Leisure Coast Kitchens
September 16, 2026
•[ ransomware, retail, leak ]
Leisure Coast Kitchens was listed as a victim on the leak site of the kairos ransomware group; the attack is estimated to have taken place on 2026-09-16. Sector: Retail & E-Commerce. Country: Australia. Leisure Coast Kitchens specializes in designing and installing high-quality bespoke kitchens, laundries, and bathrooms tailored to individual styles and needs. They offer a full range of services including custom cabinetry, benchtops, and renovation solutions, ensuring a personalized approach for each project. The company is dedicated to helping homeowners create functional and beautiful spaces, believing that everyone deserves a dream kitchen. With competitive pricing and expert advice, they aim to transform homes into enjoyable and inspiring environments.
palletshop
September 8, 2026
•[ ransomware, retail, hack ]
palletshop was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-08. Sector: Retail & E-Commerce. Country: Russian Federation. Website: palletshop.ru. palletshop.ru
www.diarco.com.ar
September 17, 2026
•[ ransomware, retail, technology ]
www.diarco.com.ar was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Retail & E-Commerce. Country: Argentina. Website: www.diarco.com.ar. Diarco is a company that operates in the HR & Staffing industry. It employs 1000to4999 people and has 1Gto5G of revenue. The company is headquartered in San Telmo, Capital Federal, Argentina.
www.appliancefactory.com
September 17, 2026
•[ ransomware, manufacturing, retail ]
www.appliancefactory.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Manufacturing. Country: United States of America. Website: www.appliancefactory.com. Appliance Factory & Mattress Kingdom offers a wide range of discount appliances and mattresses, providing unbeatable savings to customers across multiple locations including Colorado, Kentucky, Wyoming, and Indiana. Their extensive product lineup includes kitchen appliances, laundry machines, refrigeration units, and various mattress types from well-known brands. The company emphasizes next-day delivery, professional installation, and financing options to enhance customer convenience. Targeting homeowners and trade partners, they pride themselves on excellent service and a hassle-free shopping experience.
STP Fashion Lab
September 17, 2026
•[ ransomware, retail ]
STP Fashion Lab was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Retail & E-Commerce. Country: Italy. Website: stpfashionlab.it. stpfashionlab.it is the website of STP Fashion Lab, a Tuscan company that has specialized in making Made in Italy womenswear for over twenty years. It produces the FRIVOLIT brand, founded in 2019, which targets independent, sensitive, and playful women.
Javep Chevrolet
September 7, 2026
•[ ransomware, retail ]
Javep Chevrolet was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: Brazil. Website: javepchevrolet.com.br. Javep Chevrolet makes buying a car simple and easy. They help customers find their perfect vehi
cle through a complete online experience. From first contact to final delivery, everything happ
ens right from home.
We will upload 16gb of corporate data soon. Detailed employee personal information (passport nu
mber, NAME, address, phone, email address and so on), projects, clients information, Chevrolet
agreements and so on.
fchhotels.com
August 31, 2026
•[ ransomware, retail ]
fchhotels.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Hospitality. Country: Brazil. Website: fchhotels.com. THE FIRST CALL The company that manages your hotel and calls itself "First Call Hospitality" forgot ...
naturesplus.com
August 28, 2026
•[ ransomware, leak, retail ]
naturesplus.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Retail & E-Commerce. Country: United States of America. Website: naturesplus.com. Documents: Natural Organics, Inc. / NaturesPlus PROLOGUE CEO Jim Gibbons, between 2015 and 2019, pur...
www.roancampingholidays.com
September 18, 2026
•[ ransomware, retail, leak ]
www.roancampingholidays.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Hospitality. Country: Netherlands. Website: www.roancampingholidays.com. Roan Luxury Camping Holidays is a Dutch tour operator specializing in deluxe mobile home and tent rentals at 4- and 5-star campsites across Europe
Inglewood Golf
September 18, 2026
•[ ransomware, retail ]
Inglewood Golf was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-09-18. Sector: Hospitality. Country: Canada. Website: www.inglewoodgolfclub.ca. Canada
forus.cl
May 13, 2026
•[ ransomware, retail ]
forus.cl was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-05-13. Sector: Professional Services. Country: Chile. Website: forus.cl. Founded in 1980 and headquartered in Santiago, Chile, Forus is a provider of apparel. The company pr...
AKAZZO
September 19, 2026
•[ ransomware, retail ]
AKAZZO was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-09-19. Country: Brazil. Website: akazzo.com.br. akazzo.com.brAkazzo Footwear specializes in exclusive fashion products, particularly focu Deadline: 2026-09-26 15:25:00.000000
Fanatics (global sports commerce platform)
September 20, 2026
•[ ransomware, retail, technology ]
Fanatics (global sports commerce platform) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-20. Sector: Retail & E-Commerce. Country: United States of America. Website: fanatics.com. Sports commerce / e-commerce United States | Complete order history: 46,902 order files (108 GB) with customer personal data; Accounts-payable invoices of league and brand partners; Customer balances, bank transaction archive, customer tax exemption certificates; The fraud-prevention data set | Their cloud data estate is under our destructive control; deletion has begun. | [ACTIVE: deadline 2026-09-23 01:01 UTC]
ShopDunk
September 20, 2026
•[ ransomware, retail ]
ShopDunk was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-20. Sector: Retail & E-Commerce. Country: Thailand. Website: www.shopdunk.com.
SECOND HOUSE
September 21, 2026
•[ ransomware, retail ]
SECOND HOUSE was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Hospitality. Country: Spain. Website: secondhouse.es. Second House (Second House, S.L.) is a privately held real estate company
headquartered in Barcelona, Spain, with over 26 years of experience in the
property sector. Their business model centers on buying properties and
adding value to them through renovation works, improving rental
situations, and legalizing the existing state of buildings effectively
driving renewal of the real estate market in Barcelona and its surroundings.
They are actively acquiring in the Barcelona area (including L'Hospitalet,
Badalona, Sant Cugat, etc.)
Grupolider
September 21, 2026
•[ ransomware, manufacturing, retail ]
Grupolider was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Other. Country: Angola. Website: grupolider-ao.com. grupolider-ao.com zoominfo.com/c/grupolider/429885445 Grupolider is an Angolan diversified holding company founded in 1999, headquartered in Catete (Luanda province). The group operates in agriculture, logistics, freight forwarding, construction, and furniture manufacturing, with its flagship business being Novagrolider the largest agricultural producer in Angola. Novagrolider farms around 20,000 hectares of land and produces roughly 150,000 tons of food per year (bananas, vegetables, fruit, and dairy), while the group employs over 3,200 direct staff. The company exports to Portugal, Spain, France, Belgium, Russia, South Africa, and Morocco, and was the first farm in Africa to receive GlobalGAP certification. Estimated annual revenue is around USD 1315 million (Novagrolider alone), though reliable consolidated figures for the private group are not publicly disclosed. Since 2021, after the death of co-founder Joo Macedo, the group has been led by his brother and partner Jos Macedo.
FinSoft (Kolibri retail back-office software)
September 22, 2026
•[ ransomware, technology, retail ]
FinSoft (Kolibri retail back-office software) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Retail & E-Commerce. Country: Uzbekistan. Retail software vendor / IT services Uzbekistan | Client databases of 10+ retail chains (keddo, marc, lancaster, comf_rus, ek, cr, bas_at, bas_juk, bas_nov, bas_zar): sales, stock, pricing, financial records; Back-office platform and API service data | One client database publishes per day after the deadline, starting with keddo. Their clients will know exactly whose software failed them. | [ACTIVE: deadline 2026-09-25 01:06 UTC]
The Fifty/50
September 22, 2026
•[ ransomware, retail ]
The Fifty/50 was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-22. Country: United States of America. Website: www.thefifty50.com.
moscone.com
September 11, 2026
•[ ransomware, retail ]
moscone.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-11. Sector: Hospitality. Country: United States of America. Website: moscone.com. "We Create Unforgettable Experiences." What ASM Global Hides Backstage at Moscone Center PROLOGUE: O...
lakebeverage.com
September 7, 2026
•[ ransomware, retail ]
lakebeverage.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: United States of America. Website: lakebeverage.com. A Beer Distributor and Its 165 Gigabytes Rochester, New York WSLR #63124 September 2026 Prologue...
