www.jonesthegrocer.com
September 24, 2026
•[ ransomware, retail ]
www.jonesthegrocer.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Retail & E-Commerce. Country: Australia. Website: www.jonesthegrocer.com. Jones the Grocer is a premium gourmet food retail and cafe brand founded in 1996 in Sydney, Australia, originally launch...
airtanzania.co.tz / airtanzania.com
September 24, 2026
•[ ransomware, leak ]
airtanzania.co.tz / airtanzania.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Transportation. Country: Tanzania, United Republic of. Website: airtanzania.co.tz / airtanzania.com. Air Tanzania Company Limited (ATCL) is the national flag carrier airline of Tanzania, established on March 11, 1977 foll...
Italy
September 24, 2026
•[ ransomware, government, leak ]
Italy was listed as a victim on the leak site of the ImNotAVillain ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Government & Defense. Country: Italy. Italy is being exposed for failing to follow proper data protection laws.
Includes 85,000+ Files 150GB. Top departments, units, offices affected.
Revolut
September 24, 2026
•[ ransomware, finance, leak ]
Revolut was listed as a victim on the leak site of the ImNotAVillain ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: revolut.com. Revolut data on sale. Contact information at the bottom of the page.
Includes 680 high-value networth users.
GDM Pipelines
September 24, 2026
•[ ransomware, energy ]
GDM Pipelines was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Energy & Utilities. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.gdmpipelines.com.
Agora coopérative agricole
September 24, 2026
•[ ransomware, retail ]
Agora cooprative agricole was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Agriculture and Food Production. Country: France. Website: coopagora.fr.
Wallatec
September 24, 2026
•[ ransomware, manufacturing, financial ]
Wallatec was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Other. Wallatec creates high-performance carbonation systems for restaurants and busy kitchens. Their
equipment is built to handle intense daily use, working perfectly even in the most hectic envir
onments.
We will upload 15gb of corporate data soon. Employee information (passports), projects, financi
als, client information and so on.
Zig Inge Group
September 24, 2026
•[ ransomware, retail ]
Zig Inge Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Country: Australia. Website: www.prospecthillcamberwell.com.au.
Inversiones Bolívar
September 24, 2026
•[ ransomware, finance ]
Inversiones Bolvar was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Financial Services. Country: Colombia. Website: www.proyectosdevida.com.
All Tech Machine & Engineering
September 24, 2026
•[ ransomware, manufacturing ]
All Tech Machine & Engineering was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Manufacturing. Country: United States of America. Website: www.alltechinc.com.
Dao Group
September 24, 2026
•[ ransomware, leak ]
Dao Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Other. Website: www.daogroup.com.
Catholic University of El Salvador
September 24, 2026
•[ ransomware, education ]
Catholic University of El Salvador was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Education. Country: El Salvador. The Catholic University of El Salvador (UNICAES) is a private Catholic university founded in 1982 in Santa Ana, El Salvador.
Prater & Ridley Attorneys At Law
September 24, 2026
•[ ransomware, leak ]
Prater & Ridley Attorneys At Law was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Professional Services. Country: United States of America. Prater, Ridley & Llamas Attorneys at Law is a law firm based in Temple, Texas, United States. Established in 1993, it provides legal services in family law, criminal defense, probate, estate administration, and related civil matters for clients throughout Central Texas.
ukbjja.org
September 24, 2026
•[ ransomware, leak ]
ukbjja.org was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-24. Country: United Kingdom of Great Britain and Northern Ireland. Website: ukbjja.org. full data
welgenone.com
September 24, 2026
•[ ransomware, healthcare, technology ]
welgenone.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Healthcare. Country: United States of America. Website: welgenone.com. Welgen One is a mobile wellness service provider based in Georgia, USA, offering personalized wellness care and dispensary access across Atlanta. The company focuses on delivering innovative healthcare solutions, including remote patient monitoring and onsite wellness programs, to enhance overall well-being. Targeting individuals seeking convenient and comprehensive health services, Welgen One aims to revolutionize the healthcare experience by prioritizing patient-centered care. With a commitment to accessibility and customization, they utilize advanced technology and data to optimize health outcomes
bnlawmacau.com www.bn-ip.com
September 24, 2026
•[ ransomware, leak ]
bnlawmacau.com www.bn-ip.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Professional Services. Country: Macau. full data all country
NEAD Pro
September 24, 2026
•[ ransomware, finance, legal ]
NEAD Pro was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-09-24. NEAD Pro Nead Pro is a professional multidisciplinary firm based in Gorizia and Udine, Italy, that provides legal, tax, bankruptcy, and accounting consulting services.What it is: a network share belonging to two Italian professional firms located at Via Roma 20, Gorizia (Friuli-Venezia Giulia):NEAD SRL (NORTH EAST ADVISORS S.R.L.) - an accounting firm, dottore commercialista, P.IVA 01114220310, REA GO-72906;NEAD PRO - PROFESSIONISTI RIUNITI - a law firm, P.IVA 01157140318.Volume: ~575,000 files / ~253 GB. The root contains a single branch Nuova directory\NEAD\ (plus an empty Documenti folder and a scatter of PDF scans at the root level).Structure and contents:Branch Volume ContentsNEAD PRO SITE - Documenti 231,137 files / 193.5 GB Law firm: 03.PRATICHE (46,620 files: CIVILE 9,665, PENALE 537, SOVRAINDEBITAMENTO 1,208), 04. INCARICHI (85,321: FALLIMENTI 22,492, ESECUZIONI 28,509, ADS 14,547, TRUST, CURATELE), SEGRETERIA with CREDENZIALI VARIE.xlsx (~40 firm accounts: SPID, PEC, banks, 2 cards with full PAN+CVC, safe code), bank scans (BANCOMAT PIN, BCC agreements)NEAD SRL SITE - Documenti 101,125 / 55.3 GB Accounting firm: 03.CLIENTI - 199 active + 184 former client folders (730, CU, F24, contracts), 44 private SOGEI Entratel .P12 keys (signing clients' tax returns), ISA/IRAP tax filings 20192020, client master data, Account.xlsxPRIMA NOTA - Documenti 1,885 / 871 MB Cash books 20192026 (21 xlsx): CASSA / CONTO CORRENTE / POS / CARTA / SISTERPOWERBI - Documenti 548 / 627 MB 37 financial BI models .pbix (BI_ISIDE, BI_NEAD, ATHENA, PNAI)ARCHIVIO 921 / 2.6 GB MPS bank statements 20202024, NEAD SRL account closure, firm mail archivePOSTA SARDAMAR / PANEGIOCHI / ISIDE / ADMIN SRL ~165+ / ~174 MB Client and firm mail: IVECO Capital leasing, accertamento Agenzia Entrate, Capitaneria di Porto, verbali poliziaES. IMM. 112-2024 10 files Real-estate enforcement proceedings (Tribunale di Gorizia): bank statements and CIE (ID cards) of auction participantsNEAD root ~85 PDF / 127 MB Scanned bank statements, F24 forms, IPZS envelope with the PIN/PUK of a CIE cardMost sensitive data: client dossiers with tax codes (codici fiscali), court case files (civil/criminal/bankruptcy), medical documents (Art. 9 GDPR), the firm's credential database with full PAN+CVC of two cards and the safe code, 52 Entratel electronic signature keys, ~100 SEPA mandates with IBANs and signatures, client PST archives (7.5 GB), a client's Huawei phone backup (Facebook/Gmail/Telegram databases), passports of foreign shareholders. More
Indroj Medical Group Inc.
September 22, 2026
•[ ransomware, healthcare ]
Indroj Medical Group Inc. was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Healthcare. Country: United States of America. Website: npiprofile.com. The Web's Free NPI Registry Search & Provider Reference Site
Martin Lawrence Galleries
September 22, 2026
•[ ransomware, retail ]
Martin Lawrence Galleries was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Retail & E-Commerce. Country: United States of America. Website: martinlawrence.com. Premier gallery of fine art in America
Westside GI
September 22, 2026
•[ ransomware, healthcare ]
Westside GI was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Healthcare. Country: United States of America. Website: westsidegicenter.com. Ambulatory endoscopy center
