Digital Triumph
October 31, 2026
•[ ransomware, leak, technology ]
Digital Triumph was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Technology. Country: Malaysia. telecommunications services Malaysia | Employee payroll records with names, national identity numbers and wages, statutory filings 2016 to 2025; Audited financial statements, tax filings and company bank account numbers; 2,552 customer invoices and delivery orders; The full customer service data room covering 309 organizations including banks, an embassy and government offices; The CRM customer database and the company mail archive, 8,700+ verified business emails with customer correspondence | [NOT PAID EXPOSED]
Rood Trucking
October 31, 2026
•[ ransomware, manufacturing ]
Rood Trucking was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Transportation. Country: United States of America. Established in 1962 by George and Diane Rood Sr., the company developed from a single-truck operation into a regional carrier
mars-semi.com.tw
October 31, 2026
•[ ransomware, manufacturing, technology ]
mars-semi.com.tw was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Manufacturing. Country: Taiwan. Website: mars-semi.com.tw. Established in 2001 and headquartered in Hsinchu Science Park, the company develops long-range, high-bandwidth wireless audio and video system-on-chip (SoC)
Phoenix Charter Academy
October 31, 2026
•[ ransomware, education, financial ]
Phoenix Charter Academy was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Education. Country: United States of America. Website: phoenixcharteracademy.org. Phoenix Charter Academy Phoenix Charter Academy Network is a public charter school network in Massachusetts, USA, operating three campuses (Chelsea, Lawrence, Springfield) and serving mainly low-income and immigrant families.36,829 files, 445.1 GB of data.Domain controller (password hashes of ~170+ staff accounts)File server, helpdesk server, print serverPowerSchool test server the student databaseStudent special-education records of named minors: signed IEP/504 plans for the 20252026 school year, BASC-3 psychological protocols, three-year re-evaluations, speech-therapy files, discipline recordsImmigration records of students' families: official CBP I-94 entry records, parole application statements, immigration cover lettersStaff personal and financial data: W-2 forms with SSNs and salaries, US passport card and foreign passport scans, bank statements with account numbers (Bank of America / Tremont Credit Union), signed direct deposit authorizations, CORI background-check filesMedical data: MassHealth cards and applications, immunization recordsMunicipal compliance files: Lawrence Board of Health licenses and inspections (20222024), Fire Department inspection certificatesInternal HR material: network-wide salary bands More
Community Medical Center, Falls City Nebraska
October 27, 2026
•[ ransomware, healthcare ]
Community Medical Center, Falls City Nebraska was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. Country: United States of America. Website: www.cmcfc.org.
orex.co.th
September 1, 2026
•[ ransomware, healthcare, leak ]
orex.co.th was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Other. Country: Thailand. Website: orex.co.th. Orex Trading Co., Ltd. is a Thai trusted distributor and one-stop service provider of medical products, pharmaceuticals,...
reignwoodpark.com
September 1, 2026
•[ ransomware, retail, leak ]
reignwoodpark.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Hospitality. Country: China. Website: reignwoodpark.com. Reignwood Park Thailand is a luxury real estate and integrated lifestyle development project by Reignwood Group a le...
www.alphaplantes.com
September 1, 2026
•[ ransomware, leak ]
www.alphaplantes.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Agriculture and Food Production. Country: Canada. Website: www.alphaplantes.com. Alphaplantes (Service d'Entretien des Plantes Alpha Inc.) is a Canadian family-owned company founded in 1970, headquarte...
Energy Storage Terminal in Singapore
October 27, 2026
•[ ransomware, energy ]
Energy Storage Terminal in Singapore was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Energy & Utilities. Country: Singapore.
Company #111
October 27, 2026
•[ ransomware, retail ]
Company #111 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: United Arab Emirates. retail and facility services United Arab Emirates | [PENDING EXPOSURE: The complete payroll ledger, employee records and identity document archive of a UAE services group are held.]
Regent Christian Online Academy
October 27, 2026
•[ ransomware, education, leak ]
Regent Christian Online Academy was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Education. Country: Canada. Website: www.rcoa.ca. Hospitals and Health Care Stolen data: 26 GB.
KING FAMILY MEDICAL
October 27, 2026
•[ ransomware, healthcare ]
KING FAMILY MEDICAL was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. Country: United States of America. Website: www.kingfamilymedical.net. Hospitals and Health Care Stolen data: 67 GB.
City of Big Spring
October 27, 2026
•[ ransomware, government ]
City of Big Spring was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Government & Defense. Country: United States of America. Website: www.mybigspring.com. Government Administration Stolen data: 151 GB.
Aesthetic Specialty Centre
October 27, 2026
•[ ransomware, healthcare ]
Aesthetic Specialty Centre was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. Country: Pakistan. Website: www.asc-psd.com. Medical Practices Stolen data: 22GB.
Horizon Eye Specialists & LASIK Center
October 27, 2026
•[ ransomware, healthcare, leak ]
Horizon Eye Specialists & LASIK Center was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. Country: United States of America. Website: www.horizonlaservision.com. Medical Practices Stolen data: 121 GB.
BASS Medical Group
October 27, 2026
•[ ransomware, leak, healthcare ]
BASS Medical Group was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Healthcare. Country: United States of America. Website: www.bassmedicalgroup.com. Medical Practices Stolen data: 100 GB.
Tailormade Logistics
October 27, 2026
•[ ransomware, manufacturing ]
Tailormade Logistics was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Transportation. Country: Denmark. Website: www.tailormade-logistics.com. Belgium
TWICE SRL
October 27, 2026
•[ ransomware, manufacturing, finance ]
TWICE SRL was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-27. ompany from the Republic of San Marino,
associated with the production and sale of fashion clothing and accessories.
Archived personal and corporate data of employees and customers. [Sector: Manufacturing, Finance]
Echo.com
October 28, 2026
•[ ransomware, technology ]
Echo.com was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Technology. Country: Germany. Website: Echo.com. Echo Global Logistics is a Chicago-based, technology-enabled third-party logistics provider offering freight brokerage and integrated supply chain services, including truckload, LTL, warehousing, and cross-border shipping across North America.
We hold Echo Global Logistics data: 2.06M claims rows, 153,727 freight loads, 261,440 quotes ($705M buy volume), 136,273 tenderings, 59,607 tracking records, 3,890 employee identity mappings with emails, 2,418 customers, 9,122 carriers, and warehouse geodata.
We suggest you pay a small ransom demand of $10,000,000 in BTC and move on with your lives.
Emails with instructions will be sent to you shortly.
Samples can be found below.
Contact:
Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67
Email: whitearmorrxd@proton.me
Marbre Design
October 28, 2026
•[ ransomware, manufacturing ]
Marbre Design was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Manufacturing. Country: France. Marbre Design is a French company specializing in the processing of natural stone, marble, granite, and composite materials. The enterprise custom-manufactures kitchen countertops, bathroom fixtures, fireplace surrounds, and interior architectural elements. Its core operations focus on precision cutting, slab polishing, and the on-site installation of finished products.
