Petrocare Construction
September 2, 2026
•[ ransomware, energy, technology ]
Petrocare Construction was listed as a victim on the leak site of the Storm ransomware group; the attack is estimated to have taken place on 2026-09-02. Sector: Energy & Utilities. Country: Canada. Website: petrocare.ca. Petrocare Construction is a company founded on old fashioned principals - yet implementing cutting edge technology and state-of-the-art building methods, and we are proud of this. We have and continue to make a difference by "Teaming in Partnership" with our clients. Important to us is - what is important to you, namely: accurate job costing, timely progress reports, effective construction management, qualified staff, subcontractors and more. Because our team is in partnership with you, we will always work hard to maintain a solid, long-term relationship with you - that is our way of doing business. We understand the challenges of modern construction. We are pro-active in our response to the complex needs of environmental, technological and time sensitive issues. It is our clear focus to meet and exceed the needs of our clients. We are specialists in commercial, industrial, wholesale and retail petroleum facilities. Whether it be design/build construction, environmental remediation ordecommissioning we will serve your needs all over Western Canada. We are a company of people, equipment and technology that will provide the catalyst to meet and exceed your building construction and site maintenance needs for today and beyond.
The company headquarters is located in 1202 Avenue X South, Saskatoon, SK S7M 3H9, Canada. 51-200 Employees
Dinas Komunikasi dan Informatika
September 3, 2026
•[ ransomware, government, technology ]
Dinas Komunikasi dan Informatika was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-03. Sector: Government & Defense. Country: Indonesia. Website: klungkungkab.go.id. The Central Java Province Communication and Informatics Service was formed based on Central Java Provincial Regulation Number 9 of 2016 concerning the Formation and Composition of Central Java Province Regional Apparatuses and Central Java Governor Regulation Number 70 of 2016 concerning the Organization and Work Procedure of the Central Java Province Communication and Informatics Office. As for the duties of the Central Java Province Communication and Informatics Office, it is to assist the Governor in carrying out government affairs in the communications and informatics sector, the coding sector, and the statistics sector which are the authority of the Regions and the assistance tasks assigned to the Regions.
teletekstructures.com
August 18, 2026
•[ ransomware, technology ]
teletekstructures.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-08-18. Sector: Technology. Website: teletekstructures.com. A Canadian company builds cell towers across North America. PROLOGUE Teletek Structures Inc. a Can...
myglobal.com
September 3, 2026
•[ ransomware, technology, manufacturing ]
myglobal.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-09-03. Sector: Other. Country: Malaysia. Website: myglobal.com. My Global Services Sdn Bhd is the first authorized distributor of OLED LiFi in Malaysia, specializing in OLED LiFi technology, mechanical and electrical engineering, as well as civil and construction services. The company provides solutions for scientists and research workers, offering sales and support for scientific equipment. Their services include civil and structural engineering, ensuring a comprehensive approach to their clients' needs. With a focus on innovative lighting solutions, they aim to enhance the capabilities of their clients across various sectors.
Employees: 10
Revenue: $5 Million
Industry: Architecture, Engineering & Design
Phone Number: +60 358922797
Katten Muchin Rosenman
September 3, 2026
•[ ransomware, finance, healthcare ]
Katten Muchin Rosenman was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-09-03. Sector: Professional Services. Country: United States of America. Website: katten.com. [AI generated] Katten Muchin Rosenman is a full-service law firm headquartered in the United States. Operating across multiple offices in major American cities and internationally, the firm provides legal services in areas including corporate law, litigation, financial markets, real estate, intellectual property, and regulatory compliance. It serves clients across industries such as finance, entertainment, and healthcare, and is recognized as a prominent firm within the U.S. legal sector.
PIT.local
August 27, 2026
•[ ransomware, technology ]
PIT.local was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-08-27. Country: Colombia. Website: PIT.local.
mansurovogroup
August 26, 2026
•[ ransomware, technology, manufacturing ]
mansurovogroup was listed as a victim on the leak site of the AuditTeam ransomware group; the attack is estimated to have taken place on 2026-08-26. Sector: Other. Country: Russian Federation. mansurovogroup is an integrated agricultural enterprise based in Kursk Oblast, Russia. It operates across four main segments: grain cultivation and seed production, cattle farming (beef and dairy), sheep farming (wool and meat), and horse breeding at a stud farm with a 200-year history. The company emphasizes agricultural innovation and was an early adopter of precision farming technologies.
Sancity Soft Touch
September 4, 2026
•[ ransomware, technology ]
Sancity Soft Touch was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Technology. Country: United States of America. Website: softtouch4u.com. IT services company providing web design & development, software/application development, payment gateway services, digital marketing, mobile applications, software testing and cloud-related services.
Kovo Healthtech Corp
September 2, 2026
•[ ransomware, healthcare, technology ]
Kovo Healthtech Corp was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-09-02. Sector: Healthcare. Country: United States of America. Website: kovoplus.com. Versatile technology company leading the Charge in AI process automation initiatives to drive Impact and innovation across diverse industries
Nolan Consulting Group
September 5, 2026
•[ ransomware, technology ]
Nolan Consulting Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Professional Services. Country: United States of America. Website: www.nolancg.com.
CitizensPay
September 5, 2026
•[ ransomware, finance, technology ]
CitizensPay was listed as a victim on the leak site of the DYSPHOR1A ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Financial Services. Country: Myanmar. Website: ctzpay.com. Citizens Pay (also known as CTZPay) is a mobile digital wallet and payment platform in Myanmar powered by Myanmar Citizens Bank (MCB) and Capital Connect Limited. Compromised agent user information total data size 30 GB. Price range $7,000 to $25,000. Victim domain https://ctzpay.com.
Mega Velocity
September 5, 2026
•[ ransomware, technology, leak ]
Mega Velocity was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-09-05. Sector: Transportation. Country: Mexico. Website: megavelocity.net. New Delhibased private technology company incorporated in 2013. Its registered business classification is software publishing, consultancy and supply, including software development, maintenance and web-page design. Its network records also identify MEGA VELOCITY PVT LTD as an Internet/hosting network operator.
Veradigm
September 4, 2026
•[ ransomware, healthcare, technology ]
Veradigm was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Healthcare. Country: United States of America. Website: veradigm.com. veradigm.com zoominfo.com/c/veradigm-llc/471134180
3.5+ million personal patient records with PII full name, address, social security number, email, address, phone number,guarantors PII ,Score Veradigm Inc. is a publicly traded American healthcare technology and data analytics company (OTC: MDRX), the former Allscripts, founded in 1986 and renamed Veradigm in January 2023, headquartered in Chicago with about 2,3002,600 employees. Its core asset is one of the largest multi-EHR data networks in US healthcare over 450,000 connected providers and 200M+ patient records which it monetizes through three segments: Provider (EHR, practice management, revenue cycle: $473M in 2024), Payer (quality and risk adjustment analytics: $67.3M) and Life Sciences (real-world data and AI-driven evidence: $54M).
Edacentrum
September 6, 2026
•[ ransomware, technology, manufacturing ]
Edacentrum was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-09-06. Country: Germany. Website: edacentrum.de. The edacentrum is the network for electronics, design and applications in business and science. As an independent authority, the edacentrum designs research & development for a consistent design methodology along the entire value chain. In this role, the edacentrum is a recognized innovation accelerator for the microelectronics industry and its user industries
eAssist Dental Solutions
September 6, 2026
•[ ransomware, healthcare, technology ]
eAssist Dental Solutions was listed as a victim on the leak site of the direwolf ransomware group; the attack is estimated to have taken place on 2026-09-06. Sector: Healthcare. Country: United States of America. Website: dentalbilling.com. Healthcare
Homewood Sales
September 4, 2026
•[ ransomware, retail, manufacturing ]
Homewood Sales was listed as a victim on the leak site of the dragonforce ransomware group; the attack is estimated to have taken place on 2026-09-04. Sector: Retail & E-Commerce. Country: United States of America. Website: homewoodsales.com. Homewood Sales Corporation specializes in equipment life extension solutions, offering a wide range of products including automatic voltage regulators, control panels, and motors, all built to Westinghouse specifications. With over a century of expertise, they provide exceptional quality in industrial and power distribution units and components. Their services include global sourcing, factory revitalization, and technical support, ensuring precise and expert assistance for their clients. Homewood primarily serves industries requiring reliable power distribution and equipment maintenance solutions.
MSM Unify: Global Education Platform - CA
September 7, 2026
•[ ransomware, education, technology ]
MSM Unify: Global Education Platform - CA was listed as a victim on the leak site of the kazu ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Education. Country: Canada. Website: www.msmunify.com. MSM Unify is a global education technology platform that helps students find and apply to international universities and programs. It connects students with 1,500+ campuses and more than 50,000 programs across destinations such as Canada, the USA, the UK, Australia, and Germany. The platform provides support with course selection, university applications, scholarships, visa assistance, education loans, accommodation, and test preparation
Hologic, Inc.
September 7, 2026
•[ ransomware, healthcare, technology ]
Hologic, Inc. was listed as a victim on the leak site of the metaencryptor ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Healthcare. Country: United States of America. Website: www.hologic.com. Hologic, Inc. is a U.S.-based medical technology company specializing in womens health. It develops and manufactures diagnostic, imaging, and surgical products, with a strong focus on breast health, gynecology, diagnostics, and osteoporosis assessment.
Jbc
September 7, 2026
•[ ransomware, manufacturing, technology ]
Jbc was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-09-07. Country: Spain. Website: www.jbctools.com.
Jinny Beauty Supply
September 7, 2026
•[ ransomware, retail, technology ]
Jinny Beauty Supply was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-09-07. Sector: Retail & E-Commerce. Country: United States of America. Website: Jinny Beauty Supply. [distributors] Jinny Beauty Supply is one of the largest Korean-American wholesale beauty distributors in the US, operating 9 distribution centers from Doraville, Georgia to Commerce, California. They serve 7,400+ beauty supply stores and 2,800+ international distributors.
The exposed material includes:
A complete password vault export 50+ plaintext credentials for PayPal, Braintree, Amazon Seller Central, eBay, Acumatica ERP (production), 12 state tax portals, FedEx, UPS, ShipStation, Microsoft 365, Google Analytics, and internal email.
VMware hypervisor root credentials vCenter and ESXi root passwords giving complete control over the entire virtual infrastructure.
911 scanned credit card authorization forms full card numbers, CVV, expiry dates, and cardholder signatures for beauty supply store customers across 26 US states.
Complete employee compensation database ~260 employees with Korean and English names, departments, salaries, bonuses, and 1099 contractor data spanning 20152018.
A 340 MB Shopify database backup full customer table (names, emails, phones, addresses), product catalog, pricing, and warehouse assignments.
Active Directory domain enumeration all 239+ user accounts including 17 admin accounts, the complete server topology across 7 geographic sites (50+ servers), and DPAPI-encrypted RDP passwords.
Employee tax documents W-4 forms (SSN), I-9 forms (SSN + DOB + citizenship), direct deposit forms (bank account and routing numbers).
3.6 GB of SQL Server database backups e-commerce customer/order/product data spanning November 2019 to March 2020.
