BEPeterson
August 28, 2026
•[ ransomware, manufacturing, technology ]
BEPeterson was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-08-28. BEPeterson is a full-service metal fabricator specializing in custom solutions for vessels, tan
ks, and heavy-gauge metal parts since 1935. The company serves a diverse range of industries in
cluding defense, medical, energy, and industrial sectors, providing high-quality products throu
gh advanced manufacturing techniques.
We will upload 20gb of corporate data soon. Employee personal information, client information,
projects, financials, NDAs and so on.
Berlin, Germany
August 28, 2026
•[ ransomware, government, technology ]
Berlin, Germany was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-08-28. Country: Germany. Berlin, Germany Total capacity 5.79 TBArchive scale: ~1.44 million files scanned; by category Maps/Geo 124,823, Legal/complaints 77,939, Financial 55,553, Contracts 46,522, HR 27,299,Government supervisory 13,142, Confidential 11,777, Infrastructure 8,110, Passwords 5,941, Health 2,738, Contacts 2,287.PII leak: 16,389 e-mails, 11,963 phone numbers, 12,076 individuals, 148 IBANs.Credentials in plaintext: GebudeAtlas, the ePayment PAYONE payment database, personal 'password safes' (danz, kramell Z_ADMIN database accounts, franssen), leadership credentials.Disciplinary proceedings: the ANDERSON case (432 files, 20252026, lawsuit at VG Berlin administrative court), the politically motivated misconduct case involving the LKA Staatsschutz (state security police), the forestry cases BLAUTH/MLLER/FIELICKE.State secrets: Bundesrat committee protocols with declassification correspondence, Geheimschutz (classified-material handling) data.Passports/IDs (recent, from personnel files and GI-Vertraulich).KRITIS: vulnerability analyses of Berlin's water supply.Mass personal data: Personalakten (personnel files) >5,000, Convotis payroll, OWi (administrative-offence) files >5,000, Postbuch SQL dumps 20202026, PST archives, leadership private data (IBANs, ID cards, Behrendt's bank card).NDA: 3,226 documentsLegal violation map (GDPR Art. 32/9/33, VSA/StGB upon VS classification confirmation, BSIG/KRITIS) More
Hangzhou Qihan Biotech Co., Ltd.
August 12, 2026
•[ ransomware, healthcare, technology ]
Hangzhou Qihan Biotech Co., Ltd. was listed as a victim on the leak site of the global ransomware group; the attack is estimated to have taken place on 2026-08-12. Sector: Healthcare. Country: China. Website: www.qihanbio.com. Qihan Biotech is a Hangzhoubased biotech company specializing in gene editing and cell/organ therapies. It develops immuneprivileged cells and xenogeneic organs to treat cancer and organ failure. The company aims to make these therapies accessible worldwide.
Vigilia
August 6, 2026
•[ ransomware, technology, healthcare ]
Vigilia was listed as a victim on the leak site of the global ransomware group; the attack is estimated to have taken place on 2026-08-06. Sector: Technology. Country: Uruguay. Website: vigilia.com.uy. VIGILIA is a company that provides support and care services for people.
It offers assistance in medical facilities, home care, ambulance transportation, and related administrative support.
The company also provides insurance policies and helps coordinate medical consultations and tests.
trc-companies
August 29, 2026
•[ ransomware, leak, technology ]
trc-companies was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-08-29. Sector: Professional Services. Country: United States of America. Size: 4.2 TiB
wmdn.net
August 30, 2026
•[ ransomware, technology ]
wmdn.net was listed as a victim on the leak site of the threeam ransomware group; the attack is estimated to have taken place on 2026-08-30. Country: Moldova. Website: wmdn.net. Twin States News is a media organization that provides comprehensive coverage of local, state, national, and world news. Their services include reporting on various topics such as crime, education, health, politics, and community events. The inten
n-tree.com
August 3, 2026
•[ ransomware, technology ]
n-tree.com was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-03. Sector: Technology. Country: Austria. Website: n-tree.com. They develop software and hardware solutions mainly for visitor management and ticketing systems used by: swimming pools and wellness centers, museums and exhibitions, leisure parks, climbing gyms and fitness facilities, mountain railways and ski lifts, industrial visitor systems. Their main locations include: Bregenz, Austria (head office), Delitzsch, Germany, Heimberg, Switzerland, Riazzino, Switzerland/Italian region.
BOTEC-CZ
August 18, 2026
•[ ransomware, manufacturing, technology ]
BOTEC-CZ was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Manufacturing. Country: Germany. boTec helps companies in process and production industries improve efficiency, manage data, and optimize business operations using software solutions, consulting, and integration services.
montronix.de
August 18, 2026
•[ ransomware, manufacturing, technology ]
montronix.de was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Manufacturing. Country: Germany. Website: montronix.de. MONTRONIX GmbH is a German industrial technology company specializing in machine-tool monitoring, process monitoring, machine protection, and condition monitoring. The company was founded in 1990 as a spin-off of Kennametal, Inc. and focuses primarily on monitoring solutions for metal-cutting and machining operations.
ng-engineering.de
August 18, 2026
•[ ransomware, technology, leak ]
ng-engineering.de was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Professional Services. Country: Germany. Website: ng-engineering.de. NG Engineering Gruppe is a German engineering and technical-services group headquartered in Rdental, Bavaria. The group has been operating for more than 20 years and has locations in Germany, Poland and the Czech Republic. It provides engineering services throughout the product-development process and also offers personnel/recruitment services.
vectorsoft.de
August 18, 2026
•[ ransomware, technology ]
vectorsoft.de was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Technology. Country: Germany. Website: vectorsoft.de. vectorsoft is Vectorsoft AG, a German software-development company headquartered in Heusenstamm, Hesse, near Frankfurt am Main, Germany.
fessport
July 6, 2026
•[ ransomware, retail, technology ]
fessport was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-07-06. Country: Germany. Website: fes-sport.de. [Unpublished]
zenithtechnology
August 18, 2026
•[ ransomware, technology ]
zenithtechnology was listed as a victim on the leak site of the ZaWoo ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Technology. Country: New Zealand. Website: zenithtechnology.co.nz. [Unpublished]
MB Associates
August 28, 2026
•[ ransomware, technology, government ]
MB Associates was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: mbassociates.org. mbassociates.org zoominfo.com/c/mb-associates/372858181 MB Associates is a UK social impact consultancy founded in 2005 by Mandy Barnett (London Business School MBA, chair of Social Value UK), based in Holmfirth, West Yorkshire; its legal entity is Mandy Barnett Associates Ltd (incorporated 7 Sep 2005, registered in Welwyn Garden City). It helps people, projects and organisations understand and increase their social impact impact evaluation, SROI analysis, consultation and research, creative facilitation, training and toolkits working through a PlanDoReview cycle that starts with a "Story of Change". Clients include Arts Council England, the National Lottery, UKRI-AHRC, Natural Resources Wales, Bristol City Council, the National Children's Orchestra, museums and charities; it also runs its own learning platform, Culture3 (culturecubed.org). In February 2026 the founder handed the firm over to colleagues directors Jael Williams and Emily Wilson and the brand
Probe Test System
August 28, 2026
•[ ransomware, technology, manufacturing ]
Probe Test System was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: Taiwan. Website: ptse.com.tw. ptse.com.tw Probe Test System Corp. (PTS, ) is a Taiwanese semiconductor back-end (OSAT) service provider operating since 2000, with plants in Zhunan and Toufen, Miaoli County (the former Hsinchu site was consolidated into Toufen in Q1 2024). Its services cover System Level Test (SLT), wafer chip probing (CP) on Chroma, ASL1000 and CTA8280 platforms, IC marking/remarking, Tape & Reel packaging (capacity ~150 KK units/month) plus lead/ball scan inspection. Long-term customers include Taiwan's leading chipmakers: Winbond, MediaTek, Novatek, Nuvoton and Macronix. The company is certified under ISO 9001, ISO 14001 and ANSI/ESD S20.20-2021.
Ixa Systems
August 28, 2026
•[ ransomware, technology, manufacturing ]
Ixa Systems was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Technology. Country: Switzerland. Website: ixasystems.ch. ixasystems.ch rocketreach.co/ixa-systems-sa-profile_b40f7faaffd19ede Ixa Systems SA is a Swiss security systems company founded in 2007, headquartered in Crissier (canton Vaud, near Lausanne). A small family-run firm of ~910 staff with revenue of about CHF 3.5 million, it designs and integrates surveillance solutions: video surveillance (IP/CCTV), anti-intrusion systems, intercom, access control, perimeter detection, technical building supervision (GTC) and evacuation PA systems. Since 1 April 2022 it has been majority-owned by the D.E.S Systmes de scurit SA group, with Marc Barraud as director. Its clients include police, banks, museums, schools, hospitals, prisons and railways, and it offers 24/7 maintenance contracts.
Glassdoor
August 28, 2026
•[ ransomware, technology ]
Glassdoor was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-08-28. Sector: Professional Services. Country: United States of America. Website: glassdoor.com. glassdoor.com is a U.S. job platform (founded 2007) where employees anonymously review companies culture, salaries, management. It's owned by Recruit Holdings/Indeed (acquired for $1.2B in 2018; legally merged into Indeed on July 1, 2026). It hosts millions of reviews for ~600,000 companies, plus salary data and job listings. Free for job seekers, monetized via employer branding tools; it also publishes the annual "Best Places to Work" awards.
Absolute Consultancy Services
August 30, 2026
•[ ransomware, leak, technology ]
Absolute Consultancy Services was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.absolutecs.co.uk.
THQ Nordic
August 30, 2026
•[ ransomware, technology ]
THQ Nordic was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-08-30. Sector: Technology. Country: Sweden. Website: thqnordic.com. Multimedia,Games,Graphics Software
Ishbia & Gagleard, P.C.
August 31, 2026
•[ ransomware, healthcare, finance ]
Ishbia & Gagleard, P.C. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-08-31. Sector: Professional Services. Country: United States of America. Website: iglawfirm.com. [law] Ishbia & Gagleard, P.C. a boutique law firm in Birmingham, Michigan, founded in 1999 by Jeffrey A. Ishbia and Michael A. Gagleard. The firm practises real estate, corporate, estate planning, personal injury, medical malpractice, and commercial litigation for high-net-worth individuals and closely held entities.
The exposed material includes:
360+ client/matter folders the complete attorney-client privilege corpus: litigation strategy memos, settlement agreements, case assessments, deposition notes, correspondence with opposing counsel.
Full Social Security Numbers for 25+ identified individuals trust beneficiaries, family members, employees of client businesses, and a scanned Social Security card.
Protected Health Information hospital admission records from Oakwood Hospital, University of Michigan Hospital, and William Beaumont Hospital. Also: 55+ employee files from a sexual health clinic client with SSN searches and scanned SS cards.
100+ client tax returns spanning 20032024, each containing SSNs, EINs, and income data.
11 email archive files (PST/OST) containing years of unfiltered attorney correspondence.
Personal legal matters of Mat Ishbia CEO of publicly-traded UWM Holdings Corp. (NYSE: UWMC), the largest wholesale mortgage lender in the United States.
