Mahajak Development
June 15, 2026
•[ ransomware, technology, manufacturing ]
Mahajak Development was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Other. Country: Thailand. Website: mahajak.com. ***.com zoominfo.com/c/mahajak-development-co-ltd/346627274 Mahajak Development Co., Ltd. is a leading Thai technology provider established in 1971, headquartered in Bangkok. Evolving from an automotive air-conditioning distributor, they are now a premier supplier of Mitsubishi Heavy Duty climate systems, smart home automation, and professional audio-visual solutions. The company delivers comprehensive consulting, design, and installation services for commercial projects and government facilities across Thailand
Sysco Corporation
June 15, 2026
•[ ransomware, manufacturing, technology ]
Sysco Corporation was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Agriculture and Food Production. Country: United States of America. Over 61 million Salesforce records across several tables, some containing customer data/PII, employee data, and other internal corporate data was compromised. This is a final warning to reach out by 18 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 16 June 2026 | Warning: FINAL WARNING PAY OR LEAK
KoMiCo
June 15, 2026
•[ ransomware, technology, manufacturing ]
KoMiCo was listed as a victim on the leak site of the anubis ransomware group; the attack is estimated to have taken place on 2026-06-15. Inside the internal data of a publicly traded company.
TeleFinity
June 11, 2026
•[ ransomware, technology ]
TeleFinity was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-06-11. Sector: Technology. Website: tele-finity.com. TeleFinity is a global provider of computer telephony integration (CTI) and unified contact center software, offering solutions like LogFinity call recording, WebRTC-SIP gateways, and omnichannel contact center platforms. Founded in 2005, the company delivers enterprise-grade,, AI-driven, and CRM-integrated communication products with on-premises or cloud deployment options.
musenet.co.jp
June 15, 2026
•[ ransomware, technology ]
musenet.co.jp was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Technology. Country: Japan. Website: musenet.co.jp. Founded in the twentieth century, the company serves as an intermediary between publishers and music retailers throughout Japan. Its online
hughstirling.co.uk
May 5, 2026
•[ ransomware, technology ]
hughstirling.co.uk was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-05-05. Sector: Professional Services. Country: Germany. Website: hughstirling.co.uk. Headquartered in Goslar, Lower Saxony, the firm has been operating since 1975 and has expanded its presence through additional offices
moody.edu
June 15, 2026
•[ ransomware, education, technology ]
moody.edu was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Education. Country: United States of America. Website: moody.edu. Over 23 gigabytes of Moody Bible Institute data (1,300+ files, tens of millions of records) was compromised across enrollment, donor relations, payroll, and communications systems (MBI, EDC/Salesforce leads, PeopleSoft PS_COMMUNICATION, Horizon SIS, WHPD donor database, and Cadence admissions), including 46 million communication records, 2.2 million enrollment lead records, 108,000 biodemographic master files with addresses and birthdates, 3.3 gigabytes of donor gift data, employee payroll XML with home addresses and earnings, 1,100+ admissions outreach files, and student housing assignment records. This is a final warning to reach out by 18 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 16 June 2026 | Warning: FINAL WARNING PAY OR LEAK
Q Link Wireless
June 16, 2026
•[ ransomware, technology ]
Q Link Wireless was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Technology. Country: United States of America. Website: www.qlinkwireless.com.
ECOVACS
June 1, 2026
•[ ransomware, retail, technology ]
ECOVACS was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-06-01. Sector: Retail & E-Commerce. Country: China. Website: www.ecovacs.com. ECOVACS is a highly successful Chinese robotics company founded in 1998 in Suzhou. It has grown into a global leader in smart home cleaning solutions, with its products sold in over 145 countries and trusted by tens of millions of users worldwide.The company is best known for its award-winning DEEBOT robot vacuums, WINBOT window cleaners, GOAT robotic lawn mowers, and other intelligent cleaning devices powered by advanced AI and navigation technologies.Driven by the vision Robotics for All, ECOVACS continues to innovate and expand rapidly, making premium home robotics accessible and effective for everyday consumers.About 2 TB of stolen data. https://www.***.com/
SPORTON International Inc.
June 16, 2026
•[ ransomware, manufacturing, technology ]
SPORTON International Inc. was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Manufacturing. Country: Taiwan. Website: sporton.com.tw. Founded in 1986 and headquartered in Taiwan, Sporton International is a Taiwan-based company principally engaged in the provision of testing and certification services for wireless communications and mobile communications products.
TINYpulse NINTENDO BREACH
June 16, 2026
•[ ransomware, technology ]
TINYpulse NINTENDO BREACH was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Technology. Country: Japan. Website: nintendo.com. This will be quick. You don't even want to read the private messages as some will be embarrasing. Some people are confused but this breach doesn't affect you unless if you use tinypulse and work for nintendo. There will be more victims coming soon. If you get a email by us. by us we mean are only email on are leak site, then respond or it will get leaked. We will send file trees for confirmation to prove we actually breached your company. It's pretty funny how companies are defending themselves and when the truth comes out now they want to stay quiet. We have no further questions to answer. This is a warning to all companies if you get breached by us, It's best to contact us especially if we show you the file size. This was true negligence and now you will likely face a massive lawsuit, have fun tinypulse and told you this would be quick. uncompressed file size: (856MB) compressed size: (6.89MB) The included data includes: - full name, first name, last name, email (the w9 is only one and multiple invoices) - Private Employee Chats: Direct internal messages and conversations between workers. - Mar 10, 2025 Sure, it's Knowledge Teamwe've needed more content creators for years, but it seems all we can ever get approved are more associates, often temporarily. This helps some, and I know there are vague rumors that maybe we will be able to swap our associates over to NOA employees in the future, but that's not what we needwe need more writers so that we can distribute the primary work among more people. overworking chat: Sep 22, 2025 How happy are you at work? 3 I'm generally extremely content, but the overwhelming number of overlapping high-priority projects and a constant stream of meetings, has left me with little to no available occupancy. This has made it tough to manage everything effectively and still make time for innovation.
thecreditpros.com
June 16, 2026
•[ ransomware, financial, technology ]
thecreditpros.com was listed as a victim on the leak site of the Icarus ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Financial Services. Country: United States of America. Website: thecreditpros.com. TheCreditPros' Salesforce instance was breached and 263MB of data were taken from it, including:
01_input_fullcards.csv - 51,691 lines of full-info credit/debit cards: Id,First_Name__c,Last_Name__c,Middle_Name__c,Email__c,Credit_Card__c,CCV__c,Exp_Month__c,Exp_Year__c,SSN__c,DOB__c,Street_Address__c,City__c,State__c,Zip_Code__c,Mobile_Number__c,IP_Address__c,Transaction_ID__c,Status__c,CreatedDate
02_contacts_ssn.csv - 847,990 lines: Id,Name,FirstName,LastName,Email,Phone,MobilePhone,HomePhone,SSN_hidden_field__c,Birthdate,MailingStreet,MailingCity,MailingState,MailingPostalCode,Status__c,Bank_Account_Number__c,Bank_Name__c,Bank_Account_Type__c,CreatedDate
03_creditcards.csv - 722,403 lines: Id,Card_number__c,card_number_hidden__c,cvv__c,expiration_month__c,expiration_year__c,Active__c,BIN__c,Issuing_Bank__c,Prepaid__c,CreatedDate
04_leads.csv - 3,598 liens: Id,Name,FirstName,LastName,Email,Phone,MobilePhone,Street,City,State,PostalCode,Status,CreatedDate
Pay or leak!
Data stolen: PII, Credit cards
Tecfi SpA
June 15, 2026
•[ ransomware, manufacturing, technology ]
Tecfi SpA was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-06-15. Sector: Professional Services. Country: Italy. Website: tecfi.it. Tecfi is a company specialising in the design, production and sale of fastening systems. Going into more detail, three production lines can be highlighted. Plastic and rubber moulding Sheet metal moulding with blanking Cold stamping and flatbed rolling machines
Chebib Control
June 14, 2026
•[ ransomware, technology ]
Chebib Control was listed as a victim on the leak site of the spacebears ransomware group; the attack is estimated to have taken place on 2026-06-14. Sector: Professional Services. Country: Brazil. Website: chebib.com.br. Chebib Control is a company specializing in the development of management systems and intelligent automation for the hospitality industry. For over 20 years, it has been helping optimize the operations of motels, hotels, and condominiums across the country.Serving over 1,000 active clients in over 500 municipalities in Brazil.Core product: Offers property management systems (PMS) and automation solutions that help automate daily operations, enhance security, and improve the guest experience.One of its key features is integration with IP cameras for photographic recording of vehicle entry and exit, which, according to customers, serves as an effective fraud prevention tool.- SQL database tables- Client data (names, booking dates, hotel names, email addresses, CPFs, phone numbers, and other metadata) https://***.com.br/
eurOptimum
June 17, 2026
•[ ransomware, technology ]
eurOptimum was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Technology. Country: Germany. Website: www.europtimum.com. United States
Integrated Technologies
June 17, 2026
•[ ransomware, technology ]
Integrated Technologies was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-06-17. Sector: Technology. Website: www.itc4u.com. United States
United Personnel (a division of Masis Staffing Solutions)
June 16, 2026
•[ ransomware, technology ]
United Personnel (a division of Masis Staffing Solutions) was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-06-16. Sector: Professional Services. Country: United States of America. Website: msastaffing.org. A provider of staffing services
Amazon owned OneMedical.com
June 18, 2026
•[ ransomware, healthcare, technology ]
Amazon owned OneMedical.com was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Healthcare. Country: United States of America. Website: OneMedical.com. Over 8.8TB of data was compromised. This is a final warning to reach out by 22 June 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 18 June 2026 | Warning: FINAL WARNING PAY OR LEAK
www.someco.com
June 18, 2026
•[ ransomware, manufacturing, technology ]
www.someco.com was listed as a victim on the leak site of the lynx ransomware group; the attack is estimated to have taken place on 2026-06-18. Website: www.someco.com. Southern Mechanical Contractors is a merit shop mechanical and industrial construction firm with over 35 years of experience. They specialize in the design, installation, and service of HVAC, plumbing, process piping, and sheet metal systems for commercial and industrial clients. The company is dedicated to providing operational flexibility and cost-efficiency, ensuring high-quality service at competitive prices. Based in Atlanta, Georgia, they support clients throughout the Southeastern United States with comprehensive project assistance from design to maintenance.
Apptricity
June 18, 2026
•[ ransomware, technology ]
Apptricity was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-06-18. Sector: Professional Services. Country: United States of America. Apptricity Corporation is a global enterprise software provider for Supply Chain and Spend Mana
gement. Apptricity differs from other manufacturers by offering platform-agnostic, secure solut
ions that optimize inventory, asset and expense tracking processes while still being easily int
egrated with existing systems.
We will upload 12gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, w9s,
and other personal information), lots of projects, source codes, NDAs, client and partner file
s, agreements and so on.
