CIR Realty
April 1, 2026
•[ ransomware, retail, leak ]
CIR Realty was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-01. Sector: Professional Services. Country: Canada. Website: cirrealty.ca. Established in 1983, CIR Realty is a real estate brokerage in Can
ada, serving the Central and Southern Alberta markets. They are h
eadquartered in Calgary, Alberta.
We will upload 25gb of corporate data soon. Detailed personal dat
a of employees (names, emails, addresses, phones, photos, persona
l documents) and clients (names, emails, addresses, driver licens
es, phones, payment detailed, account details and so on), detaile
d financials, contracts and agreements, lots of client files, pro
jects, NDA, internal confidential files and so on.
La Maison Bleue France
April 15, 2026
•[ ransomware, retail ]
La Maison Bleue France was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Hospitality. Country: France. Website: la-maison-bleue.fr.
guesty, LITELLM/TRIVY CAMPAIGN (TEAMPCP)
April 15, 2026
•[ ransomware, technology, retail ]
guesty, LITELLM/TRIVY CAMPAIGN (TEAMPCP) was listed as a victim on the leak site of the vect ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Technology. Country: Israel. Website: www.guesty.com. Status: STATUS: NEGOTIATING | Sector: property management | internal projects, 4 million sent/received mails with attachments, userbase, Airbnb and booking.com data stolen from guesty DATA SIZE: 700GB | Deadline: 9d 8h
Clearwater Marine Aquarium
April 13, 2026
•[ ransomware, retail ]
Clearwater Marine Aquarium was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-13. Sector: Retail & E-Commerce. Country: United States of America. Website: www.cmaquarium.org.
TFE Group
April 16, 2026
•[ ransomware, retail ]
TFE Group was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-16. Sector: Retail & E-Commerce. Country: Australia. Data size claimed by the group: 30 GB. TFE Group is a company that operates in the Architecture, Engineering & Design industry.
putzbaer.berlin
April 15, 2026
•[ ransomware, retail ]
putzbaer.berlin was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-04-15. Sector: Retail & E-Commerce. Country: Germany. Website: putzbaer.berlin. putzbr Gebudemanagement GmbH is a building management company based in Berlin, specializing in a wide range of servi...
thruwayplumbingservice.com
April 17, 2026
•[ ransomware, retail ]
thruwayplumbingservice.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Retail & E-Commerce. Country: United States of America. Website: thruwayplumbingservice.com. The business provides standard residential and commercial plumbing services, including: - Leak detection and pipe repair - Drain cleaning and
cheeky.com.ar
February 5, 2026
•[ ransomware, retail ]
cheeky.com.ar was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-02-05. Sector: Retail & E-Commerce. Country: Argentina. Website: cheeky.com.ar. Cheeky is a well-established Argentine childrens fashion brand owned by CHEEK S.A., headquartered in Martnez, Buenos Aires Province. Founded in
Strata Republic
April 17, 2026
•[ ransomware, retail, technology ]
Strata Republic was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Professional Services. Country: Australia. Website: stratarepublic.com.au. Strata Republic is a strata management company based in Sydney and Byron Bay, specializing in residential and commercial strata services. With over a decade of experience, they focus on effective communication and technology-enabled solutions to provide reliable management for their clients. Their services include comprehensive residential strata management, commercial strata management, and community property management, ensuring optimal returns for property owners. Strata Republic caters to a diverse clientele, including owners corporations and property developers, across various regions in New South Wales.
Evict them for me
April 18, 2026
•[ ransomware, retail ]
Evict them for me was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Professional Services. Country: United States of America. Website: evictthemforme.com.
The Great Cookie
April 19, 2026
•[ ransomware, retail ]
The Great Cookie was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-19. Sector: Agriculture and Food Production. Country: United States of America. Website: www.thegreatcookie.com.
Suma Sklep
April 19, 2026
•[ ransomware, retail ]
Suma Sklep was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-19. Sector: Retail & E-Commerce. Country: Poland. Website: suma24.pl. Suma24.pl is a Polish B2B online store specializing in professional cleaning products, catering equipment, and hygiene systems for the HoReCa (Hotel, Restaurant, Catering) and food industry sectors. It is operated by Suma Service, a family-owned company founded in 1995 and headquartered in Koszalin, Poland. The store offers 24/7 online ordering with payment via bank transfer, BLIK, and online transfers, and provides personalized offers, technical consulting, and long-term partnership programs
Jean Cultural
April 19, 2026
•[ ransomware, retail, manufacturing ]
Jean Cultural was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-19. Sector: Retail & E-Commerce. Country: Taiwan. Website: jeancard.com. jeancard.com Jean Cultural & Creative Co., Ltd. is a Taiwanese stationery, greeting card, and gift company founded in 1976, with nearly 50 years of experience in the international gifts and stationery industry. The company specializes in original-design handmade greeting cards, stickers, gift wrap, and creative lifestyle products, blending traditional and modern craftsmanship with designs inspired by everyday life and nature. It operates globally with products distributed in over 80 countries and maintains an online shop at shop.jeancard.com.
Casa Andina
March 26, 2026
•[ ransomware, retail, manufacturing ]
Casa Andina was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Hospitality. Country: Colombia. Website: casaandina.com.co. casaandina.com.co zoominfo.com/c/casa-andina/426558931 Casa Andina SAS is the leading hardware and construction materials distributor in south-western Colombia, headquartered in Pasto, Nario. The company serves both wholesale and retail channels, offering a specialized portfolio including plumbing, drainage, lightweight construction systems (drywall), architectural carpentry, paints, ceramics, and chemical construction products. With 51200 employees and nationwide online delivery across Colombia, Casa Andina positions itself as a one-stop specialist solutions provider for builders and renovators
Cosmo Group
March 26, 2026
•[ ransomware, manufacturing, retail ]
Cosmo Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Manufacturing. Country: Thailand. Website: cosmo.co.th. cosmo.co.th zoominfo.com/c/cosmo-group-public-co/459326707 Cosmo Group PCL, founded in 1964 and headquartered in Bangkok (Sukhumvit), is a Thai luxury packaging manufacturer with over 60 years of experience. The company specializes in premium gift boxes, displays, watch dials, cases, and accessories for global luxury brands in jewelry, watches, cosmetics, and perfume. With 1,0005,000 employees and a Swiss sales office (Cosmo Pusterla 1880), Cosmo serves top-tier international clients and holds multiple quality and sustainability certifications
Friktimporten Stockholm
March 26, 2026
•[ ransomware, retail ]
Friktimporten Stockholm was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-26. Sector: Retail & E-Commerce. Country: Sweden. Website: fruktimporten.se. fruktimporten.se rocketreach.co/fruktimporten-stockholm-ab-profile_b7bc38e2c53a0296 Fruktimporten Stockholm AB, founded in 2013 and based in Norsborg (Stockholm), is the leading fruit and vegetable wholesaler in the Mlardalen region. They stock over 950 products across a ~5,000 m warehouse, offering fresh produce from around the world loose, packed, cut, and processed. The company is part of Dole Nordic AB, a subsidiary of the global giant Dole plc
Zara (zara.com)
April 18, 2026
•[ ransomware, retail, technology ]
Zara (zara.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Retail & E-Commerce. Country: Spain. Website: zara.com. Your Bigquery instances data was compromised thanks to Anodot.com. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
Carnival Corporation & plc (carnivalcorp.com)
April 18, 2026
•[ ransomware, retail, leak ]
Carnival Corporation & plc (carnivalcorp.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Hospitality. Country: United States of America. Website: carnivalcorp.com. Over 8.7M records containing PII and other terabytes of internal corporate data have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
7-Eleven, Inc. (7-eleven.com)
April 18, 2026
•[ ransomware, retail, technology ]
7-Eleven, Inc. (7-eleven.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Retail & E-Commerce. Country: United States of America. Website: 7-eleven.com. Over 600k Salesforce records containing PII and other internal corporate data have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
Aman Resorts (aman.com)
April 18, 2026
•[ ransomware, leak, retail ]
Aman Resorts (aman.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-18. Sector: Hospitality. Country: Singapore. Website: aman.com. Over 500k Salesforce records containing PII have been compromised. Pay or Leak. This is a final warning to reach out by 21 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
