W Interactive
October 28, 2026
•[ ransomware, technology ]
W Interactive was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.w-interactive.com.
Facts N Figures
October 30, 2026
•[ ransomware, technology ]
Facts N Figures was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Professional Services. Country: United States of America. Website: factsnfiguresinc.com. A consumer insights research company.
Bi Link
October 31, 2026
•[ ransomware, manufacturing, technology ]
Bi Link was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-31. Country: United States of America. Website: bi-link.com. bi-link.com Revenue $380.2 Million Bi-Link US precision manufacturer founded in 1961 (HQ Bloomingdale, IL), making metal stampings and injection-molded plastics with in-house tooling and assembly for automotive, medical, wireless, and consumer electronics OEMs. It owns plants in Shanghai, Nanning, Mexico (Jurez), and a new Vietnam site (2024), offering prototype-to-production under one roof. Revenue isn't reliably public broker estimates range wildly from ~$10M to $50M, but a TaiPEX filing suggests ~$5M+/month after consolidation. The critical development: in October 2025 family owners agreed to sell the company to Taiwan-listed Donpon Precision, closed and consolidated from Jan 2026. Despite the site still claiming "family-owned", control is now Donpon's, and long-time CEO Tom Harris has exited. Certifications (ISO 9001, ISO 13485, IATF 16949) support real OEM work (e.g. Teleflex via a 3D Systems case)
EPMMOP
October 26, 2026
•[ ransomware, government, technology ]
EPMMOP was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Ecuador. Website: epmmop.quito.gob.ec. epmmop.quito.gob.ec EPMMOP is the Metropolitan Public Company of Mobility and Public Works of Quito, Ecuador, responsible for urban transportation infrastructure and public works across the capital district of 2.7 million people. It manages the city's integrated transport system including the new Quito Metro, launched in December 2023 as Ecuador's first subway line with 22.4 kilometers and 15 stations. The agency also operates the TelefriQo cable car, one of the highest in the world, plus trolleybus, BRT and cable car systems under the SITM integrated transit framework. It builds and maintains roads, bridges, sidewalks, drainage and one of Latin America's largest cycling networks. The company works within Quito's UNESCO World Heritage context, requiring unique engineering solutions for the historic center.
SoftwareOne
October 26, 2026
•[ ransomware, technology, leak ]
SoftwareOne was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: Turkey. Website: softwareone.com. softwareone.com SoftwareOne Turkiye is the Turkish arm of SoftwareOne Holding AG, a Swiss-listed global software and cloud solutions provider that merged with Crayon to form a 13,000 person company operating in over 70 countries. Based in Ataehir, Istanbul and active since 2019, it employs around 40 to 60 people and works with 100 percent of Turkey's top 50 companies and 80 percent of the top 500. Services span software licensing advisory for Microsoft, IBM and Oracle, cloud migration across Azure, AWS and Google Cloud, DevSecOps, cybersecurity, AI and FinOps. In December 2024 SoftwareOne AG acquired full ownership of the Turkish entity, approved by the Turkish Competition Authority. Led by Managing Director Doa Pekdemir and CFO Hakan Keri, it has delivered projects for Turkish Airlines, TAV Airports, Coca-Cola and Vakf Katlm. Key strengths are its unmatched enterprise market coverage in Turkey and full access to the global SoftwareOne and Crayon ecosystem.
Northwest Micro Systems
October 26, 2026
•[ ransomware, technology ]
Northwest Micro Systems was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: United States of America. Website: nwmicro.com. nwmicro.com Northwest Micro Systems, formally Northwest Micro Inc., is a private IT services and software company founded in 1998 in Atlanta, Georgia, serving small businesses with managed IT, cloud backup, email, CRM and custom .NET development. Led by founder and owner Leo Zhadanovsky, it has around 11 employees and steady revenue of roughly 5 million dollars. Its unique model offers affordable one-time products like the One 2 One email server and Speed To Success CRM for about 100 dollars with lifetime updates and support. The company positions itself as the anti-corporate alternative to Oracle and Microsoft, focused on keeping small business clients for life. Core strengths are 28 years of market presence, a loyal SMB client base and a low-overhead operation. Its tech stack centers on Microsoft 365, SQL Server and .NET with a mix of SaaS and on-premise tools.
nelsenarchitects.com
September 28, 2026
•[ ransomware, technology, leak ]
nelsenarchitects.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-28. Sector: Professional Services. Country: United States of America. Website: nelsenarchitects.com. This article is based on a portion of the company's internal documents to which we gained access. Every statement has coordinates file, date, line number. Personal data has been masked the company failed to protect it, so we are protecting it.
everon.com.ar
October 31, 2026
•[ ransomware, technology ]
everon.com.ar was listed as a victim on the leak site of the safepay ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Other. Country: Argentina. Website: everon.com.ar. The company is headquartered in Resistencia, in Chaco Province, and specializes in providing fiber-optic internet connectivity to residential customers and
JHAMF Group
October 31, 2026
•[ ransomware, technology ]
JHAMF Group was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-31. Country: Bangladesh. Website: www.jhamf.com. JHAMF Group is a Colombian IT services company specializing in IT infrastructure, telecommunications, software licensing and implementation, network installation and certification, technical support outsourcing, and cloud infrastructure solutions, including Microsoft Azure.
southsign.in
September 1, 2026
•[ ransomware, technology ]
southsign.in was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Professional Services. Country: India. Website: southsign.in. Southsign Technologies is an Indian proprietor firm established in 2021, headquartered in Dindigul, Tamil Nadu, India, o...
amptc.net
September 1, 2026
•[ ransomware, technology ]
amptc.net was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-09-01. Sector: Technology. Country: United States of America. Website: amptc.net. Arab Maritime Petroleum Transport Company (AMPTC) is a leading Arab maritime shipping company established in 1972 as a s...
QLC
October 27, 2026
•[ ransomware, technology ]
QLC was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Technology. Country: United States of America. Website: www.qlc-labeling.com. United States
PQE Group
October 28, 2026
•[ ransomware, technology ]
PQE Group was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-28. Sector: Professional Services. Country: Italy. Founded in 1998, PQE Group provides technology solutions and compliance consulting services to the Life Sciences industry. The company is headquartered in Reggello, Florence. Note : The Full Data volume is coming as duplicati (dindex.zip.aes), Our Team with our Affiliates will try to enum the PassPhrase From the Target Network and Crack it with a Custom Pass lists and custom tools, We Also Gonna Share the Guide to how you as a hacker can get the hash with aescrypt2hashcat.pl and Crack it using hashcat, The Rest will depend on your Crack process to see the full data volume, We also available to Recover the data to the company when they contact us via official channels and stop the leak process, Thank you.
Rapid Manufacturing
October 30, 2026
•[ ransomware, espionage, manufacturing ]
Rapid Manufacturing was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Manufacturing. Website: Rapid Manufacturing. [manufacturer] Rapid Manufacturing a 50-year-old electronics contract manufacturer in Anaheim, California with operations in Ensenada, Mexico.
Rapid Manufacturing is not a household name. But it is a critical Tier-1 supplier to SpaceX (Falcon & Starship programs), Anduril, Northrop Grumman, Rocket Lab, L3Harris, Collins Aerospace (RTX), and Millennium Space (Boeing). It builds the wire harnesses, electro-mechanical assemblies, and box builds that go inside rockets, missiles, and satellites.
The exposed material includes:
>
ITAR-controlled engineering drawings and manufacturing processes for Falcon 9/Heavy, Starship, and Draco propulsion systems RTD soldering acceptance criteria, visual inspection standards, cable thermocouple assemblies, and production master plans.
26 ITAR customer quoting accounts including SpaceX, Anduril, Northrop Grumman, Rocket Lab, L3Harris, Collins Aerospace, and Millennium Space the complete defense/space revenue architecture.
6001,200 employee records spanning US (SSN, bank accounts, payroll, I-9/immigration) and Mexico (RFC, CURP, IMSS, bank accounts, nminas) with data from 2019 through August 2026.
Attorney-client privileged materials settlement agreements, severance terms, internal investigation files, and a recorded termination meeting (audio).
Societe Ivoirienne De Telediffusion
October 30, 2026
•[ ransomware, technology ]
Societe Ivoirienne De Telediffusion was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Technology. Country: Cte dIvoire. Website: www.sidt.ci.
Sistemas Visuales 360
October 30, 2026
•[ ransomware, technology ]
Sistemas Visuales 360 was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-30. Sector: Technology. Country: Mexico. Website: www.sistemasvisuales360.com.mx.
FPT Software
October 27, 2026
•[ ransomware, technology, automotive ]
FPT Software was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Technology. Country: Vietnam. Website: fptsoftware.com. fptsoftware.com FPT Software is the largest IT services company in Southeast Asia, founded in 1999 in Hanoi with 1.34 billion dollars in revenue and over 33,000 employees across 31 countries. It serves 1,100 clients including 130 Fortune Global 500 companies across automotive, banking, healthcare and energy, with Japan as its largest international market. Its AI-first strategy uses the FleziPT platform delivering 30 percent productivity gains, with AI and data services growing 60 percent in 2026. In 2025 it signed a record 256 million dollar AI transformation deal and secured 26 projects above 10 million dollars. Strategic partnerships span NVIDIA, Microsoft, SAP, AWS and OpenAI. Key strengths are unmatched scale from Vietnam, deep AI capabilities and a 152,000 strong education talent pipeline.
Eichstatt
October 27, 2026
•[ ransomware, government, education ]
Eichstatt was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-27. Country: Germany. Website: eichstaett.de. eichstaett.de 1,5 tb information Eichsttt is a small historic town in Upper Bavaria with 13,500 inhabitants and 1400 years of history, famous for its baroque architecture, Jura Museum with Archaeopteryx fossils and UNESCO Altmhltal Geopark. The Katholische Universitt Eichsttt-Ingolstadt enrolls about 4,800 students across 4 faculties spanning theology, philosophy, languages and business in Ingolstadt. Under President Dr. Klaus Stwe since 2023, it received 5.86 million euro in Bavarian funding for digital transformation and AI programs. It is developing an international campus in Shandong, China and launching new sustainability master's degrees. Key strengths are its Catholic identity, small class sizes and strategic location between Munich and Nuremberg.
SuperScale
October 26, 2026
•[ ransomware, technology ]
SuperScale was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Website: superscale.com. superscale.com SuperScale is a Slovak game growth platform founded in 2015 in Bratislava, helping over 500 mobile game studios scale their games through AI-powered performance marketing, data science and monetization optimization. With around 60 employees and 1000 plus games grown, it offers both a SaaS platform and managed growth services acting as an outsourced UA and live ops team. Its core technology includes predictive LTV and retention models, automated user acquisition campaigns and AI creative production across Facebook, Google, TikTok and Apple Search Ads. Led by CEO Ivan Trancik, the company specializes in hybrid monetization strategies combining ads, in-app purchases and subscriptions for casual, midcore and hypercasual titles.
Acodafe
October 26, 2026
•[ ransomware, technology, leak ]
Acodafe was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-26. Country: Colombia. Website: acodafe.com. acodafe.com Acodafe S.L. is a Spanish IT services company founded in 2009 in Matar, Barcelona, providing managed IT, network installation, cybersecurity, cloud backups, data center hosting and GDPR consulting for small and medium businesses. Led by sole administrator Adrin Conde Kuller, it has just 4 employees and annual revenue between 500,000 and 1.5 million euro. The company grew sales by 22.8 percent in 2024 and climbed over 12,000 positions in Spain's national business ranking. Its services cover the full IT lifecycle for SMEs and industrial clients from system maintenance and installation to 24/7 emergency support. In 2019 it expanded into data protection consulting, a growing regulatory niche in Spain. Key strengths are 17 years of market presence, a lean and profitable operation and a diversified service portfolio tailored to small business needs.
