WalkingTree Technologies
October 19, 2026
•[ ransomware, technology ]
WalkingTree Technologies was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Technology. Country: India. Website: www.walkingtree.tech.
Baker Donelson
October 19, 2026
•[ ransomware, leak, technology ]
Baker Donelson was listed as a victim on the leak site of the Redact ransomware group; the attack is estimated to have taken place on 2026-10-19. Sector: Professional Services. Country: United States of America. Sector: Law Firm
The Excalibur Group
October 20, 2026
•[ ransomware, technology, government ]
The Excalibur Group was listed as a victim on the leak site of the Dark Project ransomware group; the attack is estimated to have taken place on 2026-10-20. Country: United States of America. Website: theexcaliburgroup.com. About The Excalibur Group The Excalibur Group is a Washington D.C. based company that focuses on enhancing local, state, and federal programs through staff augmentation, training, and program management in the Defense, IT, Workforce, Environmental, and Legal sectors. They provide specialized job training and placement services for individuals in various industries, including transitioning soldiers. The company also offers both permanent and contingent labor to support clients' internal IT and R&D projects. Their mission is to deliver efficient contract management and cost-effective solutions while promoting meaningful Veteran employment. Company The Excalibur Group was attacked, resulting in the theft of more than 600 GB of confidential data, such as banking and other financial information, personal data of employees and customers, and information marked secret. Currently, more than 400,000 files are not protected by The Excalibur Group
Xylanpicks
October 21, 2026
•[ ransomware, technology, leak ]
Xylanpicks was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-21. Country: United States of America. online sports betting analytics United States | The complete database of a sports betting analysis platform, including 108,781 historical game results; Every model-generated betting pick with model probabilities and outcomes; Live paid API keys for sports data providers | [NOT PAID EXPOSED]
Company #103
October 21, 2026
•[ ransomware, manufacturing, technology ]
Company #103 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-21. Country: Portugal. engineering design and installations Portugal | [PENDING EXPOSURE]
Lanham Associates
October 21, 2026
•[ ransomware, hack, technology ]
Lanham Associates was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Professional Services. [AI generated] N/A
I don't have reliable, verified information about a specific company called "Lanham Associates." There may be multiple businesses using this or similar names, and without confirmed details about which entity you're referencing, its industry, services, or country of operation, I cannot provide an accurate factual description. Please provide additional context or verify the company details.
bereskinparr.com smartbiggar.ca
October 21, 2026
•[ ransomware, leak, technology ]
bereskinparr.com smartbiggar.ca was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Professional Services. Country: Canada. database client case data etc
Horn of Africa Regional Environment Centre and Network
October 23, 2026
•[ ransomware, technology ]
Horn of Africa Regional Environment Centre and Network was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Other. Country: Ethiopia. Environmental NGO Ethiopia | The complete SAP Business One production database of the organization: 15,275 journal transactions with 89,929 journal lines, 1,007 business partner records of regional partner organizations with contacts, 333 general ledger accounts, procurement and inventory records; A verified full backup of the production ERP database and a fresh copy of the landscape database; The complete financial and operational record of a donor funded environmental organization | [NOT PAID EXPOSED]
Trevi Technology
October 23, 2026
•[ ransomware, technology ]
Trevi Technology was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Technology. Country: Taiwan. Website: www.trevi.cc. 2017TreviTrevi-Fontana di Trevi
Aryza
October 23, 2026
•[ ransomware, technology ]
Aryza was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Technology. Country: Argentina. Website: www.aryza.com.
JB Hunt
October 23, 2026
•[ ransomware, technology, manufacturing ]
JB Hunt was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Transportation. Country: United States of America. J.B. Hunt is a major North American transportation and logistics company providing intermodal, dedicated, and truckload services via its digital freight marketplace.
We hold 140,838 employee records with PII and national IDs, 1.7M carrier contacts, 38.2M invoices, 187K RBAC permission records, 3,196 ranked account-takeover targets, 973 M365 mailboxes, 374K organizations.
Our demand: $5,000,000, in BTC or XMR. Instructions to follow by email.
To verify, samples can be found below.
Contact:
Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67
Email: whitearmorrxd@proton.me
whitearmor.cc
October 23, 2026
•[ ransomware, technology ]
whitearmor.cc was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Technology. Website: whitearmor.cc. Hi!
We now have a clearnet domain for easy-access.
WhiteArmor.cc
GPIC Projectos Con Instalacoes Lda
October 24, 2026
•[ ransomware, manufacturing, technology ]
GPIC Projectos Con Instalacoes Lda was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Manufacturing. Country: Portugal. engineering design and installations Portugal | The full project archive of an engineering design office, spanning 2000 through 2026, including tender submissions, client proposals and technical drawings; Project folders for named clients including hospital installations for a private hospital group; Scanned office documents with activity through October 2026; A company bank account document with the full IBAN and tax number; Staff curricula with photos and personal details | [NOT PAID EXPOSED]
Hisense
October 24, 2026
•[ ransomware, technology, leak ]
Hisense was listed as a victim on the leak site of the Whitearmor ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Technology. Country: China. Website: Hisense.com. Hisense is a Chinese multinational electronics and appliance manufacturer, founded in 1969, known globally for televisions and home appliances.
We hold Hisense's entire GCRM production document store, the full warranty-claims archive for Malaysia/Singapore: customer names, phones, emails, ID numbers, 2,549 suppliers, hundreds of invoices, payments, contracts, RMA forms, claim evidence, plus their internal CRM app binary.
Our demand is $500,000 in BTC. Good luck.
Contact: whitearmorrxd@proton.me
Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67
Technoleads Services Inc.
October 25, 2026
•[ ransomware, technology, hack ]
Technoleads Services Inc. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Technology. media production (audio description and accessibility media) Montreal, Quebec, Canada | Current 2026 client production files from your work in progress library, including active projects modified in October 2026; A job candidate resume with full personal contact details from your human resources records; Your archive of finished productions from 2016 through 2021, including a 2.1 GB demonstration archive; Internal technical documentation of your media production platform | [NOT PAID EXPOSED]
Ooredoo Myanmar
October 25, 2026
•[ ransomware, technology ]
Ooredoo Myanmar was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Technology. Country: Myanmar. Website: www.u9.com.mm.
mckenneys
October 18, 2026
•[ ransomware, technology ]
mckenneys was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Professional Services. Country: United States of America. Website: mckenneys.com. Size: 295.9 GiB
Amagi Media Labs
October 18, 2026
•[ ransomware, technology, misconfiguration ]
Amagi Media Labs was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Technology. Country: United States of America. media technology / broadcast playout United States | Network and device configuration files from a US broadcast playout site; Internal network maps of the site | [NOT PAID EXPOSED]
Johnson & Pace
October 19, 2026
•[ ransomware, technology ]
Johnson & Pace was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-19. Country: United Kingdom of Great Britain and Northern Ireland. Website: www.johnsonpace.com.
Vormittag Associates Inc
October 19, 2026
•[ ransomware, technology ]
Vormittag Associates Inc was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-19. Country: United States of America. ERP software and hosting company USA | Internal network configurations and security credentials of an ERP hosting company; Administrator and remote access credentials; Network topology of corporate and hosted client environments | [NOT PAID EXPOSED]