Serratelli Hat
December 9, 2025
•[ ransomware, retail ]
Serratelli Hat was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-09. Sector: Retail & E-Commerce. Country: United States of America. Website: www.serratellihatcompany.com.
TopDest
December 9, 2025
•[ ransomware, retail ]
TopDest was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-09. Sector: Hospitality. Country: Argentina. Website: www.topdest.tur.ar.
West Quay
December 9, 2025
•[ ransomware, retail ]
West Quay was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-09. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.westquay.com.
James Free Jewelers
December 9, 2025
•[ ransomware, retail ]
James Free Jewelers was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-12-09. Sector: Retail & E-Commerce. Country: United States of America. Website: www.jamesfreejewelers.com. James Free Jewelers specializes in fine jewelry and diamonds, offering a selection of engagement rings, Swiss timepieces, and luxury jewelry from renowned designers such as Mikimoto and Roberto Coin. Their extensive collection includes rings, bracelets, necklaces, and watches from prestigious brands like Rolex and Tudor. The company also provides custom jewelry design, repair services, and financing options tailored for clients seeking high-quality pieces. With locations in Dayton and Cincinnati, they cater to both local and online customers looking for exquisite jewelry and timepieces.
Don Ricardo
December 10, 2025
•[ ransomware, retail ]
Don Ricardo was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-10. Sector: Agriculture and Food Production. Country: Peru. Website: www.donricardo.com.
Urban Remedy
December 10, 2025
•[ ransomware, retail ]
Urban Remedy was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-10. Sector: Retail & E-Commerce. Country: United States of America. Website: www.urbanremedy.com.
Bell Lifestyle Products
December 11, 2025
•[ ransomware, retail ]
Bell Lifestyle Products was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2025-12-11. Sector: Retail & E-Commerce. Country: Canada. Website: belllifestyleproducts.com. Bell Lifestyle Products specializes in natural health supplements
and herbal teas, offering over 54 products across 12 health and
wellness categories.
We will upload about 23gb of corporate data soon. Employee inform
ation (passports, DLs, birth certs and so on), financials, client
information, projects, contracts and agreements, NDAs, etc.
Spitzer Auto Group
December 12, 2025
•[ ransomware, retail ]
Spitzer Auto Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Retail & E-Commerce. Country: United States of America. Website: www.spitzer.com.
ATG
December 12, 2025
•[ ransomware, retail, technology ]
ATG was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2025-12-12. Sector: Retail & E-Commerce. Country: Sweden. Website: atg.se. ATG has since 1974 delivered excitement and entertainment with quality to the Swedish people. The vision is to deliver the world's best gaming expe...
Watermark Beach Resort
December 13, 2025
•[ ransomware, leak, retail ]
Watermark Beach Resort was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-13. Sector: Hospitality. Country: Canada. Website: www.watermarkbeachresort.com.
Viga Eatery
November 19, 2025
•[ ransomware, retail ]
Viga Eatery was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-11-19. Sector: Hospitality. Country: United States of America. Website: www.vigaeatery.com. United States
Choates HVAC
November 26, 2025
•[ ransomware, retail ]
Choates HVAC was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-11-26. Sector: Other. Country: United States of America. Website: www.choateshvac.com. United States
Gordon Clifford Properties Inc.
December 11, 2025
•[ ransomware, retail ]
Gordon Clifford Properties Inc. was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2025-12-11. Sector: Professional Services. Country: United States of America. Website: gordoncliffordmanagement.com. Property management and serving san francisco property owners
GPC Industries
December 16, 2025
•[ ransomware, manufacturing, retail ]
GPC Industries was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2025-12-16. Sector: Professional Services. Country: Hong Kong. Website: gpcind.co.uk. GPC Industries Ltd is a leading trade supplier of high-quality access, handling, and storage products in the UK. With over 40 years of experience, they offer a wide range of equipment including ladders, trucks, trolleys, and various storage solutions, emphasizing UK-manufactured items as well as imported goods. Their intended clients include businesses in need of materials handling and safety equipment. GPC Industries is dedicated to providing exceptional products that meet high specifications and industry standards.
ernst-auto.de
December 16, 2025
•[ ransomware, retail, automotive ]
ernst-auto.de was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2025-12-16. Sector: Retail & E-Commerce. Country: Germany. Website: ernst-auto.de. Ernst Autohaus is a German automotive dealership and service company operating in the regional vehicle retail market. The business is
Bowman Trailer Leasing
December 16, 2025
•[ ransomware, leak, manufacturing ]
Bowman Trailer Leasing was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2025-12-16. Sector: Transportation. Country: United States of America. Website: www.bowmantrailerleasing.com. Bowman Trailer Leasing specializes in nationwide trailer leasing, offering a range of products including flatbeds, dry vans, and storage containers. They serve the transportation, construction, manufacturing, and retail industries with over 30 locations across the eastern United States. Established in 1972, the company provides reliable services and real-time asset tracking for their clients. With a strong focus on customer service, Bowman Trailer Leasing aims to meet diverse transportation and storage needs.
Ferreteria Scopazzo
December 17, 2025
•[ ransomware, retail ]
Ferreteria Scopazzo was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-17. Sector: Retail & E-Commerce. Country: Argentina. Website: www.scopazzo.com.ar.
PODOVIA
December 17, 2025
•[ ransomware, retail ]
PODOVIA was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-17. Sector: Retail & E-Commerce. Country: Poland. Website: podovia.pl.
The Araneta Group
December 10, 2025
•[ ransomware, hack, retail ]
The Araneta Group was listed as a victim on the leak site of the osiris ransomware group; the attack is estimated to have taken place on 2025-12-10. Sector: Hospitality. Country: Philippines. Website: aranetacity.com. The Araneta Group is a private, diversified conglomerate in the Philippines active in property development, food service, leisure & entertainment, and hospitality and is composed of five main business units including ACI, Inc., PPI Holdings Inc., Uniprom Inc., Araneta Hotels Inc. and Progressive Development Corporation.
aranetacity.com, aranetagroup.com
The group employs around 12,000 people.
While publicly available consolidated revenue figures for the entire group are not clearly disclosed, one of its listed related entities (separate from the core private group) Araneta Properties, Inc. (PSE: ARA) reported gross revenue of 706.7 million in 2024
Best Hotels Spain
December 18, 2025
•[ ransomware, retail ]
Best Hotels Spain was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2025-12-18. Sector: Hospitality. Country: Spain. Website: www.besthotels.es.
