SON-VIDEO
July 6, 2026
•[ ransomware, retail ]
SON-VIDEO was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-07-06. Sector: Retail & E-Commerce. Country: France. Website: son-video.com. Son-Video.com is France's largest online retailer of hi-fi and home-cinema equipment. Founded in 2000. Headquartered in Champigny-sur-Marne, le-de-France. 17 physical stores across France (Paris,...
PIO PIO
June 27, 2026
•[ ransomware, retail ]
PIO PIO was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-06-27. Sector: Other. Country: Colombia. Website: piopio.com.co. Pio Pio (Grupo PIO PIO S.A.S.) is a family-owned rotisserie chicken restaurant chain (asadero) in Colombia. Currently 10+ locations in the Popayn/Cali region (southwestern Colombia). Managed by th...
Company #19
October 11, 2026
•[ ransomware, healthcare, retail ]
Company #19 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. confectionery & telehealth New York, USA | [PENDING EXPOSURE: data publishes 2026-10-13 09:40 UTC]
KFC
October 10, 2026
•[ ransomware, retail, manufacturing ]
KFC was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Retail & E-Commerce. Country: United States of America. Website: kfc.com. kfc.com Revenue $36.4 Billion KFC runs 34,747 restaurants across 150+ countries and about 99% are franchised, run by local partners, serving roughly 1 billion chickens every year. Its restaurants sold $36.4 billion of food in 2025 with $1.5 billion in operating profit, earned mainly from 4-6% sales royalties paid by franchisees, not from selling chicken. 2025 was a record year with nearly 3,000 new restaurants opened across 105 countries, roughly one new KFC every 3 hours and 10,000 stores added in the last 5 years. KFC owns zero chicken farms or factories and buys from suppliers like Tyson Foods and Pilgrim's Pride with fresh deliveries up to 3 times a week. Around 30,000 corporate employees work for KFC worldwide while over 1 million people work across its franchise restaurants and supply network. A new U.S. KFC does about $1.5 million in average annual sales per restaurant and KFC is the world's #1 chicken chain by locations and sales.
Placer AI
October 10, 2026
•[ ransomware, technology, retail ]
Placer AI was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Technology. Country: United States of America. Website: placer.ai. placer.ai Revenue $136.5 Million private US company valued at $1.5 billion that sells foot traffic analytics for physical locations, estimating visits to stores, malls and offices from anonymized data on tens of millions of mobile phones with 92%+ claimed accuracy. It hit $100 million annual recurring revenue in 2024 after growing 80% in a year and serves 4,000+ customers including Sony, Wegmans, BJ's Wholesale, SeaWorld and Bloomberg, which puts Placer data into its Terminal so investors can track company performance before earnings. Money comes from SaaS subscriptions starting around $12,000 a year, API data feeds and add-on datasets, and it has raised $268 million in total funding. Around 630 employees work at Placer.ai after 150 layoffs in January 2025 aimed at reaching profitability, and it owns no factories or stores because its product is pure software and data.
PG Group (Pure Options)
October 13, 2026
•[ ransomware, finance, retail ]
PG Group (Pure Options) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Financial Services. cannabis operator (US) Lansing, Michigan, USA | Complete directory database of a Michigan cannabis operator: password data for all 577 accounts; Working password corpus for dozens of staff and administrator accounts; Financial and contract backups: payroll reports, general ledgers, signed operating and lease agreements; Complete inventory of the shared data volume | [NOT PAID EXPOSED]
Refako Autodele
October 6, 2026
•[ ransomware, manufacturing, retail ]
Refako Autodele was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: Denmark. Website: refako.dk. refako.dk REFAKO ApS (Refako Autodele) is a Danish family-owned truck and trailer parts retailer founded in 1975 in Odense, Denmark, celebrating its 50th anniversary in 2025. It operates 13 stores nationwide with 200,000+ SKUs (290,000 for B2B) and employs 5970+ people. Annual gross profit is ~2627M DKK (~$3.7M), but the company has been loss-making for 6 consecutive years (20202025), with equity saved by owner injections (16.3M DKK in 2025) after hitting a crisis low of 2.7M in 2022. It turned operationally profitable in 2024 (+0.46M DKK) under new sole owner Klaus Allan Jrgensen (KJ Holding took 100% in May 2024), but slipped back into losses in 2025. Refako is Denmark's only authorized SAF-Holland partner (global leader in trailer axles/suspension) and carries premium brands like WABCO, Knorr-Bremse, JOST, Dinex, and Exide. Customer reputation is excellent Trustpilot 4.8/5 from 2,695 reviews with same-day shipping and 30-minute Click & Collect across its store network.
Smart Value
October 6, 2026
•[ ransomware, retail, leak ]
Smart Value was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Retail & E-Commerce. Country: Belize. Website: smartvalue.biz. smartvalue.biz zoominfo.com/c/smart-value/408286294 Smart Value Limited is an Indian MLM (multi-level marketing) / network marketing company founded in 20032004 in New Delhi by Manoj Kumar Gupta, operating 100+ offices across India with a claimed 2,000,000+ distributors (IBAs). The company sells health supplements, personal care, household products, and educational courses but revenue is not publicly disclosed (private MLM). Its core business model relies on recruiting new distributors rather than actual retail sales, with heavily inflated product pricing (200500% above market) to fund multi-level commissions. The company faces serious and widespread allegations: consumer complaints about pyramid-like structure, inability to recover investments, fake income claims on social media, and reported law enforcement scrutiny in India. ~99% of participants lose money (standard MLM economics), while only top recruitment leaders profit. Despite 20+ years of operation and membership in Indian
GRUPO STARFOODS
July 6, 2026
•[ ransomware, retail, hack ]
GRUPO STARFOODS was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-07-06. Sector: Agriculture and Food Production. Country: Portugal. Website: starfoods.pt. Grupo Starfoods is a Portuguese restaurant group founded in 1993. Headquartered in Cruz Quebrada, Lisbon. Owns 6 brands: Companhia, Loja das Sopas, Bifanas de Vendas Novas, Selfish, Baslico, and T...
Claire's Inc.
October 12, 2026
•[ ransomware, retail, leak ]
Claire's Inc. was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Retail & E-Commerce. Country: United States of America. Website: www.claires.com. About Claire's Inc. Claire's Inc. is a jewelry and accessories retailer aimed at tweens and teens, known for its ear-piercing services and mall-based stores. The company has filed for bankruptcy twice and closed many locations in recent years. It now operates through remaining stores and partnerships with retailers such as Walmart and CVS. Claire's Inc. suffered a cyberattack that disrupted its operations and compromised customers and employees data.
Sinae Phuket Luxury Hotel
July 6, 2026
•[ ransomware, retail ]
Sinae Phuket Luxury Hotel was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-06. Sector: Hospitality. Country: Thailand. Website: www.sinaephuket.com.
Heidi's Events & Catering, Inc.
July 19, 2026
•[ ransomware, retail ]
Heidi's Events & Catering, Inc. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-19. Sector: Hospitality. Country: United States of America. Website: heidisevents.com. [AI generated] N/A
I don't have reliable, verifiable information about a specific company named "Heidi's Events & Catering, Inc." in my training data. This appears to be either a small/local business not well-documented in public sources, or a name that could correspond to multiple unrelated entities.
To provide an accurate threat intelligence profile, I'd need you to supply additional identifying details, such as: a business registration number, headquarters location or address, website domain, known executives, or industry sector specifics. With that information, I could help structure an assessment or guide you on how to verify the company through business registries, sanctions lists, or corporate databases.
Fondy Food Pantry
October 4, 2026
•[ ransomware, retail ]
Fondy Food Pantry was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-10-04. Sector: Agriculture and Food Production. Country: United States of America. Website: fondyfoodpantry.org.
The Margo Hotel
August 19, 2026
•[ ransomware, retail ]
The Margo Hotel was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: themargohotel.com. The Margo Hotel is a leading 4-star business hotel in Depok that offers premium service, modern facilities for large-scale conferences, and a comfortable stay, and regularly receives top ratings fr...
Estrategias BigMat S.L.U.
October 14, 2026
•[ ransomware, retail, financial ]
Estrategias BigMat S.L.U. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Retail & E-Commerce. Country: Spain. Website: Estrategias BigMat S.L.U.. [distribution] Estrategias BigMat S.L.U. the Spanish master franchisee of BigMat International, a French cooperative and one of Europe's largest building materials distribution networks.
624 SEPA payroll XML files (20222025) every monthly salary payment for 300500 employees across 15+ entities, with full names, DNI/NIE numbers, IBANs, and exact euro amounts.
20 SILTRA Social Security databases the complete filing history for every subsidiary's workforce, containing nmeros de afiliacin, contribution bases, and employment records.
2,690 customer loyalty cards with DNI/NIF identifiers the entire customer-identity database.
888 Modelo 347 tax notifications annual declarations to the Agencia Tributaria naming customers and suppliers with their DNI and transaction amounts.
Complete financial records 5 years of accounting journals, bank reconciliations, insurance policies, loan agreements, and invoices.
Occupational health data (PRL) for 12+ subsidiaries workplace injury reports, medical certificates, and risk assessments.
FOODMatch
October 14, 2026
•[ ransomware, retail ]
FOODMatch was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Agriculture and Food Production. FOODMatch DIVINA is a producer and importer of Mediterranean specialty foods, offering a wide
range of products including olives, antipasti, spreads, sauces, and condiments. The company fo
cuses on responsibly and traditionally crafted foods that enhance community and quality of life
.
We will upload 55gb of corporate data soon. Detailed employee information (passports, DLs, SSNs
, complete forms), client information, contracts and agreements, payment details, NDA, etc.
camden-living
October 15, 2026
•[ ransomware, retail ]
camden-living was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. [AI generated] Camden Living, operating through Camden Property Trust, is a United States-based real estate company specializing in the development, ownership, management, and leasing of multifamily residential apartment communities. It operates within the real estate and property management industry, serving residents across major metropolitan markets in the U.S., particularly in the Sun Belt region, including Texas, Florida, and other southern and western states.
Enchanted Fine Jewellery
October 15, 2026
•[ ransomware, retail ]
Enchanted Fine Jewellery was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Retail & E-Commerce. Country: India. Website: enchantedfinejewellery.in. enchantedfinejewellery.in
Cradlewise Inc.
October 16, 2026
•[ ransomware, technology, retail ]
Cradlewise Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: United States of America. Website: cradlewise.com. VC-backed smart crib manufacturer; ~$14M/yr DTC revenue plus Nurture subscription layer.
Lane Equipment
October 14, 2026
•[ ransomware, manufacturing, retail ]
Lane Equipment was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Manufacturing. Country: United States of America. Website: laneequipment.com. Lane Equipment Company has been a trusted food service partner in Texas since 1966, specializing in the sales, leasing, repairs, and parts for commercial kitchen equipment. They offer a wide range of products including soft serve machines, frozen beverage machines, ice machines, and refrigeration solutions. With four locations in Houston, San Antonio, Austin, and the Rio Grande Valley, they cater to restaurant professionals and commercial kitchen needs. Their services also include maintenance and parts support, ensuring comprehensive solutions for their clients.
