naturesplus.com
August 28, 2026
•[ ransomware, leak, retail ]
naturesplus.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Retail & E-Commerce. Country: United States of America. Website: naturesplus.com. Documents: Natural Organics, Inc. / NaturesPlus PROLOGUE CEO Jim Gibbons, between 2015 and 2019, pur...
rottner-tresor.at
August 25, 2026
•[ ransomware, manufacturing ]
rottner-tresor.at was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Manufacturing. Country: Austria. Website: rottner-tresor.at. Documents: Rottner Tresor GmbH PROLOGUE An invoice for a 60-minute general anesthesia procedure with...
The Gran Hotel Ingles
September 17, 2026
•[ ransomware, leak ]
The Gran Hotel Ingles was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Hospitality. Country: Spain. Website: www.granhotelingles.com.
Techwise
September 17, 2026
•[ ransomware, technology ]
Techwise was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Technology. Country: Argentina. Website: www.techwise.com.ar.
aecom.com
September 17, 2026
•[ ransomware, manufacturing, government ]
aecom.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Professional Services. Country: United States of America. Website: aecom.com. [AI generated] AECOM is a global infrastructure and engineering firm headquartered in the United States. The company provides design, consulting, construction, and management services across sectors including transportation, water, environment, energy, and government facilities. Operating in over 150 countries, AECOM serves public and private clients worldwide and is recognized as one of the largest engineering services firms globally.
hoyletanner.com
September 17, 2026
•[ ransomware, leak, technology ]
hoyletanner.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: hoyletanner.com.
expresspros.com
September 17, 2026
•[ ransomware, technology ]
expresspros.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Professional Services. Country: United States of America. Website: expresspros.com. Express Employment Professionals Data Breach Notification & Public Disclosure
We have officially initiated the public release phase regarding expresspros.com.
Despite our direct attempts to establish communication, company leadership and their representatives have chosen a strategy of silence
Invincible GG
September 17, 2026
•[ ransomware, technology ]
Invincible GG was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Technology. Website: www.invinciblegg.com.
Vigatec
September 17, 2026
•[ ransomware, technology ]
Vigatec was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Technology. Country: Germany. Website: www.vigatec.com.
www.diakonie-apolda.de
September 17, 2026
•[ ransomware, healthcare ]
www.diakonie-apolda.de was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Healthcare. Country: Germany. Website: www.diakonie-apolda.de. Diakoniewerk Apolda gGmbH is a German non-profit social welfare organization (gemeinntzige GmbH) founded in 2006, head...
C...
September 17, 2026
•[ ransomware ]
C... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-09-17. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
Stim
September 18, 2026
•[ ransomware, technology ]
Stim was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Technology. Country: France. Website: stim.fr. Stim France specializes in video surveillance solutions within the security industry. The company offers a range of video recorders, video receivers, storage expansion, and integration services for surveillance cameras, as well as software for video surveillance management.
Inovapy
September 18, 2026
•[ ransomware, technology ]
Inovapy was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Technology. Country: Paraguay. Website: inovapy.com. INOVAPY is a technology company specializing in software development and digital transformation solutions for small and medium-sized businesses, offering reliable and scalable technological services across Latin America and beyond.
Universitt Hamburg
September 17, 2026
•[ ransomware, education ]
Universitt Hamburg was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Education. Country: Germany. Website: uni-hamburg.de. Universitt Hamburg is the largest research and educational institution in Northern Germany, with over 42,000 students. It offers a wide range of academic programs and is recognized for its excellence in research and teaching. The university serves diverse target groups including prospective students, current students, researchers, and alumni. It collaborates with various societal and economic partners to address contemporary challenges and contribute to future solutions.
Giti Corp
September 18, 2026
•[ ransomware, manufacturing ]
Giti Corp was listed as a victim on the leak site of the killsec ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Manufacturing. Country: Singapore. Website: giti-corp.com.
ANYTHINGIT
September 18, 2026
•[ ransomware, technology, government ]
ANYTHINGIT was listed as a victim on the leak site of the Spirals ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Technology. Website: www.anythingit.com. Certified IT Asset Disposition (ITAD) and e-waste management for federal agencies, defense contractors, and enterprise organizations demanding the highest chain-of-custody standards.
AT&T
September 18, 2026
•[ ransomware, technology ]
AT&T was listed as a victim on the leak site of the EndZone ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Technology. Country: United States of America. Website: att.com. Revenue: $125.6 billion
Initial access was via a CX contractor doing business with AT&T. Access originally used as vehicle for Equipment Changes/Call Forwarding (thanks a lot TORCH patch) - VPN + HVD (both external and internal MyDesktop) instances were accessed for a prolonged period without any detection or incident response taking place. Certificates exported from certlm in the VDI + OPUS self installer (automatically joins EP to S1) opened up the door to the VPN. Salesforce data was accessed via a project manager ATTUID + a DirecTV contractor who for some reason had the apps available in Salesforce. AT&T CSO, if you are reading this, you are to contact us ASAP!
Accela.com
September 18, 2026
•[ ransomware, government, technology ]
Accela.com was listed as a victim on the leak site of the EndZone ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Government & Defense. Country: United States of America. Website: Accela.com. Revenue: $144.4 million
Accela is a comprehensive cloud based software platform used by state and local governments to manage internal agency operations. We have successfully extracted over 50 GB of data from Accela. Data includes over 2 million lines of user data with PII, and 6 million user requests (from their citizen engagement portal where citizens report everyday non-emergencies in/around their neighbourhoods) also with PII. There is a lot of government data, from FBI agents to cops to regular government workers. Speak soon or Leak soon!
First Secure Bank and Trust
September 18, 2026
•[ ransomware, finance ]
First Secure Bank and Trust was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Financial Services. Country: United States of America. Website: firstsecurebank.com. First Secure Bank and Trust was founded in Palos Hills, Illinois in 1977 to serve the financial needs of the company's friends and neighbors. Today, the company is still in the neighborhood and continuing with that mission. The company is the only "true" locally owned bank in the area. The company care about the community because the company live here, too. This local knowledge and commitment gives the company a tremendous advantage when it comes to helping you with your financial needs. Other nearby bank branches have headquarters miles away and employees that move from location to location as the need arises. The company is always here to listen to you and then use the company's years of experience to help you achieve your financial goals, whether it is a simple free checking account or sophisticated investment advice. The company will always give you the right service-right here, right now.
The company headquarters is located in 10360 S Roberts Road, Palos Hills, IL 60465, United States. 11-50 Employees
The State Bank
September 18, 2026
•[ ransomware, finance ]
The State Bank was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Financial Services. Country: United States of America. Website: thestatebankgroup.com. The State Bank Group is comprised of Wonder Lake State Bank (east), Wonder Lake State Bank (west), Johnsburg State Bank, Spring Grove State Bank, Lakemoor State Bank and Hebron State Bank. The company is proud to have directorship of local business owners and professionals. It has always been the company's focus as a community bank to provide the best banking services available. The company has selected the company's banking locations by identifying areas that were at the time unserviced. Therefore, each of the company's bank locations represents the first bank in their respective community. The company's group of banks has grown since the company's inception in 1979. The company currently have a staff of more than 80 employees. In addition to myself, the company has a teller who has been servicing the company's customers banking needs since 1979. The company thrive on building relationships with the company's customers and believe the company's slogan, "Bank Where You're Known", promotes the company's continuing mission and commitment to providing true "Community Banking". The company's extended lobby and drive-up hours provide the company's customers with the most flexible banking hours in McHenry County. All of the company's locations are full service banks, staffed with loan officers and new accounts representatives. In addition, all the company's locations have safe deposit boxes. Each of the company's loan officers have "real" lending authority, meaning that you will always be dealing with the decision makers. This makes your experience both personal and efficient. To the company's customers who are visiting the company's web site, "Thank You Very Much". If you are not currently a customer, the company invite you to "Bank Where You're Known".
The company headquarters is located in 7526 Hancock Drive, Wonder Lake, IL 60097, United States.11-50 Employees
