Magdalena Grand Beach Golf Resort
August 21, 2026
•[ ransomware, retail ]
Magdalena Grand Beach Golf Resort was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Hospitality. Country: Mexico. Website: magdalenagrand.com. magdalenagrand.com zoominfo.com/c/magdalena-grand-beach--golf-resort/348187300 Magdalena Grand Beach & Golf Resort is a luxury hotel and resort located in Lowlands on the beautiful island of Tobago.
It features premium oceanfront accommodations with access to a championship golf course, spa, pools, and tennis courts.
The property is also a popular destination for weddings, offering guests a variety of dining options and vibrant nightlife.
Cinépolis
August 21, 2026
•[ ransomware, retail ]
Cinpolis was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-21. Sector: Hospitality. Country: Mexico. Website: www.cinepolis.com.
JC Sales
July 10, 2026
•[ ransomware, retail, leak ]
JC Sales was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-10. Sector: Retail & E-Commerce. Country: United States of America. Website: jcsalesweb.com. JC Sales is a leading full-service wholesaler based in Los Angeles, California, specializing in
a vast array of wholesale products including health and beauty items, food and beverages, gene
ral merchandise, and seasonal items.
We will upload 206gb of corporate data soon. Detailed personal employee information (passports,
DLs, addresses, phones, contacts), confidential financials, contracts and agreements, client i
nformation, NDAs and so on.
PT Perusahaan Jamu Air Mancur
August 22, 2026
•[ ransomware, retail, manufacturing ]
PT Perusahaan Jamu Air Mancur was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Agriculture and Food Production. Country: Indonesia. [AI generated] PT Perusahaan Jamu Air Mancur is an Indonesian company operating in the traditional herbal medicine industry. Based in Solo, Central Java, it manufactures and distributes jamu, a traditional Indonesian herbal remedy, along with related health and wellness products. Founded in 1963, the company is one of Indonesia's well-known herbal medicine producers, serving both domestic and export markets across Southeast Asia.
Aquamar Inc
August 23, 2026
•[ ransomware, retail, manufacturing ]
Aquamar Inc was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Agriculture and Food Production. Country: United States of America. Website: aquamarseafood.com. Aquamar, Inc. specializes in providing high-quality, wild-caught seafood products that are both delicious and nutritious.
The company targets markets in the U.S., Canada, and Latin America, focusing on retail and foodservice sectors.
Westwing Group SE
August 23, 2026
•[ ransomware, retail, technology ]
Westwing Group SE was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Retail & E-Commerce. Country: Germany. Website: westwing.com. [AI generated] Westwing Group SE is a German e-commerce company specializing in home and living products. Founded in 2011 and headquartered in Munich, Germany, it operates an online platform offering curated furniture, dcor, and lifestyle products. The company serves customers across multiple European markets and combines an inspiration-driven shopping experience with a members-only model, targeting design-conscious consumers seeking premium home furnishings.
resi.com
August 24, 2026
•[ ransomware, retail, technology ]
resi.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Retail & E-Commerce. Country: Germany. Website: resi.com. Resi is a UK-based online architectural and home renovation platform founded in 2017 by Alexandra Depledge and Jules Col...
Frato
August 24, 2026
•[ ransomware, retail ]
Frato was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Other. Country: Brazil. Website: frato.com. (release includes data for the entire group of companies across all countries of operation, financial documentation, shareholder information, personal data of employees and clients, and much more) FRATO is recognized for its commitment to quality and style, merging traditional craftsmanship with innovative design. Drawing inspiration from diverse cultures and breathtaking locations worldwide, the brand creates a unique international aesthetic. It offers an exceptional interior lifestyle concept through its flagship stores located across America, Europe, and the Middle East. FRATO's intended clients are those seeking sophistication and inspiration for their living spaces.
The Liberty Group
August 24, 2026
•[ ransomware, retail, financial ]
The Liberty Group was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-08-24. Country: United States of America. Website: libertygrp.com. About The Liberty Group Companys offerings include local, long distance, and international moving, lab relocation services, and logistics solutions. They cater to a diverse range of clients, providing professional and comprehensive assistance to both residential and commercial customers. Investigators are working to identify the perpetrators and assess the full scope of the damage. A company has suffered a major cyberattack resulting in the theft of approximately 27,000 internal files. The leaked documents include financial records, internal working materials, and personal data of employees. Attackers encrypted the company's systems following the breach, severely disrupting operations
lagegepesca.it
August 24, 2026
•[ ransomware, retail ]
lagegepesca.it was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Agriculture and Food Production. Country: Italy. Website: lagegepesca.it. Based in Lallio, near Bergamo in Lombardy, the company traces its origins to 1957, when Santo Gavazzi established a small
Johnson City Honda
August 25, 2026
•[ ransomware, retail, automotive ]
Johnson City Honda was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Retail & E-Commerce. Country: United States of America. Website: johnsoncityhonda.com. Country: Tennessee, United States |
Website: johnsoncityhonda.com |
Revenue: $6,5 Million |
Industry: Automobile Dealers |
Employees: 11-50 |
Properties: 32.9 GB(34,277 Files, 8,896 Folders)
Arich Enterprise Co., Ltd.
August 25, 2026
•[ ransomware, healthcare, retail ]
Arich Enterprise Co., Ltd. was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Other. Country: Taiwan. Website: www.arich.com.tw. Currently, our end customers include over 12,000 establishments, such as medical centers, regional hospitals, area hospitals, clinics, chain pharmacies, standalone pharmacies, and hyper market channels. We have created a robust pharmaceutical marketing service system and become the largest domestic company in this field.
Morgan Services
August 26, 2026
•[ ransomware, manufacturing, retail ]
Morgan Services was listed as a victim on the leak site of the AiLock ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: morganservices.com. Morgan Services, Inc. is a family-owned textile company in business since 1887, they specialize in linen and uniform rental services for all types of facilities. Morgan is headquartered in Chicago, Illinois.
wmiemporium.com
August 26, 2026
•[ ransomware, retail, manufacturing ]
wmiemporium.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Retail & E-Commerce. Country: United States of America. Website: wmiemporium.com. WMI Emporium Co., Ltd. is a Thai manufacturer and distributor of metal sheet products established in 2002 as a joint ven...
lemonfarm.com
August 26, 2026
•[ ransomware, retail ]
lemonfarm.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Agriculture and Food Production. Website: lemonfarm.com. Lemon Farm Co., Ltd. is a leading Thai organic supermarket chain and online platform for organic and healthy food produc...
Party Rental
August 25, 2026
•[ ransomware, leak, retail ]
Party Rental was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: partyrentalltd.com. partyrentalltd.com zoominfo.com/c/party-rental-ltd/92603384 is a legitimate, family-owned U.S. event rental company founded in 1972 one of the largest in the country. HQ and a 300,000 sq ft warehouse are in Teterboro, NJ, with locations in New York City, Philadelphia, Washington D.C., Boston, and the Hamptons.
Hungry Lion
August 27, 2026
•[ ransomware, retail, technology ]
Hungry Lion was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Retail & E-Commerce. Country: Ghana. Fast food franchise (burgers, chicken, chips, ice cream) - 111 locations across South Africa, Botswana, Namibia, Zambia, Zimbabwe, Lesotho, Mauritius. Three POS systems: Unity POS (242MB monthly), GAAP POS (daily), CoSoft POS (145 terminals). | Botswana
Open Sports
August 27, 2026
•[ ransomware, retail ]
Open Sports was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Retail & E-Commerce. Country: Argentina. Website: www.opensports.com.ar.
Seabrook Island
July 31, 2026
•[ ransomware, retail, leak ]
Seabrook Island was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-07-31. Sector: Hospitality. Country: United States of America. Website: seabrookisland.com. Seabrook Island and its stunning natural beauty create the perfect setting for luxury homes enj
oying oceanfront, riverfront, tidal marsh, golf course, and maritime forest views.
We will upload 55gb of corporate data soon. Employee personal information (passports, DLs, SSNs
, personal financials), client information, projects, financials, NDAs and so on.
Rohloff Group
August 27, 2026
•[ ransomware, manufacturing, retail ]
Rohloff Group was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-08-27. Sector: Manufacturing. Country: South Africa. KFC
Rohloff Group franchise partner
Total leak: 536 GB, 103,196 Files, 30,805 Folders
Data: Employees personal , Loan applications, Employees banking details, ID's,
Bank account statements, Employees ACKNOWLEDGEMENT OF DEBT, RESULT OF THE DISCIPLINARY HEARING,
Financial documentation for royalties, Food Cost Reconciliation and a lot of other documentation.
Data type: Confidential
Full publication coming soon.
