Delta Electric Power Association
October 26, 2026
•[ ransomware, energy ]
Delta Electric Power Association was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: United States of America. Website: www.deltaepa.com.
University of New Mexico
October 26, 2026
•[ ransomware, hack, education ]
University of New Mexico was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Education. Country: United States of America. 36,000 Machines Compromised, both AD forests (Main Campus + Hospital Sector(with appointments, patient information + research)) With GPOs, Two Oracle databases, every student + employee PII (including SSNs), research information, entire Entra Tenant, Oracle HR + Payroll + Banner Student Records, Internal Emails, Cerner EHR rosters. This is your entire network and infrastructure compromised, the entire university COMPLETELY. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
Afflelou
October 26, 2026
•[ ransomware, retail, healthcare ]
Afflelou was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Retail & E-Commerce. Country: France. Alain Afflelou is a leading European franchisor of optical and hearing aid products, founded in France in 1972. The company operates a robust network of over 1,500 stores across 20 countries, driven by aggressive marketing innovations like its famous "Tchin-Tchin" multi-pair offer.
Key Figures
Network Revenue: 1.13 billion (TTC) for the fiscal year ending July 2025
Corporate Revenue: 447.3 million (excl. taxes), generated from corporate stores and franchise fees.
Core Segments: Eyewear and audioprosthetics. [Sector: Retail]
probe-011637cabbf94076-
October 27, 2026
•[ ransomware ]
probe-011637cabbf94076- was listed as a victim on the leak site of the ULose ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: zz | Status: Public
zzq-test
October 27, 2026
•[ ransomware, leak ]
zzq-test was listed as a victim on the leak site of the ULose ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: c | Status: Sale
gamblinglore
October 27, 2026
•[ ransomware, retail ]
gamblinglore was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Retail & E-Commerce. Verification for Gamblinglore.com
Personify Health
October 17, 2026
•[ ransomware, healthcare, leak ]
Personify Health was listed as a victim on the leak site of the Helix ransomware group; the attack is estimated to have taken place on 2026-10-17. Sector: Healthcare. Country: United States of America. Personify Health records. Yearly revenue ~$500 million. GoFile links and passwords unlock in 12 hours.
Solid Trading B.V.
October 18, 2026
•[ ransomware, leak, finance ]
Solid Trading B.V. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Other. Country: Netherlands. FX liquidity and trading technology Netherlands | Live client trading records: order and execution data for the banks and institutions trading through this firm, with amounts and account identifiers; The client database: companies, platform users with password hashes, credit limits, clearing paths and fee schedules; FIX venue session configurations, including login credentials for liquidity providers; Trade history and bank matching audit records | [NOT PAID EXPOSED]
Company #89
October 18, 2026
•[ ransomware, technology ]
Company #89 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Country: United States of America. online sports betting analytics United States | [PENDING EXPOSURE]
konsis.no
September 29, 2026
•[ ransomware, technology ]
konsis.no was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: Norway. Website: konsis.no. We hold a large volume of data from Konsis Grafisk AS a Norwegian design, marketing and print agency with annual revenue of approximately NOK 100 million.
www.marvinpac.com
September 25, 2026
•[ ransomware, manufacturing, retail ]
www.marvinpac.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Manufacturing. Country: United States of America. Website: www.marvinpac.com. Marvinpac CZ, s.r.o. the Czech subsidiary of Swiss group Marvinpac SA specialises in contract packaging and co-packing for some of the world's leading brands: Nespresso, L'Oral, COTY (Gucci, Hugo Boss, Calvin Klein), air up, LEGO, and others. The company has operated since 2010 at its production facility in anyJalovice near Prague, and forms part of an international group with divisions in Switzerland, France, and Italy.
All Business Technologies (Fox Hill bookkeeping and tax practice)
October 18, 2026
•[ ransomware, leak, finance ]
All Business Technologies (Fox Hill bookkeeping and tax practice) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Professional Services. Accounting & Tax Preparation (US) Massachusetts, USA | Books and tax records of a Massachusetts bookkeeping and tax practice: live accounting company files of more than 60 client companies with all accounting backups 2014 through 2026; Per-client tax return data for tax years 2015 through 2025 and the practice billing database; Accounts receivable ledgers, client lists and scanned client legal documents: deeds, trust certifications and IRS powers of attorney | [NOT PAID EXPOSED]
Telecom Egypt
October 18, 2026
•[ ransomware, technology, education ]
Telecom Egypt was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Technology. Country: Egypt. Website: te.eg. computer training academy Egypt | Course materials and programming projects; Exam preparation materials; Student account folders and work; A complete copy of the course database | [NOT PAID EXPOSED]
POWERsonic Industries Inc.
October 19, 2026
•[ ransomware, manufacturing, leak ]
POWERsonic Industries Inc. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Manufacturing. Country: United States of America. Website: POWERsonic Industries Inc.. [manufacturer] POWERsonic Industries Inc. a privately held wire harness and cable assembly contract manufacturer founded in 1998 with ~100-150 employees across 7 locations.
The exposed material spans every entity in the POWERsonic corporate structure:
Employee PII for 93-150 employees SIN documents, passports, I-20 visas, LMIA immigration approvals, W-2 tax forms, pay stubs, banking information. Plus 8 complete email archives totaling 13.2 GB.
Customer proprietary designs 7.5 GB of Demers Ambulance wiring harness data, 15 GB of CIRRIS cable test results, Mold Masters drawings, and a bilateral NDA with Husky Injection Molding.
Full financial records Dec 2025 balance sheet ($285K cash, $5.1M AP), trial balance, revenue data ($17.7M US), loan agreements, order margins (~45%), insurance policies.
CREDIN
October 19, 2026
•[ ransomware, finance ]
CREDIN was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Financial Services. Country: Portugal. Website: www.credin.pt.
SkyWorld Air Cargo
October 19, 2026
•[ ransomware, manufacturing ]
SkyWorld Air Cargo was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Transportation. Country: United Arab Emirates. Website: www.skyworldaircargo.com.
Seetelhotels.de
October 19, 2026
•[ ransomware, financial, healthcare ]
Seetelhotels.de was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Hospitality. Country: Germany. Website: Seetelhotels.de. Seetel Hotels (SEETEL Hotel GmbH & Co. Betriebs KG) has been notified that a substantial volume of confidential and internal corporate data has been compromised.
The affected data includes, but is not limited to:
Full guest identity records, government-issued passport and ID numbers, payment card details (credit card numbers, CVVs, and expiration dates), direct booking notes, special requests, dietary restrictions, documented allergies, and medical/health-related accommodation preferences.
Invoices, payment transaction logs, accounts receivable and payable (Debitorenbuchhaltung / Kreditorenbuchhaltung) records, internal financial audits, and controlling documentation.
chooseultimate.com
October 19, 2026
•[ ransomware, healthcare, retail ]
chooseultimate.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Retail & E-Commerce. Country: United States of America. Website: chooseultimate.com. Ultimate Health Plans is a local Medicare Advantage Plan based in Spring Hill, Florida, serving vari...
Rosenberg & Pittinsky
October 19, 2026
•[ ransomware, leak ]
Rosenberg & Pittinsky was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Professional Services. Country: United States of America. Website: rpllplaw.com. NameCompany: Rosenberg & Pittinsky, LLP |
Country: New York, NY 10016 |
Website: rpllplaw.com |
Revenue: $5 Million |
Industry: Legal Services, Law Firm, Real Estate & Commercial Litigation |
Employees: 25-50 |
Properties: 430 GB (218,361 Files, 6,630 Folders)
GardaWorld
October 19, 2026
•[ ransomware, government ]
GardaWorld was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Government & Defense. Country: Canada. Website: www.garda.com.