veritiv
September 15, 2026
•[ ransomware, manufacturing ]
veritiv was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Manufacturing. Country: United States of America. Size: 1.9 TiB
Geieg
September 15, 2026
•[ ransomware, retail ]
Geieg was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Other. Country: Spain. Website: www.geieg.cat.
MedSkin Solutions Dr. Suwelack AG
September 14, 2026
•[ ransomware, healthcare, technology ]
MedSkin Solutions Dr. Suwelack AG was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Healthcare. Country: Germany. Website: medskin-suwelack.com. medskin-suwelack.com rocketreach.co/medskin-solutions-dr-suwelack-ag-profile_b44a3a45fd136bbb MedSkin Solutions Dr. Suwelack AG MedSkin Solutions Dr Suwelack AG is a German biotechnology company. It was founded in 1997 and is based in Billerbeck near Mnster.
DATA
Finance Accounting Core
Quality Management System QMS Validation
Manufacturing Production Operations
Corporate Controlling Financial Planning
Health, Safety Environmental Compliance AUM
Corporate Identity Marketing Assets
Supply Chain Vendor Management
Legal Intercompany Contracts
IT Infrastructure Data Repositories
Human Resources Personnel Records
US Subsidiaries International Taxation
Construction Facility Projects
Regulatory Affairs Medical Device Registration
Executive Communications Email Archives
Archived Confectioning Procedures
TMI Tecnicas Mecanicas Ilerdenses
September 14, 2026
•[ ransomware, manufacturing, leak ]
TMI Tecnicas Mecanicas Ilerdenses was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Manufacturing. Country: Spain. Website: tmipal.com. tmipal.com zoominfo.com/c/tmi-tecnicas-mecanicas-ilerdenses-sl/372767545 TMI Tecnicas Mecanicas Ilerdenses Spanish machining and metal-casting factory from Lleida, Catalonia founded 1991, producing and repairing components for agricultural machinery and industrial customers (custom parts made to customer drawings; "Ilerdenses" refers to Ilerda, the Roman name of Lleida). Classic quiet Catalan workshop serving Spain's fruit-growing capital, where farm equipment wears out fast and OEM replacement parts aren't always available.
Sarku Japan
September 14, 2026
•[ ransomware, retail, automotive ]
Sarku Japan was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Retail & E-Commerce. Country: United States of America. Website: sarkujapan.com. sarkujapan.com zoominfo.com/c/sarku-japan/33898946 SARKU Japan Japan's #1 independent service & wholesale network for foreign cars founded 1993 in Chiba by Texan David J. Jones (in Japan since 1989) after seeing that owners of European/American cars in Japan were "orphans": parts take 68 weeks from Europe, service is scarce. SARKU built the full foreign-car infrastructure: 9 service centers (8 Kanto + Nagoya), a wholesale yard of ~4,000 imported cars (one of Japan's two largest), a parts warehouse of 30,000+ SKUs worth 700M+ (also one of Japan's two largest), plus procurement/export arms via US offices in Seattle (since 1997) and Florida selling 20,000+ cars and serving 60,000+ active customers (~150 staff from 15 countries; ~120K monthly site visitors, 170K+ downloaded car-buying guides). Since 2018 it's owned by the Netherlands' Louwman Group (Europe's largest family-run dealer group, est. 1923). Motto: "Foreign cars. Japanese precision."
Librería Santa Fe
September 14, 2026
•[ ransomware, retail ]
Librera Santa Fe was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Retail & E-Commerce. Country: Argentina. Website: santafelibros.com.ar. santafelibros.com.ar Librera Santa Fe APS S.R.L. is an Argentine book retailer and distributor from Buenos Aires founded 1996 (SIC 5942 Book Stores, Active status), operating a chain of bookstores (named after Avenida Santa Fe, the city's legendary book district in Barrio Norte) plus B2B book/stationery distribution to schools and institutions across Argentina, with traces in Italian business aggregators (export/Italy-linked operations). Classic family bookselling business pre-Amazon era model: retail + distribution. Bottom line: a Buenos Aires book chain riding the avenue that made the city UNESCO's 2011 World Book Capital.
Aforpa
September 14, 2026
•[ ransomware, technology, manufacturing ]
Aforpa was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Country: France. Website: aforpa.fr. aforpa.fr zoominfo.com/c/aforpa/427085810 Aforpa French electrical engineering & installation contractor based in Roissy-en-France (next to Paris-CDG airport) founded 1965 (current SAS registered 1978), specializing in high-power electrical works (HTA/BT networks, lighting) and industrial automation for airports, power plants, tunnels, telecom and residential towers. Its verified credentials: RATP certificate Q19 (electrical works for Paris transport tunnels/stations) and registration on SFR's contractor registry (telecom power infrastructure). Headcount ~100250, revenue est. 3060M (private, undisclosed).
Wada Farms
September 14, 2026
•[ ransomware, retail, manufacturing ]
Wada Farms was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Agriculture and Food Production. Country: Japan. Website: wadafarms.com. wadafarms.com Wada Farms third-generation family potato empire from Idaho founded 1945 by Japanese-American farmer Albert Wada (whose family was interned at Minidoka camp during WWII, then returned and bought 160 acres near Pocatello); today run by the third generation (~10,000 acres in Magic Valley growing Idaho Russet potatoes, onions and sweet potatoes) with its own climate-controlled storage, packing shed and three brands: Potato King, Wada Farms and Wada Farms Organic selling into national grocery chains, processors and export channels. Vertical integration from field to branded shelf; revenue undisclosed (est. $50100M+); 50150 seasonal/permanent staff
Technical Asia
September 14, 2026
•[ ransomware, technology, manufacturing ]
Technical Asia was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Technology. Country: Thailand. Website: technicalasia.com. technicalasia.com zoominfo.com/c/technical-asia-pte-ltd/347370168 Technical Asia Thai-Japanese JV (founded 1990, HQ Samut Prakan/Bangkok) the leading engineering-plastics distributor and fabricator in Thailand & Southeast Asia, importing materials from Japan's Sankyo Kasei and processing them locally: UHMW-PE, MC-Nylon, POM, PA6G, HDPE, PEEK, PVC-C, PVDF, PET, PTFE sold as cut-to-size sheets/rods/tubes and CNC-machined custom parts for automotive, food & packaging, semiconductors, chemicals, oil & gas, robotics and water treatment across SEA. Model: local warehouse stock (days vs. months from Japan) + cut-to-size service + CNC fabrication + engineering material consultation; ISO 9001 certified. ~50100 staff, revenue est. 100500M THB (private JV, not disclosed)
Dang Invest Group
September 14, 2026
•[ ransomware, finance, retail ]
Dang Invest Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Financial Services. Country: Vietnam. Website: danginvestgroup.com. danginvestgroup.com Dang Invest Group zech family restaurant group from Ostrava, founded in 1998 by Vietnamese immigrants the force behind the country's biggest Asian fast-food network: brands GUTY ("Taste of Modern Asia" bnh m, bao, rice bowls), Multifood (the original, 1998), Rakki Sushi, Tuk Tuk and Amart cafs, running 70+ company-owned outlets across Czechia, Slovakia and Germany, mostly on shopping-mall food courts, with a central kitchen and no franchise/PE money. The Vietnamese-diaspora ladder: one stall in 1998 mall standard in the 2000s sub-brands in the 2010s three countries in the 2020s, with the GUTY trademark registered at EUIPO/UKIPO for future European expansion.
Dome Gold Mines
September 14, 2026
•[ ransomware, manufacturing ]
Dome Gold Mines was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Manufacturing. Dome Gold Mines (ASX: DOM) is an Australian pre-revenue explorer with a stalled copper-gold project in Fiji incorporated 1992 in Perth, it holds the Sigatoka Ironsands Project: unique coastal dune + offshore heavy-mineral sands (Fe-Ti-V-TREO + Au-Cu), with a ready design: modular wet plant, US$38M CAPEX, US$103M NPV, 33% IRR but zero revenue in 34 years. Why stuck: 87% of Fiji's land belongs to indigenous mataqali clans (land-use deals take years), coastal/fisheries opposition, COVID freeze 202022, and repeated dilution from capital raises. Shares now trade off-market via PrimaryMarkets (a sign of suspension/possible delisting) at an implied cap of A$2030M. Bottom line: a textbook "sleeping asset" perfect on paper, stuck on land tenure and financing the classic case of why 90% of exploration companies never build a mine.
Tentac
September 14, 2026
•[ ransomware, technology, manufacturing ]
Tentac was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Technology. Country: Japan. Website: tentac.co.jp. tentac.co.jp zoominfo.com/c/tentac-co-ltd/458253608 TENTAC Co., Ltd world's leading maker of robotic tool changers automatic docking systems that let industrial robots swap end-of-arm tools (welding torch gripper spray gun grinder) mid-production without stopping the line. Founded 1968 as a Kobe Steel division, spun off independent in 1985; HQ in Kobe, Japan; ~3540 employees, ~1.52B revenue yet claims up to 80% global market share in robot docking systems. Technology: micron-level positioning repeatability, safety locks (tool stays attached even on pressure loss), and media-passing (electricity, pneumatics, hydraulics, water, signals) through the joint payload classes from a few kilos to automotive body-welding weights; embedded as the de-facto standard by Japanese (Fanuc, Kawasaki, Yaskawa) and European (ABB, KUKA) robot integrators. Diversification from the same precision-mechanics core: inertial gyro sensors (marine, construction) ISO 9001/14001 certified.
High Oakham Primary School
September 14, 2026
•[ ransomware, education ]
High Oakham Primary School was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Education. Country: United Kingdom of Great Britain and Northern Ireland. Website: highoakham.co.uk. highoakham.co.uk zoominfo.com/c/high-oakham-primary-school/345650404 High Oakham Primary School community primary school in Mansfield, Nottinghamshire opened September 2001 through the amalgamation of schools during Mansfield's education reorganisation; URN 133278, maintained by Nottinghamshire County Council (not an academy). Size: 464 pupils aged 311 (nursery to Year 6, mixed) against a capacity of 428 over-subscribed, with just 9% free-school-meal eligibility (a relatively affluent intake for Mansfield). Headteacher Stephanie Astle (since 2019); chair of governors Lisa Vann; leadership includes a deputy, assistant head, SENCO (Michelle Pollard's inclusion team) and early-years lead. Ofsted (May 2022): "a good school" English and maths standards above average by Year 6, an excellent start in Reception, teaching "consistently good, some outstanding." Culture: "Be true to yourself,"
Humboldt
September 14, 2026
•[ ransomware, education ]
Humboldt was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Other. Country: Brazil. Website: humboldt.com.br. humboldt.com.br zoominfo.com/c/humboldt/372537346 Colegio Humboldt 300gb DATA Germany's official school in So Paulo founded in 1916 by German immigrants (first class: 41 students, May 1, 1916), now a non-profit bilingual school of ~1,2001,300 students (ages 218, ~295 staff) on a 60,000 m Interlagos campus built with German government funding (opened 1999), maintained by the parents' association SEBRB. Its dramatic history: closed twice by world wars 1917 (WWI) and 1942 (WWII, when all assets were confiscated and took a 10-year legal battle to recover) before parents rebuilt it into a top institution. Programs: two tracks (Bilingual 40% German; International German 80% German leading to the Abitur, with 100% pass rate and direct entry to German/European universities), plus DSD I/II, Cambridge, DELE certifications, and its crown jewel the largest German dual vocational training center outside Germany (since 1982: 2-year technical programs in Administration, Logistics, IT.
Iveta
September 14, 2026
•[ ransomware, retail, manufacturing ]
Iveta was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Country: Croatia. Website: iveta.hr. iveta.hr rocketreach.co/iveta-doo-windows-and-doors-profile_b58bc102f9eb0201 Iveta Croatian family confectionery & bakery from Split traditions since 1985 producing Dalmatian classics: Splitska torta (Split cake), mandulato, zabac, krotule, bajamini and custom celebration cakes. Distribution: own cafs in Split and Trogir, B2B supply to Dalmatian hotels and restaurants, online orders; tourist-souvenir channel for the summer season. Digital: 24,000+ Facebook followers (the local 3565 demographic lives there), active Meta ad campaigns since 2018, modest Instagram. Small family business (2nd generation), minimal public registry data (verify OIB/capital/revenue via sudreg.hr).
Neff Drexel
September 14, 2026
•[ ransomware, manufacturing, technology ]
Neff Drexel was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Manufacturing. Country: Switzerland. Website: neff-drexel.ch. neff-drexel.ch zoominfo.com/c/neff--drexel/431534427 Neff & Drexel AG Swiss multimedia retailer and integrator founded in 1967 in Gais (Appenzell) as a family Radio-TV shop today operating as 1xRichtig ("once, correctly") from Gaiserstrasse 46, Appenzell (AG, UID CHE-105.772.429, capital CHF 100,000 after a June 2026 capital reduction from CHF 400,000). It sells, installs and repairs consumer and professional audio/video tech home Hi-Fi and home cinema (with room-calibration via its own measurement system), plus pro-AV integration for churches, school halls, swimming pools, restaurants and boardrooms and retails through the European Expert buying cooperative to match marketplace pricing. Run by Jakob Sutter (board president) and Markus Wetter a 32-year multimedia veteran and former president of the Swiss radio/TV retailers' association for Eastern Switzerland + Liechtenstein it's also an accredited apprenticeship company (Multimediaelektroniker EFZ, 4-year program).
Downrite Engineering
September 14, 2026
•[ ransomware, manufacturing ]
Downrite Engineering was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Manufacturing. Country: United States of America. Website: downrite.com. downrite.com zoominfo.com/c/downrite-engineering-corp/354082568 Downrite Engineering 1983-founded, family-owned Florida specialty contractor (Flaxman family, now led by 2nd-generation Brandon Flaxman, ~200 employees, ~$4050M revenue est., HQ Coconut Creek) covering the full "site infrastructure" stack: underground utilities (water/sewer/storm), unlimited-license electrical, traffic signals/ITS, fiber optics and its signature niche, sports lighting, where it's the default design-build contractor for municipal athletic complexes, schools and parks across South Florida. Moats: vertical integration (one contract, one PM for fields + parking + signals + fiber), a 100+ vehicle fleet (40+ digger derricks, 20+ bucket trucks), hurricane-restoration demand, FDOT prequalification and 40-year municipal relationships; new ~910k sq ft HQ opened 2023. Bottom line: a quiet Florida infrastructure dynasty digging, wiring and lighting the state since 1983, profiting every storm season.
Agenzia Vittoria Assicurazioni
September 14, 2026
•[ ransomware, finance, leak ]
Agenzia Vittoria Assicurazioni was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Financial Services. Country: Italy. Website: assicurazionilodi.it. assicurazionilodi.it zoominfo.com/c/agenzia-vittoria-assicurazioni-lodi-stazione/1342235416 Vittoria Assicurazioni "Lodi Stazione" agency (#393 in the network) a private insurance agency owned by Massimo Garati in Lodi, Lombardy (Via Nino dall'Oro 28/30, RUI A000169373, registered 30.11.2010, Section A agent under IVASS supervision). Garati's story: he ran an ITAS agency for years, then in 2016 executed a full portfolio transfer (travaso di portafoglio) from ITAS to Vittoria Assicurazioni a rare mandate switch carrying his entire client base and built an unusual digital edge for provincial Italy: a generic city domain ("assicurazioni Lodi" = local SEO gold), Google Ads/My Business management and a content-rich FAQ site. He sells the full Vittoria line: auto/mobility, home, family, pets, savings, pensions, legal protection, agriculture, crafts, offices/hotels, transport. Behind it stands the parent Vittoria Assicurazioni S.p.A. (Milan, founded 1921 )
Cedars Foods
September 14, 2026
•[ ransomware, retail, manufacturing ]
Cedars Foods was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Agriculture and Food Production. Country: United States of America. Website: cedarsfoods.com. cedarsfoods.com zoominfo.com/c/cedars-mediterranean-foods-inc/22189641 Cedars Foods America's #1 hummus & falafel brand a 1981-founded Dearborn, Michigan family company (the Hamady family, in the heart of the Arab-American community) that made Mediterranean food mainstream in the US. Products: hummus, falafel, baba ghanoush, taboule, dolmas, pita chips, kibbeh, tzatziki, toum in retail formats (810 oz) and foodservice 10-lb boxes for US Foods, Sysco and Shamrock; clients: Costco, Kroger, Walmart, Whole Foods, Meijer national reach from a Dearborn plant with ~110140 staff
Balkan Polymers
September 14, 2026
•[ ransomware, manufacturing ]
Balkan Polymers was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Manufacturing. Country: Bulgaria. Website: balkanpolymers.com. balkanpolymers.com zoominfo.com/c/balkan-polymers/397725276 Balkan Polymers Serbian polymer recycling group founded in 2011 in Zrenjanin by Aleksandar Nikoli a German-trained chemical engineer who returned home after careers at BASF and Nike now running 4 plants (3 Serbia + 1 Slovakia) processing 26,000 tons of polymers per year (~$2025M revenue est.). Full vertical integration: collection optical sorting shredding hot washing extrusion compounding, producing rPP, rPE (LDPE/HDPE) and rPS granules for packaging, automotive and construction manufacturers across 10+ CE markets (Germany, Austria, Italy, Poland, Czechia...). Certified EuCertPlast the EU traceability standard that unlocks "recycled content" claims; environmental math: ~52,000 tons CO-equivalent saved and ~1.3 billion PET bottles rescued annually. Backed by state-level recognition (President Vui cites it as a model diaspora business) and riding EU recycled-content directives (25% rPET by 2025, 30% by 2030
