Willatt & Flickinger
September 27, 2026
•[ ransomware, finance ]
Willatt & Flickinger was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-27. Country: United States of America. Website: www.wfaustin.com.
Revenga Smart Solutions
September 27, 2026
•[ ransomware, technology ]
Revenga Smart Solutions was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Technology. Country: Spain. Website: www.gruporevenga.com.
Island
September 27, 2026
•[ ransomware, technology ]
Island was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Technology. Country: Canada. Website: www.island.ca.
First Secure Bank Group
September 27, 2026
•[ ransomware, finance ]
First Secure Bank Group was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Financial Services. Country: United States of America. First Secure Bank Group is a U.S.-based financial services organization focused on providing community-oriented banking solutions to individuals, families, and businesses. The group operates through affiliated banking institutions, including First Secure Bank and The State Bank Group. Its services include personal and business checking and savings accounts, commercial and consumer lending, mortgages, online banking, treasury services, and other financial products. First Secure Bank Group emphasizes personalized customer service, long-term relationships, and supporting the financial growth of the communities it serves. Through its network of banking institutions, the group provides accessible financial solutions while maintaining a strong focus on local businesses, community development, and responsible banking practices.
The company headquarters is located in 2175 Oneida St, Joliet, IL 60435, USA. 51-200 Employees
Ressources Si
September 27, 2026
•[ ransomware ]
Ressources Si was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Professional Services. Country: France. Website: ressources-si.com. Ressources Si is a company that operates in the Movie Theaters industry. It employs 10to19 people and has 1Mto5M of revenue.
Asesoría FAR
September 27, 2026
•[ ransomware, finance ]
Asesora FAR was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-27. Sector: Professional Services. Asesora FAR is a Barcelona-based firm providing property management, accounting, tax, and business advisory services.
nsbsd.org
September 28, 2026
•[ ransomware, government, education ]
nsbsd.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Government & Defense. Country: United States of America. Website: nsbsd.org. North Slope Borough School District is a public school district serving the remote communities of Alaska's North Slope, headquartered in Utqiavik. It operates 11 schools across the borough, enrolling approximately 2,044 students from Pre-K through 12th grade. The district's mission is rooted in Iupiaq culture, aiming to develop students who are "empowered, culturally rooted, bilingual, healthy, critical, creative, life-long learners". For the 2025-2026 fiscal year, the district received $38,766,371 in local funding from the North Slope Borough, with per-pupil spending significantly above the national average at approximately $40,367
SMCare
September 28, 2026
•[ ransomware, healthcare ]
SMCare was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Healthcare. Scenario Management is a specialist support provider based in Lancashire, serving areas including Blackpool, Wyre, Fylde, and Preston. The company offers 24-hour supported living and residential services, as well as short stay respite care for individuals with learning disabilities, complex needs, autism, and associated mental health issues. Their services are designed for those who may challenge services or have forensic backgrounds. Scenario Management aims to provide comprehensive support tailored to the needs of their clients.
Electrolux 2...
September 28, 2026
•[ ransomware, manufacturing, retail ]
Electrolux 2... was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Country: Sweden. Hi Electrolux, im getting kind of inpatient, therefore i might just leak something. If i hear nothing from you in the next 3 days, more data WILL be leaked.
Thanks.
Emails: xdlmfao@morke.ru
Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Retail, Manufacturing, Transportation]
SiteProRentals
September 28, 2026
•[ ransomware, manufacturing, leak ]
SiteProRentals was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Hospitality. SitePro Rentals is a Texas-based construction and industrial equipment rental company founded in 2021. A subsidiary of Sammons Industrial, it rents aerial lifts, forklifts, and earthmoving equipment, serving contractors across the U.S. from over 30 locations.
We have every employee's Social Security number. Home addresses. Birth dates. Salaries. We know who's sick, who's on leave, who got fired and why. We also have 338,000 pay records....
Shortly, you will receive an email containing the instructions on how to proceed with this situation.
The ransom is relatively small, just $150k USD in XMR...
If you do not receive the email, contact us at:
Email: xdlmfao@morke.ru
Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Construction]
Dediserve Ltd
September 28, 2026
•[ ransomware, technology, finance ]
Dediserve Ltd was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Cloud infrastructure provider (iomart group) Dublin, Ireland / FRA1 Frankfurt DC | The complete customer register of the FRA1 cloud 167 tenant accounts with infrastructure details; Disk images of tenant servers: a regulated forex broker's portal (payment gateway configuration, trading-account records), a payment services provider's systems including its internal password vault, and a production real-estate platform; The provider's internal operations mailbox and monitoring configuration | All 46 FRA1 servers are paused and intact - restorable automatically within the hour of settlement. | [ACTIVE: deadline 2026-10-01 05:16 UTC]
Holiday Inn Vilnius
September 28, 2026
•[ ransomware, leak ]
Holiday Inn Vilnius was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Hospitality. Country: Lithuania. Website: Holiday Inn Vilnius. The property operates under the international Holiday Inn brand of IHG Hotels & Resorts. The hotel provides 134 guest rooms,
sumperk.cz
September 28, 2026
•[ ransomware, government, retail ]
sumperk.cz was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Retail & E-Commerce. Country: Czechia. Website: sumperk.cz. The official website, sumperk.cz, serves as the city's principal digital information and service portal for residents, businesses, visitors and other
bio-strath.com
September 28, 2026
•[ ransomware, healthcare ]
bio-strath.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Healthcare. Country: Switzerland. Website: bio-strath.com. The company was established in 1961 and operates the Bio-Strath brand, which is particularly associated with liquid and tablet nutritional
fedelmundo.com.ph
September 28, 2026
•[ ransomware, healthcare ]
fedelmundo.com.ph was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Other. Country: Philippines. Website: fedelmundo.com.ph. The institution traces its origins to 1957, when Filipino pediatrician and scientist Dr. Fe del Mundo established Children's Memorial Hospital
lfgholding.com
September 28, 2026
•[ ransomware, finance ]
lfgholding.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Other. Country: Switzerland. Website: lfgholding.com. The company operates as an independent, partner-owned wealth-management group and manages a portfolio of specialized financial-services businesses. Its operating companies
cromados.com
August 10, 2026
•[ ransomware, manufacturing ]
cromados.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-08-10. Sector: Manufacturing. Country: Spain. Website: cromados.com. The company's registered business activities include thermal treatment of metals, organic and electrolytic coatings, and the manufacture and commercialization of
auromex.com
September 28, 2026
•[ ransomware, manufacturing ]
auromex.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Country: Mexico. Website: auromex.com. The company is headquartered in Samut Prakan Province and has more than five decades of experience in the surface-finishing industry.
manno.ch
September 28, 2026
•[ ransomware, government ]
manno.ch was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Other. Country: Switzerland. Website: manno.ch. The official website, manno.ch, provides residents, businesses and visitors with information about municipal administration, public services, local regulations, infrastructure, cultural
Nissho Electric Manufacturing Co., Ltd.
September 28, 2026
•[ ransomware, manufacturing ]
Nissho Electric Manufacturing Co., Ltd. was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Country: Japan. Website: www.nisshodenki.com.
