Admirals Trading
October 2, 2026
•[ ransomware, retail, finance ]
Admirals Trading was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Financial Services. Country: United Arab Emirates. Admirals Trading LLC (admirals.ae) is a Dubai-based food and beverage company under the Saudi conglomerate Rashed Abdul Rahman Al Rashed & Sons Group, with over 20 years of experience in the UAE market, specializing in the distribution of 60+ international and local F&B brands, food manufacturing and processing, and third-party logistics services across retail, food service, van sales, and wholesale channels, having recently expanded its operations from the UAE into Saudi Arabia while also running an online store called "Buy Like Chefs."
Guarufilme
October 13, 2026
•[ ransomware, manufacturing ]
Guarufilme was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Other. Country: Brazil. Website: www.guarufilme.com.br. The company has operated in the packaging sector since 2006, manufacturing PVC and polyethylene films for domestic and industrial applications.
Matadero Frigorífico Avinyó
October 7, 2026
•[ ransomware, manufacturing ]
Matadero Frigorfico Aviny was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Agriculture and Food Production. Country: Spain. Website: www.avinyo.net.
Qatar National Import & Export
October 7, 2026
•[ ransomware, retail, technology ]
Qatar National Import & Export was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Other. Country: Qatar. Website: www.qnie.com.
Lumabuilt
July 8, 2026
•[ ransomware, manufacturing, leak ]
Lumabuilt was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-08. Sector: Manufacturing. Country: United States of America. Website: lumabuilt.com. [AI generated] N/A
I don't have reliable, verified information about a company called "Lumabuilt." Rather than provide potentially fabricated details about its industry, operations, or country, I'm flagging this as unknown. If you have additional context (website, location, sector) or if this is a fictional/test entity, please share details and I can help frame a description accordingly.
TheraCare
October 6, 2026
•[ ransomware, healthcare, leak ]
TheraCare was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Healthcare. Country: United States of America. TheraCare is a multi-service healthcare, rehabilitation, developmental, and educational organization founded in 1991 and headquartered in New York. The company provides clinical and educational services for children, families, and clients of different ages across New York, New Jersey, Connecticut, and Maryland. Its key services include early intervention, autism services, preschool and school-age programs, speech-language therapy, occupational therapy, physical therapy, special education, behavioral services, and school district staffing. TheraCare focuses on helping children reach their developmental and educational potential through individualized clinical and educational programs. The organization emphasizes quality assurance, continuous improvement, regulatory compliance, and measurable service outcomes.
The company headquarters is located in 1133 Westchester Avenue, Suite N-230, White Plains, NY 10604, United States. 201-500 Employees
Cooperative Des Techniciens Ambulanciers De La Monte
October 7, 2026
•[ ransomware, healthcare ]
Cooperative Des Techniciens Ambulanciers De La Monte was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Healthcare. Country: Canada. CETAM is the largest employer in prehospital care in Montrgie, comprising over 400 ambulance technicians and paramedics. Founded in 1988, it operates on a cooperative model where all workers are members, allowing them to participate in decision-making and benefit from annual financial returns. The organization serves a wide territory, responding to nearly 20,000 calls annually across multiple municipalities. CETAM is dedicated to providing high-quality emergency medical services to the local population.
The company headquarters is located in 310 Rue Lawrence, Greenfield Park, QC J4V 2Z6, Canada. 201-500 Employees
DIPECARR
October 8, 2026
•[ ransomware, retail, automotive ]
DIPECARR was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Other. Country: Brazil. Website: www.dipecarr.com.br. Dipecarr is Brazil's top truck parts distributor, founded in 1994 by Adilson Jos de Almeida. With over 10,000 items ready to ship and partnerships with world-known brands, they serve 80,000 customers across seven branches in key Brazilian states. The company offers everything a truck owner needs, focusing on quality service and continuous growth.
Boullard Musique
October 8, 2026
•[ ransomware, retail ]
Boullard Musique was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Retail & E-Commerce. Country: Switzerland. Website: boullard.ch. Boullard Musique (boullard.ch) is one of Switzerland's premier specialty retailers of musical instruments and audio gear, founded in Morges in 1979. The company operates a dedicated physical showroom alongside an extensive e-commerce platform offering acoustic instruments, electronic gear, and accessories. Beyond retail, they provide comprehensive instrument rentals, maintenance, and expert repair services through their on-site workshops.
FSE, Cairo University
October 8, 2026
•[ ransomware, education ]
FSE, Cairo University was listed as a victim on the leak site of the UmBra ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Education. Country: Egypt. FSE, Cairo University Leading Egypts future in arts, music, media, and creative education excellence.
Manipal Academy of Higher Edu
October 8, 2026
•[ ransomware, education ]
Manipal Academy of Higher Edu was listed as a victim on the leak site of the UmBra ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Education. Country: India. Website: manipaldubai.com. MAHE Indias global private university excelling in Medicine, Engineering, Business, and Research with 28,000+ students from 57 nations.
dipecarr.com.br
October 8, 2026
•[ ransomware, manufacturing ]
dipecarr.com.br was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Manufacturing. Country: Brazil. Website: dipecarr.com.br. [AI generated] N/A
I don't have reliable, verifiable information about a company operating at "dipecarr.com.br." I'm unable to confirm its business activities, industry classification, or operational details with confidence. Providing fabricated details about an unfamiliar domain could result in inaccurate threat intelligence. If you have additional context or source material about this entity, I'd be glad to help analyze it.
SOCOCO
October 8, 2026
•[ ransomware, technology, leak ]
SOCOCO was listed as a victim on the leak site of the UmBra ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Technology. Country: Brazil. SOCOCO A Brazilian mid-sized food company with 40 employees, blending tradition and modern marketing through WordPress-driven platforms.
INAPI
July 13, 2026
•[ ransomware, government, technology ]
INAPI was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Technology. Country: Algeria. Website: www.inapi.cl/en/about-inapi/inapi. [AI generated] N/A
INAPI commonly refers to Chile's Instituto Nacional de Propiedad Industrial (National Institute of Industrial Property), a Chilean government agency responsible for registering trademarks, patents, and other industrial property rights. However, I cannot confirm with certainty that this is the specific entity you are referencing, as there may be other organizations using this name, and I lack sufficient verified detail to provide a confident, accurate profile without risking inaccuracy.
The Bernard Osher Foundation
October 4, 2026
•[ ransomware, education ]
The Bernard Osher Foundation was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Education. Country: United States of America.
bayer
October 9, 2026
•[ ransomware, healthcare ]
bayer was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: Germany. Website: www.bayer.com/en. Bayer is a global life science company with more than 160 years of innovation behind us. Operating at the intersection of health and nutrition, we are committed to addressing some of society's most pressing challenges and creating lasting value for people, communities, and the world around us.
Tec Imports
July 10, 2025
•[ ransomware, technology, manufacturing ]
Tec Imports was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-07-10. Sector: Other. Country: Brazil. Tec Imports group offers a complete range of logistics solutions, from
coordinating shipments from the manufacturer's plant to the end
customer, whether by sea, air, or road.
Commercial Department - contact@dorte.com.br
Importation - alexandre@dorte.com.br
Export - stefani@dorte.com.br
Hospitalar Cosmtico - ricardolinhares@dorte.com.br
Professional Hairdressing Machines -ricardoamaral@dorte.com.br
Tec Zipper - diogo@teczipper.com.br
Phone/Fax: +55 11 3809-6870
Phone/Fax: 55 27 3318-0888
Wavecrest HFA
July 7, 2026
•[ ransomware, finance ]
Wavecrest HFA was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-07-07. Sector: Financial Services. Country: United States of America. 12,143 Files, 267 Folders
23,991,067,648 bytes
Riviera Healthcare Center
October 7, 2026
•[ ransomware, healthcare ]
Riviera Healthcare Center was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Healthcare. Country: United States of America. Website: https:rivierahealthcare.com. Riviera Healthcare Center is a for-profit skilled nursing facility in operation for over 50 years. It provides 24-hour nursing and rehabilitation services. Due to negligence and poor security practices, confidential data was exposed, including patient protected health information (PHI)names, diagnoses, medical histories, fall/fracture and treatment information, payment records, and employee/HR data. This breach violates HIPAA and the California CMIA (and potentially the CCPA/CPRA) and will result in mandatory breach notification, federal and state fines, civil lawsuits, corrective action plans, and significant reputational and financial damage.
Deese and Locklear Chiropractic Center
July 12, 2026
•[ ransomware, healthcare ]
Deese and Locklear Chiropractic Center was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-12. Sector: Healthcare. Country: United States of America. [AI generated] N/A
I don't have reliable, verifiable information about a specific company called "Deese and Locklear Chiropractic Center." While this sounds like it could plausibly be a small, local chiropractic practice (based on the naming convention, likely in the United States, possibly the Carolinas given the surname "Locklear"), I cannot confirm its existence, operations, or details with confidence, and providing fabricated information would not be appropriate for threat intelligence purposes.
