HIT d.d. Nova Gorica
August 25, 2026
•[ hack, retail, technology ]
HIT detected unauthorized access to its information systems on August 25, 2026. The incident forced six casinos to close for roughly three days and caused limited hotel operations, cash-register problems and unavailable gaming and loyalty functions. Casinos began reopening on August 28 with reduced functionality. HIT had not disclosed whether data was stolen, whether a ransom was demanded, or who was responsible as of the source publication.
Hungry Lion
August 27, 2026
•[ ransomware, retail, financial ]
MedusaLocker listed South African fast-food chain Hungry Lion on its leak site on 27 Aug 2026, claiming POS data covering 111 locations in seven countries and threatening a full leak. The claim is unverified; the company did not comment.
Undisclosed BigCommerce merchants
September 13, 2026
•[ hack, technology, retail ]
Attackers used a stolen BigCommerce API key of the Ribon app on Sept 13-17, 2026 to download shopper data page by page from BigCommerce merchant stores and inject malicious scripts into some storefronts. BigCommerce revoked the key, removed the app and notified merchants.
Fastr
September 13, 2026
•[ hack, technology, retail ]
Boston e-commerce software firm Fastr suffered a system compromise in which attackers stole BigCommerce API credentials for the Ribon apps of its unit Be A Part Of, per BigCommerce; the keys were abused Sept 13-17, 2026 against merchant stores. Fastr made no public comment.
Master of Malt
September 13, 2026
•[ hack, retail, technology ]
UK online drinks retailer Master of Malt confirmed attackers used a compromised Ribon app key to access customer data on its BigCommerce store between 13 and 17 Sep 2026. Customers were notified by email; payment details and passwords were not exposed.
Undisclosed freight carrier
September 18, 2026
•[ social, phishing, retail ]
An unnamed third-party freight carrier experienced an email-system compromise. Attackers obtained shipment-related information through the carrier, used it to arrange a fraudulent pickup supported by apparently correct paperwork, and diverted a load of blueberries from a cold-storage facility. The carrier itself was the compromised IT victim; the food theft was a downstream consequence. Victim country, compromise date, technique, actor identity and quantity of accessed correspondence were not disclosed. September 18, 2026 is a publication-date fallback, not the date of the intrusion.
Dodo Pizza
September 27, 2026
•[ leak, retail, technology ]
Russian pizza chain Dodo Pizza confirmed Sept 28, 2026 that attackers breached its IT systems on Sept 27-28 and may have accessed customer data. DataSuckers claimed 2-3 TB on ~68 million customers and offered it for sale. Dodo blocked access and notified Roskomnadzor.
Harry's International
November 2, 2026
•[ ransomware, retail ]
Harry's International was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Retail & E-Commerce. Country: Singapore. Website: www.harrys.com.sg. Harrys is Singapores largest collection of everyday bars and kitchens - a homegrown destination where people from all walks of life come together to connect, unwind, and celebrate life over great food and drinks.
CMD Naturkosmetik
November 1, 2026
•[ ransomware, retail ]
CMD Naturkosmetik was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-01. Sector: Retail & E-Commerce. Country: Germany. Website: www.cmd-natur.de.
Company #113
November 2, 2026
•[ ransomware, retail ]
Company #113 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-11-02. Country: United States of America. storage and organization retail United States | [PENDING EXPOSURE]
Main Place Mall
October 2, 2026
•[ ransomware, retail ]
Main Place Mall was listed as a victim on the leak site of the netrunner ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Retail & E-Commerce. Country: Malaysia. Website: www.mainplace.com.my. Main Place is part of a mixed development that combines residence, leisure, retail and dining to bring you the ultimate city-suburban lifestyle.
www.raajratna.com
October 2, 2026
•[ ransomware, retail, manufacturing ]
www.raajratna.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Retail & E-Commerce. Country: India. Website: www.raajratna.com. Raajratna Metal Industries Limited (RMIL) is a leading Indian public limited company incorporated on May 9, 1988, headqu...
Jampac Alimentos
August 18, 2026
•[ ransomware, retail, financial ]
Jampac Alimentos was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Agriculture and Food Production. Country: Brazil. Website: jampac.com.br. Jampac Alimentos is a leading producer and distributor of food products in Brazil, with over 20
years of experience and a commitment to quality and efficiency. The company serves more than 6
,500 clients, including restaurants, supermarkets, and industrial kitchens, delivering a wide r
ange of products such as poultry, beef, pork, dairy, and fish.
We will upload 35gb of corporate data soon. Personal information (passports, payment informatio
n and other information), financials, clients information and so on.
Gerrity Stone
October 2, 2026
•[ ransomware, manufacturing, retail ]
Gerrity Stone was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Manufacturing. Country: United States of America. Website: gerritystone.com. gerritystone.com zoominfo.com/c/gerrity-stone-inc/48615647 GerrityStone, Inc. is a family-owned stone fabrication and installation company founded in 1997 (part of the Gerrity family business dynasty dating back to 1906), based in Wilmington, Massachusetts, with a state-of-the-art 44,400 sq ft fabrication facility opened in 2022. It is a private, self-funded company with estimated annual revenue of ~$4.4M (range $110M) and 4353 employees. GerrityStone operates the largest natural stone inventory in New England 2,000+ slabs across 300+ colors, imported mainly from Italy and Brazil. The company offers full-cycle service (digital templating, CNC/water-jet fabrication, installation) and was the first new authorized Cambria quartz fabricator in 10 years. It has won "Best of Boston Home" multiple times (2009, 2010, 2024)
Zelham
September 30, 2026
•[ ransomware, retail, leak ]
Zelham was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-30. Website: zelham.com. zelham.com rocketreach.co/zelham-inc-profile_b580fe5ef66e1a3f Zelham, Inc. is a U.S. hospitality renovation general contractor headquartered in Boise, Idaho, founded in 2000 and owned since 2023 by President & CEO Stephen Horel. The company specializes in hotel remodeling, rebranding, and ADA conversions, with 500+ completed projects and licenses in 47 states. It employs approximately 5557 people across 15 states, generating an estimated annual revenue of $9.6M$41.6M (sources vary). Zelham works with 20+ major hotel brands (Marriott, Hilton, IHG, Sonesta, Four Seasons), offering pre-construction planning, free estimates, and turnkey project management.
Skaff Group
October 3, 2026
•[ ransomware, retail, finance ]
Skaff Group was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-03. Sector: Other. Website: skaffgroup.com. Skaff Group SKAFF is a leader in Lebanon in the field of decorative fabrics. Files: 139,377Data volume: ~268 GB**Full HR dossiers - ~40 scans of Lebanese national ID cards (both sides + photos), a director's passport, civil-status extracts.Banking data - employee account files at Byblos Bank (named per person), Cedrus Bank corporate card program with banker contacts, account statements.Payroll violations - unpaid-salary analysis file, payroll module source code, staff leave requests.Employees' private lives - family photo archives on the work server.Commerce price lists, Four Seasons and Les Galeries proposals, customs/export documents (Dubai, Erbil), customer claims. More
Agio International
September 5, 2026
•[ ransomware, retail ]
Agio International was listed as a victim on the leak site of the VYPR ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Financial Services. Country: United States of America. Website: www.agio-usa.com. Agio International specializes in distinctive outdoor furniture designs that merge beauty, quality, and affordability, catering to homeowners who enjoy entertaining in their outdoor spaces. The company embodies the art of living well with innovative designs and durable materials crafted over years of expertise. Agio's offerings include various collections and accessories, aimed at enhancing outdoor living experiences. Additionally, Agio provides services for retail partnerships and outdoor lifestyle inspiration.
KOOKABARRA JUICE
October 6, 2026
•[ ransomware, retail, manufacturing ]
KOOKABARRA JUICE was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Retail & E-Commerce. Country: Australia. Website: kookabarra.com. French manufacturer specializing in fresh-pressed fruit juices, detox juices, smoothies, nectars and other fresh fruit products, serving both professionals and consumers.
My Cloud Grocer
November 1, 2026
•[ ransomware, retail, technology ]
My Cloud Grocer was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-11-01. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: mycloudgrocer.com. Software
Owens Distributors
September 30, 2026
•[ ransomware, retail, manufacturing ]
Owens Distributors was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-09-30. Sector: Retail & E-Commerce. Country: United States of America. Website: owensdistributors.com. Specializes in providing industrial machinery & equipment services
