Company #147
November 7, 2026
•[ ransomware, retail ]
Company #147 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-07. Country: United States of America. coffee retail United States | [PENDING EXPOSURE]
Twitter
November 8, 2026
•[ ransomware, technology ]
Twitter was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-11-08. Sector: Technology. Country: United States of America. For insights and updates that we do not post on our onion or handle behind the scenes, visit here: https://x.com/q6cv78dn45 (temporary username hold:<)
???
November 7, 2026
•[ ransomware ]
??? was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-11-07. Hello, we are excited to share the start of something major very soon. Please be prepared, thank you.
Clínica La Sagrada Familia (Colombia)
November 8, 2026
•[ ransomware, healthcare, financial ]
Clnica La Sagrada Familia (Colombia) was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-11-08. Sector: Healthcare. Country: Colombia. Clnica La Sagrada Familia S.A.S, a private healthcare provider in Colombia's Eje Cafetero region. It offers medium and high-complexity medical services, online appointment scheduling, and features advanced technology like a 160-slice CT scanner.
We hold, in short: 254,670 patient identities with Colombian government IDs, ~598.7M rows of clinical + financial + identity data across 4,573 tables from a Colombian hospital's full production database, including MD5-hashed staff credentials, 691K admissions, 34.5M medical-history rows, 1.5M invoices, and complete pharmacy/lab operations.
We demand $2,000,000 in BTC, emails with instructions have been sent to you.
If you have not received them, you can find our contacts below.
Email: whitearmorxd@onionmail.org
Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67
www.bogard.com.mx
November 8, 2026
•[ ransomware, retail ]
www.bogard.com.mx was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-08. Sector: Other. Country: Mexico. Website: www.bogard.com.mx. .
bpcm.com
November 8, 2026
•[ ransomware, leak, technology ]
bpcm.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-08. Sector: Professional Services. Country: United States of America. Website: bpcm.com. all company data
q-technicians.be
November 8, 2026
•[ ransomware, technology ]
q-technicians.be was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-08. Sector: Professional Services. Country: Belgium. Website: q-technicians.be. full
Kadick
November 8, 2026
•[ ransomware, technology, finance ]
Kadick was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-11-08. Country: United States of America. Website: kadickintegrated.com. Kadick Integrated Limited is a Nigerian company that offers agency banking, IT solutions, airtime distribution, procurement, and financial services. The company specializes in connecting businesses and individuals to platforms that streamline digital sales and local financial transactions.
Chonlatee
November 8, 2026
•[ ransomware, finance, technology ]
Chonlatee was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-11-08. Country: Thailand. Website: www.chonlatee.com. Chonlatee Innovation Co Ltd. ( ) is a professional corporate services agency based in Bangkok, Thailand. The company specializes in business registration, accounting, tax planning, and licensing services for both Thai nationals and foreign entrepreneurs.
Trinity Custom Homes - USA
November 8, 2026
•[ ransomware, manufacturing ]
Trinity Custom Homes - USA was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-11-08. Sector: Manufacturing. Country: United States of America. Website: trinitycustom.com. Trinity Custom Homes is a custom home builder that specializes in building 100% custom, solid wood homes directly on the customers land across several states in the Southeast, including Georgia, Alabama, North Carolina, South Carolina, and Tennessee.
globalair.com.sg
November 8, 2026
•[ ransomware, manufacturing ]
globalair.com.sg was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-11-08. Sector: Transportation. Country: Singapore. Website: globalair.com.sg. [AI generated] N/A
I don't have reliable, verified information about a specific company operating at "globalair.com.sg." Rather than speculate about its business activities, industry classification, or operational details, which could produce inaccurate threat intelligence, I'm flagging this as unknown. If you have additional context, documentation, or data sources about this domain, I can help analyze that information instead.
Calmont Wire & Cable
November 6, 2026
•[ ransomware, manufacturing, technology ]
Calmont Wire & Cable was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-11-06. Sector: Manufacturing. Country: Canada. Calmont Wire & Cable is a leading custom wire and cable manufacturer known for its innovative s
olutions in medical, robotics, aerospace, military, and sensor applications. The company offers
a wide range of products including completely custom cables, ultraflexible wires, and high-tem
perature cables, as well as services such as custom design, prototyping, and testing.
We will upload 10gb of corporate data soon. Employee personal information (passport, DLs, SSNs)
, contracts, customer information, financial, NDAs and so on.
Coopebis
November 8, 2026
•[ ransomware, finance ]
Coopebis was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-11-08. Sector: Agriculture and Food Production. Country: Costa Rica. Website: coopebis.coop. Coopebis is a Colombian savings and credit cooperative (Cooperativa de Ahorro y Crdito) providing financial services and social benefits to its members. The organization offers loans, savings accounts (including specialized plans for children), and various welfare benefits.
NoseTea
November 8, 2026
•[ ransomware, retail ]
NoseTea was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-11-08. Sector: Retail & E-Commerce. Country: United States of America. Website: home.nosetea.com. NOSE TEA (THAILAND) CO LTD. is a highly popular premium cheese tea brand from Thailand. Known locally as "" (Green Nose Tea), the brand specializes in fruit infusions and milk teas paired with its signature rich, velvety cream cheese topping. Manufacturing and retailing of non-alcoholic beverages, tea, coffee, bakery, and ice cream
Fidex
November 8, 2026
•[ ransomware, finance ]
Fidex was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-11-08. Country: Mexico. Website: www.fidex.com.mx. Fidex Seguros y Fianzas is a prominent Mexican insurance broker and risk management advisory firm. Established in 2002, the company specializes in tailored corporate and personal insurance solutions, bond underwriting, and corporate employee benefits management.
sunclinicallaboratories.com
November 8, 2026
•[ ransomware, healthcare ]
sunclinicallaboratories.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-11-08. Sector: Healthcare. Country: United States of America. Website: sunclinicallaboratories.com. Sun Clinical Laboratories is a Federal (Medicare) and State (Medi-Cal) certified full service lab th...
yatra.com
November 8, 2026
•[ ransomware, retail ]
yatra.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-11-08. Sector: Hospitality. Country: India. Website: yatra.com. Yatra is an online travel agent company in India. Based in Gurugram, India , Yatra is a one-stop-sho...
grupotelles.com
November 8, 2026
•[ ransomware, manufacturing ]
grupotelles.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-11-08. Sector: Manufacturing. Country: Brazil. Website: grupotelles.com. Grupo Telles is a historic Brazilian company with 180 years of experience, operating across various...
starmark.co.th
November 8, 2026
•[ ransomware, retail, manufacturing ]
starmark.co.th was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-11-08. Sector: Retail & E-Commerce. Country: Thailand. Website: starmark.co.th. STARMARK specializes in premium furniture manufacturing and imports, offering a wide range of produc...
The Container Store
November 5, 2026
•[ ransomware, retail, leak ]
The Container Store was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-05. Sector: Retail & E-Commerce. Country: United States of America. storage and organization retail United States | A shopper chat corpus of 46,013 typed customer messages; search session analytics with revenue per query; 9,305 named customer email addresses from the account portal; a shopper chat corpus of 46,013 typed customer messages; search session analytics with revenue per query; a staff directory for a US storage and organization retailer | [NOT PAID EXPOSED]
