Rapid Manufacturing
October 30, 2026
•[ ransomware, espionage, manufacturing ]
Rapid Manufacturing was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Website: Rapid Manufacturing. [manufacturer] Rapid Manufacturing a 50-year-old electronics contract manufacturer in Anaheim, California with operations in Ensenada, Mexico.
Rapid Manufacturing is not a household name. But it is a critical Tier-1 supplier to SpaceX (Falcon & Starship programs), Anduril, Northrop Grumman, Rocket Lab, L3Harris, Collins Aerospace (RTX), and Millennium Space (Boeing). It builds the wire harnesses, electro-mechanical assemblies, and box builds that go inside rockets, missiles, and satellites.
The exposed material includes:
>
ITAR-controlled engineering drawings and manufacturing processes for Falcon 9/Heavy, Starship, and Draco propulsion systems RTD soldering acceptance criteria, visual inspection standards, cable thermocouple assemblies, and production master plans.
26 ITAR customer quoting accounts including SpaceX, Anduril, Northrop Grumman, Rocket Lab, L3Harris, Collins Aerospace, and Millennium Space the complete defense/space revenue architecture.
6001,200 employee records spanning US (SSN, bank accounts, payroll, I-9/immigration) and Mexico (RFC, CURP, IMSS, bank accounts, nminas) with data from 2019 through August 2026.
Attorney-client privileged materials settlement agreements, severance terms, internal investigation files, and a recorded termination meeting (audio).
Palletline
October 30, 2026
•[ ransomware, manufacturing ]
Palletline was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Transportation. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.palletline.co.uk.
Societe Ivoirienne De Telediffusion
October 30, 2026
•[ ransomware, technology ]
Societe Ivoirienne De Telediffusion was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Technology. Country: Cte dIvoire. Website: www.sidt.ci.
Sistemas Visuales 360
October 30, 2026
•[ ransomware, technology ]
Sistemas Visuales 360 was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Technology. Country: Mexico. Website: www.sistemasvisuales360.com.mx.
M... H...
October 30, 2026
•[ ransomware ]
M... H... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-10-30. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
Suburban Orthopaedics
October 30, 2026
•[ ransomware, healthcare ]
Suburban Orthopaedics was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Healthcare. Country: United States of America. Suburban Orthopaedics is a New Jersey medical center offering coordinated care for back, neck, and shoulder pain and injuries. Its services include orthopaedic care, chiropractic, interventional pain management, physical medicine and rehabilitation, and physical therapy
Honghwa International
October 30, 2026
•[ ransomware, manufacturing ]
Honghwa International was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Country: Taiwan. Website: www.honghwa.com.tw.
KTU Shipyard
October 30, 2026
•[ ransomware, manufacturing ]
KTU Shipyard was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Transportation. Country: Philippines. Company: PT Karya Teknik Utama (KTU Shipyard)
Location: Batam, Indonesia
Founded: 1982
Industry: Shipbuilding & Marine Engineering
Website: https://ktushipyard.com/
What the company does
KTU Shipyard is an Indonesian shipbuilding company specializing in the construction, repair and maintenance of commercial vessels.
Its main products and services include:
- Tugboats
- Barges
- Tankers and cargo vessels
- Crane barges
- Ship repair and maintenance
Company size
- Privately owned company.
- Approximately 5011,000 employees.
- Multiple shipyard facilities in Indonesia.
- Claims to have built approximately 2,200 vessels.
Annual Revenue
~USD 200 million
Key Business Information
- Business model: B2B shipbuilding and marine services.
- Customers: Shipping companies, marine logistics operators and offshore businesses.
- Main market: Indonesia and regional maritime markets.
- Competitive advantage: Established shipbuilding experience, multiple facilities and diverse vessel manufacturing capabilities.
What was accessed: Internal ticketing systems, All users drive (including business, customer, confidential files over 3tb of data), customer data, etc. You have 20 days to reach out or let it be your downfall.
Attatched: Is a sample file from recent user drives, and a screenshot showing POA (proof of access)
We can be very reasonable and this can go well or it can not. You can start contact at the email: whitearmormember@proton.me
https://gofile.io/d/G981x5Rl
https://gofile.io/d/99sTtibR
(backup sample files)
Gilliam & Associates, P.C
October 30, 2026
•[ ransomware, finance ]
Gilliam & Associates, P.C was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United States of America. Website: gilliamcpapc.com. A full service CPA firm.
chicagolawyer.com
October 30, 2026
•[ ransomware, leak, finance ]
chicagolawyer.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United States of America. Website: chicagolawyer.com. Chicago Personal Injury Lawyers Award-Winning Injury Lawyers At Staver Accident Injury Lawyers, we face powerful insurance companies head-on, using our decades of experience to help injury victims like you get the compensation you deserve. SAIL to victory with our winning team.
spencers.com
October 30, 2026
•[ ransomware, retail ]
spencers.com was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Retail & E-Commerce. Country: United States of America. Website: spencers.com. Spencer's is an American specialty retailer known for novelty gifts, pop culture merchandise, clothing, accessories, and adult-themed products.
Angeles Contractor
October 28, 2026
•[ ransomware, manufacturing, government ]
Angeles Contractor was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Manufacturing. Country: Mexico. Website: angelescontractor.com. angelescontractor.com Angeles Contractor Inc is a general contractor founded in 1998 in City of Industry, California, with 8 CSLB license categories and 63 to 95 employees delivering construction projects across Southern California. It has completed 259 public works projects worth over 197 million dollars for 47 government agencies, led by San Bernardino County with 73 contracts. Its portfolio includes the Rose Bowl renovation, UCLA dining hall, CGV Cinemas, Paakuma K-8 School and a 14.5 million dollar Big Bear Airport terminal rebuild. Led by President Young W. Kang and VP Alex Cho, it maintains over 90 percent repeat business across education, healthcare, commercial and residential sectors. It holds multiple JOC contracts with San Bernardino, San Mateo and Sourcewell worth up to 30 million dollars per year. The company is a certified Minority Business Enterprise with active expansion into Northern California through offices in San Jose and Salinas.
FPT Software
October 27, 2026
•[ ransomware, technology, automotive ]
FPT Software was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Technology. Country: Vietnam. Website: fptsoftware.com. fptsoftware.com FPT Software is the largest IT services company in Southeast Asia, founded in 1999 in Hanoi with 1.34 billion dollars in revenue and over 33,000 employees across 31 countries. It serves 1,100 clients including 130 Fortune Global 500 companies across automotive, banking, healthcare and energy, with Japan as its largest international market. Its AI-first strategy uses the FleziPT platform delivering 30 percent productivity gains, with AI and data services growing 60 percent in 2026. In 2025 it signed a record 256 million dollar AI transformation deal and secured 26 projects above 10 million dollars. Strategic partnerships span NVIDIA, Microsoft, SAP, AWS and OpenAI. Key strengths are unmatched scale from Vietnam, deep AI capabilities and a 152,000 strong education talent pipeline.
Eichstatt
October 27, 2026
•[ ransomware, government, education ]
Eichstatt was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: Germany. Website: eichstaett.de. eichstaett.de 1,5 tb information Eichsttt is a small historic town in Upper Bavaria with 13,500 inhabitants and 1400 years of history, famous for its baroque architecture, Jura Museum with Archaeopteryx fossils and UNESCO Altmhltal Geopark. The Katholische Universitt Eichsttt-Ingolstadt enrolls about 4,800 students across 4 faculties spanning theology, philosophy, languages and business in Ingolstadt. Under President Dr. Klaus Stwe since 2023, it received 5.86 million euro in Bavarian funding for digital transformation and AI programs. It is developing an international campus in Shandong, China and launching new sustainability master's degrees. Key strengths are its Catholic identity, small class sizes and strategic location between Munich and Nuremberg.
SuperScale
October 26, 2026
•[ ransomware, technology ]
SuperScale was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Website: superscale.com. superscale.com SuperScale is a Slovak game growth platform founded in 2015 in Bratislava, helping over 500 mobile game studios scale their games through AI-powered performance marketing, data science and monetization optimization. With around 60 employees and 1000 plus games grown, it offers both a SaaS platform and managed growth services acting as an outsourced UA and live ops team. Its core technology includes predictive LTV and retention models, automated user acquisition campaigns and AI creative production across Facebook, Google, TikTok and Apple Search Ads. Led by CEO Ivan Trancik, the company specializes in hybrid monetization strategies combining ads, in-app purchases and subscriptions for casual, midcore and hypercasual titles.
Acodafe
October 26, 2026
•[ ransomware, technology, leak ]
Acodafe was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Colombia. Website: acodafe.com. acodafe.com Acodafe S.L. is a Spanish IT services company founded in 2009 in Matar, Barcelona, providing managed IT, network installation, cybersecurity, cloud backups, data center hosting and GDPR consulting for small and medium businesses. Led by sole administrator Adrin Conde Kuller, it has just 4 employees and annual revenue between 500,000 and 1.5 million euro. The company grew sales by 22.8 percent in 2024 and climbed over 12,000 positions in Spain's national business ranking. Its services cover the full IT lifecycle for SMEs and industrial clients from system maintenance and installation to 24/7 emergency support. In 2019 it expanded into data protection consulting, a growing regulatory niche in Spain. Key strengths are 17 years of market presence, a lean and profitable operation and a diversified service portfolio tailored to small business needs.
Pure Perfection
October 26, 2026
•[ ransomware, retail, automotive ]
Pure Perfection was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: United States of America. Website: pureperfection.com. pureperfection.com Pure Perfection GmbH is a German live communication agency founded in 2008 in Wiesbaden, ranked number one in the 2026 BlachReport German Event Creativity Ranking ahead of insglck and Vok Dams. With 72 to 80 employees across offices in Wiesbaden, Berlin, Dsseldorf and Florida, it delivered 133 events in 2025, with 90 of them abroad including Shanghai, Miami and Singapore. Led by co-founders Jan Rogozinski and Kim Meisinger, the agency works through three units: Pure Live for events, Pure Space for brand spaces and architecture, and Pure Content for storytelling and PR. Major clients include Audi, KODA, L'Oral, Bentley and Nestl, with pharma being its largest vertical at 90 events per year. Revenue peaked at 26.4 million euro in 2023 and the agency won 60 MUSE Creative Awards in 2026 alone.
Incomelec
October 26, 2026
•[ ransomware, manufacturing, technology ]
Incomelec was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Colombia. Website: incomelec.com. incomelec.com Incomelec is a Colombian company founded in 2006 in Bogota, the Latin American leader in pedestrian, vehicle and passenger access control including turnstiles and automated barriers. With 52 employees and operations in 14 countries, it has installed equipment in over 20 airports, 90 parking facilities and 250 buildings, handling more than 85 percent of Colombia's toll booth systems. Its flagship product is BIOMIG, an automated migration control system used at El Dorado and Medellin airports with iris scanning and passport verification. It is the exclusive regional partner of Automatic Systems from the Bollore Group and the only distributor worldwide that locally assembles TR-490 and TR-491 turnstile lines. Led by CEO Kris De Sutter Gomez, it serves Metro de Medellin, TransMilenio and BD Bacata, Colombia's tallest building.
ASL İnsaat
October 26, 2026
•[ ransomware, manufacturing ]
ASL nsaat was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Manufacturing. Country: Turkey. Website: aslinsaat.com.tr. aslinsaat.com.tr ASL nsaat is a Turkish construction company based in Istanbul, operating in civil and industrial building contracting both domestically and internationally. It provides full-cycle services including design, general contracting and project management for residential, commercial and industrial projects. The company is privately held with estimated staffing of several hundred employees scaling with active construction sites. Turkey is the world's second largest market for international construction contractors, and ASL operates within this competitive ecosystem. Key sectors are residential complexes, shopping centers, hotels, factories and infrastructure. Typical strengths of Turkish contractors like ASL are cost competitiveness, speed of delivery and experience in challenging geographies across the Middle East, Africa and Central Asia.
atljamaica.com
September 30, 2026
•[ ransomware, retail, hospitality ]
atljamaica.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Other. Country: Jamaica. Website: atljamaica.com. Sandals Resorts International (SRI) is a Jamaican luxury resort chain operating under the all-inclusive brand across the Caribbean. Appliance Traders Limited (ATL) is a retail electronics chain operating under the ATL Jamaica brand. Both companies belong to the same corporate structure: "ATL Group of Companies" and "Sandals Group of Companies" are used interchangeably in their internal documents to refer to the same circle of affiliated entities.
