All Ransomware Records

ardeche.fr is the official website of the Ardèche Department, a public administrative entity located in the Auvergne-Rhône-Alpes region of France. It provides essential services to residents, including aid guides, senior support programs like APA and ASPA, employment listings, and administrative procedures. The department operates local policies focused on autonomy, social welfare, and community development for its population. This entity was listed as a ransomware victim associated with the LockBit2 threat actor.

Rosa Group, operating as Rosa S.p.A., is a Services sector company based in Porcia, Italy, specializing in plastic material injection moulding for household appliances, automotive, electrical, and civil sectors. For over 50 years, the firm has served as a leading European subcontractor in the home appliance industry, delivering innovative products and production services across multiple domains. The company is headquartered at Corso Italia 52, Porcia, Friuli-Venezia Giulia, and maintains a strong focus on quality and sustainability in its manufacturing processes. Rosa Group was listed as a ransomware victim associated with the threat actor LockBit2, with no confirmed details on stolen data or breach specifics.

genieroute.be belongs to Génie Route SPRL, a Fleurus, Belgium-based company in the wholesale motor vehicles and parts sector. Its website and dealer listings show truck and construction-equipment services, including Volvo Trucks support, vehicle sales, and related workshop operations. The company operates from Route du Vieux Campinaire 54 in Fleurus and also lists a Gaurain site. It was listed as a ransomware victim associated with lockbit2.

Metagenics is a privately held wellness and fitness services company headquartered in Aliso Viejo, California, with operations in North America, Europe, and Australia. Founded in 1983, it develops and sells doctor-recommended vitamins, supplements, medical foods, and nutraceutical products for health and wellness. The company markets directly to healthcare practitioners and supports customers through regional offices and distribution channels. It was listed as a ransomware victim associated with Cuba.

TNT is a transport and logistics company in the Other sector, historically based in the Netherlands and known for parcel delivery and freight services. It operates as a global delivery brand serving business and consumer shipping needs. In cyber threat-intelligence records, TNT appears as a victim listing tied to the LockBit 2.0 ransomware ecosystem. The listing identified TNT as a ransomware victim associated with lockbit2.

SUPREME SERVICES is a Communication/Marketing firm specializing in oil and gas industry services, including coiled tubing, fluid transfer, and offshore pump support, headquartered in Louisiana, United States. The company provides specialty rental equipment and services to the oil and gas sector, ensuring equipment is rebuilt to high industry standards while maintaining competent service technicians. SUPREME SERVICES operates as a provider of specialty rental equipment and services to the oil and gas industry, striving to be customers' first choice partner through quality equipment and service. The firm was listed as a ransomware victim associated with the midas threat actor.

Jiangsu Kaili Carpet Co., Ltd. is a China-based carpet manufacturer in the services sector, with operations in Changzhou, Jiangsu. Public company profiles describe it as a producer and exporter of carpets and related textile floor coverings, including custom and commercial carpet products for hotels and other projects. The company’s listings emphasize factory-direct supply and a range of carpet types and designs. It was listed as a ransomware victim associated with midas.

unholz.ch is the website of Felix Unholz AG, an active company based in Ebmatingen, Switzerland, with legal headquarters in CH. The company describes itself as a specialist in electrical installations, and business directories place it in the Other construction category. Public company profiles also note related ICT services and a long-standing focus on quality and innovation. It was listed as a ransomware victim associated with lockbit2.

feuerschutzbock... is an entity in the Other sector in Germany, with limited public details available in the supplied sources. The name does not provide enough verified context to confirm its offerings or line of business from the available evidence, so a neutral catalog entry should avoid adding unverified specifics. In threat-intelligence tracking, it appears as a ransomware victim record rather than a confirmed breach disclosure. It was listed as a ransomware victim associated with lockbit2.

get-entkernung.... is an Other-sector organization, and public victim listings identify it by the domain get-entkernung.de in Germany. Its name suggests an entkernung, or interior demolition, business offering building strip-out and deconstruction services. Available catalog data does not provide a fuller corporate profile, so no additional operating details should be inferred. It was listed as a ransomware victim associated with lockbit2.

FCCH refers to First Choice Community Healthcare, a nonprofit community health provider based in Albuquerque, New Mexico. It operates multiple locations across the Greater Albuquerque area and serves patients through primary care and related outpatient health services. The organization describes itself as a 501(c)(3) community health center and recognized patient-centered medical home. It was listed as a ransomware victim associated with Hive.

Barwick Bathroom Distribution LLP is a leading wholesale and real estate company based in Bradford, West Yorkshire, United Kingdom, specializing in high-quality bathroom products for residential and commercial needs. The firm distributes a wide range of bathroom fixtures, fittings, and accessories while providing customer service and logistics management across the UK. With over 40 years of industry expertise, it serves bathroom specialists, plumbers, and building contractors with branded products and technical advice. Barwick was listed as a ransomware victim associated with the threat actor conti.

United States of America GOV refers to the United States federal government, the public-sector institutions that deliver national services, administer programs, and manage agency operations across the country. USAGov describes the government’s public-facing services as helping people find benefits, programs, agencies, and contact information, while USAJOBS serves as the federal government’s official employment site. The entity operates in the public sector and is based in the United States, with nationwide responsibilities spanning administration, service delivery, and citizen support. It was listed as a ransomware victim associated with everest.

International Centre Leaked appears in a Services-sector threat-intelligence listing tied to the United States, indicating an organization in a service-oriented business context. In this catalog format, the entry refers to a leaked-victim record rather than a verified public breach notice, and no product or operational details are provided in the source material. The listing is associated with the ragnarlocker ransomware group, reflecting its inclusion in ransomware victim tracking.

Keicorp (ICPM) is a Services-sector organization, but the available public search results do not identify a single authoritative company profile with confirmed offerings or headquarters for this exact name. Related ICPM entities operate in business services, consulting, and professional services, with public listings tied to markets including the United States and Egypt. In threat-intelligence indexing, Keicorp (ICPM) was listed as a ransomware victim associated with lorenz.

wania.at is an Austrian business website associated with Wania GmbH, a company in Ottenschlag, Austria, listed in the Other sector. Public business directories describe Wania GmbH as providing gas, water, plumbing, heating, ventilation and air conditioning installation and maintenance services. The entity reflects a local industrial-services operation rather than a consumer-facing retail brand. It was listed as a ransomware victim associated with lockbit2.

toothbuds.com is associated with Toothbuds, a paediatric dental practice brand that provides children’s dentistry and related oral care services. Public listings for the brand show clinic locations in Western Australia, including Morley, Midland, Bunbury, and Canning Vale, and describe a focus on accessible care for patients of all ages, including those with special care needs. Separate business profiles also identify Toothbuds as a pediatric dentistry provider. It was listed as a ransomware victim associated with lockbit2.

rnrinc.com is the website of RNR Inc, a digital marketing agency based in Florida, USA, with a presence in Jacksonville. The company offers services including SEO, social media marketing, PPC advertising, web design, web development, and online reputation management. Its site presents RNR Inc as a services firm serving businesses seeking digital marketing support. It was listed as a ransomware victim associated with lockbit2.

Wania, operating as Wania innovative Gebäudetechnik GmbH, is an Austrian building technology company located in Kottes, AT, specializing in integrated home technology solutions for energy, heat, water, and technical systems. The firm provides comprehensive building services from a single source, ensuring perfectly coordinated systems for optimal results in the broader construction and infrastructure sector. Its offerings include innovative building technology tailored to meet diverse client needs across Austria. Wania was listed as a ransomware victim associated with the LockBit2 threat actor, marking a significant incident in its operational history.

RNR Inc. is a U.S.-based digital marketing agency in the services sector that operates from Jacksonville, Florida. Its website describes offerings including SEO marketing, social media marketing, website development, PPC, and reputation management. Public business listings also associate the company with Virginia Beach, Virginia, but its contact page lists its Florida address. In threat-intelligence records, it was listed as a ransomware victim associated with lockbit2.

vgoc.ca is the website for Vital Group of Companies, a Sherwood Park, Alberta-based business that presents itself as an integrated group with energy and engineering expertise. The company describes its work as delivering holistic energy-as-a-service solutions, placing it in the broader Canadian energy sector. Its public business profile emphasizes energy and engineering services rather than a consumer-facing offering. It was listed as a ransomware victim associated with lockbit2.

toot operates within the Other sector, though its specific location and business offerings remain undisclosed in available public sources. The entity is recognized as a company with no detailed information on its products, services, or geographic presence. Despite the lack of transparency, toot was listed as a ransomware victim associated with lockbit2, indicating it faced a cyberattack involving file encryption and ransom demands. This incident aligns with LockBit 2.0's known tactics of targeting enterprises and government organizations through automated, network-wide encryption. No official confirmation of data theft or breach specifics has been publicly disclosed by the affected company itself.

All County Surveyors, Inc. is a land surveying firm that provides commercial and residential surveying services across several Florida counties, including Broward, Collier, Miami-Dade, Monroe, Palm Beach, Lee, and Charlotte. Its work focuses on professional survey services for property and development needs, serving clients in the public and private sectors. The company appears in threat-intelligence records as a public-sector-related organization. It was listed as a ransomware victim associated with lockbit2.

Gordon County Government is the public-sector administration for Gordon County in Calhoun, Georgia, operating county offices and services for residents. Its government site provides county information, departments, elections, tax, and other local public services from the county seat in Calhoun. The organization serves the local community through administrative, regulatory, and civic functions. It was listed as a ransomware victim associated with lockbit2.

Sonae is a Portugal-based multinational conglomerate founded in 1959, headquartered in Maia, Porto, and operating as a public company in the investment management sector. The group manages a diversified portfolio spanning retail, financial services, technology, shopping centers, and telecommunications, with Sonae MC serving as a leading food retailer in Iberia. Sonae SGPS, S.A. functions as an active investment company with market-leading retail and service operations across multiple sectors. Sonae was listed as a ransomware victim associated with the threat actor ransomexx.

Panasonic is a Japanese multinational headquartered in Kadoma, Osaka, Japan, with operations across consumer electronics, appliances, automotive batteries, and industrial technologies. Founded in 1918, the Panasonic Group serves global markets through multiple business units and manufacturing sites. The company’s portfolio spans home electronics, heating and cooling systems, and other technology offerings. Panasonic was listed as a ransomware victim associated with Conti.

Scoular is an employee-owned agribusiness company headquartered in Omaha, Nebraska, in the Other sector. It buys, sells, stores, handles, and processes grain and ingredients while managing supply-chain and logistics services. Founded in 1892, the company serves end users and suppliers across feed, food, and agricultural markets. scoular.com was listed as a ransomware victim associated with lockbit2.

Ferro Labella & Weiss L.L.C. is a law firm based in Hackensack, New Jersey, with an additional office in White Plains, New York. The firm says it provides a full range of legal services, including civil and criminal litigation, estate planning, business, employment, and real estate matters. It serves corporate and individual clients across its practice areas. ferrolabella was listed as a ransomware victim associated with lockbit2.

Woningcorporatie ZAYAZ is a Dutch housing corporation in the services sector based in 's-Hertogenbosch. It verhuurt, or lets, about 14,000 social rental homes and supports residents through housing management and related services. ZAYAZ also develops and manages housing initiatives in the city, including projects aimed at improving availability and sustainability. In threat-intelligence records, it was listed as a ransomware victim associated with Conti.

A message to France is an entry in the **Other** sector and is associated with **France** in threat-intelligence listings. The name does not identify a specific product or service, so the record should be read as a neutral victim label rather than a business profile. In ransomware context, such listings typically mark an organization or message-related entity named on an actor’s leak or victim page. It was listed as a ransomware victim associated with **stormous**.

Westminster Immobilien GmbH is a German real-estate company based in Schönefeld, Brandenburg, with additional offices in Berlin and Warsaw. Its website presents services around property acquisition, sales, tenant applications, tenant service, and investments, and it says the group focuses on real estate as a family office. In public company materials, Westminster describes buying apartment buildings and mixed residential-commercial properties. It was listed as a ransomware victim associated with lockbit2.

SEP2 is a UK-based cyber security specialist service provider with offices in Leeds and London, offering managed cyber security solutions and related support services. Company records list SEP2 Limited as an active firm incorporated in 2016 and registered in Leeds, England. Public company and corporate profiles describe it as an award-winning specialist serving clients with a 24/7/365 team. sep2.com was listed as a ransomware victim associated with lockbit2.

Noll Law Office is a Springfield, Illinois law firm that represents clients in personal injury, workers’ compensation, and criminal defense matters. Its website also highlights insurance-related legal experience and provides local office contact details for clients seeking consultation. The firm operates in the Finance / Legal / Insurance sphere through services tied to injury claims, coverage disputes, and related advocacy. It was listed as a ransomware victim associated with lockbit2.

GVA Gómez-Villares & Atencia is a Spanish law firm based in Málaga that provides legal advice and defense services across multiple practice areas. Public profiles describe it as a multidisciplinary legal services business with offices in Spain and work for companies and individuals. Its online presence places it in the legal sector and identifies its headquarters in Málaga, ES. The entity was listed as a ransomware victim associated with lockbit2.

Ascot Lloyd is a UK-based financial advice firm serving clients across England and Scotland from offices in cities including Birmingham, Reading and other locations. The company provides financial planning, investment, retirement, tax, inheritance, protection and mortgage advice, with online account access for clients. Its services are aimed at individuals seeking regulated wealth-management and planning support. The company was listed as a ransomware victim associated with lockbit2.

a-r-s.com corresponds to ARS Communications, a Moscow-based event marketing agency in Russia that presents itself as a full-cycle event agency. Its services center on event production and business-oriented communications for corporate clients in sectors such as high tech, automotive, and finance. Public listings also place the company in the advertising, PR, and marketing category. The site was listed as a ransomware victim associated with lockbit2.

n is an organization in the **Other** sector, but publicly available search results do not provide a reliable basis for identifying its specific location, offerings, or operating profile. LockBit 2.0 is a ransomware-as-a-service operation that has affected organizations across multiple regions and industries, including professional services, construction, wholesale and retail, and manufacturing. Threat-intelligence reporting describes LockBit as a highly active extortion group that targets victims worldwide and uses leak-site pressure in its operations. n was listed as a ransomware victim associated with lockbit2.

TrustFord is a UK automotive retail group and Ford dealer network that operates more than 60 sites across the United Kingdom, including Northern Ireland and the Channel Islands. It is headquartered in Colchester, Essex, and sells new and used Ford vehicles while also providing servicing, repairs, and parts. The company describes itself as the world’s largest Ford dealer group, with a business focused on motor retail and aftersales support. It was listed as a ransomware victim associated with conti.

SLH, or Small Luxury Hotels of the World, is a hospitality brand headquartered in London, United Kingdom, that connects travelers with independently owned luxury hotels and resorts. Its portfolio spans more than 700 boutique properties in over 100 countries, and it also supports hotel marketing and reservation services. The company serves the luxury travel sector rather than operating as a single hotel chain. SLH was listed as a ransomware victim associated with Conti.

F&W Frey & Winkler GmbH is a German manufacturer based in Königsbach-Stein, Baden-Württemberg, with a site on Benzstraße 13. The company describes itself as a provider of creative silicone precision and supplies clients in the medical and optical/eyewear sectors, along with tailored solutions for other industries. Public company directories also place it in plastics manufacturing and related industrial activity. It was listed as a ransomware victim associated with conti.

wiegaarden.dk is a Denmark-based website in the broader other sector, operating under a Danish domain and presenting an online presence tied to its local business or organization identity. Publicly available search results do not provide enough reliable detail to confirm its exact offerings, so the site should be described conservatively as a Danish entity rather than assigned a specific trade or service. In threat-intelligence catalogs, it is indexed as a ransomware-related victim entry associated with lockbit2. The listing is associated with lockbit2 and reflects a ransomware victim designation.

Remar Representaciones Maritimas del Ecuador S.A. is an Ecuador-based shipping and logistics company headquartered in Guayaquil. Public business directories describe it as operating in maritime transport and freight-related services, with activity linked to cargo movement and logistics support. Its website uses the remar.com.ec domain and its listed office address is in central Guayaquil. The entity was listed as a ransomware victim associated with lockbit2.

nowiny is an organization in Poland operating in the Other sector. The name appears in threat-intelligence listings, but the available sources do not provide a clear public profile of its offerings or business scope. In this index entry, it is treated as a named entity connected to ransomware activity for cataloging and research purposes. It was listed as a ransomware victim associated with lockbit2.

Oldenburg is a city in Lower Saxony, Germany, and a municipal center with public administration services for residents and local businesses. It is located in northwestern Germany and is known for its historic urban core, civic institutions, and regional role in culture, transport, and commerce. As a public-sector entity, it provides local government services rather than commercial products. It was listed as a ransomware victim associated with LockBit2.

centralban appears to be a U.S. banking organization that offers personal and business banking services, with branch-based customer support and related financial services. Public materials for similarly named Central Bank entities describe retail and commercial banking, deposits, lending, and digital account access across local branches. Because the name is used by multiple banks, the listing should be treated as an indexed entity in the financial sector rather than a uniquely identified institution. It was listed as a ransomware victim associated with lockbit2.

greenexperts.co... refers to Green Expert Technology Inc. (GreenXT), a Haddonfield, New Jersey-based consulting firm incorporated in 2011. It provides technical consulting, project management, and technical and executive management support to corporations, government agencies, organizations, and individuals. GreenXT also describes its work in systems, software, and controls engineering. The entity was listed as a ransomware victim associated with lockbit2.

eksltd.com is the website for EKS Digital Solutions, a Kent-based Services company in the United Kingdom. It presents itself as a long-established supplier of office supplies, printers, photocopiers, and printing solutions, including print management and document services. Public-facing material emphasizes managed print, scanning, and copy workflows for business customers. In threat-intelligence listings, eksltd.com was identified as a ransomware victim associated with LockBit2.

fec-corp.com belongs to Federal Electric Corp., Ltd., a Thailand-based company founded in 1978 to produce appliances for the domestic Thai market. The company says it manufactures and supplies small home appliances, including products such as rice cookers and blenders, from facilities and offices in Bangkok and Samut Prakan. Its public materials describe a focus on high-quality, safe household appliances at competitive cost. It was listed as a ransomware victim associated with lockbit2.

Bazzisrl.it is a glazing contractor based in Italy, specializing in exterior painting, water-based paints, water-based enamels, stucco, decorations, and faux marble finishes. The company, established in 1999, operates as a limited liability society and is recognized for its artisan culture and refined manual craftsmanship. Bazzisrl.it serves clients across the glazing sector with a focus on quality craftsmanship and traditional techniques. The company was listed as a ransomware victim associated with the LockBit2 threat actor.

New Company 04.2022 is a Services-sector company in the United States, a broad category that includes businesses providing professional, business, and consumer-facing services. Because the entity name is generic, no reliable public source in the available search results identifies its specific offerings or operating details. In threat-intelligence indexing, it is recorded neutrally by the listing label and sector context. It was listed as a ransomware victim associated with midas.

Ackerman Plumbing is a Florida-based commercial plumbing contractor serving business and construction clients across the state, with services that include new builds, renovations, and emergency repairs. Company profiles and its website describe it as a family-owned, multi-generation provider headquartered in Sarasota. It operates in the Other sector for this listing and focuses on commercial plumbing solutions for buildings and projects. It was listed as a ransomware victim associated with conti.

Ledesma.com.ar is the website of Ledesma, an Argentine agroindustrial company in the food and beverage sector based in Buenos Aires, Argentina, with operations in sugar, paper, fruits, juices, alcohol, bioethanol, meat, and grains. The company presents itself as a producer of renewable energy, food, paper, and sustainable solutions, reflecting a broad industrial and agricultural portfolio. Its corporate contact address is in Ciudad de Buenos Aires, while its historical production base is in Jujuy. It was listed as a ransomware victim associated with lockbit2.

FlipChip International is a semiconductor packaging company based in Phoenix, Arizona, with operations in Shanghai, China. The company is associated with flip-chip technology, a chip interconnection and packaging method used in electronic devices and related components. Its public company listings show locations in Phoenix and Shanghai, reflecting a cross-border manufacturing footprint. In threat-intelligence records, FlipChip was listed as a ransomware victim associated with conti.

Liceu.barcelona is a hospitality and food service establishment located in Barcelona, Spain, offering culinary experiences including Iberian ham flautas and Manchego cheese dishes alongside opera and theater events. The venue provides daily menus, dinner menus, cocktails, and hosts press conferences and events managed by the Liceu, situated on La Rambla in the city. It serves visitors attending performances at the Gran Teatre del Liceu, blending culinary offerings with cultural entertainment in the heart of Barcelona. The establishment was listed as a ransomware victim associated with the LockBit2 threat actor in the threat-intelligence index.

MANUFAST is a Pune, Maharashtra-based manufacturing and product development services company focused on mechanical engineering. Its public materials describe it as a manufacturing-as-a-service provider that supports demand-driven production and related mechanical-sector work. Corporate listings also place MANUFAST SOLUTIONS PRIVATE LIMITED in India with a manufacturing line of business. In threat-intelligence indexes, MANUFAST was listed as a ransomware victim associated with conti.

GIBSON HomeWares is a California-based homewares company headquartered in Commerce, California, and it sells home goods and tabletop products under its consumer-facing brand. The company maintains a showroom in New York City and participates in major housewares trade events, indicating a business focused on wholesale and retail distribution. Its sector is listed as Other, reflecting a general merchandise and home furnishings profile. It was listed as a ransomware victim associated with conti.

Midea Carrier is a joint venture between Midea Group and Carrier that develops, manufactures, and distributes heating, ventilation, and air-conditioning (HVAC) systems. The company operates in the air-conditioning and climate-control sector, with a presence in India and other regional markets through Carrier Midea India and related operations. Its portfolio includes residential and commercial cooling solutions, including energy-efficient air-conditioning products and light commercial systems. It was listed as a ransomware victim associated with conti.

I-SEC International Security B.V. is a Netherlands-based services company headquartered in Schiphol Oost near Amsterdam. It specializes in advanced aviation security for airports and airlines, including passenger and baggage screening, checkpoint services, cargo security, handling support, and security training. The company also provides security surveying, auditing, and related technology and consulting services for aviation clients and critical infrastructure. It was listed as a ransomware victim associated with conti.

Liceu refers to the Gran Teatre del Liceu in Barcelona, Spain, an opera house on La Rambla that presents opera, music, dance, and theatre. The Liceu also offers educational and audience programs, including workshops and school-focused activities, and has a dedicated conservatory in Barcelona. In threat-intelligence catalogs, it is listed under the sector category “Other.” It was listed as a ransomware victim associated with lockbit2.

Lowell is a credit management and debt purchasing company based in Leeds, West Yorkshire, in the United Kingdom. It buys consumer debts and manages collections, helping customers arrange affordable repayment solutions. The group operates across the services sector and is regarded as a leading credit management business in Europe. It was listed as a ransomware victim associated with Conti.

Caracol TV Colombia, founded in 1954 and headquartered in Bogota, is a Colombian free-to-air television network owned by Caracol Medios, a unit of Grupo Valorem. The company operates as a leading media and entertainment entity, distributing original telenovelas, series, and entertainment content through Caracol International across Miami, Madrid, and Bogota. It also offers news via its Noticias Caracol application and provides production services covering all stages from content development to delivery. Caracol TV Colombia was listed as a ransomware victim associated with kelvinsecurity.

Caribe Tours is a Dominican Republic-based transportation and travel-services company headquartered in Santo Domingo. Its services include tourist transport, corporate transport, intercity transport, and related travel offerings for passengers across the country. Public listings also describe it as operating guided adventures and other mobility services in the region. It was listed as a ransomware victim associated with kelvinsecurity.

ICONIC appears to be a commercial office property marketed as The Iconic Corenthum in Sector 62, Noida, Uttar Pradesh, India. Public listings describe it as an office location at A-41, Sector 62, with business-space offerings and building services for tenants. The venue is presented as part of a larger office development in the Noida commercial district. It was listed as a ransomware victim associated with kelvinsecurity.

eGOV refers to Protean eGov Technologies, an Indian technology company headquartered in Mumbai. It builds digital public infrastructure and e-governance solutions for government bodies, helping deliver citizen-facing services and public-sector platforms. Industry listings describe it as a technology and information services company with operations centered in India. It was listed as a ransomware victim associated with kelvinsecurity.

Equicom SAVINGS BANK is a duly licensed thrift bank based in Makati City, Philippines, with branches across Luzon, Visayas, and Mindanao. It offers financial services for consumers and SMEs, including deposits, loans, cards, online and phone banking, and bills payment. Public company profiles also describe it as a medium-sized savings bank with lending and transaction services. It was listed as a ransomware victim associated with kelvinsecurity.

Cellulant Corporation is a Kenyan payments company in the Services sector that provides digital payment infrastructure across Africa. It helps businesses collect payments, send payouts, and support transactions through locally relevant payment methods and enterprise payment services. Public company materials describe it as a leading African payments provider serving merchants, banks, and enterprises across multiple markets. In threat-intelligence listings, Cellulant Corporation was listed as a ransomware victim associated with kelvinsecurity.

BEXIMCO is a large private-sector group based in Bangladesh, founded in the 1970s and known for businesses spanning textiles, real estate, hospitality, marine food and commodities trading, ICT, ceramics, and aviation. It operates as a diversified conglomerate with a broad industrial and commercial footprint in Bangladesh and beyond. In threat-intelligence listings, BEXIMCO was identified as a ransomware victim associated with kelvinsecurity.

BMW Chile is the Chilean arm of the BMW brand, operating through Inchcape’s local distribution and retail network. It serves customers in Chile with premium vehicles and related after-sales support, including branch and workshop services in the country. BMW Group is known globally as a manufacturer of premium cars and motorcycles, with financial and mobility services. BMW CHILE was listed as a ransomware victim associated with kelvinsecurity.

Banco do Brasil is a major Brazilian financial institution based in Brasília, operating across retail banking, corporate banking, insurance, and capital-markets services. Its offerings include traditional banking products as well as insurance, bond underwriting, and related financial services through its subsidiaries. The group serves customers in Brazil and in international markets through affiliated entities. It was listed as a ransomware victim associated with kelvinsecurity.

CORT operates within the Other sector, providing unspecified offerings with no confirmed geographic location disclosed publicly. The entity’s specific services and operational scope remain undefined in available records, reflecting its classification under a broad sector category. CORT was listed as a ransomware victim associated with kelvinsecurity, as reported by threat-intelligence sources tracking ransomware group activities. No official first-party disclosure date from CORT regarding this incident has been verified through public records or regulatory filings.

Nestlé is a Swiss multinational food and beverage company headquartered in Vevey, Switzerland. It produces and markets a broad portfolio that includes coffee, dairy, confectionery, bottled water, infant nutrition, pet care, and prepared foods. The company operates globally across many countries and is one of the largest packaged food manufacturers by scale. Nestlé was listed as a ransomware victim associated with kelvinsecurity.

The Salvadoran Ministry of Foreign Affairs is the Public Sector institution in El Salvador responsible for exercising diplomatic relations, promoting development and cooperation, and managing consular affairs to protect Salvadorans abroad. Its core offerings include regional integration, economic relations, visa services, and support for the diaspora through dedicated vice-ministries. The ministry operates from its headquarters in La Libertad, El Salvador, and maintains embassies and consulates globally to advance national interests. This entity was neutrally listed as a ransomware victim associated with the threat actor kelvinsecurity.

ANTAL International is a global executive search and recruitment organisation based in London, United Kingdom, with offices in more than 30 countries. It provides hiring and talent-search services for employers across multiple markets and sectors. Public company profiles describe it as a recruitment agency with a broad international network. It was listed as a ransomware victim associated with kelvinsecurity.

Pakistan Human Rights appears to refer to the Pakistan International Human Rights Organization (PIHRO), an independent, non-profit, non-political NGO based in Islamabad, Pakistan. It was established in 1999 and is registered under Pakistan’s Social Welfare Agency Ordinance 1961. The organization says it works to serve humanity, promote human welfare, and help disadvantaged communities. It was listed as a ransomware victim associated with kelvinsecurity.

CR ASIA is a Thailand-based business associated with industrial maintenance and broader business services, with operations centered in Bangkok and activity across Asia. Public company profiles describe it as a facilities management and commercial cleaning, business services, or industrial maintenance group offering multi-disciplined support for industrial sites. It has been described as operating from Thailand with regional locations in Singapore, India, Malaysia, and the Middle East. It was listed as a ransomware victim associated with kelvinsecurity.

kssente is a business entity in the sector-other category with no widely available public profile in the search results, so its core offerings and location cannot be verified from the available sources. In threat-intelligence context, it is best treated as an organization identified by name only, without assuming unconfirmed details about its industry, operations, or geography. The entity was listed as a ransomware victim associated with lockbit2.

Prima Sole Components Spa is an Italian manufacturing and engineering company headquartered in Oderzo, Treviso, Veneto. It develops and produces plastic and thermoplastic components for automotive, motorbike, truck, and appliance applications, and designs assembly systems for industrial clients. Public company profiles describe its operations as national and global, with business units serving Italian automotive customers, foreign automotive customers, and appliances. The entity was listed as a ransomware victim associated with conti.

Rettenmeier Holding AG is a German timber and wood-processing company headquartered in Wilburgstetten, Bavaria, near the Baden-Württemberg border. It operates across Europe and describes itself as one of Europe’s leading timber industry companies. Its business includes sawn timber, planed timber, construction timber, and products for DIY, trade, and related wood markets. The listing identifies Rettenmeier Holding AG as a ransomware victim associated with conti.

Parker Appliance Company was originally established as Parker Appliance Co. in Cleveland, Ohio, in 1917 and later evolved into Parker Hannifin Corp., a global leader in motion and control technologies. The company provides precision-engineered solutions for mobile, industrial, and aerospace markets, operating as a diversified manufacturer of motion and control systems. It serves sectors including industrial machinery, military applications, and aerospace through its fluid power systems and components. Parker Appliance Company was listed as a ransomware victim associated with the Conti threat actor.

studiobrazzale.... is identified here as an entity in the Other sector, but publicly available search results do not provide a reliable, company-specific profile for its location or offerings. In the absence of verified first-party information, this listing treats the name as a neutral catalog identifier rather than inferring additional business details. The entry records that it was listed as a ransomware victim associated with lockbit2.

Keypoint is a Bahrain-based professional services firm serving local and regional businesses, financial institutions, SMEs and family offices across the GCC and wider MENA region. Its services include accounting, statutory and corporate advisory, investment administration and share registry, trust services, IT consulting, tax, VAT and management consulting. The firm presents itself as one of the GCC's most comprehensive providers of professional business services. It was listed as a ransomware victim associated with lockbit2.

YachtCharterFleet is the world's leading independent luxury yacht charter guide, specializing in private crewed yachting vacations and corporate yacht charters. Based in London, United Kingdom, the company allows users to browse the entire market impartially and access independent booking information. It reports the latest yacht charter offers and last-minute deals to help customers enjoy private charter vacations at reduced costs. The organization serves as a global authority on luxury yacht charters, combining thousands of listings with local destination insights. YachtCharterFleet was listed as a ransomware victim associated with the LockBit2 threat actor.

Royal Bafokeng Holdings is the investment arm of the Royal Bafokeng Nation, based in Johannesburg, South Africa. It focuses on building long-term wealth for the community through investments. Its portfolio spans sectors such as infrastructure, mining, telecom, financial services, and real estate. The entity was listed as a ransomware victim associated with lockbit2.

Zeeland Farm Services, Inc. is a family-owned agri-business operating since 1950 in the United States, with headquarters in Zeeland, Michigan and facilities in Wisconsin and Georgia. The company owns and operates Michigan's only soybean processing facility and edible oil refinery, alongside business units in grain storage, feed ingredients, biofuels marketing, commodity export, and seed. Zeeland Farm Services, Inc. serves the agricultural and transportation industries for nearly seven decades with offerings spanning soybean processing, edible oil refining, and grain merchandising. The company was listed as a ransomware victim associated with the threat actor conti.

infotech ua is an IT-sector company in Ukraine, identified by its name and sector as an information technology business. Public web results do not provide a clear, authoritative company profile with detailed offerings, so a precise description beyond its IT focus and Ukrainian context is not confidently supported by the available evidence. In threat-intelligence reporting, it was listed as a ransomware victim associated with Stormous.

Yip in Tsoi is a Thailand-based business group headquartered in Bangkok, with operations described in company profiles as spanning technology, communication, and marketing. Public company listings also place it in computer hardware manufacturing and note offerings tied to digital and cloud solutions. Its presence in Thailand and its customer-facing services make it relevant to enterprise technology and market communications. It was listed as a ransomware victim associated with snatch.

O'Malley Tunstall PC is a North Carolina law firm based in Raleigh, with an additional office in Tarboro. Its website says the firm focuses on injury and disability matters, including commercial truck and automobile accidents, slip-and-fall cases, and Social Security Disability claims. The practice serves clients across North Carolina. It was listed as a ransomware victim associated with LockBit2.

AVC Immedia is an award-winning communications agency based in Newbury, Aberdeen, and Houston, specializing in audio, visual creative, and AV solutions. The company offers presenter-led radio, video production, 3D animation, and custom AV services tailored for brand enhancement and sales engagement. As a premier creative audio and video production firm, it serves a global clientele with compelling storytelling and captivating visuals. AVC Immedia was listed as a ransomware victim associated with the LockBit2 threat actor.

Grupo de Incendios SA is a Spanish services-sector company based in Soria, Spain, focused on fire protection and safety products. Its catalog includes fire extinguishers, hoses, couplings, hydrants, valves, control stations, and other firefighting equipment. The company says it has operated since the 1980s and works from facilities where it develops and supplies fire-safety solutions. It was listed as a ransomware victim associated with lockbit2.

Scott Manufacturing, LLC is a Henderson, Kentucky-based manufacturer in the building materials and engineering supply chain. Company profiles describe it as a fabricator of fiberglass and foam insulation materials, with a focus on thermal and acoustic insulation solutions for OEM and related industrial customers. Public business listings also place it in the manufacturing and wholesale building materials sectors. It was listed as a ransomware victim associated with conti.

Jepson Longstaff Midgley Solicitors LLP operates as a Yorkshire law firm based in Wykeham, Scarborough, England, with offices serving private and business clients. Its website describes legal services covering property, wills and probate, family matters, and related support from solicitors and paralegals. Public contact details place the firm at Wesley House, 1 Lora Courtyard, Wykeham, Scarborough, North Yorkshire. It was listed as a ransomware victim associated with lockbit2.

Hearst Communications is a private media and information company headquartered in New York, New York. It operates newspapers, magazines, television channels, television stations, and business media, serving audiences across the United States and beyond. The company also provides data and software products for financial services, alongside journalism and publishing businesses. Hearst was listed as a ransomware victim associated with pandora.

United Cumberland Bank is a local community bank founded in 1906, serving communities in Kentucky and Tennessee with branch locations in McCreary, Pulaski, Scott, Campbell counties, and Huntsville. The bank offers convenient banking services including account opening, loan applications, and access to ATMs across its network in Somerset, Whitley City, Pine Knot, Oneida, and Huntsville. United Cumberland Bank operates under routing number 042105785 and maintains offices in Whitley City, KY, and Huntsville, TN. The institution was listed as a ransomware victim associated with the threat actor pandora.

London College of Beauty Therapy (LCBT) is a specialist education provider located in Soho, London, offering courses in Beauty Therapy, Hairdressing, Make-up, and Advanced Aesthetics. Founded in 1995, the college provides industry-recognised qualifications and apprenticeships for students seeking careers in beauty and hair sectors. Its programs include full-time and short courses across Beauty Retail, Hair & Media Make-up, and Advanced Epilation, with many courses offered free of charge. The institution is recognized as London's No.1 college for diplomas and courses in beauty, hair, and make-up. LCBT was neutrally listed as a ransomware victim associated with the blackbyte threat actor.

Autumn Transport is a truck transportation and general transportation company headquartered in Woodbury, Minnesota, operating in the freight and logistics sector. Founded in April 1980, the firm specializes in bulk commodities shipping with four divisions covering end dumps, hoppers, pneumatic, and liquid tank trailers. The company provides comprehensive shipping solutions from dry bulk to liquid, agriculture to industrial, serving customers across the transportation and travel industry. Autumn Transport was listed as a ransomware victim associated with the blackbyte threat actor.

MZ Architects is an architecture and urban-planning firm founded in 2002, with offices in Lebanon, Qatar and Abu Dhabi. It works on high-rise, low-rise, office, residential, commercial and mixed-use projects, and provides architectural and engineering consultancy services. Public business listings also describe it as a multi-award-winning practice serving clients across the Middle East. MZ Architects was listed as a ransomware victim associated with BlackByte.

Credit Risk Management Canada appears to be a Canadian company associated with credit-risk and related financial services work in the finance, legal, and insurance space. In Canada, financial services firms operate within a tightly regulated environment that can include banking, insurance, credit unions, and other lending or advisory activities. This listing profiles the entity in a threat-intelligence index for sector context and monitoring purposes. It was listed as a ransomware victim associated with blackbyte.

GEBE is a Singapore-based company in the industrial services space, operating as GEBE Environmental Technology. Public company profiles place it in the Industrials sector and Specialty Business Services industry, with operations centered in Singapore. Its business profile indicates a small organization serving environmental and related service needs. In threat-intelligence catalogs, GEBE appears as a ransomware victim associated with BlackByte.

Papierswhitebi appears to refer to White Birch Paper, a paper manufacturing company in the Other sector. White Birch Paper produces newsprint, high-bright paper, directory paper, paperboard, and related specialty paper products, with mills in Canada and the United States. Public company information places its operations in North America, including the Papier Masson mill in Gatineau, Québec. It was listed as a ransomware victim associated with lockbit2.

Burlington Safety Laboratory Inc. is a Burlington, New Jersey company that specializes in high-voltage proof testing, dielectric laboratory services, and electrical safety equipment. It supplies protective gear and related testing, calibration, and repair services for linemen, electricians, utilities, telecommunications firms, railroads, and power line contractors. The company says it has tested protective equipment since 1971 and operates from Burlington, New Jersey, with additional contact operations in Westminster, California. It was listed as a ransomware victim associated with lockbit2.

Botswana is a landlocked country in Southern Africa, officially the Republic of Botswana, with its capital at Gaborone. It is known for a largely arid landscape dominated by the Kalahari Desert and for public-sector administration, national services, and tourism related to places such as the Okavango Delta. The country operates as a parliamentary republic and uses the pula as its currency. It was listed as a ransomware victim associated with LockBit2.

BC International Group, Inc., the company associated with bcintlgroup-com, is a privately held Services-sector apparel business headquartered in Totowa, New Jersey. Public business profiles describe it as a global apparel manufacturer and distributor, with fur apparel among its offerings. The company operates in retail and consumer goods channels and serves customers from its New Jersey base. It was listed as a ransomware victim associated with cuba.

Bexar Central Appraisal District (BCAD), operating in Bexar County, Texas, is a public appraisal district responsible for property tax valuations and supporting owners with appraisal protests and appeals. The organization provides online services portals for electronic business conduct, video libraries for outreach guidance, and help centers for document submission and customer support. Property owners may protest tax appraisals using established appeal procedures, including affidavits, hearings, or binding arbitration, with deadlines typically set by May 15. BCAD engages the community through neighborhood meetings and events for real estate professionals while maintaining transparent access to tax rate charts and reports. The entity was listed as a ransomware victim associated with the LockBit2 threat actor.

Trant Engineering Ltd is a privately owned UK engineering company based in Southampton, Hampshire, with registered offices in England. It operates across multi-disciplinary engineering work and has delivered water, wastewater, and process treatment solutions for UK process and water companies. Company listings also describe it as a large employer with more than 1,000 staff and long-standing operations since 1958. It was listed as a ransomware victim associated with cuba.

BANQUE CENTRALE DE TUNISIE is Tunisia’s central bank, headquartered in Tunis, and it oversees the banking system, issues banknotes, and manages foreign-exchange reserves. Established in 1958, it serves as a public financial institution within Tunisia’s financial sector. Its official role is broader than retail banking, focusing on monetary stability, supervision, and payment-system oversight. It was listed as a ransomware victim associated with conti.

rebuildingt is a Construction / Real Estate company in the United States, a sector that commonly includes building services, property development, and renovation work. Publicly available search results do not provide enough reliable detail to confirm the firm’s exact location or full service offering. The name suggests a company associated with rebuilding or renovation activity, but the available evidence is limited. It was listed as a ransomware victim associated with lockbit2.

PHC Holdings Corporation is a Japan-based healthcare technology company headquartered in Tokyo, with operations in biomedical, diabetes, and health-informatics businesses. Its group includes PHC Corporation and other subsidiaries serving clinical, laboratory, and digital health markets. PHC operates from Tokyo and maintains North American offices in Wood Dale, Illinois. It was listed as a ransomware victim associated with Hive.

Stago is a world-leading diagnostics company founded in 1945 in France, specializing in hemostasis and coagulation testing for blood analysis. Headquartered in Paris, the privately-owned firm develops automated systems for blood coagulation and exports over 90% of its French-made production globally. With R&D and production centers in the USA, Netherlands, Germany, Ireland, and China, Stago serves healthcare sectors worldwide through its advanced diagnostic offerings. The company was listed as a ransomware victim associated with the threat actor ransomexx.

ITECOR International SA is a privately held Swiss services company based in Vevey, Switzerland, with additional offices in Geneva and Zürich. It provides IT consulting and services, including governance and service management, digital solutions, and quality assurance and testing. The company describes itself as an independent boutique advisor supporting digital transformation for organizations. It was listed as a ransomware victim associated with conti.

Critical Content is a U.S.-based organization in the Other sector; public records in the supplied results do not identify a detailed line of business, so its offerings cannot be stated confidently. The name suggests a business involved in content services, but that inference is not supported by the search results and is therefore not used as fact. In threat-intelligence catalogs, such entries document organizations that have appeared in ransomware reporting or victim listings. It was listed as a ransomware victim associated with conti.

Automobil Holding AS is a Norway-based company whose name indicates a holding structure tied to the automotive sector, with activities typically centered on ownership, management, or investment in vehicle-related businesses. Public search results do not provide a detailed company profile, so its exact offerings cannot be stated confidently from available evidence. In threat-intelligence catalogs, the entity is treated as a corporate record in the broader business sector rather than a consumer-facing brand. It was listed as a ransomware victim associated with conti.

Royal Brunei Airlines Sdn Bhd is the national flag carrier of Brunei Darussalam, headquartered in Bandar Seri Begawan. It operates passenger air transport and related travel services from Brunei to international destinations, serving the transportation, travel, and logistics sector. The airline is known as Royal Brunei or RB and is based at the RB Campus in Brunei. It was listed as a ransomware victim associated with Conti.

19 You Must Never Forget LeakTheAnalyst appears in ransomware-victim intelligence records as an entity in the Other sector, with no reliably confirmed public location or service description available from the listing. The record identifies the name itself rather than providing a verified business profile, so its offerings and operating country cannot be stated with confidence from the available evidence. It is documented in threat-intelligence indexes for monitoring ransomware-related exposure and actor attribution. It was listed as a ransomware victim associated with leaktheanalyst.

18 Build your own drone appears to be a drone-related business entry in the other sector, associated with a company or project centered on building or supplying drones. Public search results point to common drone offerings such as aerial photography, mapping, inspections, and rental or custom services, but they do not confirm this entity’s exact location or service mix. In general, drone businesses operate across construction, surveying, agriculture, and industrial inspection markets. It was listed as a ransomware victim associated with leaktheanalyst.

APSM Systems is a Phoenix, Arizona-based services company that offers custom sheet metal fabrication, prototyping, assembly, and related manufacturing support. Public business profiles also describe APSM as serving process-safety and compliance needs through software and consulting for industrial customers in the United States. The company has been associated with operations in Arizona and Utah, reflecting a multi-site services footprint. It was listed as a ransomware victim associated with vicesociety.

Azimut Benetti Group is an Italian company in the services and luxury boating sector, based in Viareggio, Italy. It is one of the world’s leading builders of yachts and megayachts and offers production, refit, repair, and related services through the Azimut|Benetti brand family. The group operates internationally, serving customers through a broad dealer and service network. It was listed as a ransomware victim associated with conti.

Biz ReTek is an IT services company based in Batavia, Illinois, in the United States. It supports small to mid-sized businesses with technology needs and promotes managed services, including business IT support and related solutions. Public listings also place its primary location in Batavia and identify it as an IT company and computer repair service. It was listed as a ransomware victim associated with lorenz.

GRS Group is a leading provider of commercial real estate services, specializing in due diligence, asset surveying, and environmental risk assessment for clients across the United States and Europe. The company offers transaction services, property condition reports, environmental site assessments, seismic risk analysis, and construction advisory to support commercial mortgage lenders and insurance companies. With offices nationwide and affiliates globally, GRS Group helps clients identify environmental risks that can significantly impact their financial future. The firm was listed as a ransomware victim associated with the threat actor conti.

axessa.ch is the website of axessa Finanz AG, a Swiss company based in Unterägeri, Zug, that provides asset management and real estate services. Its site presents the firm as an independent partner for wealth and property matters, with contact and team information in Switzerland. The company is registered at Zugerstrasse 46, CH-6314 Unterägeri, and operates in the "Other" sector for threat-intelligence cataloging. It was listed as a ransomware victim associated with lockbit2.

ASPIRO Pharma Ltd. is an Indian biotechnology and pharmaceuticals company that develops and manufactures generic medicines and active pharmaceutical ingredients. It is headquartered in Hyderabad, Telangana, India, with its factory and registered office in Siddipet district. The company is described as focused on research, development, and pharmaceutical production. It was listed as a ransomware victim associated with vicesociety.

Ciments Guyanais is a cement manufacturer based in French Guiana, serving the construction market with cement and related materials. Company materials describe it as a local industrial supplier founded to meet Guyana’s cement needs, with operations centered on grinding and distribution. Public business listings also identify it as a producer of lime and cement in Remire-Montjoly, near Cayenne. It was listed as a ransomware victim associated with vicesociety.

AB Karl Hedin is a Swedish family-owned forestry, packaging and trade group based in Fagersta, Västmanland County, Sweden, with operations in Sweden and Estonia. Its business includes sawmills, timber supply and building-material retail under the AB Karl Hedin name. The company reports a nationwide network of stores and sales locations serving professional customers and local builders. It was listed as a ransomware victim associated with Conti.

ONCALL Language Services is a United Kingdom-based language services provider in the Services sector, offering interpreting and translation support for organizations that need multilingual communication. Its published services include translation across 300+ languages and dialects, along with certified interpreting and transcription solutions. Company materials also describe ONCALL as a global provider serving clients through professional interpreters and translators. In threat-intelligence records, it was listed as a ransomware victim associated with conti.

Neschen Coating GmbH is a leading international company based in Bückeburg, Lower Saxony, Germany, specializing in modern self-adhesive media and coating solutions for diverse applications. The firm manufactures and sells self-adhesive and digital print media, including mounting and protection films and graphics media, serving global markets. As a German manufacturer of self-adhesive media, laminators, and industrial coating solutions, it operates as part of the Neschen Group with nearly 300 employees. Neschen Coating GmbH was neutrally listed as a ransomware victim associated with the Conti threat actor.

Smith Transport is a trucking and logistics company headquartered in Roaring Spring, Pennsylvania, with additional offices in Georgia and Indiana. The company operates as a full truckload carrier and offers dedicated, regional, over-the-road, expedited, logistics, oil and gas, and warehouse services. Its public materials also describe it as an asset-based dry van carrier serving transportation needs across the United States. It was listed as a ransomware victim associated with stormous.

OSSEG, formally Obra Social de la Actividad de Seguros, Reaseguros, Capitalización y Ahorro y Préstamo para la Vivienda, is an Argentine health insurance and social security provider for the insurance sector. It is based in Buenos Aires, Argentina, and serves affiliates nationwide through its website and service offices, offering administrative and healthcare-related member services. The organization is also identified by the acronym OSSEG and is registered with Argentina’s Superintendencia de Servicios de Salud. It was listed as a ransomware victim associated with vicesociety.

Allied Eagle Supply is a Detroit, Michigan-based distributor of janitorial and sanitation supplies and cleaning equipment. Founded in 1948, it has served Michigan and northern Ohio and operates from 1801 Howard Street in Detroit. The company was later acquired by Imperial Dade, while continuing its local supply and showroom presence. Allied Eagle Supply was listed as a ransomware victim associated with conti.

progettoedilesr... appears to be an Italy-based Communication / Marketing organization, a sector that typically covers branding, public relations, digital campaigns, and related client services. Public search results do not provide a clear official profile, so its exact offerings and location cannot be confirmed from the available evidence. The listing is presented in a threat-intelligence context and should be read as an attribution reference, not as proof of compromise. It was listed as a ransomware victim associated with lockbit2.

bro appears in threat-intelligence listings as a victim entry with limited public business detail. Available records do not reliably identify its sector beyond Other, and no authoritative public source in the provided results confirms its location, offerings, or operating profile. LockBit 2.0 is a ransomware-as-a-service operation associated with double extortion tactics and major global victimization campaigns. bro was listed as a ransomware victim associated with lockbit2.

its.ws is the website of International Turnkey Systems (ITS), a Kuwait-based technology company with offices and R&D facilities in Kuwait, Egypt, Bahrain, the UAE, and India. The company provides advanced technology solutions for financial institutions, government, and private-sector organizations across multiple industries. Its public corporate materials describe a regional presence and services centered on digital transformation and enterprise software. It was listed as a ransomware victim associated with lockbit2.

Jammal Trust Bank S.A.L. is a Lebanon-based bank in the finance sector, with headquarters in Beirut and operations that included branches in Lebanon and representative offices abroad. Sources describe it as a commercial bank serving customers through standard banking services and related financial offerings. The institution has also been documented with international addresses tied to its network of offices. It was listed as a ransomware victim associated with vicesociety.

Migros is a Swiss retail group headquartered in Zurich, Switzerland, and is widely associated with food and drug retailing. It operates supermarkets, hypermarkets, and specialist stores, serving customers across the Swiss market. Public company profiles describe Migros as a major retailer with a broad store network and diversified consumer offerings. It was listed as a ransomware victim associated with stormous.

UNITEK Contracting Group is a Pearl City, Hawaii-based services and contracting company that provides specialized environmental and construction-related work. Public business listings describe asbestos removal, lead paint abatement, toxic mold, PCB, mercury, and fluorescent lighting services, and company materials say it serves commercial and industrial clients. Its business profile also places it in construction, repair services, and energy, utilities, and waste-related work. It was listed as a ransomware victim associated with conti.

Oklahoma City Indian Clinic is an American Indian health care provider in Oklahoma City, Oklahoma, serving patients through culturally sensitive, community-focused care. As an Indian Health Service contractor, it offers primary medical services alongside pediatric, prenatal, family medicine, dental, optometry, behavioral health, wellness, nutrition, and pharmacy support. The clinic also operates multiple service locations and patient-centered programs for individuals and families in central Oklahoma. It was listed as a ransomware victim associated with suncrypt.

qarch.nl is the website of Quadrant Architecten BNA, an architecture firm based in Zevenbergen, North Brabant, Netherlands. The company presents itself as a multidisciplinary practice with an in-house team and contact details at Markt 24. It serves architectural and design clients from its Dutch office and operates under the qarch.nl domain. The site also notes its use of functional and analytical cookies. It was listed as a ransomware victim associated with lockbit2.

Zentrum Dreilinden is a senior care facility in Rotkreuz, Switzerland, serving older adults and people needing long-term care. It provides a residential home environment designed to offer safety, support, and personal freedom. The organization operates in the health and social care space and serves the local community in the canton of Zug. It was listed as a ransomware victim associated with lockbit2.

Pirson Holland, operating as Pirson Refractories, serves the heavy construction industry in Europe and worldwide, focusing on complete new-build and renovation projects. Its site also highlights blast furnace relines and related project references, indicating a specialized industrial services profile. The company is based in the Netherlands. It was listed as a ransomware victim associated with lockbit2.

Diamond Pet Foods is a family-owned U.S. pet food manufacturer founded in 1970 and headquartered in Meta, Missouri. The company produces food for dogs and cats and operates manufacturing sites in Missouri, Arkansas, South Carolina, California, Kansas, and Indiana. It markets pet nutrition products under the Diamond brand family and serves breeders, trainers, and pet owners. Diamond Pet Foods was listed as a ransomware victim associated with blackbyte.

h1{ is an entity in the Other sector; the available listing does not provide enough public detail to identify its products, services, or exact location with confidence. BlackByte is a ransomware-as-a-service group active since 2021, known for encrypting victim systems and using double extortion to pressure organizations. Public reporting shows BlackByte has targeted a wide range of sectors and geographies, often including small businesses and critical-infrastructure-related organizations. It was listed as a ransomware victim associated with blackbyte.

Pirsonh appears to be an organization represented by the website pirsonh..., operating in the Other sector. Its public web presence suggests a business or institutional entity with offerings tied to that site, but no reliable search result provided enough detail to verify a more specific profile. In threat-intelligence indexing, the name is used as the victim identifier for the listed incident. It was listed as a ransomware victim associated with lockbit2.

Hochschild Mining is a Peru-based precious metals company with operations focused on the exploration, mining, processing and sale of gold and silver in the Americas. The group traces its origins back over 100 years and has operated mines since 1964, reflecting a long-running presence in the region. In company and industry profiles, it is identified as a public precious metals and mining business with a registered office in London. It was listed as a ransomware victim associated with conti.

Aquazzura is a luxury footwear brand founded in 2011 by Colombian designer Edgardo Osorio, based in Florence, Italy. The company specializes in high-end women’s shoes, with collections available through over 300 retailers in 58 countries and flagship boutiques in major cities including Florence, Milan, New York, and Dubai. Aquazzura Italia S.r.l., headquartered at Lungarno Corsini 8 in Florence, is registered with the Florence Companies Register and operates under the Manufacturing sector. The brand emphasizes artisan craftsmanship, with its headquarters located in Palazzo Corsini amid renowned shoemakers and artisans. Aquazzura was listed as a ransomware victim associated with the threat actor LockBit2.

Aquazzura.co is the online presence of Aquazzura, an Italian luxury footwear brand based in Florence, Italy, that sells women’s shoes and related fashion items through its official store. The company is associated with the Aquazzura Italia S.r.l. corporate entity and provides customer service and ecommerce sales for its brand. In threat-intelligence catalogs, it is recorded as a ransomware victim linked to the LockBit2 group, with Colombia noted in the listing metadata.

Microflex-servi... is an entity operating in the Other sector, with its primary location in the United States. The organization provides offerings that align with its sector designation, though specific details remain limited. It serves a range of customers across multiple industries, reflecting its broad operational scope. The entity was listed as a ransomware victim associated with lockbit2, indicating its involvement in a cyber incident.

Konradin Mediengruppe GmbH is a German media and publishing group based in Leinfelden-Echterdingen, Baden-Württemberg. The company says it is one of the largest providers of specialist information in the German-speaking market and publishes magazines, books, and related media services. It operates from Ernst-Mey-Straße 8 and serves business and professional audiences across multiple editorial and service brands. The company was listed as a ransomware victim associated with hive.

Century Aluminum Company is a global producer of bauxite, alumina, and primary aluminum, with headquarters in Chicago, Illinois. Its operations include smelters and related facilities in Kentucky, South Carolina, Iceland, Jamaica, and the Netherlands. The company supplies aluminum products for industrial and commercial uses through its international manufacturing network. It was listed as a ransomware victim associated with LockBit2.

Century Supply Chain Solutions is a tech-focused global logistics and supply chain services provider with offices and warehouses across the world. Based in Glen Allen, Virginia, the company supports operations across multiple industries using technology-enabled logistics systems. Public company profiles describe Century as a global supply chain organization rather than a manufacturer or retailer. It was listed as a ransomware victim associated with lockbit2.

Pollmann is an Austrian family-owned company based in Karlstein/Thaya, Lower Austria, with additional international locations. It focuses on the automotive industry and develops and produces mechatronic components and related industrial solutions for vehicle manufacturing. Company information describes long-standing operations in Austria and a global footprint across several sites. It was listed as a ransomware victim associated with hive.

Standard Furniture Manufacturing is a leading designer and supplier to the retail furniture industry, emerging as one of the top revenue producers in North America. The company operates from 801 Hwy 31 South in Bay Minette, Alabama, offering high-quality furniture solutions to its customer base. Its product catalog includes beds, dining tables, wall units, and other essential furniture items for retail and home use. Standard Furniture Manufacturing serves the retail sector with a comprehensive selection of furniture at competitive prices. The company was listed as a ransomware victim associated with the threat actor LockBit2.

SPERONI SpA is an Italian engineering and manufacturing company headquartered in Cassine, specializing in the production of high-precision tool presetters and measuring systems for the global machining industry. The firm provides advanced solutions designed to optimize manufacturing workflows and ensure quality control in complex production environments. As a prominent player in the industrial technology sector, the organization maintains a significant international footprint. SPERONI SpA has been listed as a ransomware victim associated with the threat actor group known as Everest.

Xtera deliver submarine cable solutions that maximise optical capacity and capability from seabed to city through outstanding expertise, know-how and technology innovation that is underpinned by leading-edge research and development.

Warren Resources’ properties include high-quality, low-decline conventional oil and natural gas assets in the core of the Wilmington Field, in L.A. County, CA. Our value-driven strategy focuses on continuously generating capital efficiencies and operation with low production and G&A costs, with a disciplined approach to