AGROFRUTO SAC
September 23, 2026
•[ ransomware, retail ]
AGROFRUTO SAC was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Agriculture and Food Production. Country: Peru. agrofruto.peWe are a Peruvian company in the Agroindustrial sector, dedicated to the expo Deadline: 2026-09-30 09:45:00.000000
vestfrostsolutions.com
August 31, 2026
•[ ransomware, manufacturing, retail ]
vestfrostsolutions.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Other. Country: Norway. Website: vestfrostsolutions.com. Vestfrostsolutions.com The company sells reliability and precision back bar coolers for Red Bull, ...
www.jonesthegrocer.com
September 24, 2026
•[ ransomware, retail ]
www.jonesthegrocer.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Retail & E-Commerce. Country: Australia. Website: www.jonesthegrocer.com. Jones the Grocer is a premium gourmet food retail and cafe brand founded in 1996 in Sydney, Australia, originally launch...
Agora coopérative agricole
September 24, 2026
•[ ransomware, retail ]
Agora cooprative agricole was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Agriculture and Food Production. Country: France. Website: coopagora.fr.
Zig Inge Group
September 24, 2026
•[ ransomware, retail ]
Zig Inge Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-24. Country: Australia. Website: www.prospecthillcamberwell.com.au.
Martin Lawrence Galleries
September 22, 2026
•[ ransomware, retail ]
Martin Lawrence Galleries was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Retail & E-Commerce. Country: United States of America. Website: martinlawrence.com. Premier gallery of fine art in America
corisricambi.it
September 24, 2026
•[ ransomware, retail, manufacturing ]
corisricambi.it was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Other. Country: Italy. Website: corisricambi.it. Presenti sul territorio da oltre un ventennio, la CO.R.I.S. S.r.l. cresciuta all'interno del...
Electrolux & Ontrac
September 25, 2026
•[ ransomware, manufacturing, retail ]
Electrolux & Ontrac was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-25. Sector: Manufacturing. Hello Electrolux & OnTrac,
Still no response from you. When we called your IT helpdesk posing as threat researchers and asked about the breach, we were told, "We cannot talk about it."
You have one week before we release more data - starting with information on your employees.
We'd prefer to settle this directly.
Same goes for OnTrac. We recently learned that OnTrac has been paying employees as little as $14.50 an hour. As a result, we will be releasing salary information for all of their employees.
I also managed to get in touch with a former OnTrac employee, chill guy. Said his time there was horrible.
EMAIL: xdlmfao@morke.ru
SESSION: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Retail, Manufacturing, Transportation]
Ligue se Grupo
September 24, 2026
•[ ransomware, technology, finance ]
Ligue se Grupo was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Other. Country: Portugal. Website: grupoligue-se.pt. grupoligue-se.pt Ligue-se Grupo is a Portuguese IT and business-services group founded in 2009 in Funchal, Madeira (born from the merger of accounting firm Contatlntico and IT company Enterformatic). It runs several businesses: Chip7 retail computer stores (Madeira + Lisbon) selling PCs, laptops and accessories with repair services; GoClick, a B2B IT arm handling infrastructure, cybersecurity, cloud/Microsoft 365, ERP software (Sage, PHC, ZoneSoft) and hotel-tech solutions; and Ligue.Gest, offering accounting, payroll and tax consulting. Led by CEO Ivo Herculano Caires and CFO lia Caires, it targets SMEs and private clients across Madeira and mainland Portugal. In short: one group covering everything from hardware sales and repairs to IT management and bookkeeping.
Craisa
September 21, 2026
•[ ransomware, retail, manufacturing ]
Craisa was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Website: craisa.com. craisa.com zoominfo.com/c/craisa/345610542 CRAISA S.A. is a Costa Rican distributor of agricultural, construction, and industrial machinery, founded in 1981 and headquartered in Heredia. It is the official exclusive dealer of CASE IH (agriculture) and CASE Construction Equipment in Costa Rica, covering the entire country through branches in Heredia, San Carlos, Gupiles, and Cartago. The company also distributes specialty brands including Antonio Carraro (Italian specialty tractors), Hangcha (forklifts), XAG agricultural drones, and precision farming systems (Raven/Trimble), while offering in-house service workshops, genuine parts supply, and equipment financing. It employs around 43 people with a highly loyal management core (many directors with 1522 years of tenure), operates under SAP Business One, and holds official "Carbono Neutral" certification from the Costa Rican government.
Brancoptica
September 21, 2026
•[ ransomware, retail, healthcare ]
Brancoptica was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Other. Country: Portugal. Website: brancoptica.pt. brancoptica.pt Brancptica, Lda is a family-owned optical retail chain founded in 1961 in Cartaxo, Portugal (Ribatejo region) by Jos Francisco Branco de Oliveira, originally as "Oculista do Cartaxo." Now led by the founder's son Rui Oliveira, the company operates 20+ stores across three districts Santarm, Lisbon, and Leiria under the banner of the international Opticalia alliance (part of EssilorLuxottica). Beyond selling eyewear (Ray-Ban, Gucci, and designer brands), it provides professional optometry and orthoptics services with a team of 20+ qualified specialists, and runs its own e-commerce store on Shopify. The company employs roughly 3151 people with estimated revenue in the 210 million range. It is a rare example of a family optical chain that has survived and grown amid the mass decline of independent opticians in Portugal, winning the pticaPro 2024 Social Responsibility Award.
Magnetos y Refacciones
September 21, 2026
•[ ransomware, manufacturing, retail ]
Magnetos y Refacciones was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Mexico. Website: magnetos.com.mx. magnetos.com.mx zoominfo.com/c/magnetos-y-refacciones-sa-de-cv/1288761434 Magnetos y Refacciones, S.A. de C.V. is a Mexican trading and service company founded in 1977 and headquartered in Guadalajara, Jalisco. Its core business is supplying magnet wire, bearings, insulating varnishes, electric motors, and spare parts for motor repair wholesale and retail, serving customers across all 32 Mexican states. Its second key business is a nationwide network of authorized service centers performing warranty and post-warranty repair for Groupe SEB brands (Krups, T-Fal, Rowenta, Moulinex) and Taurus in 810 Mexican cities. The company employs around 129 people and is part of a small group operated by Corporacin Rodaja. It also exports to Central America (mainly El Salvador), with about US$4.2 million in shipments over the last five years. Despite nearly 50 years on the market, it has virtually no digital presence its website is an empty placeholder.
Apollo 21 – Quality Truck, Bus & Trailer Spare Parts South Africa
September 19, 2026
•[ ransomware, manufacturing, retail ]
Apollo 21 Quality Truck, Bus & Trailer Spare Parts South Africa was listed as a victim on the leak site of the BlackLocks ransomware group; the attack is estimated to have taken place on 2026-09-19. Sector: Transportation. Country: South Africa. Website: apollo21.co.za. Views: 985
Electrolux 2...
September 28, 2026
•[ ransomware, manufacturing, retail ]
Electrolux 2... was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Manufacturing. Country: Sweden. Hi Electrolux, im getting kind of inpatient, therefore i might just leak something. If i hear nothing from you in the next 3 days, more data WILL be leaked.
Thanks.
Emails: xdlmfao@morke.ru
Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Retail, Manufacturing, Transportation]
sumperk.cz
September 28, 2026
•[ ransomware, government, retail ]
sumperk.cz was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Retail & E-Commerce. Country: Czechia. Website: sumperk.cz. The official website, sumperk.cz, serves as the city's principal digital information and service portal for residents, businesses, visitors and other
Kellys Home Center
September 24, 2026
•[ ransomware, retail ]
Kellys Home Center was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-09-24. Sector: Retail & E-Commerce. Country: United States of America. Website: npiprofile.com. The company specializes in selling high-quality home appliances, mattresses, and furniture
Geebee Garments
September 28, 2026
•[ ransomware, retail, manufacturing ]
Geebee Garments was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Retail & E-Commerce. Geebee Garments is a renowned apparel manufacturer with over 130 years of experience, operating
facilities in the UAE and Bangladesh. The company specializes in a wide range of products, inc
luding casual wear, formal wear, and workwear, catering to leading brands globally.
We will upload 100gb of corporate data soon. Employee information (passports, SSN), financials,
client information, NDAs and so on.
Premiumfruits
September 28, 2026
•[ ransomware, retail ]
Premiumfruits was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Agriculture and Food Production. Country: Spain. Website: premiumfruits.eu. Organization with 3292 emails extracted. Domain: premiumfruits.eu
bakemyday.se
September 28, 2026
•[ ransomware, retail, leak ]
bakemyday.se was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Retail & E-Commerce. Country: Sweden. Website: bakemyday.se. Bake My Day vill erbjuda fler mnniskor hantverksmssiga, kta och genersa konditori- och bageriupplevelser! Vra rykande frska brd och bakverk r bakade frn grunden fr hand p utvalda rvaror.
Employees: 10
Revenue: $5 Million
Phone Number: 010 199 71 71
wildmanbg.com
September 29, 2026
•[ ransomware, retail ]
wildmanbg.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Other. Country: Bulgaria. Website: wildmanbg.com.