Medical Department Store
September 10, 2026
•[ ransomware, retail, healthcare ]
Medical Department Store was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-09-10. Sector: Retail & E-Commerce. Country: United States of America. Website: medicaldepartmentstore.com. Medical Department Store in united state
Praveg Caves Jawai
September 12, 2026
•[ ransomware, retail, technology ]
Praveg Caves Jawai was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Hospitality. Country: India. Luxury safari resort near Jawai leopard reserve, Sumerpur (Pali), Rajasthan, India (phone +91 777 908 4007). Runs IDS Fortune V5 hotel PMS/POS (customer code 9473, runtime C:\Program Files\IDS\FortuneV5runtime); restaurant PANTHERA and Panthera Bar; safari tours; OTAs: MakeMyTrip, Goibibo, swiftbook.io, Journey Expeditions; staff: HARSH, VINODK, ATANU, ADITYA THAKUR. | Near Jivda Gate, Bija Pur Road, Bijapur, Jawaband Road, Sumerpur (Pali), Rajasthan, 306126
lasultanahotels.com
September 12, 2026
•[ ransomware, retail ]
lasultanahotels.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Hospitality. Country: Morocco. Website: lasultanahotels.com. La Sultana Hotel Group is a Moroccan luxury boutique hotel group created in the year 2000, targeting discerning traveler...
www.tender.mx
September 12, 2026
•[ ransomware, retail, leak ]
www.tender.mx was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-12. Sector: Government & Defense. Country: Mexico. Website: www.tender.mx. Tender (Carnicera Tender) is a Mexican premium butcher shop chain (carnicera) founded under the original brand Vigar...
www.kashkha.com
September 13, 2026
•[ ransomware, retail, manufacturing ]
www.kashkha.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-13. Website: www.kashkha.com. Kashkha is a multinational modest fashion brand founded three decades ago in Dubai, UAE, specializing in designing, manu...
Atlas Ocean Voyages
September 14, 2026
•[ ransomware, retail ]
Atlas Ocean Voyages was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Hospitality. Country: United States of America. Website: www.atlasoceanvoyages.com. Travel Arrangements Stolen data: 37 GB.
Rosello et Fils
September 14, 2026
•[ ransomware, retail ]
Rosello et Fils was listed as a victim on the leak site of the Eclipse ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Agriculture and Food Production. Country: France. Website: rosello-fils.fr. Rosello & Fils is a fruit and vegetable wholesaler based in Saint-Laurent-Blangy, France. With over 100 years of experience, the company operates exclusively within the Hauts-de-France region, serving professionals in the Nord, Pas-de-Calais, and Somme departments. Its client base includes commercial and collective catering, local shops, and large and medium-sized retail surfaces
Geieg
September 15, 2026
•[ ransomware, retail ]
Geieg was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Other. Country: Spain. Website: www.geieg.cat.
Sarku Japan
September 14, 2026
•[ ransomware, retail, automotive ]
Sarku Japan was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Retail & E-Commerce. Country: United States of America. Website: sarkujapan.com. sarkujapan.com zoominfo.com/c/sarku-japan/33898946 SARKU Japan Japan's #1 independent service & wholesale network for foreign cars founded 1993 in Chiba by Texan David J. Jones (in Japan since 1989) after seeing that owners of European/American cars in Japan were "orphans": parts take 68 weeks from Europe, service is scarce. SARKU built the full foreign-car infrastructure: 9 service centers (8 Kanto + Nagoya), a wholesale yard of ~4,000 imported cars (one of Japan's two largest), a parts warehouse of 30,000+ SKUs worth 700M+ (also one of Japan's two largest), plus procurement/export arms via US offices in Seattle (since 1997) and Florida selling 20,000+ cars and serving 60,000+ active customers (~150 staff from 15 countries; ~120K monthly site visitors, 170K+ downloaded car-buying guides). Since 2018 it's owned by the Netherlands' Louwman Group (Europe's largest family-run dealer group, est. 1923). Motto: "Foreign cars. Japanese precision."
Librería Santa Fe
September 14, 2026
•[ ransomware, retail ]
Librera Santa Fe was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Retail & E-Commerce. Country: Argentina. Website: santafelibros.com.ar. santafelibros.com.ar Librera Santa Fe APS S.R.L. is an Argentine book retailer and distributor from Buenos Aires founded 1996 (SIC 5942 Book Stores, Active status), operating a chain of bookstores (named after Avenida Santa Fe, the city's legendary book district in Barrio Norte) plus B2B book/stationery distribution to schools and institutions across Argentina, with traces in Italian business aggregators (export/Italy-linked operations). Classic family bookselling business pre-Amazon era model: retail + distribution. Bottom line: a Buenos Aires book chain riding the avenue that made the city UNESCO's 2011 World Book Capital.
Wada Farms
September 14, 2026
•[ ransomware, retail, manufacturing ]
Wada Farms was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Agriculture and Food Production. Country: Japan. Website: wadafarms.com. wadafarms.com Wada Farms third-generation family potato empire from Idaho founded 1945 by Japanese-American farmer Albert Wada (whose family was interned at Minidoka camp during WWII, then returned and bought 160 acres near Pocatello); today run by the third generation (~10,000 acres in Magic Valley growing Idaho Russet potatoes, onions and sweet potatoes) with its own climate-controlled storage, packing shed and three brands: Potato King, Wada Farms and Wada Farms Organic selling into national grocery chains, processors and export channels. Vertical integration from field to branded shelf; revenue undisclosed (est. $50100M+); 50150 seasonal/permanent staff
Dang Invest Group
September 14, 2026
•[ ransomware, finance, retail ]
Dang Invest Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Financial Services. Country: Vietnam. Website: danginvestgroup.com. danginvestgroup.com Dang Invest Group zech family restaurant group from Ostrava, founded in 1998 by Vietnamese immigrants the force behind the country's biggest Asian fast-food network: brands GUTY ("Taste of Modern Asia" bnh m, bao, rice bowls), Multifood (the original, 1998), Rakki Sushi, Tuk Tuk and Amart cafs, running 70+ company-owned outlets across Czechia, Slovakia and Germany, mostly on shopping-mall food courts, with a central kitchen and no franchise/PE money. The Vietnamese-diaspora ladder: one stall in 1998 mall standard in the 2000s sub-brands in the 2010s three countries in the 2020s, with the GUTY trademark registered at EUIPO/UKIPO for future European expansion.
Iveta
September 14, 2026
•[ ransomware, retail, manufacturing ]
Iveta was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Country: Croatia. Website: iveta.hr. iveta.hr rocketreach.co/iveta-doo-windows-and-doors-profile_b58bc102f9eb0201 Iveta Croatian family confectionery & bakery from Split traditions since 1985 producing Dalmatian classics: Splitska torta (Split cake), mandulato, zabac, krotule, bajamini and custom celebration cakes. Distribution: own cafs in Split and Trogir, B2B supply to Dalmatian hotels and restaurants, online orders; tourist-souvenir channel for the summer season. Digital: 24,000+ Facebook followers (the local 3565 demographic lives there), active Meta ad campaigns since 2018, modest Instagram. Small family business (2nd generation), minimal public registry data (verify OIB/capital/revenue via sudreg.hr).
Neff Drexel
September 14, 2026
•[ ransomware, manufacturing, technology ]
Neff Drexel was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Manufacturing. Country: Switzerland. Website: neff-drexel.ch. neff-drexel.ch zoominfo.com/c/neff--drexel/431534427 Neff & Drexel AG Swiss multimedia retailer and integrator founded in 1967 in Gais (Appenzell) as a family Radio-TV shop today operating as 1xRichtig ("once, correctly") from Gaiserstrasse 46, Appenzell (AG, UID CHE-105.772.429, capital CHF 100,000 after a June 2026 capital reduction from CHF 400,000). It sells, installs and repairs consumer and professional audio/video tech home Hi-Fi and home cinema (with room-calibration via its own measurement system), plus pro-AV integration for churches, school halls, swimming pools, restaurants and boardrooms and retails through the European Expert buying cooperative to match marketplace pricing. Run by Jakob Sutter (board president) and Markus Wetter a 32-year multimedia veteran and former president of the Swiss radio/TV retailers' association for Eastern Switzerland + Liechtenstein it's also an accredited apprenticeship company (Multimediaelektroniker EFZ, 4-year program).
Cedars Foods
September 14, 2026
•[ ransomware, retail, manufacturing ]
Cedars Foods was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Agriculture and Food Production. Country: United States of America. Website: cedarsfoods.com. cedarsfoods.com zoominfo.com/c/cedars-mediterranean-foods-inc/22189641 Cedars Foods America's #1 hummus & falafel brand a 1981-founded Dearborn, Michigan family company (the Hamady family, in the heart of the Arab-American community) that made Mediterranean food mainstream in the US. Products: hummus, falafel, baba ghanoush, taboule, dolmas, pita chips, kibbeh, tzatziki, toum in retail formats (810 oz) and foodservice 10-lb boxes for US Foods, Sysco and Shamrock; clients: Costco, Kroger, Walmart, Whole Foods, Meijer national reach from a Dearborn plant with ~110140 staff
Gelarti
September 14, 2026
•[ ransomware, retail, manufacturing ]
Gelarti was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Other. Country: Peru. Website: gelarti.com.pe. gelarti.com.pe zoominfo.com/c/gelarti/459647742 Gelarti Peru's leading gourmet ice-cream parlor chain 39 shops & cafs in the country's top malls operating since 2013 through Franquicias Unidas del Per S.A.C. (RUC 20548498181). The twist: Gelarti is the international alias of Colombia's legendary Popsy (Danesi Cantagali Group, founded 1981 by UN-economist-turned-entrepreneur lvaro Londoo and his wife Elena) the Popsy name couldn't be registered abroad, so exports run under Gelarti ("gelato + arte"): Panama since 2003 (with its own plant, now claims #1 there) and Peru since 2013 (a $20M/50-store plan with local flavors lcuma & pisco sour). Menu: copas (~S/19.90), milkshakes, frapps, 1L family tubs, crepes, pastries and coffee a gelateria-caf format with delivery via Rappi and its own site (ratings 4.14.4). The group behind it runs the full vertical: plants, cold chain, B2B distribution (Tottus, Tambo) and 200+ Popsy stores in 46 Colombian cities (~12M ice creams/year).
McCarthy Tire Service
September 14, 2026
•[ ransomware, retail, manufacturing ]
McCarthy Tire Service was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Retail & E-Commerce. Country: United States of America. Website: mccarthytire.com. McCarthy Tire Service is a family-owned and operated American tire and automotive service company founded in 1926 and headquartered in Wilkes-Barre, Pennsylvania. The company specializes in commercial tire sales and services, fleet management, truck mechanical repairs, off-the-road (OTR) and industrial tires, passenger vehicle services, and 24-hour commercial roadside assistance. McCarthy Tire also operates Bandag retread manufacturing plants, providing tire retreading solutions for commercial and industrial customers. With more than 70 service locations across eight states on the U.S. East Coast, the company serves transportation, construction, agriculture, forestry, and other industries. McCarthy Tire is one of the largest independent commercial tire dealers in the United States.
The company headquarters is located in 340 Kidder Street, Wilkes-Barre, PA 18702, United States. 1K-5K Employees
Lazyboyz
June 23, 2026
•[ ransomware, retail, manufacturing ]
Lazyboyz was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-23. Sector: Other. Website: lazyboyz.no. Lazy Boyz - Harley-Davidson Oslo specializes in motorcycles and workshop services, particularly
for Harley-Davidson and Royal Enfield, with over 30 years of experience. They offer a wide ran
ge of new and used motorcycles, as well as comprehensive services including repairs, customizat
ions, and parts supply.
We will upload corporate data soon. Employee personal information, financials, contracts and ag
reements and so on.
stoecklin-kuechen.ch
September 15, 2026
•[ ransomware, retail ]
stoecklin-kuechen.ch was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Retail & E-Commerce. Country: Switzerland. Website: stoecklin-kuechen.ch. The company is based in Aesch near Basel and has developed from a traditional carpentry business founded by Ernst Stcklin
Reddrop Group
September 16, 2026
•[ ransomware, retail ]
Reddrop Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-16. Country: Australia. Website: www.reddrop.com.au.
