Bison Bag
November 3, 2026
•[ ransomware, manufacturing, retail ]
Bison Bag was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Retail & E-Commerce. Bison Bag is a flexible packaging specialist that offers custom printing and design for a varie
ty of packaging solutions including pouches, rollstock, and bags. The company serves diverse ma
rkets such as food, health and wellness, and industrial sectors, focusing on providing tailored
packaging solutions that meet client needs.
We will upload 80gb of corporate data soon. Employee information (phones numbers, addresses an
d so on), contracts and agreements, customer information, financial reports and other papers, p
rojects, specifications and drawings, etc.
Arthur Chapman Kettering Smetak Pikala PA
November 3, 2026
•[ ransomware, leak ]
Arthur Chapman Kettering Smetak Pikala PA was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Professional Services. Country: United States of America. Website: www.arthurchapman.com.
Project Trojan Horse
November 3, 2026
•[ ransomware, insider ]
Project Trojan Horse was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Other. DM us to sell your IA on $/%, working with all kinds of accesses depending on said target.
Rules :
- No companies under $500kk
- No companies in the CIS conglomerate
- Okta, Azure, IAM Root, CRM tools , Jenkins & VPN access (Forti, Anyconnect, Citrix, Sonicwall)
We are also recruiting employees/insiders at various companies!
If you work at a company in the following sectors, please inquire us :
- Education (Technology/Software, EdTech platforms, K-12 Management)
- Software (Entreprise-grade, CRM, SaaS, HR Software, CyberSec, Productivity)
- Insurance (Globally)
- Hotels (Worldwide hotel groups, operators, luxury)
- Telecommunications (Major global telecommunication companies)
- Finance (Banking, Private equity, fintech)
- Retail (Global retailers, supermarkets, fashion, electronics, furniture, luxury)
- Motor (Car manufacturers, Luxury automotive brands, etc.)
- Transportation (Aviation, Shipping, Railways/Public transportation, Mobility)
- Logistics (Supply chain, global companies)
Please only inquiry us if you work/have access to companies that are med/largely sized from these industries/sectors.
You will be paid if you like depending on what you have; Contact us in order to discuss about rates (%) based deals or $ ones. Escrow is always accepted.
t.me/whitearmorsupp / @whitearmorsupp on Telegram.
"Every collectivist revolution rides in on a Trojan horse of EMERGENCY." - Herbert Hoover (1952). Memoirs: The great depression, 1929-1941
darrequipment.com
November 3, 2026
•[ ransomware, manufacturing ]
darrequipment.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Manufacturing. Country: United States of America. Website: darrequipment.com. Darr Equipment Co. is a family-owned, service first, industrial equipment supplier specializing in providing customized solutions to meet our clients' specific goals. Darr provides new and used forklift, material handling, earthmoving, and construction equipment to construction and industrial market
hillandbeyer.com
November 3, 2026
•[ ransomware, leak, healthcare ]
hillandbeyer.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Professional Services. Country: United States of America. Website: hillandbeyer.com. Hill & Beyer is a law firm that provides legal representation and related client services.
Management at Hill & Beyer has been officially informed regarding a major breach involving highly sensitive data.
The compromised file repository encompasses a broad spectrum of confidential documents, notably featuring private patient medical histories and health records, audio recordings alongside transcripts from 911 emergency dispatches, investigative files concerning legal infractions, and comprehensive logs and transcripts of formal interrogations.
Initially, an effort was made to resolve the matter privately and confidentially. Numerous phone calls, warnings, and formal notifications were dispatched to the organization's administration and leadership. However, management chose to disregard these warnings and severed all communication without implementing any remediation measures. Consequently, this public statement is being issued.
medinahealthcare.net
November 3, 2026
•[ ransomware, healthcare ]
medinahealthcare.net was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Healthcare. Website: medinahealthcare.net. Medina Healthcare System is a Texas-based healthcare provider offering hospital services, primary care, emergency treatment, and specialty medical services.
bliss1041.com
November 3, 2026
•[ ransomware, technology ]
bliss1041.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Country: United States of America. Website: bliss1041.com. nda
innovativedriven.com
November 3, 2026
•[ ransomware, technology, hack ]
innovativedriven.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Technology. Country: United States of America. Website: innovativedriven.com. .
butler.legal
November 3, 2026
•[ ransomware, leak ]
butler.legal was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Professional Services. Country: United States of America. Website: butler.legal. client data personal case
roundglass.com
November 3, 2026
•[ ransomware, healthcare ]
roundglass.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Healthcare. Country: United States of America. Website: roundglass.com. proof
fidepartners.com
November 3, 2026
•[ ransomware, finance ]
fidepartners.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Financial Services. Country: Spain. Website: fidepartners.com. .
Goldsmith & Hull
November 4, 2026
•[ ransomware, finance, healthcare ]
Goldsmith & Hull was listed as a victim on the leak site of the Aoqin ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Professional Services. Country: United States of America. The Law Offices of Goldsmith & Hull A.P.C. specializes in providing legal representation in various areas of law, including personal injury, medical malpractice, and insurance matters. They offer services such as collection, subrogation, and financial guarantee insurance, catering to both retail and commercial clients. The firm is experienced in handling cases in all Federal and State courts of California. Their intended clients include individuals seeking personal injury claims and Fortune 500 companies requiring collection services. Status: Not paid. Data publication: 2026-11-11 08:00 UTC. Revenue: $5M. Employees: 50. Data type: legal, personal, clientsData, confidential.
Nextron Technology
November 4, 2026
•[ ransomware, technology ]
Nextron Technology was listed as a victim on the leak site of the Aoqin ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Technology. Country: China. NX Electronics Limited, also known as Nextron, specializes in electronic parts, offering a wide range of products including CPUs, SSDs, graphics cards, DRAM, and motherboards. The company prides itself on providing high-quality products, prompt delivery, and reliable service to its clients. With years of experience in the industry, Nextron collaborates with trustworthy partners to ensure customer satisfaction. Their target clients include businesses and individuals seeking dependable electronic components. Status: Not paid. Data publication: 2026-11-10 17:00 UTC. Revenue: $13.7M. Employees: 200000. Data type: clientsData, confidential.
Petroshahd(Enap Sipetrol International - Egypt Branch)
November 4, 2026
•[ ransomware, energy, finance ]
Petroshahd(Enap Sipetrol International - Egypt Branch) was listed as a victim on the leak site of the Aoqin ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Energy & Utilities. Country: Chile. Established in 1950 and headquartered in Las Condes, Chile, ENAP is engaged in the exploration, production, and refining of hydrocarbons and their derivatives. ENAP performs logistical and site maintenance to operational sites. Status: Not paid. Data publication: 2026-11-11 11:00 UTC. Revenue: $504.9M. Employees: 5000. Data type: confidential, clientsData, banking.
SILIKO d.o.o.
November 4, 2026
•[ ransomware, manufacturing, financial ]
SILIKO d.o.o. was listed as a victim on the leak site of the Aoqin ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: Slovenia. Siliko d.o.o. is a development supplier and manufacturer of technical products made of elastomers and thermoplastics with over 30 years of tradition. During this period, production program expanded substantially and nowadays includes activities which offer customers a comprehensive range of services from draft design and construction to tool making and mass production. 70 percent of our production is being exported to the European Union markets, predominantly to buyers from the German automotive industry. At the same time, we are an important supplier for the household appliances industry on the European market, also cooperating with partners in the electrical, sanitation and construction industries. With state-of-the-art technology, knowledge and experience, we strive to offer the best products and to go beyond our customers expectations. Status: Not paid. Data publication: 2026-11-09 14:00 UTC. Revenue: $61.6M. Employees: 130. Data type: banking, clientsData, confidential.
IHG Hotels & Resorts (Estate)
November 3, 2026
•[ ransomware, misconfiguration, leak ]
IHG Hotels & Resorts (Estate) was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Nice LDAP Binding Password being '123'. Rotating things won't really save you casue it's not hard to hop back on your network. Anyways, we now have; Customer Data, AWS Keys, Full Access to CyberArk, Complete Employee PII, Booking information included but not limited to, guest name, billing address, company, rate code, room charges, taxes, spend, property & stay dates. We also have the loyalty data store. Additionally we have reservation and payment ledgers for the folio reservation (guest name, address, phone, email, arrival and departure, rate, property) with Access to the AD + All Financial Records. This affects the big names such as Six Senses, Holiday Inn, Holiday Inn Express, Staybridge Suites, Garner, Candlewood, Crowne Plaza, Mayfair Hotel, etc etc you can pick up what we are putting down at this point. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
ASLAN TEKSTİL ve KONFEKSİYON San.ve Tic. A.Ş.
November 4, 2026
•[ ransomware, manufacturing, leak ]
ASLAN TEKSTL ve KONFEKSYON San.ve Tic. A.. was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: Turkey. Status: leaked | Data size: 3.27 GB | Files: 6457 files | Deadline: 2026-11-04T00:00:00Z
sigsauer.com
November 4, 2026
•[ ransomware, manufacturing ]
sigsauer.com was listed as a victim on the leak site of the Scarlettgroup ransomware group; the attack is estimated to have taken place on 2026-11-04. Sector: Manufacturing. Country: United States of America. Website: sigsauer.com. SIG SAUER is a leading firearms manufacturer specializing in pistols, rifles, ammunition, optics, and accessories for civilian, law enforcement, and military use.
Palm Vascular Centers
November 2, 2026
•[ ransomware, healthcare ]
Palm Vascular Centers was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Healthcare. Country: United States of America. Website: palmvascular.com. A company specializing in collaboration with interventional radiologists and vascular surgeons
gWorks
November 2, 2026
•[ ransomware, technology ]
gWorks was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Other. Country: United States of America. Website: gworks.com. A technology company specializing in software solutions designed to help small towns and rural areas make effective use of software and technology