TOWILL
September 20, 2026
•[ ransomware, technology, government ]
TOWILL was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-09-20. Sector: Technology. Country: United States of America. Website: www.towill.com. A geomatics veteran since 1955, providing surveying, LiDAR, photogrammetry, and GIS services primarily for U.S. federal agencies, including the Army Corps of Engineers and the Department of Defense.
Touring Club Suisse
September 20, 2026
•[ ransomware, technology ]
Touring Club Suisse was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-20. Sector: Transportation. Country: Switzerland. Website: www.tcs.ch.
Zorlu Holding
September 20, 2026
•[ ransomware, manufacturing, energy ]
Zorlu Holding was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-20. Sector: Manufacturing. Country: Turkey. Website: www.zorlu.com.
IKEGAMI TSUSHINKI COMPANY LIMITED
September 21, 2026
•[ ransomware, manufacturing, technology ]
IKEGAMI TSUSHINKI COMPANY LIMITED was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: Japan. Website: www.ikegami.co.jp.
Gomomentum.com
September 21, 2026
•[ ransomware, leak, technology ]
Gomomentum.com was listed as a victim on the leak site of the EndZone ransomware group; the attack is estimated to have taken place on 2026-09-21. Country: United States of America. Website: momentumtelecom.com. Revenue: $221.7 million
Momentum is a telecommunications company founded in 2001 that provides cloud-based communication solutions for businesses, specializing in cloud voice services, managed networks, SD-WAN solutions, and Microsoft Teams Phone integration. We gained access to a diagnostic and provisioning tool used by Momentum through a compromised Multi-Service Operator (MSO). Upon reconnaissance, we identified multiple critical vulnerabilities throughout the system. This tool controls internet and voice services for millions of users across global markets. We successfully accessed user data for every MSO, exposing personally identifiable information (PII) for over 7.5 million users. They didn't notice the prolonged access or the customer data dump for a while, but when we started deleting modems they noticed. They kept burning access and we gained it back, they'd burn it again. We removed modem packages for 58,127 users across the United States. That's 58,127 people without internet service right now. Families, businesses, students all cut off from the digital world. This is the direct result of their negligence and failure to secure their systems. These services can be restored immediately with the click of a button on our tool but you must reach out. Momentum management should contact us to discuss resolution.
Visual Intelligence, Inc.
September 21, 2026
•[ ransomware, technology ]
Visual Intelligence, Inc. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Technology. Country: United States of America. Website: visualintelligenceinc.com. Visual Intelligence is a managed services company that applies advances in drones, computing, and AI to assess and cleanse existing Telecom company databases, generate critical intelligence, and inform teams with a new digital core.
Flex Ltd
September 21, 2026
•[ ransomware, manufacturing, technology ]
Flex Ltd was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Manufacturing. Country: United States of America. Website: flex.com. Flex Ltd. is a global technology manufacturing and supply-chain company headquartered in Austin, Texas. It provides design, engineering, electronics manufacturing, supply-chain management, and infrastructure solutions for customers across the data center, AI, automotive, healthcare, industrial, communications, and consumer technology sectors. Flex operates more than 100 facilities worldwide and employs approximately 150,000 people.
Telrad Networks
September 21, 2026
•[ ransomware, technology ]
Telrad Networks was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Technology. Country: Israel. Website: www.telrad.com.
Kjla
September 21, 2026
•[ ransomware, technology ]
Kjla was listed as a victim on the leak site of the Global Secret Group ransomware group; the attack is estimated to have taken place on 2026-09-21. Country: United States of America. Website: kjla.com. Country: US |
Website: kjla.com |
Revenue: $6.7 Million |
Industry: Broadcasting |
Employees: 1150 employees |
Properties:: 783 GB (501,662 Files, 42,890 Folders)
360 Consulenza S.r.l.
September 14, 2026
•[ ransomware, technology, leak ]
360 Consulenza S.r.l. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-09-14. Sector: Professional Services. Country: Italy. Website: www.360consulenza.com. - Clients' Private Documents- Projects- Software Source Codes
kyyba.com
September 21, 2026
•[ ransomware, technology ]
kyyba.com was listed as a victim on the leak site of the unsafe ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Technology. Country: Finland. Website: kyyba.com. Revenue: $53.1 million
FinSoft (Kolibri retail back-office software)
September 22, 2026
•[ ransomware, technology, retail ]
FinSoft (Kolibri retail back-office software) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Retail & E-Commerce. Country: Uzbekistan. Retail software vendor / IT services Uzbekistan | Client databases of 10+ retail chains (keddo, marc, lancaster, comf_rus, ek, cr, bas_at, bas_juk, bas_nov, bas_zar): sales, stock, pricing, financial records; Back-office platform and API service data | One client database publishes per day after the deadline, starting with keddo. Their clients will know exactly whose software failed them. | [ACTIVE: deadline 2026-09-25 01:06 UTC]
Sealcon
September 22, 2026
•[ ransomware, manufacturing, technology ]
Sealcon was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Manufacturing. Country: United States of America. Website: www.sealconusa.com. Founded in 1989 and headquartered in Colorado, Sealcon is a cable management provider in North America consisting of rated electrical and electronic components such as liquid-tight strain reliefs, cable glands, circular connectors, UL enclosures, conduit, and electrical accessories.
Columbus Informatica
September 22, 2026
•[ ransomware, technology ]
Columbus Informatica was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Technology. Country: Italy. Website: www.columbusinformatica.it.
vit.ac.in
September 13, 2026
•[ ransomware, education, technology ]
vit.ac.in was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-09-13. Sector: Education. Country: India. Website: vit.ac.in. VIT (Vellore Institute of Technology, official site vit.ac.in) is a well-known private university in India: founded in 1984 and granted university status in 2001, with its main campus in Vellore and additional campuses in Chennai, AP, and Bhopal; it is especially strong in engineering and technology (NAAC A++, solid NIRF/QS standing), admits most undergrads via VITEEE, and posts strong placements (often 10,000+ offers in recent years, with top packages around 1 crore INR).
AFRICA-TECH (IT services / document processing)
September 22, 2026
•[ ransomware, technology ]
AFRICA-TECH (IT services / document processing) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-09-22. Sector: Technology. Country: Mali. IT services / document services Mali | Client documents: scans, attestations, insurance and embassy files, shared business folders | Operations are fully stopped. Nothing restores without settlement all backups and shadow copies are encrypted or destroyed. | [ACTIVE: deadline 2026-09-25 16:00 UTC]
Seznam
September 23, 2026
•[ ransomware, technology ]
Seznam was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Technology. Country: Czechia. Website: seznam.cz. Organization with 115 emails extracted. Domain: seznam.cz
Aokkef
September 23, 2026
•[ ransomware, leak, technology ]
Aokkef was listed as a victim on the leak site of the medusalocker ransomware group; the attack is estimated to have taken place on 2026-09-23. Country: France. Website: aokkef.fr. Organization with 137 emails extracted. Domain: aokkef.fr
Inkript
September 23, 2026
•[ ransomware, technology ]
Inkript was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Technology. Website: www.inkript.com.
Trump Mobile
September 23, 2026
•[ ransomware, leak, technology ]
Trump Mobile was listed as a victim on the leak site of the EndZone ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Technology. Country: United States of America. Website: trumpmobile.com. Revenue: 4K Users
Trump Mobile is an American mobile virtual network operator (MVNO) that uses a licensed brand from the Trump Organization and was launched by Donald Trump Jr. and Eric Trump. THEY GOT FKED LOL. ONLY 4K USERS? LOL Includes eSIM QR codes and user PII.
