OpenText
October 20, 2026
•[ ransomware, technology ]
OpenText was listed as a victim on the leak site of the Mimori ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Technology. Country: Canada. Website: opentext.com. OpenText Corporation is a Canadian company that develops and sells enterprise information management software. OpenText can help you tackle the most complex digital transformation programs with confidence. With the worlds most complete and integrated information management platform, we empower our customers to organize, integrate, and protect data and content as it flows through business processes inside and outside their organization.
Sector: Technology - Files: 94306 - Publication planned: 2026-10-29T19:36:20Z
Asensus Surgical
October 20, 2026
•[ ransomware, healthcare, technology ]
Asensus Surgical was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Healthcare. Country: United States of America. Website: www.asensus.com. About Asensus Surgical TransEnterix, which rebranded as Asensus Surgical in 2021, pursued the goal of challenging Intuitive Surgical in the robotic surgery market. After the FDA rejected its SurgiBot system in 2016, the company pivoted to the Senhance platform, a digital laparoscopy system featuring haptic feedback and eye-tracking camera control. Despite building a global procedure base, Asensus faced persistent financial difficulties and going-concern doubts, ultimately being acquired by KARL STORZ in 2024. The acquisition marked the end of Asensus as an independent entity, with its Senhance technology now folded into KARL STORZ's broader surgical portfolio. Asensus Surgical fell victim to a cyberattack, resulting in the theft of more than 600 GB of data and over 85,000 files containing confidential information, employees personal documents, research findings, and all of the companys internal information.
Hanjin Information Systems & Telecommunication Co., Ltd.
October 21, 2026
•[ ransomware, leak, technology ]
Hanjin Information Systems & Telecommunication Co., Ltd. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Technology. Country: South Korea. IT services South Korea | A complete corporate identity directory of an IT services company, 999 personnel accounts with names and corporate email addresses; The client staffing structure showing which personnel are seconded to major client organizations; Third party vendor accounts and their corporate domains | [NOT PAID EXPOSED]
PWC
October 22, 2026
•[ ransomware, finance, technology ]
PWC was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-22. Sector: Professional Services. Country: United Kingdom of Great Britain and Northern Ireland. [AI generated] PwC (PricewaterhouseCoopers) is a multinational professional services network headquartered in London, United Kingdom. It is one of the "Big Four" accounting firms, offering audit and assurance, tax, consulting, and advisory services to businesses, governments, and organizations worldwide. PwC operates across numerous industries including finance, technology, healthcare, and energy, serving clients in over 150 countries globally.
istanbultrading.com
October 22, 2026
•[ ransomware, retail, technology ]
istanbultrading.com was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-10-22. Sector: Retail & E-Commerce. Country: Turkey. Website: istanbultrading.com. Istanbul Foodstuff Trading Co LLC is a company that operates in the Computer Equipment & Peripherals...
EMARKETER
October 23, 2026
•[ ransomware, technology ]
EMARKETER was listed as a victim on the leak site of the fulcrumsec ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Technology. Country: United States of America. [AI generated] EMARKETER is a market research and business intelligence company based in the United States, specializing in digital marketing, media, and commerce data. It provides forecasts, analysis, reports, and trends on topics like advertising, e-commerce, social media, and emerging technology. The company serves marketers, advertisers, and businesses seeking insights into consumer behavior and industry trends.
ARX Group SA
October 23, 2026
•[ ransomware, technology ]
ARX Group SA was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Other. Country: Switzerland. Website: ARX Group SA. [consultancies, engineering] ARX Group SA one of Switzerland's premier engineering consultancies, with 25+ offices in 17+ countries, known for iconic projects including the Ceneri Base Tunnel and dozens of USTRA/SBB federal infrastructure contracts.
The exposed material includes:
9,510 project fee structures with internal/external billing rates for every engineer the complete pricing intelligence for one of Switzerland's largest infrastructure consultancies.
8 GB of Ceneri Base Tunnel documentation as-built engineering records for Swiss national critical infrastructure.
881,205 time entries spanning years of daily work activity for every employee, with task descriptions and project assignments.
Conax Technologies
October 23, 2026
•[ ransomware, technology, manufacturing ]
Conax Technologies was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Technology. Country: Norway. Website: conaxtechnologies.com. conaxtechnologies.com Conax Technologies US manufacturer founded in 1952 in Buffalo, New York, producing temperature sensors like thermocouples and RTDs together with high-pressure compression seal fittings for extreme conditions. Owned by the private equity firm May River Capital, it has around 200 to 500 employees and estimated revenue of roughly 41 million dollars. Its products operate in extreme temperatures up to 2000 Fahrenheit and pressures up to 100,000 psi across aerospace, defense, semiconductor, medical and energy markets. The company runs a 101,000 square foot plant with 150 machines, holds AS9100, NADCAP and ISO certifications, and has over 45 patents with 100 million products installed worldwide. Under CEO John LeFevre since 2023 it is expanding through acquisitions such as Vulcan Electric and Sorregosa Spain plus growth in semiconductor and medical verticals.
Morrow Meadows Corporation
September 23, 2026
•[ ransomware, manufacturing, technology ]
Morrow Meadows Corporation was listed as a victim on the leak site of the payoutsking ransomware group; the attack is estimated to have taken place on 2026-09-23. Sector: Other. Country: United States of America. Website: morrow-meadows.com. [AI generated] Morrow Meadows Corporation is a United States-based electrical contracting company. It provides electrical construction, design-build, and engineering services for commercial, industrial, institutional, and data center projects. Operating primarily in California, the company serves sectors such as technology, healthcare, education, and manufacturing, offering services including power distribution, lighting, fire alarm systems, and electrical infrastructure installation.
www.optika.ca
October 24, 2026
•[ ransomware, healthcare, technology ]
www.optika.ca was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Technology. Country: Canada. Website: www.optika.ca. Optika Eye Care Center (Centre Visuel Optika Optomtristes) is a Canadian optometry and optical care clinic located in ...
www.zhservices.com
October 24, 2026
•[ ransomware, technology, healthcare ]
www.zhservices.com was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Professional Services. Website: www.zhservices.com. ZH Healthcare (Z & H Consultancy Services Private Limited) is an Indian health-tech platform and EMR/EHR solutions provi...
AB InBev
October 25, 2026
•[ ransomware, manufacturing, retail ]
AB InBev was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Agriculture and Food Production. Country: Belgium. Website: ab-inbev.be. AB InBev is the world's largest brewer, headquartered in Belgium, known for Budweiser, Corona, and Stella Artois .
We hold 329,244 AB InBev social-listening alerts, 2,510 corporate emails across all subsidiaries, 19K access logs, GBS portal records, internal PKI certificates, and 3.2GB of Azure blob assets.
Our demand is $1,000,000 in BTC. [Sector: Retail, Manufacturing]
ETO
October 25, 2026
•[ ransomware, manufacturing, technology ]
ETO was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-25. Country: Germany. Website: www.etogruppe.com.
Gamdom
October 26, 2026
•[ ransomware, financial, technology ]
Gamdom was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Other. Gamdom is an unregulated crypto casino and sportsbook founded in 2016. It recently suffered a hot-wallet breach, with founder Felix Romer reporting over $3 million in losses, though on-chain analysts estimate the damage closer to $4.2 million.
We hold Gamdom's full user database, 15,420,003 accounts with 146 columns, with Gamdom's total combined profit value exceeding $1 billion.
The way in was something internal, a machine account that was already sitting in their admin side (Metawin).
Issued years back, nobody ever rotated it. Never meant to leave the building.
It had admin reach, and everything after that was their own stuff anyway, their control panels and secret stores.
About your provably fair: what it promised and what it delivered were never the same thing.
We demand $15,000,000 in BTC.
Emails with instructions will be sent to you directly.
To verify, a sample can be found below.
Ingelectus Innovative Electrical Solutions S.L.
October 26, 2026
•[ ransomware, energy, technology ]
Ingelectus Innovative Electrical Solutions S.L. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Energy & Utilities. Country: Spain. smart grid engineering firm Spain | Live electrical telemetry sampled from the plant control network, with voltage, current and energy readings recorded on 23 October 2026; Complete inventory of 49 network devices including substation switches, remote terminal units, power meters and server management controllers, with locations and firmware details; Full maps of the internal control network segments and message broker metrics that carry the plant data | [NOT PAID EXPOSED]
GreenbergFarrow
October 27, 2026
•[ ransomware, technology, finance ]
GreenbergFarrow was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Professional Services. Website: GreenbergFarrow. [architecture] GreenbergFarrow a respected ESOP-owned architecture firm headquartered in Atlanta, Georgia with offices in Charlotte, Dallas, Los Angeles, New York, Myrtle Beach, and international operations in Mexico, Colombia, India, and Canada.
The dataset spans three major divisions:
Client Libraries (152 client folders, AF): Proprietary architectural designs, prototypes, and specifications for major retail chains, banks, and restaurant brands including Circle K, Capital One, 7-Eleven, Chase Bank, Chipotle, Comcast, Bath & Body Works, and DSW.
Corporate Library: The entire institutional memory 24 years of accounting (invoicing, cleared checks, budgets from 20022026), administration (7 acquisitions, active litigation, ESOP governance, FBI clearance, employment agreements), and 72 GB of proprietary CAD standards.
Discipline Libraries (283 GB): Complete architecture reference library.
The exposed material includes:
300650+ individuals' personal data SSNs from three years of payroll tax returns, 57+ W-9 forms, employee censuses with DOBs/salaries/home addresses, and an employee's complete termination package including Medicare enrollment and voicemail recording.
7,450+ cleared check images with routing numbers, account numbers, payee details, and authorised signatures spanning 20142023.
Complete active litigation file for GF v. Storm/RFW (1:25-cv-03532) complaint, amended complaint, answers to interrogatories, discovery requests and responses, settlement negotiations, D&O insurer correspondence, and engagement letters. The entire attorney-client privilege chain.
FBI facility clearance documents SF 328 (Certificate Pertaining to Foreign Interests), DD 441 (Facility Clearance), Key Management Personnel lists, and SCIF project architectural drawings acquired through DBI Architects.
Complete acquisition records for 7 deals (5 completed + 2 in progress) including purchase prices, due diligence materials, certified financial statements, and wire instructions.
MicroSearch
October 27, 2026
•[ ransomware, technology ]
MicroSearch was listed as a victim on the leak site of the play ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Technology. Website: www.microsearch.net. United States
Company #112
October 28, 2026
•[ ransomware, technology ]
Company #112 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-28. Country: Malaysia. telecommunications services Malaysia | [PENDING EXPOSURE: settlement window open]
A&B Lab
October 27, 2026
•[ ransomware, healthcare, technology ]
A&B Lab was listed as a victim on the leak site of the genesis ransomware group; the attack is estimated to have taken place on 2026-10-27. Sector: Other. Country: United States of America. Website: ablabs.com. Provides Laboratory Services.
Cyrious Software
October 26, 2026
•[ ransomware, technology ]
Cyrious Software was listed as a victim on the leak site of the pear ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: United States of America. Website: cyrious.com. Specialized business management software designed for sign, graphics, and print providers
