Royal Thai Air Force
October 10, 2026
•[ ransomware, government, technology ]
Royal Thai Air Force was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Government & Defense. Country: Thailand. Website: rtaf.mi.th. rtaf.mi.th is the official portal of the Royal Thai Air Force, one of Asia's oldest air forces (founded November 2, 1913; independent since 1937), with ~46,000 personnel and 11 combat wings, now running a modern Odoo-based portal publishing financial reports, procurement plans, and White Papers on its "Unbeatable Air Force" roadmap to 2037. Its fleet spans 46 F-16s, 11 Gripen C/D, 13 F-5TH Super Tigris, Saab 340 Erieye AEW&C, C-130s, and a VIP fleet including an ex-Thai Airways A340-500. In July 2025 the RTAF fought its first combat since 1988 in the Thai-Cambodian border conflict, with its Gripens achieving the type's first-ever combat weapons launch. The centerpiece modernization is the Gripen E/F program: Thailand signed the $550M "Peace Burapha 1" contract in August 2025 first in APAC with deliveries from 2029 and 8 more jets sought toward a 12-aircraft squadron by 2037. Air Chief Marshal Seksan Kantha, the 31st commander since October 2025
PIC GROUP, INC
September 15, 2026
•[ ransomware, energy, manufacturing ]
PIC GROUP, INC was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-09-15. Sector: Other. Country: United States of America. Website: picgroupinc.com. PIC Group, Inc. is dedicated to delivering value by providing Operation & Maintenance, Commissi
oning and Startup, Documentation & Training and Staffing services to the power generation, oil
and gas, petrochemical, pulp and paper and manufacturing industries globally.
We will upload 8gb of corporate data soon. Employee information, projects (drawings, specificat
ions), clients info, contracts and agreements and so on.
GCS Kuwait (port community system operations)
October 12, 2026
•[ ransomware, leak, technology ]
GCS Kuwait (port community system operations) was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Transportation. Country: Kuwait. Port community IT Kuwait | Container movement records and operational EDI archives | [NOT PAID EXPOSED: files publish 2026-10-19 13:27 UTC]
Greentech Environmental
October 12, 2026
•[ ransomware, energy, manufacturing ]
Greentech Environmental was listed as a victim on the leak site of the interlock ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Energy & Utilities. Website: https:greentechenv.com. Greentech Environmental LLC, a manufacturer of air purification systems using patented ODOGard and ARC technologies, has failed to fully secure and address the breach, and therefore we are publishing their confidential information such as (intellectual property/trade secrets, financial statements, employee data, operational/strategic plans, legal documents, corporate governance documents, and manufacturing drawings) that would violate the Defend Trade Secrets Act (CFAA) and state privacy laws, which would subject us to injunctive relief, treble damages, penalties, mandatory notification, class action lawsuits, loss of patent rights and competitive advantage, and possible business failure.
Rechtsanwaltskanzlei Dr. Bien
October 12, 2026
•[ ransomware, leak, finance ]
Rechtsanwaltskanzlei Dr. Bien was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: Germany. Website: Rechtsanwaltskanzlei Dr. Bien. [law] Rechtsanwaltskanzlei Dr. Bien a specialist insolvency law firm in Hamm, NRW, appointed as insolvency administrator by 12 Amtsgerichte across Westfalen.
The exposed material includes:
2,387 WinSolvenz case databases each a Microsoft Access MDB containing the complete financial dossier of an insolvency debtor: creditor lists, claim amounts, distribution plans, asset inventories, court appointments, and bank account details.
492+ forced administration (Zwangsverwaltung) case files property addresses, tenant data, rent records, utility accounts, insurance details, court-directed property management reports.
80 GB MailStore email archive the firm's complete email history in MailStoreContainer-v1 format: attorney-client communications, court correspondence, creditor negotiations, debtor disclosures.
1.7 GB beA backup (besonderes elektronisches Anwaltspostfach) three MSSQL database backups containing every electronic communication between the firm and every German court.
35 employee records 25 former + ~10 current staff: contracts, salary, overtime, vacation, pension, disability status, termination agreements.
DATEV tax/accounting archives 33 directories of income tax backups, insolvency accounting, third-party mandates.
RingSide Creative
October 12, 2026
•[ ransomware, technology ]
RingSide Creative was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Professional Services. Country: United States of America. Website: ringsidecreative.com.
Zenidoc
October 13, 2026
•[ ransomware, healthcare, technology ]
Zenidoc was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Professional Services. a French healthcare software company that helps hospitals and medical professionals automate documentation, transcribe medical dictation, manage patient records, and streamline workflows using AI and voice-recognition technology. Data Content : - 605k Patient Data, Names, Phone, SSN and more. - Zenidoc Cloud Dev, Data, Prod, Support Chats, Source Codes and more.
Qatar National Import & Export
October 7, 2026
•[ ransomware, retail, technology ]
Qatar National Import & Export was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Other. Country: Qatar. Website: www.qnie.com.
SOCOCO
October 8, 2026
•[ ransomware, technology, leak ]
SOCOCO was listed as a victim on the leak site of the UmBra ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Technology. Country: Brazil. SOCOCO A Brazilian mid-sized food company with 40 employees, blending tradition and modern marketing through WordPress-driven platforms.
INAPI
July 13, 2026
•[ ransomware, government, technology ]
INAPI was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-13. Sector: Technology. Country: Algeria. Website: www.inapi.cl/en/about-inapi/inapi. [AI generated] N/A
INAPI commonly refers to Chile's Instituto Nacional de Propiedad Industrial (National Institute of Industrial Property), a Chilean government agency responsible for registering trademarks, patents, and other industrial property rights. However, I cannot confirm with certainty that this is the specific entity you are referencing, as there may be other organizations using this name, and I lack sufficient verified detail to provide a confident, accurate profile without risking inaccuracy.
Tec Imports
July 10, 2025
•[ ransomware, technology, manufacturing ]
Tec Imports was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2025-07-10. Sector: Other. Country: Brazil. Tec Imports group offers a complete range of logistics solutions, from
coordinating shipments from the manufacturer's plant to the end
customer, whether by sea, air, or road.
Commercial Department - contact@dorte.com.br
Importation - alexandre@dorte.com.br
Export - stefani@dorte.com.br
Hospitalar Cosmtico - ricardolinhares@dorte.com.br
Professional Hairdressing Machines -ricardoamaral@dorte.com.br
Tec Zipper - diogo@teczipper.com.br
Phone/Fax: +55 11 3809-6870
Phone/Fax: 55 27 3318-0888
MCM Telecom
October 8, 2026
•[ ransomware, technology ]
MCM Telecom was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Technology. Country: Mexico. Website: www.mcmtelecom.com.
Vietnam SuperPort
July 20, 2026
•[ ransomware, manufacturing, technology ]
Vietnam SuperPort was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-07-20. Sector: Transportation. Country: Vietnam. Website: superport.vn. [AI generated] N/A
I don't have verified, reliable information about a specific company called "Vietnam SuperPort." There is a known logistics project called "Vietnam SuperPort" associated with YCH Group (a Singapore-based logistics company) and intended to be a smart logistics hub in Vinh Phuc province, Vietnam, but I cannot confirm sufficient reliable details to provide an accurate factual description without risking inaccuracy.
Hagiva Yh
October 9, 2026
•[ ransomware, technology ]
Hagiva Yh was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Israel. Website: www.hagiva.co.il.
RealManage
October 9, 2026
•[ ransomware, finance, technology ]
RealManage was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Professional Services. Country: United States of America. RealManage RealManage is a privately held, tech-enabled community association management company headquartered in Plano, Texas. Founded in 2002 and backed by American Securities, the company has grown into one of the largest and fastest-growing community association management firms in the United States, having been recognized on the Inc.1.84 TBThe tax, banking and debt secrets of hundreds of American HOAs and thousands of homeowners - complete with SSNs, account numbers and signatures.Genuine W-9 forms with Social Security numbers, addresses and signatures; IRS 1099-MISC/NEC e-file transmissions for 20142025 - thousands of vendor TINs/SSNsHomeowners' banking keys: ACH debit files with routing and account numbers, USAA brokerage statements, signed bank signature cardsPeople's debts by name: assessments through September 2026, bankruptcies, late-fee waivers, hardship letters from debtors begging for payment plansPersonal documents: HUD-1 home purchase settlements (names, prices, mortgages), signed waivers with addresses, HOA election ballots with voter namesFull SQL Server databases: RM_Warehouse, RM_Sales, RM_Portals, CiraNetIdentity (portal accounts), CiraBooks_GL (general ledger)Mail and document flow: CiraMail$, CiraDocs$, SalesDocs$ More
iDentalSoft
October 9, 2026
•[ ransomware, healthcare, technology ]
iDentalSoft was listed as a victim on the leak site of the termite ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Healthcare. Country: Brazil. Website: www.identalsoft.com. iDentalSoft offers a cloud-based dental practice management software that is secure, modern, and designed for efficiency. The software provides comprehensive features such as smart scheduling, advanced clinical charting, and patient communication tools, making it suitable for both single and multi-practice management.
AETHOS
October 9, 2026
•[ ransomware, leak, technology ]
AETHOS was listed as a victim on the leak site of the arcusmedia ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Brazil. Website: aethosconsultoria.com.br. Aethos Sistemas offers a comprehensive suite of software solutions designed to streamline Deadline: 2026-10-16 12:44:00.000000
lopay
October 9, 2026
•[ ransomware, finance, technology ]
lopay was listed as a victim on the leak site of the Black X ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: lopay.com. Lopay is a UK-based fintech company that provides a payment platform enabling small and medium-sized enterprises (SMEs) and sole traders to accept credit card and mobile payments, as well as manage their sales and settlements. This includes financial information belonging to client companies, such as customer payment details, card information, banking data, transaction history, and payment terminal information.
Jentech Precision Industrial
October 6, 2026
•[ ransomware, manufacturing, technology ]
Jentech Precision Industrial was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: Taiwan. Website: jentech.com.tw. jentech.com.tw zoominfo.com/c/jentech-precision-industrial-co-ltd/344286614 Jentech Precision Industrial Co., Ltd. (TWSE: 3653) is a publicly listed Taiwanese thermal management and precision metal components manufacturer founded in 1987 in Taoyuan, Taiwan, IPO'd on the Taiwan Stock Exchange in 2009. It generates ~$450640M USD annual revenue (NT$14.28B in FY2024, growing 20% CAGR) with 2,000+ employees across Taiwan (970), China Wuxi (639), Malaysia, Germany, and the USA. Jentech is the global leader in integrated heat spreaders (IHS) for CPU/GPU/AI chips its flagship products include Vapor Chamber Lids, Micro-Channel Lids (1000W+ TDP), liquid cooling modules, and EV battery cold plates, all manufactured with sub-micron precision using 99.99% oxygen-free copper and full vertical integration. Key clients include NVIDIA, AMD, Intel, TSMC, Sony, IBM, and Qualcomm. The company is riding the AI boom semiconductor segment revenue surged +237% in 4 years and holds a unique VC + MC
AnyTech365
October 6, 2026
•[ ransomware, technology ]
AnyTech365 was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: anytech365.com. anytech365.com zoominfo.com/c/anytech365/368510725 AnyTech365 (Anteco Systems, S.L.) is a Spanish IT security and remote tech support company founded in 2014 by Danish entrepreneur Janus R. Nielsen, headquartered in Marbella, Spain, operating in 25+ countries with 250400 employees. The company generates estimated annual revenue of $1721M (2024) and was valued at $200220M in a 2023 SPAC merger deal with Zalatoris Acquisition Corp. (NYSE: TCOA) involving $172.5M in financing. Its flagship products include IntelliGuard (AI-powered protection), AntiScam, and SystemCleaner, sold via subscription to consumers and small businesses. It ranked 27th in the FT 1000 fastest-growing European companies (2019)