Cybersecurity Vendor
April 17, 2026
•[ ransomware, technology ]
Cybersecurity Vendor was listed as a victim on the leak site of the ransomhouse ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Technology. Website: *********.***.
Vimeo, Inc.
April 28, 2026
•[ ransomware, technology ]
Vimeo, Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-04-28. Sector: Technology. Country: United States of America. Website: vimeo.com. Your Snowflake and Bigquery instances data was compromised thanks to Anodot.com. Pay or Leak. This is a final warning to reach out by 30 Apr 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 28 Apr 2026 | Warning: FINAL WARNING PAY OR LEAK
www.durable-tech.com
March 28, 2026
•[ ransomware, technology ]
www.durable-tech.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-03-28. Sector: Technology. Country: United States of America. Website: www.durable-tech.com. Durable Mecco is a small company (1-10 employees) operating in the HR & Staffing industry, located at 176 Thorn Hill Rd, Warrendale, Pennsylvania, 15086. This entity is distinct from "Durable Technologies," which focuses on industrial marking equipment.
Intikom
April 28, 2026
•[ ransomware, technology, finance ]
Intikom was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-04-28. Sector: Technology. Country: Indonesia. Website: www.intikom.com. [AI generated] Intikom is an Indonesian information technology company that provides IT solutions and services primarily to the banking and financial sector. The company offers system integration, software development, infrastructure management, and managed services. Headquartered in Jakarta, Indonesia, Intikom has been a long-standing technology partner for major Indonesian banks, supporting digital transformation and core banking operations across the country.
TYLin International Group - Taiwan Branch
April 28, 2026
•[ ransomware, technology ]
TYLin International Group - Taiwan Branch was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-28. Sector: Professional Services. Country: Taiwan. Website: www.tylin.com.tw.
KarmaData
April 28, 2026
•[ ransomware, technology ]
KarmaData was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-28. Sector: Technology. Country: United States of America. Website: www.karmadata.com.
Silicon Alley
April 28, 2026
•[ ransomware, technology ]
Silicon Alley was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-04-28. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.siliconalley.co.uk.
Indonesia's Customs Analytics Platform
April 28, 2026
•[ ransomware, government, technology ]
Indonesia's Customs Analytics Platform was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-04-28. Sector: Government & Defense. Country: Indonesia.
osoftec.com
April 29, 2026
•[ ransomware, technology, leak ]
osoftec.com was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Technology. Country: Germany. Website: osoftec.com. +91 9717385459 . Optimization Software Technologies, LLP. is an advanced technology solutions development company that focuses on improving operational efficiency and profitability for its clients Stolen: 222gb 113k files
rotak.it
April 29, 2026
•[ ransomware, technology, healthcare ]
rotak.it was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Technology. Country: Italy. Website: rotak.it. Rotak (specifically in the context of Rotak Instruments) focuses on the distribution of specialized medical and analytical instrumentation, with related entities in industrial engineering and automation Stolen: 22.5gb 20k files
dmschweiz.ch
April 29, 2026
•[ ransomware, technology ]
dmschweiz.ch was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Professional Services. Country: Switzerland. Website: dmschweiz.ch. Sie haben im Katalog unsere Angebote von installierten und betriebsbereiten Gerten. Die Installationen knnen nach Ihren Wnschen angepasst werden. DM Standard-Installation ist optimiert und ohne Herstellerwerbung. Stolen: 120gb 100k files
pricon.com.ph
April 17, 2026
•[ ransomware, manufacturing, technology ]
pricon.com.ph was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Professional Services. Country: Philippines. Website: pricon.com.ph. Pricon Microelectronics, Inc. (PMI) is an Original Equipment Manufacturer (OEM) and a subsidiary of...
Costa Solutions, LLC
April 29, 2026
•[ ransomware, financial, technology ]
Costa Solutions, LLC was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Professional Services. Country: United States of America. Website: costasolutions.com. [warehouse] Costa Solutions, LLC a privately held managed-labor and warehousing company headquartered in San Antonio, Texas, with ~$140M annual revenue and 2001,000 employees.
The file server contained the complete operational, financial, legal, and human resources infrastructure of the company:
3,0008,000+ individuals' personal data current employees, former employees (12 years of records), independent contractors, employee dependents, and job applicants. SSNs on W-2s, W-4s, 1099s, I-9s, background checks. Bank account and routing numbers on 200+ direct deposit forms.
Medical and injury records 150+ employee injury/medical files from 20132026, FMLA medical certifications, drug test results (random, reasonable suspicion, post-incident, promotional), and workers' compensation claims for 23+ named individuals.
CEO's entire file system Josh Wean's Documents folder (5.3 GB) including P&L statements, a 17-subfolder "Confidential" directory, legal correspondence, strategic plans, a C-12 peer advisory group archive, and a $RECYCLE.BIN with 60+ deleted items.
Client contracts and competitive intelligence pricing, SLAs, and contract terms for HEB, CVS, Sysco, Amazon, McLane, Labatt, Valvoline. Competitor pricing intelligence. RFP bid documents with cost models.
Active legal case files litigation records (20212022), HR internal investigation notes (20182021), arbitration files, active investigations marked "DO NOT DELETE" all subject to attorney-client privilege.
Infrastructure secrets an HEB production server TLS certificate, a Cisco AnyConnect VPN installer, and the CEO's Remote Desktop connection file.
Corporate financials multi-year budgets, valuation & sale documents (indicating possible M&A activity), PPP loan forgiveness records, Form 5500 ERISA filings, and annual reporting.
Atlas Metal Industries Inc
April 29, 2026
•[ ransomware, leak, manufacturing ]
Atlas Metal Industries Inc was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Manufacturing. Country: Canada. Website: atlasfoodserv.com. [food, metal] Atlas Metal Industries Inc. a privately held commercial-foodservice-equipment manufacturer headquartered in Miami, Florida.
The dataset is a complete Microsoft Dynamics GP environment: production databases, payroll records, system credentials, Autodesk Vault product-design backups, CNC fabrication programs, and all supporting infrastructure configuration. The exfiltration occurred on or about April 8, 2026; the attack was identified April 22, 2026.
The exposed material includes:
15.8 GB of payroll-records database (PYREC) full Employee Master with SSNs, DOBs, addresses, direct-deposit bank routing numbers, salary, W-4 tax data, garnishments, and check history dating to at least 2018.
30+ SQL Server login accounts with password hashes in a sp_help_revlogin dump named employees, system admins (DYNSA, sa), service accounts, and Active Directory domain accounts.
74 GB of Autodesk Vault Professional backup complete product-design history from 2019 through 2026, covering every product line Atlas Metal manufactures.
Hundreds of CNC fabrication programs laser-cutter and Amada punch-press G-code for the full catalogue of sheet-metal components.
A base64-encoded SQL credential for the TimeClock Plus timekeeping system, stored in plaintext XML.
8 SQL Server databases with full backup chains ATLAS (primary), PYREC (payroll), DYNAMICS (system), TEST (18 GB dev clone), TWO, AMIT, plus system databases (master, msdb, DynamicsGPSecurity).
Advanta Genetics LLC
April 17, 2026
•[ ransomware, healthcare, finance ]
Advanta Genetics LLC was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Healthcare. Country: United States of America. Website: aalabs.com. [health] Advanta Genetics LLC a respected CLIA/CAP-accredited clinical toxicology and molecular diagnostics laborator. The exposed material includes: Tens of thousands of real patient lives including highly sensitive chronic opioid therapy charts flagged by the Texas Medical Board and elderly Medicare audit records. Provider identities and prescribing power SSNs, DEA numbers, and state licenses from 20+ states that can be turned into black-market "script pads". Gold-standard identity theft kits W-2s, I-9s with passport scans, and full employee packages for 50+ staff. 102 complete QuickBooks company files exposing every vendor, payroll run, bank link, and financial secret across the Advanta/RedLeaf/OSPRI empire. High-value trade secrets OSPRI Biopath investment decks, valuation models, FDA pre-submission packets, and the proprietary "The Brain" AI diagnostic architecture. Explosive privileged attorney-client memos on active regulatory battles (Texas Medical Board Remedial Plan #19-153 and a federal NORA subpoena). Active Directory domain controller data (NTDS.dit and SAM hives).
Color Communications LLC
April 27, 2026
•[ ransomware, technology ]
Color Communications LLC was listed as a victim on the leak site of the secp0 ransomware group; the attack is estimated to have taken place on 2026-04-27. Sector: Technology. Country: United States of America. Website: ccicolor.com. The exposed dataset includes over 200,000 unique files containing sensitive information on more than 4,500 individuals and over 5,500 organizations...
N****a
April 24, 2026
•[ ransomware, technology ]
N****a was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-04-24. Country: United States of America. Website: n****.com.
F****p
April 14, 2026
•[ ransomware, technology ]
F****p was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-04-14. Sector: Technology. Country: United States of America. Website: fl****.com.
A****y
March 31, 2026
•[ ransomware, technology ]
A****y was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-03-31. Country: United States of America. Website: ape****.com.
Data Exchange Corporation
April 17, 2026
•[ ransomware, technology ]
Data Exchange Corporation was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Technology. Country: United States of America. Website: dex.com.
