Nolan Consulting Group
September 5, 2026
•[ ransomware, technology ]
Nolan Consulting Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Professional Services. Country: United States of America. Website: www.nolancg.com.
Jouvet SAS
September 5, 2026
•[ ransomware, manufacturing ]
Jouvet SAS was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Manufacturing. Country: France. Website: www.jouvet-sas.fr.
Bauman Law Group
September 5, 2026
•[ ransomware, leak ]
Bauman Law Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Professional Services. Country: United States of America. Website: www.baumanlawgroup.com.
Philippine Ports Authority
September 5, 2026
•[ ransomware, government ]
Philippine Ports Authority was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Transportation. Country: Philippines. Website: www.ppa.com.ph.
CitizensPay
September 5, 2026
•[ ransomware, finance, technology ]
CitizensPay was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Financial Services. Country: Myanmar. Website: ctzpay.com. Citizens Pay (also known as CTZPay) is a mobile digital wallet and payment platform in Myanmar powered by Myanmar Citizens Bank (MCB) and Capital Connect Limited. Compromised agent user information total data size 30 GB. Price range $7,000 to $25,000. Victim domain https://ctzpay.com.
Mega Velocity
September 5, 2026
•[ ransomware, technology, leak ]
Mega Velocity was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Transportation. Country: Mexico. Website: megavelocity.net. New Delhibased private technology company incorporated in 2013. Its registered business classification is software publishing, consultancy and supply, including software development, maintenance and web-page design. Its network records also identify MEGA VELOCITY PVT LTD as an Internet/hosting network operator.
Veradigm
September 4, 2026
•[ ransomware, healthcare, technology ]
Veradigm was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Healthcare. Country: United States of America. Website: veradigm.com. veradigm.com zoominfo.com/c/veradigm-llc/471134180
3.5+ million personal patient records with PII full name, address, social security number, email, address, phone number,guarantors PII ,Score Veradigm Inc. is a publicly traded American healthcare technology and data analytics company (OTC: MDRX), the former Allscripts, founded in 1986 and renamed Veradigm in January 2023, headquartered in Chicago with about 2,3002,600 employees. Its core asset is one of the largest multi-EHR data networks in US healthcare over 450,000 connected providers and 200M+ patient records which it monetizes through three segments: Provider (EHR, practice management, revenue cycle: $473M in 2024), Payer (quality and risk adjustment analytics: $67.3M) and Life Sciences (real-world data and AI-driven evidence: $54M).
Leo Schachter Diamonds
September 2, 2026
•[ ransomware, retail, manufacturing ]
Leo Schachter Diamonds was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-02. Sector: Retail & E-Commerce. Country: United States of America. Website: leoschachter.com. leoschachter.com Leo Schachter Diamonds (USA/Global)
Family diamond house since 1952, four generations; De Beers sightholder for 60+ years.
Invented the branded diamond (THE LEO at Kay/Jared, ~2,000 stores) a diamond sold like a Nike sneaker.
Owns one of Botswana's largest cutting factories: 90% women, trained from scratch, plus its own doctor when 60% of staff were HIV-positive.
Crisis context: lab-grown diamonds are squeezing the whole natural industry the moat is now brand + story, not just stones.
Spirit Cultural Exchange - US
September 5, 2026
•[ ransomware, education ]
Spirit Cultural Exchange - US was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Education. Country: United States of America. Website: www.spiritexchange.com. Spirit Cultural Exchange is a U.S.-based organization that provides international cultural exchange and J-1 visa programs for students, young professionals, teachers, and international participants. Its programs include Summer Work and Travel, internships, professional training, and teaching opportunities in the United States
Mission Pet Health
September 5, 2026
•[ ransomware, healthcare ]
Mission Pet Health was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Healthcare. Country: United States of America. Website: missionpethealth.com. Healthcare Services
Edacentrum
September 6, 2026
•[ ransomware, technology, manufacturing ]
Edacentrum was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-06. Country: Germany. Website: edacentrum.de. The edacentrum is the network for electronics, design and applications in business and science. As an independent authority, the edacentrum designs research & development for a consistent design methodology along the entire value chain. In this role, the edacentrum is a recognized innovation accelerator for the microelectronics industry and its user industries
myLaurel
September 6, 2026
•[ ransomware, healthcare ]
myLaurel was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Healthcare. Country: United States of America. Website: mylaurelhealth.com. Elderly Care Services
evergenbio.com
September 6, 2026
•[ ransomware, healthcare, manufacturing ]
evergenbio.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Healthcare. Country: United States of America. Website: evergenbio.com. Evergen is a leading Contract Development and Manufacturing Organization (CDMO) specializing in biomaterial solutions for regenerative medicine. We work closely with OEM partners to deliver customized biomaterial solutions that meet specific clinical needs
Sancity
September 6, 2026
•[ ransomware, retail ]
Sancity was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Other. Country: India. Website: sancity.in. An active, unlisted public company incorporated in 2012, operating in real estate/construction and real-estate marketing & sales
eAssist Dental Solutions
September 6, 2026
•[ ransomware, healthcare, technology ]
eAssist Dental Solutions was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Healthcare. Country: United States of America. Website: dentalbilling.com. Healthcare
RTAD GOV MM
September 6, 2026
•[ ransomware, government ]
RTAD GOV MM was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Government & Defense. Country: Myanmar. Website: rtad.gov.mm. Road Transport Administration Department (RTAD) official government portal providing public transport services, driving license issuance, vehicle registration, and safety regulations. Full databases dump total 1.08 GB. Victim domain https://rtad.gov.mm.
Norwood Law Firm
September 4, 2026
•[ ransomware, hack, leak ]
Norwood Law Firm was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Professional Services. Country: United States of America. Website: norwoodlegal.com. Norwood Law is a Tulsa-based legal firm that specializes in personal injury law, criminal defense, business law, and family law. Founded by attorney Joe Norwood in 2004, the firm is known for its success in high-profile cases and achieving significant legal victories for its clients. The team also includes Todd Maxwell, who specializes in contracts, construction law, and dispute mediation. Norwood Law serves clients in Oklahoma seeking expert legal representation in complex legal matters.
Homewood Sales
September 4, 2026
•[ ransomware, retail, manufacturing ]
Homewood Sales was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Retail & E-Commerce. Country: United States of America. Website: homewoodsales.com. Homewood Sales Corporation specializes in equipment life extension solutions, offering a wide range of products including automatic voltage regulators, control panels, and motors, all built to Westinghouse specifications. With over a century of expertise, they provide exceptional quality in industrial and power distribution units and components. Their services include global sourcing, factory revitalization, and technical support, ensuring precise and expert assistance for their clients. Homewood primarily serves industries requiring reliable power distribution and equipment maintenance solutions.
rubbermill.com
August 15, 2026
•[ ransomware, manufacturing, financial ]
rubbermill.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-15. Sector: Manufacturing. Country: United States of America. Website: rubbermill.com.
RUBBERMILL, INC. DUMP: BREAKDOWN OF AN OEM MANUFACTURER LEAK
Target: RubberMill, Inc. (North Carolina, USA) contract manufacturer of non-metallic components for appliance, HVAC, automotive, and heavy equipment. Certifications: ISO 9001:2015, WOSB, WBENC. Probable defense contracts (Mil-Spec).
DUMP SIZE: ~296K files / 276K data objects / 340+ GB
146 GB disk image (.mrimg) full copy of the system
AES PASSWORDS.xlsx file + APWDxx libraries credentials
outlook.pst (487 MB) corporate email archive
creditcard.xls payment data
EMPLOYEE CALL LIST + Employee Information Record Form PII
Insurance data
Tax forms containing SSNs
ENGINEERING DATA:
3,000+ CAD files (.dxf, .stp, .dwg) with client part numbers: 7J314, K2A31, K7K11, V1324, etc.
Complete set of 3D models
Client drawings
FINANCIAL DATA:
Sales analysis.mdb (38 MB) complete sales database
commercial terms
customer segmentation
REGULATORY RISKS:
C-TPAT / NAFTA / Certificate of Origin
Conflict Minerals Reporting Template
Supplier Quality Assurance Manual
Probable Mil-Spec specifications
The dump contains a full cross-section of the business: from passwords and SSNs to automotive OEM drawings and military specifications.
Medela.com
September 7, 2026
•[ ransomware, healthcare ]
Medela.com was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Healthcare. Country: Switzerland. Website: Medela.com. This is a final warning to reach out by 08 Sep 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 07 Sep 2026 | Warning: FINAL WARNING
