sodali.com
October 21, 2026
•[ ransomware, finance, technology ]
sodali.com was listed as a victim on the leak site of the BrainCipher ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Professional Services. Country: United States of America. Website: sodali.com. [AI generated] Sodali & Co is a global corporate governance and advisory firm providing services such as shareholder engagement, proxy solicitation, investor relations, M&A and contested situation advisory, ESG consulting, and governance analytics. Formed through the merger of Georgeson and Sodali, it serves corporations, institutional investors, and financial firms worldwide. Headquartered in Luxembourg, it operates across North America, Europe, Asia, and Latin America.
FuG-Gruppe
October 21, 2026
•[ ransomware, technology ]
FuG-Gruppe was listed as a victim on the leak site of the lamashtu ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Other. Country: Germany. Website: fug-cwit.de. A German IT systems integrator and general contractor (Systemhaus) based in Halver, North Rhine-Westphalia (NRW), founded in 1950. The company specializes in IT/EDP integration and ERP solutions for industrial businesses, steel trading companies
Company #108
October 22, 2026
•[ ransomware, technology ]
Company #108 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-22. media production (audio description and accessibility media) Montreal, Quebec, Canada | [PENDING EXPOSURE]
Airtificial
October 22, 2026
•[ ransomware, technology ]
Airtificial was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-22. Sector: Technology. Website: www.airtificial.com.
Sanders Law Group
October 23, 2026
•[ ransomware, hack, finance ]
Sanders Law Group was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-23. Sector: Professional Services. Sanders Law Group DATA SALE LISTING - Sanders Law Group / Sanders Law Firm, PLLC (Uniondale, NY)Target: Sanders Law Firm, PLLC (d/b/a Sanders Law Group; former brands - Barshay Sanders PLLC, Baker Sanders) Addresses: 333 Earle Ovington Blvd, Suite 402, Uniondale, NY 11553 100 Garden City Plaza, Garden City, NY 11530 Phone: (516) 203-7600 Owner: Craig B. Sanders, Esq. (founding partner) Size: ~8 TB 4.5 million files 20052026, history through most recent Format: full file-server clones + 2 dumps of the firm's ARES case-management DB + mail archives (33 PST, ~120 GB + 2,479 mailbox dumps)Who they are and who they work withA high-volume litigation factory out of Long Island, NY, running three conveyor-belt practices:FDCPA mill - 9,332 mass cases against banks and collectors. Their evidence pipeline: 1,144 audio recordings of their own clients' calls with banksCopyright machine - ~17,000 'photo-enforcement' suits. In January 2022 Sanders bought the entire practice of Richard Liebowitz the most-sanctioned copyright attorney in U.S. history (discredited, bar-suspended). Included: the executed Asset Purchase Agreement, a confidential WZMP settlement (7 versions incl. redlines), the acquired book of cases and clients, and solicitation letters to poach his client listFCRA litigation vs Equifax, Experian, TransUnion 953 cases. Plus a dedicated Equifax SRAs folder: executed settlements with Equifax LLC, named client by client, alongside their full credit disclosuresCorporate clients/partners in the files: The Mega Agency, Pixsy (exclusive enforcement deals), Signature Health Center / CareHealth (healthcare), Chase debt-buyer packages, Esquire Funding (litigation finance - loan agreements, commission invoices). Case-management dev outsourced to an Indian shop (neuralit.com).Active matters right now: 6,098 (of 30,671 total in the DB).What's inside - value breakdownPractice-side (the firm's jugular)Full ARES DB (2 dumps) - all 30,671 cases with settlement offers/demand ceilings in 13,413 files (up to $4,000,000 per case), statuses, internal notes, deadlines. Publication - burned negotiation positions across every active case at once2,342 executed CONFIDENTIAL settlement agreements (e.g., NationalPhoto v. Entravision + dozens more) - bearing secrecy clauses the firm itself is liable for1,315 documents of the firm's own sanctions and discipline: court orders on sanctions motions, a DFS Disciplinary Stipulation, 6 'Notice of Attorney Sanction' filings, public discipline ordersBanking & trusts11 accounts, 562 statements, incl. attorney trust accounts IOLTA NY (9068) and IOLTA NJ (2302) - bar-mandated audit territory = direct license threat for every named attorneyWire instructions for the client fund 6327 (JPMorgan Chase)Partnership tax returns 20152020 (Form 1065, TurboTax source files), payroll, full HR (I-9s, staff employment contracts, employee handbook)Client PII industrial scale12,803 full credit reports of the firm's own plaintiff-clients20,106 W-9/1099 forms, 520 files: SSN cards / passports / driver licenses / birth certificates1,471+ medical records (named patients, incl. NYUI files)CRM: 5,352 clients + 13,178 leads with phones/emails32,816 executed retainer agreementsOwner-level leverage (Craig B. Sanders)His 2022 divorce: Judgment of Divorce (Michelle Sanders v. Craig Sanders) + settlement stipulation + sworn Net Worth Statement + brokerage/bank statementsBonus: the firm's 78-page FBI IC3 criminal complaint dated 08/22/2026Email 20 years33 legacy PSTs (~120 GB) + 2,479 mailbox dumps + daily email backups (20132014)Freebies: office password lists in plaintext, owner's Chrome password export, court ECF login sheets. More
Adirondack Networks, Inc.
October 24, 2026
•[ ransomware, leak, technology ]
Adirondack Networks, Inc. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Technology. Country: United States of America. network and IT services New York, United States | The live accounting database of the company, more than 627 megabytes, active through 20 October 2026; A second company accounting database of Elevate Networks, Inc., more than 331 megabytes, active through 20 October 2026; Transaction logs and scheduled accounting backups | [NOT PAID EXPOSED]
SLTN Inter Access
October 24, 2026
•[ ransomware, technology ]
SLTN Inter Access was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-24. Country: Netherlands. Website: www.sltn.nl.
Frommann Energie GmbH
October 24, 2026
•[ ransomware, energy, manufacturing ]
Frommann Energie GmbH was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-24. Sector: Energy & Utilities. Country: Germany. German company that sells and delivers fuels,
primarily heating oil (Heizl),
but also motor fuels and lubricants.
Archived personal and corporate data of employees and customers.
Here are the most important documents. [Sector: Manufacturing, Finance, Technology]
AyT COMPUTERS SRL
October 25, 2026
•[ ransomware, technology, finance ]
AyT COMPUTERS SRL was listed as a victim on the leak site of the emperador ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Technology. Argentine Company operates in the field of electronic security systems,
video surveillance, monitoring and IT infrastructure.
There are many customer documents and employee data.
Financial documents, customer cards with phone numbers and addresses. [Sector: Finance, Technology]
Yodingenierie
October 25, 2026
•[ ransomware, technology ]
Yodingenierie was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-25. Sector: Professional Services. Country: Benin. YOD Engineering is an engineering company computer science, member of the NED&CO Group , a pan-African player committed to transformation digital, information systems governance and innovation by intelligence artificial.
Referans Lab Ref-Lab
October 26, 2026
•[ ransomware, leak, technology ]
Referans Lab Ref-Lab was listed as a victim on the leak site of the Doommageddon ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Technology. Country: Turkey. Status: leaked | Data size: 3.07 GB | Files: 2 files | Deadline: 2026-10-26T00:00:00Z
University of New Mexico
October 26, 2026
•[ ransomware, hack, education ]
University of New Mexico was listed as a victim on the leak site of the BYOD ransomware group; the attack is estimated to have taken place on 2026-10-26. Sector: Education. Country: United States of America. 36,000 Machines Compromised, both AD forests (Main Campus + Hospital Sector(with appointments, patient information + research)) With GPOs, Two Oracle databases, every student + employee PII (including SSNs), research information, entire Entra Tenant, Oracle HR + Payroll + Banner Student Records, Internal Emails, Cerner EHR rosters. This is your entire network and infrastructure compromised, the entire university COMPLETELY. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.
Solid Trading B.V.
October 18, 2026
•[ ransomware, leak, finance ]
Solid Trading B.V. was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Other. Country: Netherlands. FX liquidity and trading technology Netherlands | Live client trading records: order and execution data for the banks and institutions trading through this firm, with amounts and account identifiers; The client database: companies, platform users with password hashes, credit limits, clearing paths and fee schedules; FIX venue session configurations, including login credentials for liquidity providers; Trade history and bank matching audit records | [NOT PAID EXPOSED]
Company #89
October 18, 2026
•[ ransomware, technology ]
Company #89 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Country: United States of America. online sports betting analytics United States | [PENDING EXPOSURE]
konsis.no
September 29, 2026
•[ ransomware, technology ]
konsis.no was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-09-29. Sector: Professional Services. Country: Norway. Website: konsis.no. We hold a large volume of data from Konsis Grafisk AS a Norwegian design, marketing and print agency with annual revenue of approximately NOK 100 million.
Telecom Egypt
October 18, 2026
•[ ransomware, technology, education ]
Telecom Egypt was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-18. Sector: Technology. Country: Egypt. Website: te.eg. computer training academy Egypt | Course materials and programming projects; Exam preparation materials; Student account folders and work; A complete copy of the course database | [NOT PAID EXPOSED]
Aveva
October 20, 2026
•[ ransomware, technology, manufacturing ]
Aveva was listed as a victim on the leak site of the Mimori ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: aveva.com. AVEVA is a British multinational industrial software company headquartered in Cambridge, England, and operating as an autonomous business unit of Schneider Electric. It provides engineering, design, operations management, data visualization, asset performance, and cloud-based industrial intelligence solutions for sectors including oil and gas, power, chemicals, manufacturing, marine, mining, and infrastructure. AVEVA's technology helps thousands of enterprises worldwide optimize industrial processes, improve operational efficiency, and support digital transformation across complex engineering and asset lifecycle management.
Sector: Technology - Files: 177234 - Publication planned: 2026-10-23T19:09:39Z
51Ridge (Newark NJ hosting/IT)
October 20, 2026
•[ ransomware, technology ]
51Ridge (Newark NJ hosting/IT) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-20. Sector: Technology. Country: United States of America. IT services USA | Complete network configuration and topology of a US IT services company; Internal infrastructure details including site-to-site VPN architecture | [NOT PAID EXPOSED]
GSE-M Technology Sdn. Bhd.
October 21, 2026
•[ ransomware, technology, manufacturing ]
GSE-M Technology Sdn. Bhd. was listed as a victim on the leak site of the bravox ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Technology. Country: Malaysia. Website: www.gse.com.my. Industrial Engineering, Manufacturing Automation and Custom Machinery Solutions.
Lindauer Dornier
October 21, 2026
•[ ransomware, manufacturing, technology ]
Lindauer Dornier was listed as a victim on the leak site of the everest ransomware group; the attack is estimated to have taken place on 2026-10-21. Sector: Manufacturing. Country: Germany. [AI generated] Lindauer Dornier GmbH is a German mechanical engineering company based in Lindau, Germany. Founded in 1950, it specializes in manufacturing textile machinery, particularly weaving machines, as well as equipment for composite materials, plastics film stretching lines, and paper machine components. The company operates globally, serving industrial manufacturing sectors, and is part of the broader Dornier industrial group with a long engineering heritage.
