bun.nl
September 26, 2025
•[ ransomware, retail ]
bun.nl was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2025-09-26. Sector: Agriculture and Food Production. Country: Netherlands. Website: bun.nl. Bun creert woon-, werk- en leefruimte voor iedereen en van de beste kwaliteit. Wij spelen in op zaken die leven in de maatschappij. De behoefte hierin aan woningen in is groot. Daarom houden wij ons bezig met de ontwikkeling en het renoveren van
Interzero
May 1, 2026
•[ ransomware, manufacturing, retail ]
Interzero was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Professional Services. Country: Germany. Website: interzero.de. [AI generated] Interzero is a European environmental services company headquartered in Germany. It specializes in waste management, recycling, and circular economy solutions. The company helps businesses comply with extended producer responsibility regulations, manages packaging take-back systems, and provides consulting on sustainable resource use. Interzero operates across multiple European countries and serves clients in retail, manufacturing, and industry sectors.
hpk.hamburg
April 26, 2026
•[ ransomware, retail ]
hpk.hamburg was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-04-26. Country: Germany. Website: hpk.hamburg. Is a Hamburg-based, family-run international trading company with over 50 years of experience, specializing in premium meat and seafood imports.
manateeair.com
May 3, 2026
•[ ransomware, retail ]
manateeair.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Transportation. Country: United States of America. Website: manateeair.com. +1 9417582323 . Manatee Air Heating & Cooling Inc has been providing expert HVAC services in Manatee and Sarasota counties since 1988, specializing in heating and air conditioning installation, repair, and maintenance. The company prides itself on its commitment to quality work, customer satisfaction, and competitive pricing, offering financing options and a 1-year labor warranty. With a team of certified, licensed, and insured technicians, they ensure fast turnaround times and emergency services to keep homes and businesses comfortable year-round. Manatee Air Heating & Cooling is recognized for its reliability and community-focused approach, making it a trusted choice for HVAC solutions. Stolen: --
Cult Wines
May 4, 2026
•[ ransomware, retail, finance ]
Cult Wines was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: cultwines.com. Cult Wines is revolutionizing the fine wine industry by leveraging expertise, digital platforms, and innovative technology to enhance the buying, selling, investing, and collecting experience for producers and consumers. Their services support the entire life cycle of fine wine, ensuring transparency and secure transactions. Recognizing fine wine as a unique investment, Cult Wine Investment provides clients with a wealth of possibilities, combining heritage with cutting-edge technology to enrich portfolios and enhance lives. Targeting both new generations of wine drinkers and seasoned collectors, Cult Wines aims to build a global community around fine wine appreciation.
Morning Star Tours
April 30, 2026
•[ ransomware, retail ]
Morning Star Tours was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Hospitality. Country: United States of America. Website: morningstartours.com. Journeys that can change lives
sanver.com.mx
May 4, 2026
•[ ransomware, retail, manufacturing ]
sanver.com.mx was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Professional Services. Country: Mexico. Website: sanver.com.mx. Sanver Forte is a leading hardware wholesaler with over 30 years of experience in the northeastern, central, and Bajo regions of Mexico. The company offers a wide range of products and services related to hardware and construction, focusing on meeting the needs and expectations of its clients through timely deliveries and excellent customer service. Their mission is to simplify the distribution of leading brands, ensuring satisfaction and profitability for customers, collaborators, and shareholders. Sanver Forte aims to be the most comprehensive and secure provider of hardware and home preservation products, contributing to the growth of its employees and the community.
Employees: 1000
Revenue: $30 Million
Industry: Home Improvement & Hardware Retail
Phone Number: +52 7898933030
Ahorramas
May 5, 2026
•[ ransomware, retail ]
Ahorramas was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Spain. Website: www.ahorramas.com.
GRANDHOME
May 5, 2026
•[ ransomware, retail ]
GRANDHOME was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Bangladesh. Website: grandhomemart.com. GRANDHOME is a leading Thai retailer specializing in construction materials, home decor, and furnishing products. Established in 1973, it has grown into a major hub for high-quality tiles, sanitary ware, and kitchen innovations
Positiwise Infotech Pvt
May 5, 2026
•[ ransomware, technology, healthcare ]
Positiwise Infotech Pvt was listed as a victim on the leak site of the sinobi ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Technology. Country: India. Positiwise Software Pvt Ltd is a software development company based in India and the USA, specializing in a wide range of services including web development, eCommerce solutions, mobile app development, and custom software development. They cater to various industries such as healthcare, retail, real estate, finance, and hospitality, providing tailored solutions to meet specific business needs. With over two decades of experience, their team of top-tier developers is dedicated to delivering high-quality, scalable, and innovative software solutions. Positiwise aims to help businesses digitize their operations effectively while ensuring data security and timely project delivery.
Magnolia (Israel)
May 5, 2026
•[ ransomware, retail, leak ]
Magnolia (Israel) was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Israel. Website: magnolia-jewellery.com. Israeli jewelry company. Silver & accessories, participates in Vicenza jewelry fair (2025/2026). Sells via buyme.co.il gift cards. ~38k files, invoices in Hebrew (SI/IN/OV prefix).
Bandeirante Supermercados
May 5, 2026
•[ ransomware, retail ]
Bandeirante Supermercados was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Brazil. Website: bandeirantesupermercados.com.br. Brazilian supermarket chain.
Elken Sdn Bhd
May 5, 2026
•[ ransomware, retail ]
Elken Sdn Bhd was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Retail & E-Commerce. Country: Malaysia. Website: elken.com. MLM / health & beauty products company. ~16k emails extracted.
La Kaffa International
May 3, 2026
•[ ransomware, retail ]
La Kaffa International was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Agriculture and Food Production. Country: Italy. Website: lakaffagroup.com. lakaffagroup.com zoominfo.com/c/la-kaffa-international-co-ltd/426003975 La Kaffa International is a publicly listed Taiwanese multinational food and beverage group (Taiwan Stock Exchange, code: 2732), founded in 2004 and headquartered in Zhubei City, Hsinchu County, Taiwan, with over 663 employees and annual revenues around $46 million. The company is best known as the parent brand of Chatime the world-famous bubble tea chain expanded to 50+ countries across 6 continents, making it the top takeout tea brand in Australia, Southeast Asia, and beyond. Beyond Chatime, La Kaffa manages a multi-brand portfolio of 9+ F&B concepts including ZenQ Dessert, Bake Code Bakery, ChunSun Cake, La Kaffa Cafe, Wagokoro Tonkatsu, and Osaka Ohsho Taiwan, with over 1,100 outlets in China alone
Levante Living
May 3, 2026
•[ ransomware, healthcare, retail ]
Levante Living was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Retail & E-Commerce. Country: Italy. Website: levanteliving.com. levanteliving.com zoominfo.com/c/levante-living-lp/388951109 Levante Living is a Canadian-owned senior living enterprise founded in 2016 by Michael Petersen and Jim MacDonald, and headquartered in Toronto, Ontario, focused on acquiring, managing, and redeveloping senior housing across North America. The company currently operates 24 retirement residences across Ontario, employs over 600 team members, and manages approximately 1,600 investors with over $175 million in senior living assets. Its service offerings span the full care spectrum independent living, assisted living, memory care, respite care, and long-term care guided by the values of dignity, compassion, integrity, and excellence
East
May 3, 2026
•[ ransomware, technology, retail ]
East was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-05-03. Country: Japan. Website: east-inc.jp. east-inc.jp zoominfo.com/c/east/5000054099 East Inc. is a Japanese company headquartered in Tokyo that provides comprehensive outsourcing services for commercial facilities shopping malls, outlet parks, and office complexes covering everything from day-to-day operations to system development, website management, and information services. The company has an impressive track record of over 800 commercial facilities nationwide across Japan, with clients including Roppongi Hills, Nihonbashi Takashimaya S.C., Mitsui Outlet Parks, and Ebisu Garden Place. Since 2007, East Inc. has also been supporting Japanese companies expanding into China, offering systems and operational know-how for overseas operations
Kınık Gross
April 29, 2026
•[ ransomware, retail ]
Knk Gross was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Professional Services. Country: Turkey. Website: kinikgross.com. kinikgross.com Knk Gross Toptan Market is the first and only local wholesale market in the Thrace (Trakya) region of Turkey, located in orlu. It offers a wide range of products including fresh produce, meat, deli, legumes, cleaning supplies, and personal care items all at competitive wholesale prices
globalmerchservices.com
May 6, 2026
•[ ransomware, retail ]
globalmerchservices.com was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: globalmerchservices.com. Global Merchandising Services (GMS) is an international entertainment merchandising company founded in 2008. It specializes in developing and managing merchandise
studioubertazzi.it
May 6, 2026
•[ ransomware, retail ]
studioubertazzi.it was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Retail & E-Commerce. Country: Italy. Website: studioubertazzi.it. Is an Italian firm that likely operates in the field of professional services such as architecture, design, or engineering consulting.
alge-stop.dk
May 6, 2026
•[ ransomware, retail, leak ]
alge-stop.dk was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Retail & E-Commerce. Country: Denmark. Website: alge-stop.dk. +45 22100211 . Alge-Stop helps homeowners and businesses keep their outdoor surfaces clean and protected. They remove algae and moss from roofs, walls, tiles, and paving stones, making surfaces look fresh and new. With their special treatment and cleaning process, Alge-Stop offers up to 20 years of protection, helping customers maintain the beauty and integrity of their property Stolen: 73gb 7100 files
