compendiumusa.net
August 22, 2026
•[ ransomware, technology ]
compendiumusa.net was listed as a victim on the leak site of the L Group ransomware group; the attack is estimated to have taken place on 2026-08-22. Sector: Professional Services. Country: United States of America. Website: compendiumusa.net.
Studio BOLDRIN PAOLO
August 23, 2026
•[ ransomware, technology ]
Studio BOLDRIN PAOLO was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Professional Services. Country: Italy. Website: www.paoloboldrin.it.
Tecnici Associati STP
August 23, 2026
•[ ransomware, technology ]
Tecnici Associati STP was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Other. Country: Italy. Website: www.Tecnici Associati STP.it.
adt.com
August 23, 2026
•[ ransomware, technology, leak ]
adt.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Professional Services. Country: United States of America. Website: adt.com. ADT is a security company that offers security systems, cameras, alarms ad home automation services....
CyrusOne, LLC.
August 23, 2026
•[ ransomware, technology, leak ]
CyrusOne, LLC. was listed as a victim on the leak site of the shinyhunters ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Technology. Country: United States of America. Website: cyrusone.com. Update 23 Aug : We are removing the clients name off this post. They are refusing to pay a $13 million demand. They have 24 hours left to engage with us. We hold 12.9 million Salesforce records along with: Sharepoint:
(369.6 GB Compressed / 645 GB Uncompressed)
288,729 Files, 60,513 Folders
- More than 182,000 rows of Customer data Extracted from the "Contacts" Salesforce Object. - Over 8,300 Rows of Employee PII (Full Name, Email, Job Title, Phone Number, ect.) - Thousands of executed contracts, MSAs, NDAs, amendments, leases, and SOWs - Extensive physical key inventory logs, verification photos, and contractor Green Badge audits - Large collection of data center drawings, floor plans, electrical one-line diagrams, security system drawings, and site schematics - Full CERM (Critical Environment Reliability Management) process library - Physical and information security policy suite plus governance materials - Regional security scorecards, KPI workbooks, GAM sheets, and signed performance packages - Credential and access-control artifacts (including PasswordList.xlsx, Okta SSC Access lists, active badge reports, and multiple Data Center Access Control forms) This is a final warning to reach out by end of day 24 Aug 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 23 Aug 2026 | Warning: FINAL WARNING PAY OR LEAK
Westwing Group SE
August 23, 2026
•[ ransomware, retail, technology ]
Westwing Group SE was listed as a victim on the leak site of the coinbasecartel ransomware group; the attack is estimated to have taken place on 2026-08-23. Sector: Retail & E-Commerce. Country: Germany. Website: westwing.com. [AI generated] Westwing Group SE is a German e-commerce company specializing in home and living products. Founded in 2011 and headquartered in Munich, Germany, it operates an online platform offering curated furniture, dcor, and lifestyle products. The company serves customers across multiple European markets and combines an inspiration-driven shopping experience with a members-only model, targeting design-conscious consumers seeking premium home furnishings.
resi.com
August 24, 2026
•[ ransomware, retail, technology ]
resi.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Retail & E-Commerce. Country: Germany. Website: resi.com. Resi is a UK-based online architectural and home renovation platform founded in 2017 by Alexandra Depledge and Jules Col...
A&E + SMA Design
July 15, 2026
•[ ransomware, technology ]
A&E + SMA Design was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-07-15. Sector: Professional Services. Country: United Arab Emirates. Website: www.ae.design.
Senvibe
August 24, 2026
•[ ransomware, technology, education ]
Senvibe was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Technology. SENVIBE project is to improve and build national educational capacities, cooperation and competences in dealing with environmental and occupational noise and vibration (No&Vib) engineering issues in accordance with ongoing EU integration strategies and the needs identified in Serbia.
Mark’Techno
August 24, 2026
•[ ransomware, technology, manufacturing ]
MarkTechno was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Technology. Website: marcktechno.com. https://marcktechno.com Marktechno has been a key player in the mechanical and sheet metal Deadline: 2026-08-31 13:50:00.000000
ManagementPro
August 24, 2026
•[ ransomware, technology ]
ManagementPro was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Professional Services. Website: mproerp.com. www.mproerp.comManagementPro Inc. is a Computer Software Company, specialized in ERP Solut Deadline: 2026-08-31 13:50:00.000000
Davroc
August 24, 2026
•[ ransomware, technology, manufacturing ]
Davroc was listed as a victim on the leak site of the Booba Project ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.davroc.co.uk. Furniture and Home Furnishings Manufacturing Stolen data: 15 GB.
Wozair
August 24, 2026
•[ ransomware, manufacturing, energy ]
Wozair was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Other. Country: United Arab Emirates. Website: wozair.com. Wozair specializes in the design, manufacture, and installation of heavy-duty heating, ventilating, and air conditioning (HVAC) products for various sectors including Marine, Naval, Military, Nuclear, Oil and Gas, Powergen, and Renewables. Their product range includes air handling units, dampers, filtration solutions, and refrigeration systems. Wozair also offers services such as system design, project management, manufacturing, commissioning, and maintenance. The company aims to provide bespoke solutions to meet specific client requirements while ensuring a safe working environment.
FFKR Architects
January 9, 2026
•[ ransomware, technology, healthcare ]
FFKR Architects was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-01-09. Sector: Professional Services. Country: United States of America. Website: ffkr.com. FFKR Architects is a leading architecture and interior design firm based in Utah, with additional offices in Arizona and Idaho. They offer a wide range of services including architecture, landscape architecture, interior design, and environmental graphic design. The firm is known for its design excellence and commitment to environmental leadership, serving various sectors such as healthcare, education, hospitality, and commercial projects. With a team of over 170 professionals, FFKR empowers clients through innovative visualization techniques, ensuring informed decision-making.
Criba
August 24, 2026
•[ ransomware, financial, technology ]
Criba was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Technology. Country: Argentina. Website: criba.com.ar. (release includes data on Argentina, Uruguay, and other countries, as well as financial documents and client documentation, including a vast amount of information not intended for public disclosure) CRIBA Empresa Constructora Argentina specializes in providing comprehensive solutions for every stage of construction projects, leveraging over 70 years of experience. The company focuses on quality, efficiency, and safety, ensuring that they can execute even the most ambitious architectural designs. Their portfolio includes a variety of projects such as commercial offices, healthcare facilities, and residential buildings. CRIBA is committed to maintaining a zero-accident policy, prioritizing the safety of their workforce.
SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA
August 24, 2026
•[ ransomware, leak, finance ]
SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-08-24. Sector: Professional Services. Country: United States of America. Website: slgjustice.com. Family law firm, established 1995 by Victor A. Shaheen (2025 - the General Assembly of Virginia honored him with a resolution; google it, it is touching). Now run by his three sons. 48 employees across four offices: Richmond, Midlothian, Virginia Beach, Newport News. What do they do? They close 150+ real estate transactions EVERY MONTH for some of the largest corporate relocation programs in America. When a Fortune-500 moves an employee to Virginia, this firm holds that employee's Social Security Number, bank wiring details, home address, family identities, and sometimes their medical clearance. They hold everyone's future in a shared folder. We now hold the folder. WHAT WE TOOK 36,788 files 27GB 21,789 fully read 67,000+ SSN patterns (their own dedup says 6,017 real people we will let their customers decide which number to believe) EVIDENCE SERIES PREVIEW (from their actual files) - S1 DEEDS WITH SOCIAL SECURITY NUMBERS File: "5053815 - Unsigned Deed.docx" (verbatim from their server): "***-**-XXXX B H Social Security Number ***-**-XXXX J H Social Security Number 10356 Ashburn Road, North Chesterfield, VA 23235" File: "Kelley 5042085 - DEED.docx": "PURCHASER(S): N S SELLER'S NAME: S E. K SS#: ***-**-XXXX ...including the withholding of twenty percent (20%) of the sales proceeds." FIRPTA: foreign sellers. IRS will want this list. We have it. Thousands of these. Every deed folder = a name, a number, an address, a transaction. Their client roster IS the leak. - S3 INSIDE THEIR BANKING & THEIR NETWORK File: "shared_Accounting/Banking/Other Banking/Shaheen DDA Statements SunTrust DDA" (email from SunTrustOnlineCourier to their own staff headers verbatim): Received: from barracuda.shaheenlaw.com ([10.0.0.6]) by ricdcex1.shaheenlaw.com ... X-ASG-Debug-ID: 1291233029-... for ; Wed, 1 Dec 2010 Why we publish an email HEADER: their internal map is in it. Barracuda at 10.0.0.6. Exchange "ricdcex1". Domain SHAHEENWORLD. We did not forget how to enter. Neither will the next group, when we sell the map. 150 banking statement attachments ride along in this folder. - S5 THE CLIENT LIST, WRITTEN IN FOLDERNAMES They named folders after their customers. Verbatim paths: shared_PENDING_SALE/HENNY/Closed Files/ Wisniewski-Markel, Suzanne_5027384_12263 Eagle ... Merza, Jamal & Adrienne_5027826_811 Woodberry ... Name, file number, STREET ADDRESS in the path itself. Marketing lists sell for money. This one is annotated with purchase history. Relocation buyers are premium leads. - S2 MEDICAL - S4 LITIGATION Held. 120 medical files exist (their own audit counted them). Litigation: we confirm their December escrow dispute is public (Porchlight Homes v. Almeida & Shaheen, Henrico google it, BizSense covered it). Virginia residents: 18.2-186.6. Illinois relocations: BIPA. Opposing counsel and journalists: samples on request. Media & researchers: samples on request, we answer fast We keep our word to everyone who pays. We keep it also to everyone who does not.
Cosmon
August 19, 2026
•[ ransomware, technology ]
Cosmon was listed as a victim on the leak site of the beast ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Technology. Country: United States of America. Website: www.cosmon.com. Cosmon develops agentic artificial intelligence software for mechanical engineering workflows, centered on its Nexus product for CAD, CAE, simulation, and PLM tasks. Its website presents the company as a software provider whose platform automates drawing creation, simulation setup, troubleshooting, design validation, and product lifecycle data tasks while integrating directly with major engineering tools. Although the offering is deeply technical and tailored to engineering environments, the core business shown is the development and delivery of proprietary engineering software rather than providing outsourced engineering services or general consulting. https://cosmon.com https://www.zoominfo.com/c/cosmon/5000578320
S*******
August 24, 2026
•[ ransomware, technology ]
S******* was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-08-24. Website: .. An International Public Company
A-Plus Software Limited
August 25, 2026
•[ ransomware, sqlinjection, technology ]
A-Plus Software Limited was listed as a victim on the leak site of the ShadowByt3$ ransomware group; the attack is estimated to have taken place on 2026-08-25. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.a-plussoft.com. We Breached A-plus through a sql injection vulnerability and downloaded everything in there backend. We gained access to there system on 08/18/2026
The following data was stolen:
1. Website User Data (`usr.csv`)
- This file contains the administrative backend infrastructure for the website, exposing:
- 10 internal accounts, including the usernames `admin`, `debuger`, `camby`, `asuka`, `jimmy`, `ricole`, and `green`.
- Password hashes (SHA-1 format) revealing that almost all administrative users shared the exact same password.
- Internal access metadata
2. Marketing and Public Web Content
- The remaining four files contain the text, configuration, and structural layout used to display information to visitors on `a-plussoft.com`:
`- products.csv`
13 lines): The master list of software solutions and mobile apps sold by the company (such as SalesAnywhere).
`- product_content.csv` (101 lines): The detailed marketing descriptions, features, specifications, and text modules displayed on individual product pages.
`- news.csv` (89 lines): The text content of all historical corporate announcements, updates, and press releases published by the company.
`- news_cate.csv` (2 lines): The category organization tags used to sort the news section on the website
Uncompressed size
total records: 211
2,787,292 Bytes, which equals 2.6582 Megabytes (MB).
mirror 1: https://anonfilesnew.com/s/XtgbXhRkQQ8
mirror 2: https://pixeldrain.com/u/jUpuUyj9
Hamilton
August 26, 2026
•[ ransomware, manufacturing, technology ]
Hamilton was listed as a victim on the leak site of the AiLock ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Other. Country: United States of America. Website: hamiltoncompany.com. Founded in 1953 and headquartered in Reno, Nevada, Hamilton Company is a global provider in the design and manufacture of liquid handling, process measurement, robotics and automated storage solutions, serving customers in academic and private research laboratories, pharmaceutical and clinical diagnostic companies and government institutions.
