youX / Drive IQ
May 1, 2026
•[ ransomware, technology, automotive ]
youX / Drive IQ was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Technology. Country: Australia. Website: youxpowered.com.au. [AI generated] youX, formerly known as Drive IQ, is an Australian technology company specializing in connected vehicle data and mobility intelligence. The company collects and analyzes telematics and driving behavior data to deliver insights for insurers, fleet operators, and automotive businesses. Its platform enables usage-based insurance and risk assessment solutions. youX operates primarily in Australia and positions itself within the insurtech and automotive data analytics sectors.
Avnet
May 1, 2026
•[ ransomware, technology ]
Avnet was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Technology. Country: United States of America. Website: avnet.com. [AI generated] Avnet is a global electronic components distributor and technology solutions provider headquartered in Phoenix, Arizona, USA. Founded in 1921, it operates in the technology and electronics distribution industry, serving manufacturers and designers worldwide. Avnet supplies semiconductors, interconnects, passives, and electromechanical components, while also offering supply chain management, design, and engineering services across North America, Europe, and Asia.
INTEGRALIFE.COM
May 1, 2026
•[ ransomware, healthcare, technology ]
INTEGRALIFE.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Healthcare. Country: United States of America. Website: INTEGRALIFE.COM. [AI generated] Integra LifeSciences, operating under integralife.com, is a US-based medical technology company headquartered in Princeton, New Jersey. It specializes in developing and manufacturing surgical instruments, neurosurgery products, orthopedic reconstruction implants, and regenerative medicine solutions. The company serves hospitals and healthcare professionals worldwide, focusing on neuroscience, reconstructive surgery, and wound care industries.
INJURYLAWYERS.COM
May 1, 2026
•[ ransomware, technology ]
INJURYLAWYERS.COM was listed as a victim on the leak site of the clop ransomware group; the attack is estimated to have taken place on 2026-05-01. Sector: Professional Services. Country: United States of America. Website: INJURYLAWYERS.COM. [AI generated] INJURYLAWYERS.COM is a US-based legal services platform that connects individuals who have suffered personal injuries with qualified attorneys. Operating in the legal referral and marketing industry, the platform helps accident victims find representation for cases involving car accidents, workplace injuries, medical malpractice, and similar claims. It primarily serves clients across the United States.
Epiq Global
May 2, 2026
•[ ransomware, technology ]
Epiq Global was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Professional Services. Country: United States of America. Website: epiqglobal.com. [AI generated] Epiq Global is a US-based legal services company specializing in technology-driven solutions for complex legal matters. It provides services including class action and mass tort administration, bankruptcy case management, eDiscovery, document review, and legal notification. Operating across multiple countries, Epiq serves law firms, corporations, and government entities, helping manage large-scale legal proceedings efficiently.
TSYS
May 2, 2026
•[ ransomware, finance, technology ]
TSYS was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Financial Services. Country: United States of America. Website: tsys.com. [AI generated] TSYS, or Total System Services, is a US-based payment solutions company headquartered in Columbus, Georgia. It operates in the financial technology and payment processing industry, providing services such as credit and debit card processing, merchant services, and payment management solutions to financial institutions, businesses, and consumers worldwide. TSYS became a subsidiary of Global Payments following a merger in 2019.
Shenzhen Gongjin Electronics
April 29, 2026
•[ ransomware, manufacturing, technology ]
Shenzhen Gongjin Electronics was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-04-29. Sector: Manufacturing. Country: China. Website: twsz.com. Shenzhen Gongjin Electronics, founded in 1998 and also known as T&W, is a telecommunications manufacturing company specializing in broadband communication technology.
Grupo EBD
April 17, 2026
•[ ransomware, technology ]
Grupo EBD was listed as a victim on the leak site of the blackwater ransomware group; the attack is estimated to have taken place on 2026-04-17. Sector: Professional Services. Country: Brazil. Website: ebdgrupo.com.br. All data will be published soon...
Cytek Biosciences
January 25, 2026
•[ ransomware, healthcare, technology ]
Cytek Biosciences was listed as a victim on the leak site of the cmdorganization ransomware group; the attack is estimated to have taken place on 2026-01-25. Sector: Healthcare. Country: United States of America. Website: cytekbio.com. A biotechnology firm that develops and supplies advanced, cost-effective flow cytometry instruments and related services used worldwide by researchers and clinicians. Its compact systems and streamlined workflows enable high-throughput, single-cell analysis for applications such as cancer immunology, leukemia and lymphoma diagnosis, and transplant monitoring. Distinguished by offering high-end capabilities at lower cost, the company accelerates scientific discovery through technical innovation, exceptional customer support, and a commitment to ethical practices and community engagement. Headquartered in Fremont, California, it has been publicly traded on NASDAQ since 2021. We have 7.36 TB of downloaded data.
Beyond Measure & Associates, Inc.
May 2, 2026
•[ ransomware, technology ]
Beyond Measure & Associates, Inc. was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Professional Services. Country: United States of America. Website: churchdesign.com. Church Design, Engineering, Financial & Construction Services
Photonic
May 2, 2026
•[ ransomware, technology ]
Photonic was listed as a victim on the leak site of the mnt6 ransomware group; the attack is estimated to have taken place on 2026-05-02. Sector: Technology. Country: Canada. Website: photonic.com. Photonic is delivering scalable, distributed, and fault-tolerant quantum computing and networking technologies. With proven silicon spin qubits, and a native telecom networking interface, Photonic will deliver solutions for previously intractable problems and unlock solutions for tomorrows problem sets. [Revenue: $32.6M]
cgcsa.co.za
May 3, 2026
•[ ransomware, leak, finance ]
cgcsa.co.za was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: South Africa. Website: cgcsa.co.za. endor & Corporate Data ( Name-Email-Numbers/PMS NAME ), Financial Accounting Records , sales Order Reports , Database Systems , SQL Server , Sage 200 Evolutuion SQL, operational Security Data Full Sage 200 Evolution backups including all transaction history, tax records, and payroll.CRM & Legal Archives Over 151,000 sensitive documents, contracts, and internal communications from the CRM database.Full access to GS1 South Africa SharePoint, including GDSN protocols and partnership data with global entities like Unilever, Nestle, and L'Oreal.Complete PII (Personally Identifiable Information) of administrative staff and executive members, including private emails and mobile numbers.
or-technology.com
May 3, 2026
•[ ransomware, technology, financial ]
or-technology.com was listed as a victim on the leak site of the stormous ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Technology. Country: Germany. Website: or-technology.com. Financial & Sales Intelligence Sales Statistics by Quarter (Q1, Q2, Q3, Q4) Corporate & Strategic Planning SQL Project Reports
Cushman & Wakefield Inc.
May 3, 2026
•[ ransomware, technology ]
Cushman & Wakefield Inc. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Professional Services. Country: United States of America. Website: cushmanwakefield.com. Over 500k Salesforce records containing PII and other internal corporate data have been compromised. This is a final warning to reach out by 6 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 3 May 2026 | Warning: FINAL WARNING
it-freitag.de
May 3, 2026
•[ ransomware, technology ]
it-freitag.de was listed as a victim on the leak site of the m3rx ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Technology. Country: Germany. Website: it-freitag.de. +49 493526000000 . Freitag IT GmbH specializes in providing scalable and reliable IT solutions, including cloud computing, virtualization, and managed services. Their offerings cater to agile businesses, focusing on modern technologies such as hybrid multi-cloud architectures and machine learning. The company aims to enhance productivity and efficiency through tailored IT services, including remote management, security solutions, and unified communication systems. Their target clients include organizations seeking comprehensive IT support and innovative digital transformation solutions. Stolen: --
Instructure Holdings, Inc. (Canva LMS, instructure.com)
May 3, 2026
•[ ransomware, education, technology ]
Instructure Holdings, Inc. (Canva LMS, instructure.com) was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-05-03. Sector: Education. Country: United States of America. Website: instructure.com. Nearly 9,000 schools worldwide affected. 275 million individuals data ranging from students, teachers, and other staff containing PII. Several billions of private messages among students and teachers and students and other students involved, containing personal conversations and other PII. Your Salesforce instance was also breached and a lot more other data is involved. Pay or Leak. This is a final warning to reach out by 6 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Size: 3.65TB+ (uncompressed) | Updated: 3 May 2026 | Warning: FINAL WARNING PAY OR LEAK
Cult Wines
May 4, 2026
•[ ransomware, retail, finance ]
Cult Wines was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: cultwines.com. Cult Wines is revolutionizing the fine wine industry by leveraging expertise, digital platforms, and innovative technology to enhance the buying, selling, investing, and collecting experience for producers and consumers. Their services support the entire life cycle of fine wine, ensuring transparency and secure transactions. Recognizing fine wine as a unique investment, Cult Wine Investment provides clients with a wealth of possibilities, combining heritage with cutting-edge technology to enrich portfolios and enhance lives. Targeting both new generations of wine drinkers and seasoned collectors, Cult Wines aims to build a global community around fine wine appreciation.
vacaero.com
May 4, 2026
•[ ransomware, manufacturing, technology ]
vacaero.com was listed as a victim on the leak site of the chaos ransomware group; the attack is estimated to have taken place on 2026-05-04. Sector: Hospitality. Country: Mexico. Website: vacaero.com. If the company's management does not reach an agreement with us within 4 days, we will publish 250 GB of the company's internal data.
Founded in 1959, VAC AERO provides vacuum heat treating and thermal & paint coating services as well as vacuum furnace systems and controls to aerospace and high-tec
Erla Technologies SAS
April 9, 2026
•[ ransomware, technology, government ]
Erla Technologies SAS was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-04-09. Sector: Technology. Country: France. Website: www.erla.fr. Our company, Erla Technologies SAS, has specialised for more than 30 years in designing, manufacturing, installing and maintaining a huge range of innovative equipment with Guaranteed French Producedcertification and intended for storage, distribution and management of petroleum products, biofuel, Adblue and industrial and chemical fluids.Aware of environmental issues, new energies are at the heart of the innovations and solutions brought by Erla Technologies.-One of the clients is the French army, documentation.-Personal information of employees and clients-Financial documents-Other files https://www.erla.fr
EXPEDITOR
May 5, 2026
•[ ransomware, healthcare, technology ]
EXPEDITOR was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Transportation. Country: United States of America. Expeditor Systems specializes in improving patient flow through innovative light signaling systems designed for medical practices and institutions.
Their solutions, including the LEAN Patient Flow System and Life Safety Nurse Call Systems, aim to enhance patient experience, increase operational efficiency, and boost revenues.
With over 40 years of experience and a client base exceeding 8,000
Laek: 50GB
WE HAS COLLECTED SUCH DATA AS:
- Confidential documents
- Clients Data
- NDA
- Financial data
- Operations
- Corporate data
- Business Agreements
- Development
- Financial databases, all transactions, all clients
And a lot of other VERY IMPORTANT information!
