ClaimTek Systems
October 29, 2026
•[ ransomware, healthcare, finance ]
ClaimTek Systems was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Financial Services. Website: claimtek.com. ClaimTek Systems ClaimTek Systems specializes in preparing individuals for successful entry into the medical billing and practice management business with a comprehensive training and support system. They offer a range of scalable products and services, including state-of-the-art billing software and marketing tools, targeted towards aspiring entrepreneurs in the healthcare industry. More
MAA Group Consulting Engineers
October 29, 2026
•[ ransomware, technology, manufacturing ]
MAA Group Consulting Engineers was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Professional Services. MAA Group Consulting Engineers is a leading regional engineering and consulting service provider founded in 1975, with over 1,000 professionals operating across East and Southeast Asia. The group provides comprehensive integrated solutionsranging from conceptual planning and engineering design to project managementacross infrastructure, buildings, land resources, environment, and information technology. Renowned for its industry-leading expertise in Building Information Modeling (BIM), MAA Group has successfully completed major high-speed rail, mass rapid transit (MRT), and tunnel projects throughout Taipei, Hong Kong, Bangkok, and Singapore.
The client data and internal documents youve leaked go well beyond what youve seen here. We have taken several terabytes of filesthis is just a small sample. In fact, we have obtained sensitive documents pertaining to virtually all of your clients.
Warning: You have 3 days to enter negotiations. Once the deadline passes, the negotiation window will be permanently closed and all exfiltrated data will be published. Additionally, the encrypted data will be rendered completely unrecoverable.
sample files:
https://mega.nz/file/CgxxTKCZ#PzGFlZt67HDF2oLsP4jn_W_QdrquHJpNAfVm-jXGYxo
https://mega.nz/file/2ogzwAyY#r8F31SFQTqyW6bzQA-e8HNzgw-rEW_gn7fhwY5TAByg
https://mega.nz/file/2gIRXQwY#-4IzU70FjqvSYotZoaJuod_H2P5sXoGTvsja9Patte0
https://mega.nz/file/alQU0JaT#2GgaPb1Z-z1xB1FfAd_NohXbfkbfRfhfZ_OwtxPd0cc [Sector: Construction]
Programs for Parents, Inc.
October 29, 2026
•[ ransomware, education ]
Programs for Parents, Inc. was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Education. Country: United States of America. Website: www.programsforparents.org. Non-profit Organizations Stolen data: 95 GB.
Udima
October 28, 2026
•[ ransomware, education ]
Udima was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Education. Country: Spain. Website: www.udima.es.
corp-smart.com
October 29, 2026
•[ ransomware, technology ]
corp-smart.com was listed as a victim on the leak site of the everstake ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Technology. Website: corp-smart.com. Corporate Compliance
lyserp.com
October 29, 2026
•[ ransomware, technology, leak ]
lyserp.com was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-29. Sector: Technology. Website: www.lyserp.com. ERP systems and automation: Inventory management, finance and accounting, logistics, production management and supply chain.
Grupo Ciosa, SAPI de CV
October 30, 2026
•[ ransomware, hack, automotive ]
Grupo Ciosa, SAPI de CV was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Other. Country: Mexico. Website: www.ciosa.com.
Light Rail Manila
October 30, 2026
•[ ransomware, leak ]
Light Rail Manila was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Transportation. Country: Philippines. Website: www.lrmc.ph.
Richland Resources Corporation
October 30, 2026
•[ ransomware, energy, hack ]
Richland Resources Corporation was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Energy & Utilities. Country: United States of America. Website: rrcokc.com.
Moritt Hock & Hamroff LLP
October 30, 2026
•[ ransomware, finance, retail ]
Moritt Hock & Hamroff LLP was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United States of America. [AI generated] Moritt Hock & Hamroff LLP is a United States law firm based in Garden City, New York. It provides legal services across practice areas including commercial finance, bankruptcy and creditors' rights, litigation, real estate, transportation law, labor and employment, and corporate matters. The firm operates within the legal services industry, representing businesses, lenders, and individuals, primarily serving clients throughout the New York metropolitan area and nationally.
Aliqout Association
October 30, 2026
•[ ransomware, technology ]
Aliqout Association was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Country: United States of America. Website: aliquot.com. A multi-disciplinary civil engineering firm based in Walnut Creek, CA.
Psychometrics Canada
October 30, 2026
•[ ransomware, technology ]
Psychometrics Canada was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: Canada. Website: psychometrics.com. A company that works in the science of objective assessments for over 35 years.
ArentFox Schiff
October 30, 2026
•[ ransomware, leak ]
ArentFox Schiff was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United States of America. ArentFox Schiff LLP is a prominent national law firm and lobbying firm formed on March 1, 2022, throug
NOVADATA
October 30, 2026
•[ ransomware, technology, finance ]
NOVADATA was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Technology. Country: Argentina. Website: novadata.com.ar. novadata.com.ar NOVADATA S.A. is an Argentine IT integration group founded in 1994 in Buenos Aires, comprising Novadata, Net Service and Compaa Global de Servicios with 130 plus certified professionals. It provides IT infrastructure, business continuity, AI, pay-per-use HPE GreenLake, microinformatics and 24/7 Service Desk services to major corporations across Argentina. It holds HPE Platinum, Microsoft Gold, Cisco Silver, VMware Enterprise and Symantec Gold partner certifications, adding Huawei Enterprise Authorized Reseller status in 2026. Major clients include Bayer, Veolia, La Annima, Petrobras, Citibank, Roche and Bimbo, many with over 10 years of partnership. The group completed a financial restructuring agreement from 2014, declared fulfilled by court in March 2026. Recent strategic moves include an AI alliance with AYI Group, Fortinet cybersecurity training and launch of Novadata GREEN IT asset disposition services.
CommTank
October 30, 2026
•[ ransomware, technology ]
CommTank was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Technology. Country: United States of America. Website: commtank.com. commtank.com CommTank Inc is a US storage tank contractor founded in 1997 in Winchester, Massachusetts, specializing in installation, removal, inspection and maintenance of underground and aboveground storage tanks across New England and the Mid-Atlantic. With 50 to 100 employees and estimated revenue of 10 to 25 million dollars, it serves government facilities, hospitals, schools and industrial clients across 8 states. Its services cover the full tank lifecycle including UST and AST installation, leak testing, cathodic protection, soil remediation and emergency spill response. Led by founder Rick Connolly, it holds EPA, MA DEP, CT DEEP and NFPA certifications and runs its own field crews without subcontracting core work. It also provides Phase I and II environmental site assessments and SPCC compliance planning. The company has built a niche in high-barrier tank services requiring specialized licensing and regulatory expertise.
GIO Dental
October 28, 2026
•[ ransomware, healthcare, technology ]
GIO Dental was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Healthcare. Country: Sierra Leone. Website: giodentalsl.com. giodentalsl.com GIO Dental SL is a modern dental clinic and laboratory founded by Nigerian dentist Dr. Gift Nwachukwu Obiorah in Freetown, Sierra Leone, with an additional location in Koidu, Kono District. It is Sierra Leone's first fully integrated dental provider offering clinical treatment, a prosthetics laboratory, dental technology education and equipment repair under one brand. Services span general and cosmetic dentistry, orthodontics, oral surgery, custom prosthetics fabrication and community oral health programs. Led by founder Dr. Gio, the company trains local dental technicians and runs outreach campaigns to make premium dental care accessible across the country. Its vertical model combining treatment, manufacturing and education is unique in the Sierra Leonean healthcare market. It also provides equipment repair and supply services to other dental clinics in the region.
Grundbaulabor Trier
October 26, 2026
•[ ransomware, manufacturing, leak ]
Grundbaulabor Trier was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Germany. Website: gbl-trier.de. gbl-trier.de Grundbaulabor Trier is a German geotechnical engineering firm founded in 1960 in Trier by Dr. Paul Lehmann, now run by the third generation of the Lehmann family with 23 qualified engineers. It has completed over 20,000 projects in soil investigation, foundation design, construction supervision, environmental contamination assessment and hydrogeology across Rhineland-Palatinate, Saarland and Luxembourg. The firm operates its own soil mechanics laboratory offering fast and reliable sample processing with modern testing equipment. Led by Managing Directors Eric Lehmann and Bernd Mertes, it is one of the leading geotechnical bureaus in the Trier-Saarbrcken-Luxembourg region.
SOME
October 26, 2026
•[ ransomware, technology, manufacturing ]
SOME was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Italy. Website: some.it. some.it SOME Srl is an Italian ERP and financial systems consulting company founded in 2001 in Milan, delivering end-to-end implementations of Epicor Kinetic, Infor SunSystems and Fluentis ERP for manufacturing, hospitality and oil and gas clients. With about 22 employees and revenue of 2.8 million euro, it has completed over 100 implementations across Europe, the Americas and North Africa. The company operates both as a system designer building ERP architectures and as a local specialist adapting global models to Italian fiscal and regulatory requirements. Led by Sales Director Franco Giannini and Partner Hussein Bahobeshi with 25 years of hospitality ERP expertise, it serves international hotel chains, oil companies like Mellitah and ENI Congo, and mid-size manufacturers.
SAP
October 26, 2026
•[ ransomware, technology ]
SAP was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: Germany. Website: sap.com. sap.com SAP Latin America and Caribbean is the regional arm of SAP SE, the world's largest enterprise software company, managing operations across 10 countries with about 6,000 employees led by President Adriana Aroulho since April 2025. Brazil is the standout market, cited in 40 straight quarters of global earnings for exceptional cloud revenue growth and now having more customers running on cloud than on-premise. The region serves over 5,000 clients in Brazil alone and holds 50 percent share among large Brazilian enterprises, with major wins including Grupo Nutresa, Honda South America, Votorantim, Chedraui and Motta Internacional. Through RISE with SAP and GROW with SAP, the company drives cloud ERP migration and Business AI adoption with its Joule assistant, targeting up to 30 percent productivity gains for clients. SAP's global cloud revenue reached 6.7 billion euro in Q3 2026 with the LatAm cloud market projected to double to 125 billion dollars by 2030.
WABAG
October 26, 2026
•[ ransomware, energy, technology ]
WABAG was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: India. Website: wabag.in. wabag.in VA Tech WABAG is the world's leading pure-play water technology company, founded in 1924 and headquartered in Chennai, India, operating in over 25 countries with 2000 engineers and over 1500 plants delivered. Listed on NSE and BSE, it posted record FY2026 revenue of 3944 crore rupees with PAT of 371 crore and has been net cash positive for 6 straight years with a credit rating of AA minus stable. Its order book surged to an all time high of 19400 crore rupees in Q1 FY2027, over 4 times annual revenue, backed by World Bank, ADB and JICA funded projects across India, the Middle East, Africa and Southeast Asia. Key projects include Southeast Asia's largest 400 MLD desalination plant in Chennai and a 300 MLD mega desalination order in Saudi Arabia. The company holds 125 plus proprietary patents and ranks 3rd globally among private water operators and desalination suppliers per Global Water Intelligence. Led by Chairman Rajiv Mittal.