CarMax, Inc.
September 29, 2025
•[ ransomware, retail ]
CarMax, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2025-09-29. Sector: Retail & E-Commerce. Country: United States of America. Website: carmax.com. Size: 1.7 GB (compressed) | Records: 500k Records | Updated: 24 Jan 2026
Shiffler Equipment Sales
January 24, 2026
•[ ransomware, retail ]
Shiffler Equipment Sales was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-24. Sector: Professional Services. Country: United States of America. Website: www.shifflerequip.com.
BIDAIAK BANOA S.L.
January 25, 2026
•[ ransomware, retail ]
BIDAIAK BANOA S.L. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Hospitality. Country: Spain. Website: banoa.com. Data size claimed by the group: 200 GB. BIDAIAK BANOA S.L.
CENTAURPRODUCTS.COM
January 25, 2026
•[ ransomware, retail ]
CENTAURPRODUCTS.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Retail & E-Commerce. Country: Canada. Website: CENTAURPRODUCTS.COM. [AI generated] "N/A"
KCDWORLDWIDE.COM
January 25, 2026
•[ ransomware, retail ]
KCDWORLDWIDE.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Professional Services. Country: United States of America. Website: KCDWORLDWIDE.COM. [AI generated] KCD Worldwide is a leading fashion services agency that provides diverse solutions in fields such as public relations, events, and digital. With offices in New York, London, and Paris, they truly hold an international presence. KCD Worldwide works several high-profile brands and designers to create fashion shows, presentations, product launches, digital campaigns, and celebrity dressing.
WARRANTYFIRST.CO.UK
January 25, 2026
•[ ransomware, retail, automotive ]
WARRANTYFIRST.CO.UK was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: WARRANTYFIRST.CO.UK. [AI generated] Warranty First is a UK-based company that provides vehicle warranty services. They offer a range of warranty packages to customers tailored to meet the specific requirements of different vehicles. Their plans cover various vehicle systems including engines, gearboxes, transmissions, ECUs, and more. The firm uses a national network of approved repairers to perform necessary repairs, promising a seamless service.
WILDRIDGELANDSCAPE.COM
January 25, 2026
•[ ransomware, retail ]
WILDRIDGELANDSCAPE.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Professional Services. Country: United States of America. Website: WILDRIDGELANDSCAPE.COM. [AI generated] Wildridge Landscape is a professional landscaping company located in the United States. They specialize in providing exceptional custom landscaping solutions for residences and businesses alike. Their services range from lawn care and garden design, to installation of patios, retaining walls, and other outdoor features. Backed by experienced professionals, Wildridge Landscape aims to enhance the aesthetic appeal and functionality of outdoor spaces.
BR-ALSETH.NO
January 25, 2026
•[ ransomware, retail ]
BR-ALSETH.NO was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Retail & E-Commerce. Country: Norway. Website: BR-ALSETH.NO.
Vitosha Park Hotel
January 25, 2026
•[ ransomware, retail ]
Vitosha Park Hotel was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Hospitality. Country: Bulgaria. Website: vitoshaparkhotel.com. Employee data breach.
premmotors.com
January 26, 2026
•[ ransomware, retail, automotive ]
premmotors.com was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Retail & E-Commerce. Country: India. Website: premmotors.com. Prem Motors is a leading automobile dealership for Maruti Suzuki, established in 1990 and headquartered in Gwalior, India. The company operates 58 showrooms, 43 workshops, and various outlets across multiple states, providing a comprehensive range of services including sales, service, accessories, finance, and insurance. With a strong focus on customer satisfaction and a commitment to quality, Prem Motors has earned numerous awards for its performance and service excellence. The company aims to deliver a unique buying experience and maintain a professional reputation among manufacturers, financiers, and customers alike.
sitoy.com
January 26, 2026
•[ ransomware, retail, manufacturing ]
sitoy.com was listed as a victim on the leak site of the abyss ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Retail & E-Commerce. Country: Hong Kong. Website: sitoy.com. Founded in 1968, Sitoy Group is engaged in the design, research, development, manufacturing, sale, wholesaling, and retailing of handbags, small leather goods, travel goods, and footwear products.
www.shrimphouse.com
January 25, 2026
•[ ransomware, retail ]
www.shrimphouse.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Hospitality. Country: United States of America. Website: www.shrimphouse.com. 1tb data
Christine London
January 20, 2026
•[ ransomware, retail ]
Christine London was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-01-20. Sector: Retail & E-Commerce. Country: United States of America. Website: www.christinelondonltd.com. United States
ALLMAX
June 27, 2025
•[ ransomware, retail ]
ALLMAX was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2025-06-27. Sector: Retail & E-Commerce. Country: Canada. Website: www.allmaxnutrition.com. Canada
freidarothman.com
January 26, 2026
•[ ransomware, retail, hack ]
freidarothman.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Retail & E-Commerce. Country: United States of America. Website: freidarothman.com. Based jewelry and accessories brand founded and led by designer Freida Rothman, who grew up in Brooklyn and comes from
Jay's Sporting Goods
January 27, 2026
•[ ransomware, retail ]
Jay's Sporting Goods was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-01-27. Sector: Retail & E-Commerce. Country: United States of America. Website: www.jayssportinggoods.com.
Panera Bread
January 26, 2026
•[ ransomware, leak, retail ]
Panera Bread was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Hospitality. Country: United States of America. Website: panerabread.com. Records: 14M Records | Updated: 27 Jan 2026 | Note: Don't be the next headline. | Don't be an idiot like this company. Make the right decision, don't be the next headline.
Goodmanagement
January 26, 2026
•[ ransomware, leak, retail ]
Goodmanagement was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-01-26. Sector: Hospitality. Country: United States of America. Website: goodmanagement.com. A professional hospitality management company
Connor Co
January 27, 2026
•[ ransomware, manufacturing, retail ]
Connor Co was listed as a victim on the leak site of the nitrogen ransomware group; the attack is estimated to have taken place on 2026-01-27. Sector: Professional Services. Country: United States of America. Website: www.connorco.com. TThe company operates in the wholesale trade of engineering materials and equipment..
skyegtours.com
January 27, 2026
•[ ransomware, retail ]
skyegtours.com was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-01-27. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: skyegtours.com. Sky Egypt specializes in tourism services, offering a range of travel packages and flight tickets. The company aims to provide quality travel experiences to clients looking to explore various destinations. They cater to travelers seeking both budget-friendly and premium options. Sky Egypt emphasizes customer satisfaction and convenience in planning travel itineraries
