Superstore
September 7, 2026
•[ ransomware, leak, retail ]
Superstore was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: Georgia. Website: superstore.ge. superstore.ge zoominfo.com/c/super-toys/430496236 We have Emails,passwords,passports,driving licenses,dates/places of birth,client bank names,tax IDs,client cards,phones, addresses Superstore Georgia's first zero-waste supermarket, founded in 2020 in Tbilisi by a couple inspired by European bulk shops. Its model: ~500 SKUs sold loose, without packaging grains, nuts, spices, coffee, tea, honey, dried fruit, oils, pasta, detergents, cosmetics with customers bringing their own containers, weighing goods and paying by weight ("Shop without packaging"). Categories span food (grains & baking, nuts & dried fruit, spices & tea) and refill liquids (oils, vinegar, honey, detergents, shampoo) plus compostable eco-goods. A small, low-profile pioneer eco-retailer with a minimal digital footprint public data on owners and revenue is scarce, so verify current status. Bottom line: a niche manifesto-store that made package-free shopping a lifestyle in Georgia.
El Carriel
September 7, 2026
•[ ransomware, retail, manufacturing ]
El Carriel was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Agriculture and Food Production. Country: Colombia. Website: elcarriel.com.co. elcarriel.com.co Productos Alimenticios El Carriel S.A.S. Colombian family food company and dominant leader of Bogot's arepa market (~70% share) founded Aug 17, 1992 by two brothers from Sonson, Antioquia (Luis Alberto & Luis Alfonso Valencia) and their wives, who started selling handmade arepas from bicycles via a consignment model. Today: 9 plants in Bogot & Medelln, 1M+ arepas/day, full vertical integration 2,000 ha of own corn (Pioneer seeds), own mill, 400+ employees, ~$8M revenue (31.3B COP, 2023), no external investors. Exporter to the US (since 1999), Australia and England; state-recognized ESG model: 578 solar panels, 30% electric fleet. Tragedy: Nov 2024 co-founder Luis Alfonso was murdered at his ranch by an insider who had spent 2 months profiling the property; both killers got 36 years in 2025, and the business never stopped. Bottom line: two uneducated brothers on bicycles became a vertically integrated agro-industrial champion that survived even its founder's
AbacoViaggi
September 7, 2026
•[ ransomware, leak, retail ]
AbacoViaggi was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Hospitality. Country: Italy. Website: abacoviaggi.it. abacoviaggi.it zoominfo.com/c/abacoviaggi-srl/467818111 We have downloaded abacoviaggi company's data: Confidential personal data and customer information, Financial Documents and Accounting, Business correspondence and legal documents, e-mails, IT infrastructure information, Accesses and credentials. Abaco Viaggi family-run travel agency and tour operator founded in 1997 in Bologna by Alberto Scipione (P.IVA 02686751203), part of the Gruppo Abaco ecosystem (Viaggi + Meeting & Incentive + Servizi). Its signature niche: senior/third-age group travel packages for 60+ travelers (slow pace, medical support, no-surprise pricing), plus the trademark move of chartering entire trains for group excursions across Emilia-Romagna.
Comin Sac
September 7, 2026
•[ ransomware, leak, manufacturing ]
Comin Sac was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Country: Peru. Website: comin.pe. comin.pe zoominfo.com/c/comin-sac/509891136 Buenaventura Peru's largest publicly-traded precious metals miner founded in 1953 by Alberto Benavides, now run by the third generation of the family (CEO Leopoldo Benavides), and the first Peruvian company ever listed on the NYSE (BVN, 1996). Its portfolio: underground gold-silver mines (founding Julcani, Yumpag silver star ramping to 10.5M oz/yr, Orcopampa with its new 920m "La Capitana" incline), the ramping open-pit El Agrepin (~200 koz gold-equivalent/yr from 2026), and 71.95% of El Brocal Peru's largest underground mine, whose Transteki expansion ($250M) doubled its copper output. It also holds 33.75% of Cerro Verde, one of the world's top-10 copper mines (operated by Freeport). Pipeline: option on 40% of Michiquillay (with Anglo American) and Los Chancas JV (Newmont). 202526 results are the best in company history: record gold ($3,300/oz) and silver ($36/oz) prices, near-zero debt (0.3x), $1.2B liquidity, dividends restored ~4%
Biotipo Jeans
September 7, 2026
•[ ransomware, retail, manufacturing ]
Biotipo Jeans was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: Brazil. Website: biotipo.com.br. biotipo.com.br zoominfo.com/c/biotipo-jeans/431018059 Biotipo Brazil's largest ready-stock ("pronta-entrega") jeans manufacturers an Akkari-family company (Confeces Alta Moda Ltda, CNPJ 04.273.385/0001-11) founded in 2001, with the brand active in jeanswear since 1980, HQ'd in the legendary Brs wholesale district of So Paulo plus an industrial plant in Itapevi. Its model: B2B wholesale at fashion-week speed weekly collections, minimum orders of just one "grade" (1012 pieces), 15,000+ m of production/logistics space (70% outsourced), and distribution to 15,000+ retail points across Brazil (women's, men's, teen and plus-size lines). 10+ consecutive years in Top of Mind as one of Brazil's most-remembered jeans brands; R$30M+ share capital, 1,0015,000 employees by registry classification. Bottom line: the quiet volume king of Brazilian denim no D2C glamour, just industrial speed, perfect fit and a brand that "sells itself" in more stores than almost any local competitor.
Metro
September 7, 2026
•[ ransomware, retail ]
Metro was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: Germany. Website: metro.net. metro.net zoominfo.com/c/metro/351518795 LA Metro is the Los Angeles County Metropolitan Transportation Authority (LACMTA) the second-busiest transit system in the US, serving 9.6M residents across 1,433 sq miles (nearly a third of California's population), founded in 1993 by merging SCRTD and LACTC. Its network: 125+ miles of rail (2 subway + 4 light-rail lines, 110 stations), 117 bus lines, 2 BRT corridors, 2,000+ low-emission buses and the Metro Micro on-demand service moving ~925,000 weekday boardings and 305.7M riders in 2025 (9 straight months of growth, +9% YoY, 87% satisfaction). It's run by a 13-member board (5 county supervisors + the LA mayor's bloc, chaired politically by Mayor Karen Bass) and led by CEO Stephanie Wiggins the first woman and first African American to head the agency with a $9.7B FY2026-27 budget and a $26B capital program, the largest rail construction program in the US.
Domis
September 7, 2026
•[ ransomware, retail ]
Domis was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: Denmark. Website: domis.dk. domis.dk zoominfo.com/c/domis/456416204 DOMIS is a Danish cleaning company with a social mission, founded in 2003 by John Mller Rasmussen, HQ'd in Odense with a branch in Copenhagen. Its signature: combining professional cleaning services with actively hiring people outside the labour market the long-term unemployed, those on sickness benefits and early retirees under the slogan "Rengring med mennesker" ("Cleaning with people"). Legally lean setup (CVR 17 69 44 19), with the staffing agency Flex Job Randers under the same group umbrella, enabling emergency cleaning on short notice for clients. Bottom line: a small, quietly principled Danish services firm that turned social inclusion into its business model a rare "cleaning with a conscience" operator.
Zanini
September 7, 2026
•[ ransomware, manufacturing, automotive ]
Zanini was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: Brazil. Website: zanini.com. zanini.com zoominfo.com/c/zanini/359207305 Zanini is the global market leader in automotive wheel trim a Spanish family firm founded in 1965 in Barcelona, owned by the Torras family since 1976, with 1,800 employees across 12 plants on 3 continents. It makes 1 in 4 wheel covers sold worldwide (~100M units/year) for virtually every major OEM, plus grilles, emblems, EV charge-port covers and pedestrian airbag parts. Its strategic pivot: radar-transparent, heated & illuminated front emblems (radomes) first launched on VW Atlas, now featured on the new Mercedes CLA (2025) the key sensor window for the autonomous-driving era. Proprietary tech: ZANICHROME metallization (chrome-look without chrome, "night & day" effects, electromagnetic transparency) + 17 patent families and TactoTek IMSE license (2024). Funded privately (81.5M debt raise, Oct 2025), chairman Joan Miquel Torras, CEO Jordi Torras (twice a Dakar Rally racer).
Soni Dwarkadas Virchand
September 7, 2026
•[ ransomware, retail, finance ]
Soni Dwarkadas Virchand was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Other. Country: India. Website: dwarkadasjewellers.com. dwarkadasjewellers.com zoominfo.com/c/soni-dwarkadas-virchand/562586193 We have downloaded company's data: Confidential personal data and customer information, Financial Documents and Accounting, Business correspondence and legal documents, your databases, IT infrastructure information, Accesses and credentials, Technical documentation Soni Dwarkadas Virchand is a 110-year-old family jewellery house from Bhavnagar, Gujarat founded in 1915 with a shop rented for just 7, carrying a freedom-fighter legacy (founder left the shop to join India's independence movement) and a dramatic heir story (a 16-year-old son with 22 saved the dynasty). Now in its 5th generation, it runs Bhavnagar's biggest jewellery mall (6,100 sq ft) plus a "House of Bangles" and tech-powered "Bridal Studio" with virtual try-on. Product scale: 25,000+ designs, signature collections (Bikaneri Treasure, Sara, Menaments), Trust moat: BIS hallmark, IGI/GIA certified diamonds,4.9/5 from 1,350+ Google reviews.
Yapı Merkezi
September 7, 2026
•[ ransomware, manufacturing, retail ]
Yap Merkezi was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Manufacturing. Country: Turkey. Website: ym.com.tr. ym.com.tr rocketreach.co/yapi-merkezi-profile_b5c7f2fff42e0db7 YM Group is a Turkish family-owned manufacturing and brand house founded in 1986 in Istanbul by Yksel Mehmet Yldrm, built on a flexible-packaging plant in orlu (Halal-certified, exporting to Europe/MENA). Its crown jewel: it owns and operates the legendary American trail-running brand Ultimate Direction (the 1935 inventor of the hydration pack) designing, manufacturing in Turkey and distributing it worldwide plus its own jewelry line Ela by YM and investment arm YM Capital. The group follows the classic ladder: manufacturing own brands capital, with Halal certification as a niche edge for Gulf/Asian markets. Small core team (~110), private, low-profile, no public financials. Bottom line: a quiet Turkish industrial family that turned commodity packaging profits into ownership of an iconic American outdoor brand.
S A Chile
September 7, 2026
•[ ransomware, technology, energy ]
S A Chile was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Energy & Utilities. Country: Chile. Website: syachile.cl. syachile.cl zoominfo.com/c/sa-chile/372625700 S&A Chile is a Chilean mission-critical IT integrator founded in 1989 by Peruvian-Palestinian immigrant Edward Seleme Chvez from his home dining room today run by his daughters (2nd generation) after his death in 2024, HQ named after him in Providencia, Santiago. Its two moats: a 35+ year IBM Premier/Gold partnership (multiple IBM awards, incl. "Top Infrastructure Sales 2024") and its own Tier III datacenter 100% uptime for 5+ consecutive years, triple ISO-certified (9001/20000/27001), 2 MW power, running on certified renewable energy (Colbn, 2026). Core services: colocation/hosting, cybersecurity (Fortinet SOC), backup/DR, private cloud, plus a new AI vertical on IBM watsonx (2025). Anchor client: Correos de Chile (national postal service) has outsourced its infrastructure to S&A since 2002. Bottom line: a quiet 37-year-old family survivor of the Chilean IT market trusted infrastructure for the state, now pivoting to agentic AI.
Sharp Office
September 7, 2026
•[ ransomware, technology ]
Sharp Office was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Professional Services. Country: Australia. Website: sharpoffice.com.au. sharpoffice.com.au zoominfo.com/c/sharp-office/1306869482 Sharp Office is one of Australia's longest-running B2B office suppliers heritage dating to 1935 (John Sharp Business Systems, Sydney), merged with Stafford Menser in 2011 into Sharp Office Systems Pty Ltd, HQ in Ingleburn NSW, serving clients Australia-wide. It's a one-stop B2B platform: 25,000+ stationery SKUs, office furniture, print & copy (HP, Canon, Ricoh, Kyocera), laptops/tech, plus Managed Print Services and managed IT "one bill, one delivery, one invoice" for businesses. Its moats: ISO 9001:2015 + EcoVadis certification, NSW government supplier status, credit accounts with 14-day terms and personal account managers. Not related to Japan's Sharp Corporation a fully independent Australian house. Bottom line: a 90-year-old quiet institutional survivor that evolved from typewriters to managed IT, winning government and club contracts through reliability rather than flash.
Nile Projects Trading
September 7, 2026
•[ ransomware, retail, automotive ]
Nile Projects Trading was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Other. Country: Egypt. Website: nileprojects.com. nileprojects.com zoominfo.com/c/nile-projects--trading-co/357370722 Nile Projects & Trading is a private Egyptian holding founded in 1972 by Ossama El-Naggar, HQ'd in Giza/Cairo with 3,000+ employees, 750,000+ customers and 6 offices across Egypt and Jordan. It's Egypt's exclusive Bridgestone importer (since 1990) running 50+ Fit & Fix service centers plus unique mobile tire vans and the country's luxury fashion franchise king: Burberry, Ferragamo, BOSS, Calvin Klein, Polo Ralph Lauren, Sandro, Maje (launched Jordan), Kenzo, plus Matalan for mass market and Amorino/Eichholtz/TIMEVALLE in F&B, furniture and watches. Over 50+ years it has introduced 80+ international brands to Egypt and the Middle East, pioneering retail after the 2004 import opening. Key strengths: fully self-financed (no external debt), its own ERP software, owns the malls it anchors (Katameya Downtown), and a 2bn+ EGP credit line recently winning Bridgestone's global Toolbox award 2025.
University of San Francisco
September 7, 2026
•[ ransomware, education ]
University of San Francisco was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Education. Country: United States of America. Website: usfca.edu. usfca.edu zoominfo.com/c/university-of-san-francisco/346496443 is San Francisco's oldest university a private Jesuit institution founded in 1855, with ~10,200 students, a $428M endowment, and a 55-acre hilltop campus near Golden Gate Park (plus downtown, Pleasanton and Tokyo sites). A 13:1 student-faculty ratio and #1-ranked online professional studies graduate program anchor its academics; 34% first-gen, 55% students of color, 92% on financial aid mission-driven access defines it. Athletics: Division I Dons (WCC) with 3 national titles home of Bill Russell's legendary 195556 back-to-back NCAA basketball championships. New president Salvador Aceves (2025) the first Latino in the role and an R2 "high research activity" Carnegie classification. Tuition ~$62K with average grants of $38K+; alumni median salary $115K. Bottom line: a mission-driven urban Jesuit university blending social justice, elite basketball history and top professional programs "Change the World From Here.
Mutant
September 7, 2026
•[ ransomware, technology, finance ]
Mutant was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Other. Country: Brazil. Website: mutant.com.br. mutant.com.br zoominfo.com/c/mutant/452328184 Mutant is one of Latin America's largest CX & AI companies, founded in 2016 as a spin-off from Genesys Brazil, HQ'd in So Paulo with 4,000+ employees across 14 countries. Backed by Permira, GIC and TCV, its holding "Clash" raised $75M from BlackRock in 2025 for M&A and AI. It runs 3.5 billion AI-driven interactions per year for 100+ enterprise clients including the world's largest corporate WhatsApp operation (Caixa) with clients like Ita, Vivo, Santander, Claro and iFood. Built through 8+ acquisitions (Interaxa, GRB, Intervalor...), it projects ~R$1B revenue in 2026 and pours R$100M+/year into its proprietary generative AI ecosystem (IAM/Xavier/PALI). Bottom line: the quiet AI-giant of Brazilian customer experience "Artificial Intelligence, Human Experiences" now repositioning as the enterprise AI-intelligence layer of LatAm.
Drogueria Saporiti Sacifia
September 7, 2026
•[ ransomware, leak, healthcare ]
Drogueria Saporiti Sacifia was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: Argentina. Website: drogueria-saporiti.com.ar. drogueria-saporiti.com.ar zoominfo.com/c/drogueria-saporiti-sacifia/462786110 100GB data stolen! Droguera Saporiti is a century-old Argentine pharmaceutical wholesaler and manufacturer, founded in 1901 in Buenos Aires, now run by the Otero Pose family with ~110 employees and 8,700 m of facilities. It's the silent "backbone" of Argentine pharmacies: 3,500+ products, 7,000+ pharmacy clients, wholesale distribution plus imports/exports of raw materials. Its flagship is the legendary Parafarm brand ("orange line" of galenic essentials vaseline, Pasta Lassar, Agua de Dalibour, hydrogen peroxide) sold nationwide since the 1960s, alongside Sweet Rose, Home Test, Wild Skin and Well Being. It survived a devastating fire in the 1990s and a rough 201415 ANMAT season (interjurisdictional trade ban + Parafarm lot withdrawal). Bottom line: a low-profile family institution with huge brand equity Argentina's reference house for pharmacy-grade essentials.
Hollard Insurance Group
September 7, 2026
•[ ransomware, finance, leak ]
Hollard Insurance Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Financial Services. Country: South Africa. Website: hollard.co.za. hollard.co.za zoominfo.com/c/the-hollard-insurance-company-ltd/56019572 Hollard is South Africa's largest independent, privately-owned insurance group, founded in 1980 by the Enthoven family, HQ'd in Johannesburg, 4,000+ employees, 6M+ policyholders. Ownership: Enthoven family 57%, B-BBEE group Bushwillow 20%, Tokio Marine ~22.5% (2018, ~$327M); GCR AA(za). Operates in 18 countries on 4 continents via 100+ partnership ventures: Hollard Insure (corporate/broker), Hollard Life Solutions (mass market, prepaid "starter packs" sold like airtime), Hollard International (8 African countries + Philippines). Landmark deals: CommInsure Australia A$625M (2022 top-5 insurer there, 15-year exclusive bancassurance deal with Commonwealth Bank), and in 2025 Global Alliance Seguros (Mozambique) + Absa Life Botswana. Innovations: HUGinsure (world's first social-impact insurer), insurtech bets (Naked, dotsure).
Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, Eco...
August 25, 2026
•[ ransomware, manufacturing, automotive ]
Mefa Group www.mefagroup.com.tr / MEFA Endstri www.mefaendustri.com / and (Efachem, Eco... was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Manufacturing. Country: Turkey. Website: mefagroup.com.tr. https://send.exploit.in/#37608d72633301fc62801dfdf9111dbe!BsYvGiQz6WmjZo1VvPwTi8lU2K7prrPY2q6CdMORZn0List of files. For details and cooperation, write to Telegram https://t.me/BlackNevas or email happyCarter@mail.com.MEFA Group is a Turkish industrial group (headquartered in Ankara), founded in 2006. It operates in industrial manufacturing, plastics, rubber, processing, and logistics. The group has over 115,000 m of production space, over 2,000 employees, and several facilities in Turkey, Romania, and Poland. Its main areas of focus are the automotive industry, white goods, and related industries.MILKRUN Milkrun Lojistik, the group's logistics division. It provides integrated and smart logistics solutions for group companies and partners (focusing on efficiency, digitalization, and sustainability). It is not the Australian grocery delivery service of a similar name.Efachem, a division specializing in plastic and rubber compounds (compound solutions), develops customized formulas to meet customer needs, ensuring compatibility with production processes and consistent quality.Ecopolymer, a division specializing in raw materials processing and technology, utilizes cutting-edge recycling technologies, converting plastic waste into high-performance raw materials within the framework of a circular economy.All these companies operate as a single ecosystem: production (MEFA Endstri), raw materials/compounds (Efachem), processing (Ecopolymer), and logistics (Milkrun).
Alaska Electrical Apprenticeship
September 8, 2026
•[ ransomware, education ]
Alaska Electrical Apprenticeship was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Education. Country: United States of America. Website: www.alaskaelectricalapprenticeship.org.
CreateASoft
September 8, 2026
•[ ransomware, technology, financial ]
CreateASoft was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Technology. Inc. is a software company. The company provides dynamic process improvement solutions, predict
ive technology, and end-to-end support to a variety of process-based operations dedicated to im
proving operational efficiency and responsiveness.
We will upload corporate data soon. Employee and customer files, contacts and agreements, finan
cials, projects and so on.
