Arup Group
May 10, 2026
•[ ransomware, technology ]
Arup Group was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-05-10. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: arup.com. [AI generated] Arup Group is a British multinational professional services firm headquartered in London, United Kingdom. Founded in 1946, it operates in the engineering, design, planning, and consulting industries. The firm provides structural, civil, mechanical, and electrical engineering services, alongside architecture and project management. Arup works across sectors including infrastructure, buildings, transport, and energy, delivering projects in over 140 countries worldwide.
ams-group.co.uk FULL DATA DUMP 33GB
May 9, 2026
•[ ransomware, leak, financial ]
ams-group.co.uk FULL DATA DUMP 33GB was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-09. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: ams-group.co.uk. The extracted data comprises administrative and financial records, payroll sheets, and client and partner directories, alongside technical and engineering specifications, employee records, and business plans. It also includes architectural designs, official contracts, detailed engineering reports, and construction site maps, as well as risk assessments, internal correspondence, and tax and legal information.
www.kurita.eu
May 10, 2026
•[ ransomware, manufacturing, technology ]
www.kurita.eu was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-05-10. Sector: Manufacturing. Country: Germany. Website: www.kurita.eu. Kurita Europe specializes in advanced water treatment technologies and sustainable solutions aimed at enhancing industrial and environmental efficiency. The company offers tailored industry solutions for water and process treatment, focusing on improving plant reliability and reducing downtime. Their innovative technologies are designed to create shared value for customers and society while promoting sustainability. Kurita Europe serves a diverse range of industries, including water, paper, and various industrial sectors.
csb-battery.com
May 10, 2026
•[ ransomware, manufacturing, technology ]
csb-battery.com was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-05-10. Sector: Manufacturing. Country: Taiwan. Website: csb-battery.com. CSB Energy Technology Co., Ltd. is a leading global manufacturer of Valve-Regulated Lead-Acid (VRLA) batteries, serving a diverse range of applications including stationary power, data center UPS, renewable energy, general purpose, e-mobility, and telecommunications. Their products are utilized in over 100 countries, supported by a trusted partner network for distribution and customer service. The company is committed to providing high-quality battery solutions to meet the needs of various industries. CSB Energy Technology aims to enhance user experience and technical support through their dedicated customer service team.
Katahdin Technology
May 8, 2026
•[ ransomware, technology ]
Katahdin Technology was listed as a victim on the leak site of the LeakBazaar ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Technology. Country: United States of America. Website: katahdintechnology.com. Katahdin Technology offers reliable managed IT services tailored for small businesses in Maine. Their services include disaster recovery, network design, cloud solutions, and IT vendor management, all aimed at providing cost-effective and customized IT solutions. With over 20 years of experience, they focus on securing, protecting, and enhancing their clients' IT infrastructure. The company is known for its trustworthy, responsive, and easy-to-work-with approach, ensuring a strong track record of success.
Intuitive Machines
May 5, 2026
•[ ransomware, technology, financial ]
Intuitive Machines was listed as a victim on the leak site of the LeakBazaar ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Technology. Country: United States of America. Website: intuitivemachines.com. Intuitive Machines, Inc. designs, manufactures, and operates space products and services in the United States. Its space systems and space infrastructure enable scientific and human exploration and utilization of lunar resources to support sustainable human presence on the moon. The company offers lunar access services, such Nova, lunar surface rover services, fixed lunar surface services, lunar orbit delivery services, rideshare delivery services to lunar orbit, as well as content sales and marketing sponsorships; and orbital services, including satellite delivery and rideshare, satellite servicing and refueling, space station servicing, satellite repositioning, and orbital debris removal. It also provides lunar data services, comprising Lunar data network, lunar south pole and far-side coverage, lunar positioning services, data relay, and data storage/caching.
70GB important information + 9 separate categories.
1. CONFIDENTIAL DATA (17GB); Price: $20 000 one hand / $10 000 many hands.
2. BUYBACK (30MB); Price : $500 one hand / $250 many hands.
3. CALCULATION COST OF PRODUCTION (786MB) - $15 000 one hand / $7500 many hands.
4. DIVIDENDS - $300 one hand / $150 many hands.
5. FINANCE (16GB) - $20 000 one hand / $10 000 many hands.
6. GUIDANCE (18.5GB) - $10 000 one hand / $5 000 many hands.
7. POSSIBLE VIOLATIONS $1 000 one hand / $500 many hands.
8. QUARTERLY REPORTS - $500 one hand / $250 many hands.
9. RESEARCH REPORTS - $7 500 one hand / $3 750 many hands.
AXCERA TRADING
May 10, 2026
•[ ransomware, finance, technology ]
AXCERA TRADING was listed as a victim on the leak site of the lapsus$ ransomware group; the attack is estimated to have taken place on 2026-05-10. Sector: Professional Services. Country: United States of America. Website: AXCERA.IO. Trading Algorithms, Client Portfolios, KYC Data & Financial Logs
Accretech America Inc.
May 11, 2026
•[ ransomware, manufacturing, technology ]
Accretech America Inc. was listed as a victim on the leak site of the AiLock ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Manufacturing. Country: United States of America. Website: accretechsbs.com. Accretech America Inc. is the U.S. division of Tokyo Seimitsu Co., Ltd. of Japan, a Japanese corporation specialising in semiconductor equipment and precision instrumentation.
Cass information Systems
May 11, 2026
•[ ransomware, finance, technology ]
Cass information Systems was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Professional Services. Country: United States of America. Website: cassinfo.com. [AI generated] Cass Information Systems is a US-based company specializing in payment and information services. It provides freight invoice processing, auditing, and payment solutions, along with utility and telecom expense management. Operating primarily in the financial technology and business process outsourcing industry, Cass serves large corporations across North America and globally, helping clients manage and analyze invoice data to optimize spending and operational efficiency.
Tab Service
May 11, 2026
•[ ransomware, technology ]
Tab Service was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Professional Services. Country: Germany. Website: tabservice.com.
Jozef Stefan Institute (IJS)
May 11, 2026
•[ ransomware, education, technology ]
Jozef Stefan Institute (IJS) was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Education. Country: Slovenia. Website: ijs.si. [AI generated] Jozef Stefan Institute (IJS) is Slovenia's leading research institution, headquartered in Ljubljana. It operates across multiple scientific disciplines including physics, chemistry, biochemistry, electronics, information technology, and environmental sciences. Founded in 1949, it conducts fundamental and applied research, hosts numerous national and international projects, and collaborates with academic and industrial partners. It also plays a key role in educating postgraduate researchers in Slovenia.
Park Dental Research
May 11, 2026
•[ ransomware, healthcare, technology ]
Park Dental Research was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Healthcare. Country: United States of America. Website: https:shop.pdrus.com. Park Dental Research is a supplier of technologies and materials for dental laboratories and orthodontic clinics; however, when it comes to security, it has proven to be an unreliable partner. As a result of its negligence, partner and customer data, financial documents, and login credentials for various web resources were compromised and made publicly available on the Internet.
Sistemas Electrónicos y de Telecomunicaciones
May 11, 2026
•[ ransomware, technology, manufacturing ]
Sistemas Electrnicos y de Telecomunicaciones was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Technology. Country: Mexico. Website: sertes.com.mx. Sertes is a Mexican company specializing in industrial automation, control systems, and telecommunications solutions. They provide PLC programming, SCADA systems, IoT integration...
International Customer Care Services
March 29, 2026
•[ ransomware, technology ]
International Customer Care Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-03-29. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: iccs.global.
AppDirect
May 11, 2026
•[ ransomware, technology ]
AppDirect was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Technology. Country: Canada. Website: www.appdirect.com.
Fargo Moorhead West Fargo Chamber
May 8, 2026
•[ ransomware, technology ]
Fargo Moorhead West Fargo Chamber was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-05-08. Sector: Professional Services. Country: United States of America. Website: fmwfchamber.com. A business services provider.
rbh aerospace inc
May 11, 2026
•[ ransomware, manufacturing, espionage ]
rbh aerospace inc was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-11. Sector: Manufacturing. Country: United States of America. Website: rbhaerospace.com. RBH Aerospace, Inc.
-is a manufacturing company located in Long Beach, California, specializing in the production of aerospace components. Established in January 2005, the company focuses on providing high-quality parts for both commercial and military aircraft. Their product offerings include aircraft frames, fuselages, wings, and various metal alloy components such as steel, aluminum, and titanium.
2708 Seaboard Lane, Long Beach, CA 90805
http://www.rbhaerospace.com/
Leaked data 240 GB:
Corporate information, including electronic correspondence with counterparties, contracts including NDAs, transactions and payments related to them, STP (STEP) files, part drawings (including those for F-15, F-22), manuals and instructions.
NorthWest Handling Systems
April 23, 2026
•[ ransomware, leak, manufacturing ]
NorthWest Handling Systems was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-04-23. Sector: Transportation. Country: Canada. [warehouse] NorthWest Handling Systems a 55-year-old forklift and warehouse equipment company headquartered in Renton, Washington, with branches across WA, OR, and AK. The dump is the entire corporate file share going back to 1988. 337,000+ files spanning every branch, every department, every era of the company. It includes: Plaintext credit card numbers in an Excel spreadsheet literally titled C.O.D. info (CREDIT CARD INFO).xlsx stored at the root of the file server, unencrypted, for years. Social Security numbers and Taxpayer IDs on W-9 forms and certified payroll documents for government-contract work (USPS, Oregon DHS, public schools). 3+ years of plaintext passwords for Target Corporations vendor portal (TARS), stored in Word documents titled TARGET PASSWORD & SECURITY QUESTIONS. Each password rotation was saved as a new file. Home Depot Maximo DC billing credentials plaintext, in a Word document, enabling fraudulent invoicing against a Fortune 50 company. Albertsons/Safeway Corrigo facility-management portal credentials again, plaintext in a .docx file. 33 GB of customer warehouse CAD files facility layouts, equipment placement, security-zone dimensions, and fire-protection drawings for approximately 50200 companies including Nike, Google, Costco, and Umpqua Bank. 24,669 rows of fixed-asset data in ExportFile.csv the complete equipment inventory, revealing the companys financial structure, depreciation schedules, and capital-investment history. Corporate bank routing and account numbers (ACH authorization forms), employee direct-deposit details, time cards, disciplinary records, accident reports, and decades of invoices.
Vision 3 Architects
April 24, 2026
•[ ransomware, leak, technology ]
Vision 3 Architects was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-04-24. Sector: Professional Services. Country: United States of America. Website: vision3architects.com. Vision 3 Architects is a collaborative and responsive design studio specializing in architectur
e and interior design projects. They focus on crafting spaces that reflect each client's vision
and values, ensuring a design environment that fosters creativity and collaboration.
We will upload 31gb of corporate data soon. Detailed employee personal information (passports,
DLs, SSNs and so on), contracts and agreements, client information, projects, NDAs, etc.
Manhattan Broadcasting
May 6, 2026
•[ ransomware, technology, leak ]
Manhattan Broadcasting was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-05-06. Sector: Technology. Country: United States of America. Website: manhattanbroadcasting.com. Manhattan Broadcasting Company is a leading source of local and regional news, sports, weather,
and entertainment in Northeast Kansas, engaging over 100,000 listeners weekly.
We will upload of corporate data soon. Employee personal informatics, contracts, lots of pictur
es and other files.
