Newport Beach Dentistry
October 14, 2026
•[ ransomware, healthcare ]
Newport Beach Dentistry was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Healthcare. Country: United States of America. Website: dentistryofnewportbeach.com. dentistryofnewportbeach.com Newport Beach Dentistry family dental practice in Newport Beach, CA (1401 Avocado Ave, Ste 209), founded 30+ years ago and currently run by brothers Dr. F. Frank Foroutan (USC DDS 1998) and Dr. F. Ryan Foroutan (USC DDS 1996) a practice that changed ownership from Dr. Rasch Kantor/Appelsies Foroutan over the decades. Services: implants, crowns, veneers, Invisalign, root canals, periodontics, extractions, sedation, whitening, emergency care (same-day); accepts Delta Dental Premier/PPO and most major insurance, CareCredit financing; $99 new-patient special (exam + X-rays + cleaning). Team ~10 (Nancy office manager, Monica front desk, Erica hygienist); languages: English, Farsi, Spanish. Related entities: Foroutan Dental Inc. (Buena Park), OC Elite Dental (Buena Park + Anaheim Hills); also connected to F. Foroutan DDS Inc. (Corona). No revenue disclosed (private practice, est. $25M/yr for 3 doctors in this location).
ServiceMaster of Ottawa
October 14, 2026
•[ ransomware, leak ]
ServiceMaster of Ottawa was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Professional Services. Country: Canada. Website: svmottawa.ca. svmottawa.ca ServiceMaster of Ottawa Canadian property restoration and commercial cleaning company (legal entity 1351120 Ontario Inc.), a ServiceMaster franchise since 1969 owned since 2006 by John Cooke. HQ at 180 Wescar Lane, Ottawa (Carp/Richmond), ~140 staff, 24/7/365 emergency service across the National Capital Region. Core: water/fire/mold remediation, asbestos removal, reconstruction, odor control, janitorial backed by IICRC techs, HCRA license B62544, Tarion, WSIB+liability, Restore 365/Xactimate. Record: 40,000+ customers served; Cooke won ServiceMaster's "Brand Ambassador of the Year" 2026, "Mid-Market Business of the Year" (Ottawa Chamber, 2008). Reputation mixed (3.84.3/5, 313+ reviews) excellent on small jobs and named techs (Ryan Potestio, Jeff Jerome)
Sladek Partners
October 14, 2026
•[ ransomware, finance, hack ]
Sladek Partners was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Professional Services. Country: Czechia. Website: epravo.cz. ak-sladek_cz Sladek & Partners Prague law firm operating as Mgr. Ivana Sldkov, advokt (IO 66252946), with 24 years of practice since 2002 specializing in real estate transactions, divorce/family law, and attorney escrow (advoktn schova). The firm's flagship claim: 500M CZK ($23M) held in escrow annually across 100+ segregated accounts, backed by 500M CZK insurance and 25 day payout guarantees. Led by Ivana Sldkov (AK ev. . 09496, Charles University, licensed for escrow since 2002, speaks English/German/Russian), with a tiny 35 person team (accountant + secretary). Listed in EPRAVO.CZ's notable law firm yearbooks (2013, 2016); pricing is quote-only (hourly/fixed/contingency), no published rates.
Canva
October 16, 2026
•[ ransomware, technology ]
Canva was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: Australia. Website: canva.com. Global design platform; entire Salesforce org plus platform data warehouse export.
Globeia Inc.
October 16, 2026
•[ ransomware, technology ]
Globeia Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: United States of America. Website: globeia.com. Document-processing platform for FBI clearance, RCMP criminal records, and Canadian corporate screening via portal.globeia.app.
Axle Logistics
October 14, 2026
•[ ransomware, leak, technology ]
Axle Logistics was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Transportation. Country: United States of America. Website: axlelogistics.com. axlelogistics.com Axle Logistics non-asset freight brokerage founded in 2012 in Knoxville, Tennessee, by Drew Johnson and Jon Clay two University of Tennessee grads who started with two people and one trucking software license. It organizes truckload, LTL, intermodal, and port drayage shipments across the US, Canada, and Mexico by matching loads with third-party carriers, focusing on Fortune 500 shippers and mid-market brands. Revenue exploded from $80M (2018) to over $1.2B gross / $159M net (2025), and headcount grew from 2 to roughly 700 making it one of the fastest-scaling brokers in the country. It's landed on the Inc. 5000 list over a decade straight, ranked #52 among Transport Topics' top 50 logistics companies, and won Knoxville Top Workplaces seven years running. The company invested $38M in a gleaming new 84,000 sq ft HQ with state support and pays employees an average of ~$117K/year. It's a brokerage, not a carrier so shipment quality depends on the carriers.
Petroleum Telcom Communications
October 14, 2026
•[ ransomware, technology, energy ]
Petroleum Telcom Communications was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Energy & Utilities. Country: Pakistan. Website: ptelcom.com. ptelcom.com Petroleum Telcom, Inc. (dba Telcom, Inc. / Telcom Communications) Southern California communications integrator founded in 1978 in Oxnard, CA specializing in two-way radio for police/fire, microwave links, fiber optics, cell towers, and FCC licensing. Owned and led by Frank R. Hines (president since 1986), now a lean ~6-person shop (peak 35 in 1999), dealer for Motorola, Kenwood, and Bendix-King, with ~200 owned repeaters across CA/NV/AZ/UT. CA contractor license #620689 (B + C7) active since 1991, zero complaints, bonded and insured. Government track record is real and documented: Ventura County since 1982, Stanislaus County $1.2M, Port of LA police radio system $1.19M (201719), City of Oxnard up to $900K (202327), USGS, and 5 DoD contracts. Revenue not disclosed (est. $15M).
Museum Siam
October 14, 2026
•[ ransomware, government ]
Museum Siam was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Hospitality. Country: Thailand. Website: museumsiam.org. museumsiam.org Museum Siam museum in Bangkok run by NDMI under the public organization OKMD the .org domain is real, but it's a government institute, not a private company. It occupies the former Ministry of Commerce building (19211922) and opened as a museum on 2 April 2008. The core exhibit Decoding Thainess (14 rooms on how Thai identity was formed) has run since 2017; there's also a free Underground Museum at MRT Sanam Chai (2020). Attendance is ~250343K per year (different counting methods), 3.8M over 17 years; museum-level revenue isn't disclosed finances publish only at OKMD level. Tickets: 100 THB adult, 50 students, free for kids under 15, 60+, monks, disabled visitors; open TueSun 10:0018:00. Beyond exhibits: a 4,000+ resource library, digital archives, venue rental (580K THB), and a nationwide museum-network support program.
Netcore Unbxd
October 14, 2026
•[ ransomware, technology, retail ]
Netcore Unbxd was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Technology. Country: India. Website: netcoreunbxd.com. netcoreunbxd.com Netcore Unbxd AI product-discovery platform for enterprise e-commerce: smart site search, 1:1 personalization, recommendations, visual intelligence ("Complete the Look"), catalog enrichment, and its 2026 bet a Shopping Agent (agentic commerce). Owned by India's Netcore Cloud since March 2022 (~$100M deal, 90%), run by founders Pavan Sondur and Prashant Kumar; SaaS sits on composable, API-first infra (Cloudflare, Kubernetes, multi-region), with <10ms response on 95% of queries and 35M documents processed monthly. Recognition: Gartner Magic Quadrant Leader 3 years running, highest "Current Offering" score in Forrester Wave Q3 2025, 7 G2 badges Summer 2025. Claimed customer results (self-reported): +38% AOV, +28% conversion, 60% null searches, 53% bounce. Positioning is sharply anti-native-search and anti-generic-AI, aimed at retail merchandisers with no-code workbenches and full override control. Site's main CTA is a free "personalized site experience audit."
Saga University
October 14, 2026
•[ ransomware, education, healthcare ]
Saga University was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Education. Country: Japan. Website: saga-u.ac.jp. saga-u.ac.jp Saga University is a national Japanese university in Saga Prefecture, Kyushu founded in 1949 (roots back to 1875), merged with Saga Medical School in 2003, operating as a national university corporation since 2004. Scale: ~6,600 students, ~3,300 staff, 6 faculties (including medicine with a ~600-bed hospital) across Honjo, Nabeshima, and Arita campuses. Annual revenue 44B ($300M), ~57% of it generated by the university hospital; state capital 47.3B, with a +1.6B surplus in FY2024. Signature strength: the Institute of Ocean Energy (IOES) a world leader in OTEC (ocean thermal energy), pursuing the world's first 1-MW commercial plant ~2026-27 with Mitsui O.S.K. Lines. Rector since Oct 2025: Koichi Node (cardiologist); 2026 launches include Japan's first national-university cosmetic science program (30 students, 7x oversubscribed) and a joint teacher-training degree with Kumamoto University. Weak points: rankings have slid for a decade (QS Asia 801-850, THE 1501+)
Suhai Segurana Pessoal
October 14, 2026
•[ ransomware, leak ]
Suhai Segurana Pessoal was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Professional Services. Country: Brazil. Website: suhaiseguranca.com.br. suhaiseguranca.com.br Suhai Segurana Pessoal Brazilian personal security company founded in 1992 one of the older, established firms in its niche. Core business: bodyguard/executive protection, family and residential security, security drivers, and corporate guarding, delivered nationwide. Teams are described as vetted, licensed professionals backed by 24/7 monitoring and in-house tactical training. The firm claims ISO 9001 and Great Place to Work certification, but doesn't publish certificates claims are self-reported. No revenue, pricing, or verified headcount is public; everything is custom-quoted per job. Critically: since Brazil's 2024 law, security work is only legal if the firm holds a current federal police permit for that specific service and state confirm yours before hiring. Also beware the unrelated "Suhai" auto insurer sharing the name most complaints you'll find online are about insurance, not this company.
Minkon
October 16, 2026
•[ ransomware, manufacturing, technology ]
Minkon was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: Germany. Website: www.minkon-international.com. Metallurgical Products and Engineering Solutions for Industry.
Solar Communications International
October 14, 2026
•[ ransomware, technology ]
Solar Communications International was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Technology. Country: United States of America. Website: rftransparent.com. Prominent supplier and developer of RFTransparent products that seamlessly integrate wireless infrastructure into various community settings
Macfarlan Capital Partners
October 14, 2026
•[ ransomware, finance ]
Macfarlan Capital Partners was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Financial Services. Country: United States of America. Website: macfarlan.com. Equity real estate investment sponsor that serves institutional investors, family offices, wealth management advisors, and high net worth individuals
EnVision Eye Care
October 16, 2026
•[ ransomware, leak, healthcare ]
EnVision Eye Care was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Healthcare. Healthcare - Ophthalmology (US) Mississippi, USA | Patient records of a Mississippi ophthalmology practice: 13,308 patient records with names and dates of birth, taken from the patient database backup of December 2025; The complete patient database backup history of the practice, 2018 through 2025; Patient eye examination records with full ocular, medical and social history; The OCT eye scan archive of the practice | [NOT PAID EXPOSED]
Company #83
October 16, 2026
•[ ransomware, technology ]
Company #83 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. managed IT services Texas, USA | [PENDING EXPOSURE]
Company #82
October 16, 2026
•[ ransomware ]
Company #82 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: United States of America. hospitality United States | [PENDING EXPOSURE]
Company #77
October 16, 2026
•[ ransomware, hack ]
Company #77 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: United States of America. investigations and due diligence USA | [PENDING EXPOSURE]
Company #78
October 16, 2026
•[ ransomware, healthcare ]
Company #78 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-16. Healthcare - Ambulatory Surgery Center (US) Texas, US | [PENDING EXPOSURE]
ock.com.my
October 16, 2026
•[ ransomware, technology ]
ock.com.my was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-16. Country: Malaysia. Website: ock.com.my. OCK Group Berhad specializes in telco network services and infrastructure in Malaysia, offering solu...