilian technology company founded in 1996 that specializes in Digital Signage and Retail Media solutions. As a leading provider in Latin America, the company delivers innovative digital displays, menu boards, and interactive customer experience tools for the retail sector. Their platform also supports a robust channel partner program, helping businesses across the region modernize their visual communication and in-store marketing strategies.
Acli
August 14, 2026
•[ ransomware, social, government ]
Acli was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Country: Italy. Website: acli.it. acli.it zoominfo.com/c/acli/372618594 ACLI (Christian Associations of Italian Workers) is a major Italian Catholic social promotion organization founded in 1944 to advocate for labor rights and human dignity. Operating a vast network of local clubs, the association provides essential community services, including tax assistance, employment support, and vocational training. Today, it continues to champion social solidarity, democratic participation, and active citizenship across Italy and internationally.
Community Connections
August 14, 2026
•[ ransomware, healthcare ]
Community Connections was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Other. Country: United States of America. Website: comconnections.org. comconnections.org zoominfo.com/c/community-connections-inc/350834294 Community Connections is a non-profit organization based in Ketchikan, Alaska, dedicated to providing individualized support for children, seniors, and individuals with disabilities. Founded over 40 years ago, their core mission focuses on encouraging independence, community belonging, and improving the overall quality of life for those they serve. The organization offers a wide range of specialized programs, including early childhood learning, mental health support, and comprehensive disability services.
Megalaser Industria Metalurgica LTDA
August 14, 2026
•[ ransomware, manufacturing ]
Megalaser Industria Metalurgica LTDA was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Manufacturing. Country: Brazil. Website: megalaser.com.br. megalaser.com.br zoominfo.com/c/megalaser-industria-metalurgica-ltda/1315472404
Megalaser is a Brazilian metallurgical company based in So Paulo, specializing in advanced metalworking services like laser cutting, CNC bending, and robotic welding. Founded in 2006, the manufacturer provides high-quality machined components and assemblies for diverse industries, including renewable energy, mining, automotive, and oil and gas. Their platform highlights a strong commitment to precision engineering, integrated manufacturing solutions, and sustainable industrial practices.
EKEPIS
August 14, 2026
•[ ransomware, leak, government ]
EKEPIS was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Country: Greece. Website: ekepis.gr. ekepis.gr rocketreach.co/ekepis-ethniko-kentro-pistopoiisis-domon-profile_b6d46b6ac7408ffe EKEPIS was Greece's National Centre for the Accreditation of Continuing Vocational Training, responsible for certifying adult educators and lifelong learning providers. The organization no longer exists, as its accreditation and certification duties were absorbed by EOPPEP (), the National Organisation for the Certification of Qualifications and Vocational Guidance. Today, anyone looking for their services must go through EOPPEP or the official Greek government portal, since the old ekepis.gr domain is no longer an official resource.
TOA
August 14, 2026
•[ ransomware, manufacturing ]
TOA was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Country: Japan. Website: toa-const.co.jp. toa-const.co.jp zoominfo.com/c/toa-corp/425840057 TOA Corporation is a prominent Japanese general contractor specializing in marine civil engineering, land reclamation, and port infrastructure development. The company focuses on delivering high-quality, economically viable construction projects while prioritizing environmental sustainability and technological innovation. Through its corporate portal, stakeholders can access detailed information on their advanced engineering services, corporate philosophy, and investor relations.
Retail Business Management Systems
August 14, 2026
•[ ransomware, retail, technology ]
Retail Business Management Systems was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: rbms.com. rbms.com zoominfo.com/c/retail-business-management-systems-inc/101712744 Retail Business Management Systems (RBMS) is a specialized technology provider that has delivered Point of Sale and retail management solutions for over 25 years. Focusing heavily on NCR Counterpoint software and hardware integrations, the company supports retail businesses of all sizes primarily across the New York and New Jersey regions. Their platform serves as a central hub for merchants seeking comprehensive tools to optimize store operations, inventory tracking, and overall customer experience.
Cityside Homes
August 14, 2026
•[ ransomware, manufacturing ]
Cityside Homes was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Country: United Kingdom of Great Britain and Northern Ireland. Website: citysidehomes.com. citysidehomes.com zoominfo.com/c/cityside-homes-llc/355153806 Cityside Homes is a new construction home builder based in Houston, Texas, specializing in developing homeowner-focused residential communities. Since 2011, the company has built over 100 distinct neighborhoods, offering modern living spaces tailored to local buyers. Their website serves as a primary resource for exploring floor plans, browsing model homes, and discovering available properties across the greater Houston area.
First Coast Heart Vascular Center
August 14, 2026
•[ ransomware, healthcare ]
First Coast Heart Vascular Center was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Healthcare. Country: United States of America. Website: firstcoastheart.com. firstcoastheart.com zoominfo.com/c/first-coast-heart--vascular-center/356606344 First Coast Heart & Vascular Center is a premier cardiovascular care provider serving patients across Northeast Florida. Their website highlights a comprehensive range of services, including expert cardiology, electrophysiology, advanced imaging, and vascular surgery. The medical center focuses on delivering innovative, evidence-based treatments and minimally invasive procedures to ensure the highest standard of heart health.
KFC Kosova
August 14, 2026
•[ ransomware, retail ]
KFC Kosova was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Hospitality. Website: kfckosova.com. kfckosova.com zoominfo.com/c/kfc-kosova/401225793 KFC Kosova is the official regional branch of the global fast-food chain, operating multiple restaurants across Kosovo, including a prominent location at the Albi Mall in Pristina. Their website serves as a central hub for customers to find nearby branches, check out menu options, and access delivery services. Additionally, the platform acts as a primary career portal for local job seekers to apply for various corporate and restaurant positions.
The Coffee Bean
August 14, 2026
•[ ransomware, retail ]
The Coffee Bean was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: Malaysia. Website: coffeebean.com.my. coffeebean.com.my zoominfo.com/c/the-coffee-bean/425047768 The Coffee Bean & Tea Leaf Malaysia is the official digital portal for the popular cafe chain, which currently operates over 150 locations across the country. The website allows customers to easily explore the full menu, access exclusive promotions, and manage their MyCBTL loyalty app rewards. It serves as a convenient central platform for ordering premium beverages, redeeming digital vouchers, and staying updated on seasonal cafe offerings.
Ollies Place Kidswear
August 14, 2026
•[ ransomware, retail ]
Ollies Place Kidswear was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Retail & E-Commerce. Country: Australia. Website: olliesplace.com.au. olliesplace.com.au zoominfo.com/c/ollies-place-kidswear/359503050 Ollie's Place is an Australian retail brand specializing in high-quality, trendy, and comfortable clothing for babies and children. The company offers a unique shopping experience both online and through physical stores across Australia, featuring vibrant prints and stylish designs. They focus on providing fashionable, value-for-money pieces for kids' everyday wear and special milestones.
Baxter International, Inc.
August 14, 2026
•[ ransomware, healthcare, technology ]
Baxter International, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Healthcare. Country: United States of America. Website: baxter.com. Over 7.1M Salesforce records containing some PII was compromised. This is a final warning to reach out by 17 Aug 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 14 Aug 2026 | Warning: FINAL WARNING PAY OR LEAK
Cook Medical LLC
August 14, 2026
•[ ransomware, healthcare ]
Cook Medical LLC was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-14. Sector: Healthcare. Country: United States of America. Website: cookmedical.com. Customer data, employee data, and other internal corporate data was compromised. The Company engaged with us but made several paltry offers, did not want to pay what we asked for and decided they are okay with the data leak to happen instead of increasing their offer by a little, then we'd likely have accepted and this post would not have gone up. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 182GB+ (compressed) | Updated: 14 August 2026 | SHA256: 8a87ba511f25f20a193f05a6578a620b02302c2075a6f2dff428d1f1a826ba63
Carhartt, Inc.
August 13, 2026
•[ ransomware, leak, retail ]
Carhartt, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-13. Sector: Retail & E-Commerce. Country: United States of America. Website: carhartt.com. Our demand for this Company was $3.3 million. The Company reached out. However, The Company did not try to negotiate. If The Company attempted to negotiate with us The Company would've ended up saving a good chunk of money. Instead they decided to do (see blow); this is also because The Company hired a very unskilled and incompetent negotiator. If The Company hired competency to negotiate for them, this post would've never been published. [21:24:22] carhartt: After careful review and internal discussions with leadership, we have decided not to move forward with negotiations or further discussions. We appreciate your patience throughout this process. There is millions of customers of data involved here. As we always say, these companies don't care. Millions of records of customer data and vast amount of sensitive information and PII containing employee, customer, customer metadata (royalty info), and other internal corporate data was compromised. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 50GB+ (compressed) | Updated: 13 August 2026 | SHA256: 6b37f770382ce82bfa4677466cc51d9269e5a70436eecf101fae6fa9d5d8e8ac
IPS
August 13, 2026
•[ ransomware, manufacturing ]
IPS was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-13. Country: Italy. Website: ipssrl.com. ipssrl.com zoominfo.com/c/ips-srl/372710487 I.P.S. Srl is an Italian company founded in 2005 that specializes in the recovery and recycling of inert waste from construction and demolition activities. They provide environmental services, supply recycled aggregates, and manufacture "Wastile," a 100% ecological and infinitely recyclable thermoplastic tile. The company has received national awards for its rapid revenue growth and high financial reliability in the environmental sector.
Metabase
August 12, 2026
•[ ransomware, technology ]
Metabase was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-12. Sector: Technology. Country: United States of America. Website: metabase.com. :P | Updated: 12 August 2026 | SHA256: 84daf8f33954a0b03238a1e0da3ee109d5bc32acc134cfdddfac36b4b75d2480
