AHENK lab
July 28, 2026
•[ ransomware, technology, healthcare ]
AHENK lab was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-07-28. Sector: Technology. Country: Turkey. Website: www.ahenklab.com.tr. Ahenk Laboratuvar is an ISO 15189-accredited medical laboratory in Turkey, founded in 1998 and located in Istanbul-ili. The company offers services in clinical biochemistry, microbiology, pathology, and genetics, and collaborates with Limbach Laboratories in Germany.
Bretford Manufacturing
July 29, 2026
•[ ransomware, manufacturing, technology ]
Bretford Manufacturing was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-07-29. Sector: Manufacturing. Country: United States of America. Bretford Manufacturing, Inc. is a privately held manufacturer of charging solutions for mobile devices, founded in 1948 and headquartered in Franklin Park, Illinois. With ~60 employees and ~$10M annual revenue, it serves education, healthcare, retail, and government sectors.
The exposed material includes:
Social Security Numbers for the entire workforce (current + 200400 historical employees + dependents) via ACA Census files, 1099 forms, and payroll records spanning 20102026.
Corporate and vendor bank accounts Bretford's own checking account (routing + account number) plus 26+ vendor bank accounts from NACHA ACH batch files.
Complete network architecture VPN gateway IP, internal topology diagram, IP allocation tables, infrastructure inventory, disaster recovery plan, and Active Directory domain name.
20 years of HR records including medical leave, disability accommodations, drug tests, garnishments, pension, 401(k), insurance enrollment, and termination records.
Complete product engineering library SolidWorks CAD files for all products, CNC/laser programs, and manufacturing process documentation.
Indus Protech Solutions
July 29, 2026
•[ ransomware, technology, manufacturing ]
Indus Protech Solutions was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-29. Sector: Technology. Country: India. Website: indusprotech.com. indusprotech.com zoominfo.com/c/indus-protech-solutions-ltd/1323287130 Indus Protech Solutions is a Chennai-based company specializing in comprehensive bulk MRO (Maintenance, Repair, and Operations) and supply chain services for global trade. Acting as a one-stop sourcing partner, they provide access to over 1.5 million products across 50+ categories, serving diverse sectors like defense, energy, agriculture, and pharmaceuticals. The company connects businesses with global manufacturers, ensuring assured quality, competitive pricing, and streamlined procurement for Fortune 500 companies and large corporate networks
Kontact Consortium India Pvt
July 29, 2026
•[ ransomware, manufacturing, technology ]
Kontact Consortium India Pvt was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-29. Sector: Other. Country: India. Website: kontact.in. kontact.in zoominfo.com/c/kontact-consortium-india-pvt-ltd/437934184 Kontact is an Indian engineering company with over 50 years of experience, specializing in electrical and mechanical solutions for the railway, infrastructure, and industrial sectors. They provide end-to-end services, including railway rolling stock supplies, LV/MV power distribution panels, and electrical contracting, backed by a 40,000+ sq. ft. manufacturing facility. The company is recognized for its reliability and quality, holding key international certifications such as ISO 9001, IRIS, and EN 15085-2
ETA Technology Pvt
July 29, 2026
•[ ransomware, technology, manufacturing ]
ETA Technology Pvt was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-29. Sector: Technology. Country: India. Website: etatechnology.in. etatechnology.in zoominfo.com/c/eta-technology-pvt-ltd/432054929 ETA Technology is a Bangalore-based manufacturing company founded in 1991, specializing in the design and production of advanced welding and forging equipment. They build rotary friction welders, friction stir welding systems, electrical upsetters, and custom test rigs for critical industries like automotive, aerospace, and e-mobility. With over 1,300 machines delivered to more than 20 countries, the company is known for its engineering precision, minimal rejection rates, and reliable global support
Malaysian Nuclear Agency
July 29, 2026
•[ ransomware, government, technology ]
Malaysian Nuclear Agency was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-29. Sector: Government & Defense. Country: Malaysia. Website: nuclearmalaysia.gov.my. nuclearmalaysia.gov.my zoominfo.com/c/malaysian-nuclear-agency/459120141 The Malaysian Nuclear Agency (Nuklear Malaysia) is the leading government research and development organization in nuclear science and technology. It focuses on the peaceful application of nuclear innovations to support national development, including medical radiopharmaceuticals, food security, and industrial safety. Additionally, the agency plays a key role in radiation safety, human resource development, and the responsible management of radioactive waste in the country
Pyramid Analytics B.V.
July 30, 2026
•[ ransomware, technology, retail ]
Pyramid Analytics B.V. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Technology. Country: Netherlands. [analytics] Pyramid Analytics B.V. a decision-intelligence platform company headquartered in Amsterdam, acquired by ServiceNow (NYSE: NOW) for hundreds of millions of dollars just four months earlier.
We obtained the complete source code of the Pyramid Decision Intelligence Platform along with:
10+ copies of the platform source code with full Git history, revealing every feature, algorithm, security module, and AI integration ever built.
22 GB of SQL Server production database backups likely containing user accounts, credentials, and business data.
Customer data from publicly traded companies Shufersal (TASE: SAE) retail sales data and ABB (NYSE: ABB) OLAP cube backups.
Evosys Laser GmbH
July 30, 2026
•[ ransomware, manufacturing, technology ]
Evosys Laser GmbH was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Manufacturing. Country: Germany. [manufacturer] Evosys Laser GmbH an Erlangen-based industrial laser welding systems manufacturer with ~130 employees, subsidiaries in the US, China, and a string of Tier 1 automotive customers.
The dataset is the complete corporate repository, spanning every business function:
130 employees' complete HR files employment contracts, salary histories, bank IBANs, tax IDs, social insurance numbers, pension records, medical examinations, disciplinary warnings, and two confirmed minors' health records.
Complete server infrastructure map via mRemoteNG XML 7 servers named, domain admin credentials, internal IPs. The Citrix admin password is Password1.
326 GB of customer project data laser welding process parameters, CAD files, robot control software, and the award-winning AQW process know-how.
Complete financial history Jahresabschlsse (20152025), P&L forecasts through 2028, cash positions, investor documents, executive compensation.
Attorney-client privileged communications (230 MB) and whistleblower reports under HinSchG.
Industrial control data robot SRS source code, PLC programs, nginx private keys for laser system web interfaces, VPN configurations for customer site remote access.
servitelco
July 30, 2026
•[ ransomware, technology ]
servitelco was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Technology. Country: Chile. Website: www.servitelco.com.
Excel Consultores
July 30, 2026
•[ ransomware, technology ]
Excel Consultores was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Professional Services. Country: Mexico. Website: www.excel.com.mx.
Byonyks
July 30, 2026
•[ ransomware, technology ]
Byonyks was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Technology. Country: United States of America. Website: www.byonyks.com.
TenSparrows
July 30, 2026
•[ ransomware, technology ]
TenSparrows was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-30. Country: United States of America. Website: www.tensparrows.com.
Sonitor Technologies
July 7, 2026
•[ ransomware, healthcare, technology ]
Sonitor Technologies was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-07-07. Sector: Healthcare. Country: United States of America. Website: sonitor.com. Sonitors platform and technologies deliver the accurate and reliable data required to optimize care delivery
Audio Precision, Inc
July 30, 2026
•[ ransomware, technology ]
Audio Precision, Inc was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-30. Sector: Technology. Country: United States of America. Website: www.ap.com.
L3HARRIS
March 18, 2026
•[ ransomware, government, technology ]
L3HARRIS was listed as a victim on the leak site of the kyber ransomware group; the attack is estimated to have taken place on 2026-03-18. Sector: Government & Defense. Country: United States of America. Website: l3harris.com. L3Harris is a global aerospace and defense technology innovator that provides mission-critical solutions for government, defense, and commercial sectors.
Total Auto Business Solutions
July 31, 2026
•[ ransomware, technology, automotive ]
Total Auto Business Solutions was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-31. Sector: Transportation. Country: United States of America. Website: autorepairsoftware.com. autorepairsoftware.com Total Auto Business Solutions, Inc. (TABS) is a leading provider of comprehensive shop management software, best known for its flagship product, AutoFluent. Founded in 2001 and based in Northern California, the company serves auto repair shops, tire dealers, and fleet operators across the US and Canada. Their all-in-one platform streamlines daily operations by seamlessly integrating scheduling, inventory management, accounting, and customer relationship tools into a single, user-friendly system
Peachtree Group
July 31, 2026
•[ ransomware, finance, technology ]
Peachtree Group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-31. Sector: Other. Country: United States of America. Website: peachtreegroup.com. peachtreegroup.com zoominfo.com/c/peachtree-group/5000000011 Peachtree Group is a vertically integrated investment management firm headquartered in Atlanta, Georgia, with a history dating back to 1979. The company specializes in identifying mispriced risk and capitalizing on dislocated market opportunities across private credit, real estate, and equity investments. Managing billions in assets, Peachtree Group provides comprehensive financing solutionsincluding permanent loans, bridge financing, and mezzanine capitalwhile offering dedicated services to protect and grow its investments
Preferred
July 31, 2026
•[ ransomware, manufacturing, technology ]
Preferred was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-31. Country: United States of America. Website: preferredtool.com. preferredtool.com Preferred Tool & Die is a precision manufacturing company based in Shelton, Connecticut, specializing in custom metal and plastic injection molds as well as complex stamped components. The company serves demanding sectors, including the medical, electrical, consumer products, and automotive industries. Holding ISO and FDA registrations, they are committed to delivering high-quality, reliable, and innovative manufacturing solutions tailored to exact client specifications
CRB group
July 31, 2026
•[ ransomware, manufacturing, technology ]
CRB group was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-31. Sector: Professional Services. Country: Brazil. Website: crbgroup.com. crbgroup.com zoominfo.com/c/crb-group-gmbh/23317692 CRB is a leading global provider of sustainable engineering, architecture, construction, and consulting solutions, primarily serving the life sciences and food & beverage industries. Headquartered in Kansas City, Missouri, the company specializes in designing and building advanced facilities, such as cell and gene therapy laboratories and high-quality food manufacturing plants. With a strong international presence, CRB is dedicated to delivering innovative, safe, and efficient infrastructure that improves patient outcomes and advances scientific breakthroughs worldwide
CFS
July 31, 2026
•[ ransomware, leak, finance ]
CFS was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-07-31. Sector: Financial Services. Country: United States of America. Website: cfsinc.com. cfsinc.com zoominfo.com/c/cfs-inc/12944410 CFS Inc. is a Massachusetts-based marketing support services company with over 30 years of experience in print management, direct mail, kitting, promotional items, and fulfillment. Acting as a single-source solution, they handle projects from initial design to final execution, helping businesses streamline their marketing and logistical operations. The company is known for its flexible, customer-centric approach and a strong commitment to delivering high-quality, reliable results for clients of all sizes
