SCS Engineers
March 17, 2026
•[ ransomware, technology, government ]
SCS Engineers was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-03-17. Sector: Professional Services. Country: United States of America. Website: scsengineers.com. [AI generated] SCS Engineers is a United States-based environmental consulting and engineering firm. Founded in 1970, the company specializes in solid waste management, landfill design and operations, environmental remediation, and sustainability services. It serves municipal, industrial, and government clients across the country, offering technical solutions related to waste infrastructure, gas collection systems, and environmental compliance.
TESSCO
March 9, 2026
•[ ransomware, technology ]
TESSCO was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-03-09. Sector: Technology. Country: United States of America. Website: tessco.com. [AI generated] TESSCO Technologies is a United States-based company operating in the wireless technology distribution industry. Founded in 1982 and headquartered in Hunt Valley, Maryland, TESSCO serves as a value-added distributor and solutions provider for wireless networking products, infrastructure equipment, and mobile devices. The company supplies carriers, contractors, system integrators, and government agencies with products from leading manufacturers across the telecommunications sector.
Blanchard
March 9, 2026
•[ ransomware, leak, technology ]
Blanchard was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-03-09. Sector: Professional Services. Country: United States of America. Website: blanchard.com. [AI generated] Blanchard is a US-based professional development and leadership training company founded by Ken Blanchard, co-author of "The One Minute Manager." Operating in the corporate training and consulting industry, it offers leadership development programs, coaching services, and organizational effectiveness solutions to businesses worldwide. Headquartered in Escondido, California, the company serves clients across various sectors globally.
Powell Electronics
February 26, 2026
•[ ransomware, manufacturing, technology ]
Powell Electronics was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-02-26. Sector: Manufacturing. Country: United States of America. Website: powell.com. [AI generated] Powell Electronics is a US-based authorized distributor of electronic components and assemblies. Founded in 1946 and headquartered in Camp Hill, Pennsylvania, the company serves aerospace, defense, industrial, and commercial markets. It supplies connectors, cables, electromechanical components, and custom assemblies from leading manufacturers, offering supply chain solutions, engineering support, and value-added services to customers across North America.
Telia Norge AS
January 21, 2026
•[ ransomware, technology ]
Telia Norge AS was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-01-21. Sector: Technology. Country: Norway. Website: telia.no. [AI generated] Telia Norge AS is a Norwegian telecommunications company and a subsidiary of the Swedish Telia Company group. Operating in Norway, it provides mobile and fixed-line services, broadband internet, and TV solutions to both consumer and business customers. The company is a major player in the Norwegian telecom market, competing with providers like Telenor and Ice, and operates infrastructure supporting voice, data, and digital services across the country.
Morae
April 30, 2026
•[ ransomware, technology, finance ]
Morae was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Technology. Country: United States of America. Website: morae.com. [AI generated] Morae is a US-based professional services company specializing in legal, compliance, and technology consulting. It serves law firms, corporate legal departments, and financial institutions by providing managed services, litigation support, contract lifecycle management, and legal operations solutions. The company combines legal expertise with advanced technology to help clients improve efficiency, reduce costs, and manage risk across their legal and compliance functions.
ATF Aerospace
April 30, 2026
•[ ransomware, leak, manufacturing ]
ATF Aerospace was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Manufacturing. Country: United States of America. ATF Aerospace specializes in aerospace manufacturing and distribution, offering high-quality me
chanical and electrical components sourced from leading manufacturers. Their manufacturing capa
bilities focus on CNC milling and lathe operations, emphasizing short runs and quick turnaround
projects.
We will upload 45gb of corporate data soon. Detailed employee personal documents (passports, SS
Ns, DLs and so on), client information (BOEING files again and other confidential projects and
specification), contracts and agreements, insurance files, NDAs, etc.
weiss-pm.de
April 30, 2026
•[ ransomware, technology ]
weiss-pm.de was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Professional Services. Country: Germany. Website: weiss-pm.de. WEISS PM: The ideal company for tailored recruitment solutions. For nearly 40 years, WEISS PM has been a trusted partner...
The Switch Enterprises
April 30, 2026
•[ ransomware, technology ]
The Switch Enterprises was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Professional Services. Country: Finland. Website: www.theswitch.tv.
MES Hybrid Document Systems
April 30, 2026
•[ ransomware, technology ]
MES Hybrid Document Systems was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Professional Services. Country: Canada. Website: www.mesltd.ca.
McKay
April 30, 2026
•[ ransomware, manufacturing, technology ]
McKay was listed as a victim on the leak site of the mnt6 ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Manufacturing. Country: New Zealand. Website: mckay.co.nz. McKay is a leading international engineering firm that delivers strategically vital projects across national defense, high-tech shipbuilding, and global energy sectors. The company serves as a key technological partner to the state, implementing innovative automation systems and 'green' solutions for critical infrastructure. [Revenue: $135.8M]
TOWERPOINT WEALTH, LLC
April 30, 2026
•[ ransomware, finance, technology ]
TOWERPOINT WEALTH, LLC was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-30. Sector: Financial Services. Country: United States of America. Website: towerpointwealth.com. Salesforce records containing PII and other internal corporate data have been compromised. This is a final warning to reach out by 4 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 1 May 2026 | Warning: FINAL WARNING
Heng An Standard Life Insurance
March 21, 2026
•[ ransomware, finance, technology ]
Heng An Standard Life Insurance was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-03-21. Sector: Financial Services. Country: Hong Kong. Website: hengansl.com.hk. Downloaded:Complete Client Database: Unencrypted records containing full names, addresses, scanned identification documents (passports, drivers licenses), and biometric facial data.Corporate Intellectual Property: All proprietary IT solutions, source code repositories, and internal development tools.Executive Correspondence: The complete archive of the Board of Directors meetings, including minutes, strategic plans, and the entirety of internal email correspondence among top management.We offer all data for purchase.The company's management concealed the fact of the leak.Heng An Standard Life Insurance is a major insurance company specializing in life insurance, operating primarily in the Asian region.
DAINTY CLOUD INC
March 1, 2026
•[ ransomware, technology ]
DAINTY CLOUD INC was listed as a victim on the leak site of the tengu ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Technology. Country: United States of America. Website: daintycloud.com. DaintyCloud offers a variety of affordable virtual private server (VPS) solutions including Windows, Linux, and GPU servers across more than 34 data centers worldwide. Their services cater to clients who require high performance for applications such as gaming, video processing, and cloud computing. With competitive pricing and features like one-click deployment and easy management, DaintyCloud is geared towards both individual users and businesses seeking reliable cloud services. Additionally, they provide proxy services, ensuring clients have access to high-speed, dedicated IP options
DreamUp
March 1, 2026
•[ ransomware, education, technology ]
DreamUp was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Education. Country: United States of America. Website: dreamup.org. [AI generated] DreamUp is an American company that provides space-based educational opportunities to students of all ages. They offer various programs that utilize the unique environment of space to spark interest in Science, Technology, Engineering, and Mathematics (STEM) fields. DreamUp provides tools to conduct research in microgravity through partnerships with SpaceX, the International Space Station and other space organizations.
Salesfloor
March 1, 2026
•[ ransomware, technology, retail ]
Salesfloor was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Technology. Country: Canada. Website: salesfloor.com. [AI generated] Salesfloor is a software company that provides a mobile platform designed to connect retail store associates with online shoppers for a personalized customer experience. It empowers store associates to create and maintain personalized relationships through social selling, online engagement and clienteling tactics. Its services are used by leading retailers around the world.
OSAC Aero
March 1, 2026
•[ ransomware, manufacturing, technology ]
OSAC Aero was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Manufacturing. Country: France. Website: osac.aero. [AI generated] "OSAC Aero" is a Spanish aeronautical engineering company. They provide aeronautical consulting services, product development, aircraft maintenance, and also focus on designing, prototyping, and manufacturing aerostructures. Their innovative solutions have established OSAC as a reliable partner for leading global aerospace organizations.
Eiffage
March 1, 2026
•[ ransomware, manufacturing, technology ]
Eiffage was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Transportation. Country: France. Website: eiffage.com. [AI generated] Eiffage S.A. is a French publicly-listed company established in 1993, specializing in civil engineering and construction. Its activities are divided into five main segments: Construction, Infrastructure, Real Estate Development, Metal, and Concessions & Energy. It is known for working on significant projects such as the Eiffel Tower and the Millau Viaduct. Eiffage operates not only in France but also in more than 50 countries worldwide.
Enterprise Network Group of Indiana
March 1, 2026
•[ ransomware, technology ]
Enterprise Network Group of Indiana was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-01. Sector: Technology. Country: United States of America. Website: www.engofinllc.com.
TIW Group
January 28, 2026
•[ ransomware, technology, manufacturing ]
TIW Group was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-01-28. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.tiw-group.com. TIW Group consists of two related contracting entities: Tidewater Interior Wall and Ceiling, Inc. and Mid-Atlantic Painting, Inc., offering Class-A drywall and painting services since 1998 and 2002 respectively. They cater to builders and general contractors, providing high-quality, efficient, and timely residential and commercial services. With a strong focus on customer service and a well-seasoned staff, TIW Group ensures excellence in every project with a combination of drywall and painting applications.
