United States
Targets by Group
Leak Coverage — United States
- Leaked57357%
- Pending41041%
- Deleted162%
- Other indexed sources
- Data breaches504
- Stealer logs0
- Leads12
United States - Targeted Attacks in All period
Posts 10953 total Page 1 / 110
| Type | Target | Source | Discovered | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Hattiesburg Eye Clinic View Details | thegentlemen | Healthcare / Pharma | — | ||
|
hattiesburgeyeclinic.com zoominfo.com/c/hattiesburg-eye-clinic-pa/46138946 1974-founded family ophthalmology practice in Hattiesburg, Mississippi — started by Dr. David Richardson and now run by his son Dr. Ben Richardson, making it the region's oldest and largest eye clinic (8 ophthalmologists + 1 optometrist, on-site surgery center and optical shop). Full-stack eye care under one roof: cataract surgery — including the first Light Adjustable Lens (RxSight LAL) in south Mississippi — LASIK, glaucoma (MIGS), retina injections, oculoplastics, pediatric and diabetic eye care. |
||||||
| Ransomware | Aurora Technologies View Details | thegentlemen | IT | — | ||
|
ati-1.com zoominfo.com/c/aurora-technologies-inc/1151986102 Aurora Technologies / ATI orth America's largest fabricator and stocking distributor of thermosets, thermoplastics and other non-metallic materials — founded in 1988 by Tom C. White in a barn in Ballwin, Missouri, now run with his son Thomas White III, with ~200 employees, ~$24M revenue, 7 locations across the US and Mexico (Pacific MO HQ, Spartanburg SC, Grand Haven MI, El Paso TX, Apodaca Mexico) and 300,000+ sq ft of manufacturing/warehouse space. Capabilities: compression molding (SMC/BMC — 16 presses at its Polyply division), CNC machining of engineering plastics (30% glass-filled PEEK down to UHMW), thermoforming, waterjet and punch-press work — with an inventory moat that means days, not weeks, of lead time. Markets: electrical (a certified manufacturer of insulating components for arc furnaces — a rare, high-barrier niche), oil & gas, medical/lab, materials handling; ISO 9001 since 2003 |
||||||
| Ransomware | Cedars Foods View Details | thegentlemen | Agriculture / Food | — | ||
|
cedarsfoods.com zoominfo.com/c/cedars-mediterranean-foods-inc/22189641 Cedars Foods America's #1 hummus & falafel brand — a 1981-founded Dearborn, Michigan family company (the Hamady family, in the heart of the Arab-American community) that made Mediterranean food mainstream in the US. Products: hummus, falafel, baba ghanoush, taboule, dolmas, pita chips, kibbeh, tzatziki, toum — in retail formats (8–10 oz) and foodservice 10-lb boxes for US Foods, Sysco and Shamrock; clients: Costco, Kroger, Walmart, Whole Foods, Meijer — national reach from a Dearborn plant with ~110–140 staff |
||||||
| Ransomware | Downrite Engineering View Details | thegentlemen | IT | — | ||
|
downrite.com zoominfo.com/c/downrite-engineering-corp/354082568 Downrite Engineering 1983-founded, family-owned Florida specialty contractor (Flaxman family, now led by 2nd-generation Brandon Flaxman, ~200 employees, ~$40–50M revenue est., HQ Coconut Creek) covering the full "site infrastructure" stack: underground utilities (water/sewer/storm), unlimited-license electrical, traffic signals/ITS, fiber optics — and its signature niche, sports lighting, where it's the default design-build contractor for municipal athletic complexes, schools and parks across South Florida. Moats: vertical integration (one contract, one PM for fields + parking + signals + fiber), a 100+ vehicle fleet (40+ digger derricks, 20+ bucket trucks), hurricane-restoration demand, FDOT prequalification and 40-year municipal relationships; new ~9–10k sq ft HQ opened 2023. Bottom line: a quiet Florida infrastructure dynasty — digging, wiring and lighting the state since 1983, profiting every storm season. |
||||||
| Ransomware | Sarku Japan View Details | thegentlemen | Other | — | ||
|
sarkujapan.com zoominfo.com/c/sarku-japan/33898946 SARKU Japan Japan's #1 independent service & wholesale network for foreign cars — founded 1993 in Chiba by Texan David J. Jones (in Japan since 1989) after seeing that owners of European/American cars in Japan were "orphans": parts take 6–8 weeks from Europe, service is scarce. SARKU built the full foreign-car infrastructure: 9 service centers (8 Kanto + Nagoya), a wholesale yard of ~4,000 imported cars (one of Japan's two largest), a parts warehouse of 30,000+ SKUs worth ¥700M+ (also one of Japan's two largest), plus procurement/export arms via US offices in Seattle (since 1997) and Florida — selling 20,000+ cars and serving 60,000+ active customers (~150 staff from 15 countries; ~120K monthly site visitors, 170K+ downloaded car-buying guides). Since 2018 it's owned by the Netherlands' Louwman Group (Europe's largest family-run dealer group, est. 1923). Motto: "Foreign cars. Japanese precision." |
||||||
| Ransomware | veritiv View Details | iah6477 | IT | pending | ||
|
Size: 1.9 TiB |
||||||
| Ransomware | HandyTrac (Greystar Litchfield Park, AZ) View Details | ShadowByt3$ | IT | — | ||
|
We have access to sensitive data. It's in your best interest to contact us and negotiate since it will just hurt you if you don't. We stole a lot of sensitive info including the following: - Physical-to-Digital Key Maps (Reports) - Property Intelligence & Vulnerability Logs (HandyTrac Key Control.pdf) - Employee Identity & Credential Data (Employees) - Financial & Vendor Records (Open_and_closed_Invoices) - Administrative Portal Control (Dashboard / Administration) This is not a joke or a bluff it's a sign of a corporate disaster. Figure it out and negotiate and the picture for proof is on are site at the below url: http://sdwbyttda4uzwdffbt4m7niuodiwhcgmkyxqg5nly2bjxqa6xtbe3fyd.onion/Screenshot_proof.png As you can see negotiate within 72 hours or we will leak the full data. |
||||||
| Breaches | USA.rar View Details | FracturedDB | — | leaked | ||
|
@seditive for more |
||||||
| Ransomware | Better Accounting Solutions View Details | anubis | Finance / Legal / Insurance | leaked | ||
|
Wall Street accountants data breach. |
||||||
| Ransomware | Bernath & Rosenberg View Details | genesis | Manufacturing / Engineering | pending | ||
|
A full service CPA firm |
||||||
| Ransomware | Dorfman Abrams Music, P.C View Details | genesis | IT | pending | ||
|
A full service CPA firm |
||||||
| Ransomware | geekybunch.com View Details | unsafe | IT | pending | ||
|
Revenue: $5 million |
||||||
| Ransomware | Foremost Mfg View Details | qilin | Manufacturing / Engineering | pending | ||
|
N/A |
||||||
| Ransomware | Winston Contracting, LLC View Details | qilin | Construction / Real Estate | leaked | ||
|
N/A |
||||||
| Ransomware | RoadEx America View Details | qilin | Transportation / Travel / Logistics | pending | ||
|
N/A |
||||||
| Ransomware | Dublin City Schools GA View Details | Eclipse | Education | — | ||
|
Dublin City Schools is a charter school system dedicated to preparing students to be effective communicators, problem solvers, and lifelong learners. The district offers a range of academic programs, including advanced and gifted education, special education, and various support services. Their intended clients include students and families in Dublin, Georgia, as well as educators seeking employment opportunities within the district |
||||||
| Ransomware | Metropolitan Community Health Services View Details | insomnia | NGOs / Associations | leaked | ||
|
Agape Health Services, a CCBHC/FQHC run by Metropolitan Community Health Services, offers sliding-scale primary, preventive, dental, pharmacy, and behavioral health care, plus mobile, law-enforcement, training, and reentry services. |
||||||
| Ransomware | Massey, Stotser & Nichols View Details | insomnia | Finance / Legal / Insurance | pending | ||
|
Massey, Stotser & Nichols is a Birmingham, AL law firm offering real estate, family law, and civil/corporate litigation. They serve Fortune 500, businesses, and individuals, delivering personalized solutions with big-firm capability. |
||||||
| Ransomware | glasfloss.com View Details | chaos | Manufacturing / Engineering | leaked | ||
|
DATA LEAK NOTICE: GLASFLOSS (glasfloss.com) A comprehensive data breach has exposed 402 GB of confidential corporate, financial, and employee records from Glasfloss. The compromised database contains internal documentation across multiple departments: • Accounting & Finance: Contracts, ESOP rec… |
||||||
| Ransomware | steelhausinc.com View Details | chaos | Manufacturing / Engineering | leaked | ||
|
Steelhaus boldly drives the market with innovative energy solutions; fusing practical, field proven experience, adaptable engineering, integrated manufacturing, and uncompromising safety with relentless delivery of unwavering customer service |
||||||
| Ransomware | Mestechkin Law Group P.C. View Details | Booba Project | Finance / Legal / Insurance | pending | ||
|
Law Practice Stolen data: 37 GB. |
||||||
| Ransomware | Atlas Ocean Voyages View Details | Booba Project | Transportation / Travel / Logistics | pending | ||
|
Travel Arrangements Stolen data: 37 GB. |
||||||
| Ransomware | Navitrans View Details | emperador | Transportation / Travel / Logistics | pending | ||
|
Navitrans is a leading Colombian distributor and service provider specializing in commercial trucks and heavy machinery, offering a comprehensive range of products and services including vehicle sales, spare parts distribution, and maintenance and repair services through a nationwide network of workshops. This post includes sensitive data about prices, financing, and other operational information. [Size: 223.2 MB | Sector: Manufacturing, Transportation] |
||||||
| Ransomware | Kimberly-Clark View Details | shinyhunters | Retail / E-commerce | pending | ||
|
This is a final warning to reach out by 16 Sep 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 13 Sep 2026 | Warning: FINAL WARNING |
||||||
| Ransomware | INCOR Group View Details | Doommageddon | Manufacturing / Engineering | pending | ||
|
Status: upcoming | Data size: — | Files: 0 files | Deadline: 2026-09-20T00:00:00Z |
||||||
| Ransomware | Axdia International View Details | rhysida | Manufacturing / Engineering | pending | ||
|
Axdia International Axdia International is a German electronics company that brings together a wide range of modern small electronics and electric mobility products. More |
||||||
| Ransomware | watchops.com View Details | unsafe | IT | pending | ||
|
Revenue: $1.3 million |
||||||
| Ransomware | intherpro.com View Details | krybit | IT | pending | ||
|
Intherpro LLC (International Thermal Insulation & Passive Fire Protection Company) is a UAE-based global leader in engin... |
||||||
| Ransomware | Sutton Public Schools View Details | global | Education | pending | ||
|
Sutton Public Schools’ website provides info on schedules, events, sports, news, and contacts for students, families, and the community in Sutton, MA. |
||||||
| Ransomware | Frisby Roofing (Frisby Construction LLC) View Details | medusalocker | Construction / Real Estate | — | ||
|
Residential roofing contractor (family-owned, locally operated). Complete roof tear-off and replacement, dimensional shingles (CertainTeed, Tamko Heritage, GAF), ice/water shield, flashing, ventilation, gutter aprons, pipe boot flashing. Phone: (513) 924-4377 (main/24-7), (513) 576-0679 (showroom/office); email [email protected]; web www.FrisbyRoofing.com. Suppliers: QXO (Cincinnati branch), Beacon Building Products (Tri-Built/CertainTeed), Mueller, NisbetBrower, The Patch Boys, Corken Steel, McCabe Lumber; subcontractor BullDogg Home Repairs (Kenny Goodin). Payroll: Paycor/PaySimple (staff incl. Nathan Wilson, Field Tech). Legal: mechanic's liens and lien releases (Hamilton/Clermont County Recorder), Chapter 13 case 1:26-bk-10008 (Pickelheimer). | USA, Ohio: 1375 State Route 131, Suite D1, Milford, OH 45150 (physical showroom); service area: Cincinnati metro / Hamilton, Butler, Clermont, Warren counties; BBB accredited since 02/25/2009, rating A+, 4.98/5 (131 reviews), 10,000+ roofs completed |
||||||
| Ransomware | TOWN OF SUTTON | MASSACHUSETTS View Details | global | Public Sector | pending | ||
|
The Sutton, MA, official town website offers residents and visitors access to municipal services, news, permits, payments, and community programs. |
||||||
| Ransomware | Shelco Filters View Details | securotrop | IT | — | ||
|
Status: AWAITING Size: 191 GB |
||||||
| Breaches | USA100k.xlsx View Details | NEW MIX | — | leaked | ||
| Ransomware | compunnel.com View Details | safepay | IT | pending | ||
|
The company provides a combination of talent acquisition, IT consulting, digital engineering, artificial intelligence, cybersecurity, and workforce management services to … |
||||||
| Ransomware | Imperial Healthcare Solutions View Details | qilin | Healthcare / Pharma | pending | ||
|
N/A |
||||||
| Ransomware | Foss Inc. View Details | pear | IT | pending | ||
|
Leading provider of installation, maintenance services to the energy industry |
||||||
| Ransomware | Medical Department Store View Details | dragonforce | Healthcare / Pharma | leaked | ||
|
Medical Department Store in united state |
||||||
| Ransomware | California School Employees Association View Details | ransomhouse | Telecommunications | leaked | ||
|
The California School Employees Association (CSEA) is dedicated to supporting classified school employees and advocating for public education. They offer a range of member benefits including financial services, legal help, and educational resources. CSEA aims to protect the rights of its members while promoting quality education for students. Their intended clients include school employees, retirees, and individuals interested in joining their advocacy efforts. |
||||||
| Ransomware | mankatoclinic.com View Details | chaos | Healthcare / Pharma | — | ||
|
The Mankato Clinic was founded Mankato, Minnesota in 1916, by five area physicians who believed that a comprehensive, multi-specialty group practice offered the best means of providing quality health care to the residents of southern Minnesota. The mission of the Mankato Clinic is to improve the hea… |
||||||
| Ransomware | artiflexmfg.com View Details | chaos | Manufacturing / Engineering | leaked | ||
|
ArtiFlex Manufacturing LLC operates as a specialized contract manufacturer focused on delivering precision sheet metal solutions to diverse industrial sectors. The company has built its operational foundation on deep expertise in manufacturing engineering, combining technical knowledge with practica… |
||||||
| Ransomware | NcbChurch View Details | Wallstreet | Other | pending | ||
|
New Covenant Believers’ Church is a faith-based ministry focused on spiritual, emotional, and mental growth through God’s Word |
||||||
| Ransomware | On Demand Occupational Medicine View Details | Wallstreet | Healthcare / Pharma | pending | ||
|
On Demand Occupational Medicine provides occupational health, drug testing, workplace safety, and employee wellness services in Austintown, Ohio. |
||||||
| Ransomware | Goldston Oil Corporation View Details | Wallstreet | Energy | pending | ||
|
Goldston Oil Corporation is a Houston-based oil and gas exploration and production company operating in Texas and Louisiana |
||||||
| Ransomware | jms building corporation View Details | incransom | Construction / Real Estate | pending | ||
|
JMS Building Construction is a full service Insurance Restoration construction company that handles every step of the Insurance Restoration process, from dealing with your insurance company to restoring your home's integrity WE HAS COLLECTED SUCH DATA AS: - Confidential documents - Clients Data - NDA - Financial data - Operations - Corporate data - Business Agreements - Development - Financial databases, all transactions, all clients And a lot of other VERY IMPORTANT information! |
||||||
| Ransomware | George Cameron Nash View Details | akira | Services | — | ||
|
George Cameron Nash Interior Design operates showrooms in Dallas and Houston, Texas, specializi ng in high-end furniture and lighting. They represent a diverse range of brands, including Alex ander Lamont, Chelsea Textiles, and Rubelli, offering products such as outdoor furniture, fabri cs, textiles, and wall coverings. We will upload corporate data soon. Employee personal information, customer information, contra cts. |
||||||
| Ransomware | HENRYPRATT.COM View Details | clop | Other | — | ||
|
[AI generated] Henry Pratt Company is a US-based manufacturer specializing in industrial valves, including butterfly valves, gate valves, and check valves. Operating within the flow control and fluid handling industry, the company serves water, wastewater, and industrial markets. Headquartered in Aurora, Illinois, it is a subsidiary of McWane Inc. and supplies infrastructure and municipal water systems across North America. |
||||||
| Ransomware | HARLEY-DAVIDSON.COM View Details | clop | Hospitality / Food & Beverage / Tourism | — | ||
|
[AI generated] Harley-Davidson is an American iconic motorcycle manufacturer headquartered in Milwaukee, Wisconsin, USA. Founded in 1903, the company designs, manufactures, and sells heavyweight motorcycles, related parts, accessories, and branded merchandise. It operates globally across the powersports and automotive industry. Its website serves as a digital hub for product information, dealer locators, community engagement, and e-commerce for enthusiasts worldwide. |
||||||
| Ransomware | John Engel Team View Details | ShadowByt3$ | Services | — | ||
|
Contact us and negotiate. Don't be like the other real estate companies we have breached. We have serious data which contains the following below. Also we have a image url too to show you that we are not bluffing negotiate and we will remove your name and show you all the proof you want. url: http://sdwbyttda4uzwdffbt4m7niuodiwhcgmkyxqg5nly2bjxqa6xtbe3fyd.onion/invoice.png Data Compromised: the leak contains 0.014 million contacts (exactly 14,476 unique customer records). The following was stolen 1. Complete Identity and Client Databases (14,476 Total Profiles) The extraction completely drains the brokerage team's customer network, divided into three distinct lifecycle tables: - 10,993 Nurtured Contacts: - 3,306 Archived Contacts: - 177 Awaiting Nurture Contacts: The fresh pipeline of new inquiries, open-house visitors, and active 30-day leads. 2. Deep Behavioral Tracking & Psychological Analytics For every single one of those 14,476 profiles, We stole exact behavioral history and intent metrics, including: - Predictive Intent Metrics: scout score and score change counters that signal exactly when a high-net-worth client is getting ready to purchase. - Direct Interaction Metrics: Explicit lists of Homes Viewed, Homes Interested (properties starred or liked), Home Value Alert Views, and Market Activity Alert Views. - Communication Analytics: Logs of Email receives, Email opens, email clicks, email rejects, and system Errors mapping out exactly how responsive a customer is to digital alerts. 3. Corporate Financial and Transaction Data - 40 Invoice PDFs: A localized batch of billing records detailing contractual pricing, vendor relationships, and enterprise account balances. - Corporate Payment Method: Active account billing profiles, explicitly exposing a corporate Visa card ending in 8265 with an expiration date of 01/29. 4. Direct Brand Impersonation Assets - Administrative Access Details: The team leader’s personal profile details, including name, primary corporate emails ([email protected], [email protected]), direct contact phone numbers (203 247 4700), and official state real estate license number (RES.0787476). - High-Definition Media Links: Pristine branding paths hosted on the platform's live AWS CloudFront CDN network (d1buiexcd5gara.cloudfront.net - Operational Templates: The exact welcoming and onboarding text strings used by the agents to register new users. The .csv is in the format below: Nurtured_Contacts Name,Email,scout score,score change,type,tags,created at,Auto Nurture Active,Alerts,Email receives,Email opens,email rejects,email clicks,Homes Viewed,Homes Interested,Home Value Alert Views,Market Activity Alert Views,Errors,Starred and that is for all of them. If you don't negotiate we will sell it on underground forums for one person only and we will send proofs to bleepingcomputer and haveibeenpwned. You have 72 hours to negotiate it will get leaked on 09/12/2026 at 10:10 PM New York Time EST/EDT. To negotiate are session is below for negotiations only session: 05dd14d0860cb5d6901de01af2a84c026d914197d0f8ed892085ea3be556563301 contact us via email has a second option: [email protected] |
||||||
| Ransomware | Mesan USA View Details | Global Secret Group | Services | leaked | ||
|
Country: Miami, Florida 33166, US | Website: mesanusa.com | Revenue: $5.4 Million | Industry: Industrial Machinery & Equipment, Manufacturing | Employees: 10-20 | Properties: 184 GB (188,562 Files, 26,169 Folders) |
||||||
| Ransomware | cullottalaw.com View Details | incransom | Finance / Legal / Insurance | pending | ||
|
Cullotta Bravo Law Group is a personal injury law firm based in Aurora, IL, with over 35 years of experience in various legal areas including personal injury, nursing home abuse, and workers compensation. |
||||||
| Ransomware | gardensalive.com, bitsandpieces.com, iselinursery.local, weeksroses.org, esm.local View Details | embargo | — | pending | ||
|
Gardens Alive, Inc. is a privately held U.S. consumer goods company specializing in direct-to-consumer gardening products, plants, seeds, nursery stock, fertili... - 2tb data |
||||||
| Ransomware | Kyodo USA View Details | akira | Transportation / Travel / Logistics | — | ||
|
Kyodo USA is a leading distributor of marine engine spares and ship operation equipment, boasti ng over 20 years of experience in the international maritime industry. The company serves over 300 clients across more than 100 countries, providing a highly diversified product line and rel iable services. We will upload 30gb of corporate data soon. Detailed employee personal docs scans (DLs, passpor ts, SSNs and other information), contacts and agreements, financials, confidential files, custo mer files, projects, NDAs and so on. |
||||||
| Ransomware | Specchem LLC View Details | Dark Project | Manufacturing / Engineering | pending | ||
|
About Specchem LLC Specchem LLC is a U.S.-based supplier of concrete repair materials, flooring products, and chemical admixtures. The company offers a range of cementitious and epoxy-based systems. Their distribution network covers domestic commercial and industrial contractors. A cyberattack on Specchem LLC resulted in a massive data breach. As a result of the incident, approximately 500 GB of data—containing roughly 700,000 files, including confidential personal and financial information—was stolen. |
||||||
| Ransomware | Jet Specialty View Details | qilin | Manufacturing / Engineering | pending | ||
|
N/A |
||||||
| Ransomware | BAYMER View Details | emperador | Healthcare / Pharma | pending | ||
|
Important documents [Size: 1.4 GB | Sector: Other] |
||||||
| Ransomware | Technology Dynamics View Details | Storm | — | — | ||
|
Established in 1976, Technology Dynamics Inc. is a leading designer and manufacturer of Switching Power Supplies, DC-DC Converters, and DC-UPS Systems for Military, Industrial, and Commercial applications. The company offers a wide range of products including standard, modified, and custom power supplies, with power levels from 50 Watts to 50KW and output voltages from 3.3V to 500 VDC. Known for its high reliability and rugged designs, Technology Dynamics Inc. serves demanding environments and has a strong reputation among defense contractors and industrial firms. Their products are rigorously tested to meet military standards, ensuring they are suitable for various applications worldwide. The company headquarters is located in 100 School Street, Bergenfield, NJ 07621, United States. 51-200 Employees, Data includes full solidworks designs and firmware source codes. |
||||||
| Breaches | passwords_2025_ISSUE_USA_DL_SSN_SELFIE_PART_1.txt View Details | Database World ROC | — | leaked | ||
|
🔑 Password evidence export for 2025 ISSUE USA DL SSN SELFIE PART (1).zip 155 explicit source passwords, with archive-specific ranking. |
||||||
| Ransomware | GT Distributors View Details | play | Services | pending | ||
|
United States |
||||||
| Ransomware | palmettoeyeinstitute.com View Details | safepay | Healthcare / Pharma | pending | ||
|
The practice was founded by Dr. Prat Itharat, a board-certified ophthalmologist who specializes in cataract surgery and comprehensive eye care. … |
||||||
| Ransomware | recoverycafe.org View Details | safepay | NGOs / Associations | pending | ||
|
The organization was founded in 2003 and opened its first physical café in Seattle in 2004. Its approach is based … |
||||||
| Ransomware | Sales Boomerang View Details | direwolf | Services | pending | ||
|
Accounting/Finance Software, Analytics & Performance Software, Customer Relationship Management |
||||||
| Ransomware | EMS1R View Details | direwolf | IT | pending | ||
|
Corporate Wellness Services |
||||||
| Ransomware | Brentwood Country Club View Details | akira | Hospitality / Food & Beverage / Tourism | — | ||
|
Nestled in the heart of one of L.A.'s most desirable neighborhoods, cooled by the ocean breezes just minutes away, Brentwood Country Club has been a warm, welcoming, "home away from home" fo r members and their guests since 1948. At Brentwood, youll find an elegant, yet relaxed atmosph ere, where friends and families gather to appreciate each others company and all the best that life has to offer. We will upload corporate data soon. Employee personal information (passport, DLs), contacts and agreements, financials, clients data, projects and so on. |
||||||
| Ransomware | CreateASoft View Details | akira | IT | — | ||
|
Inc. is a software company. The company provides dynamic process improvement solutions, predict ive technology, and end-to-end support to a variety of process-based operations dedicated to im proving operational efficiency and responsiveness. We will upload corporate data soon. Employee and customer files, contacts and agreements, finan cials, projects and so on. |
||||||
| Ransomware | The Zhou Law Group View Details | Eclipse | Finance / Legal / Insurance | pending | ||
|
The Zhou Law Group is one of the largest family law firms in California, specializing in divorce and related family law issues such as child custody, spousal support, and property division. With a team of top-rated divorce lawyers and Certified Family Law Specialists, they provide effective legal solutions to clients, including tech company founders and high asset-holders. The firm operates in the Greater Bay Area and Greater Los Angeles, offering services in multiple languages, including English and Chinese. Their reputation for professionalism and client care has earned them stellar reviews and a strong presence in the family law industry. |
||||||
| Ransomware | Alaska Electrical Apprenticeship View Details | qilin | Services | leaked | ||
|
N/A |
||||||
| Ransomware | MEI Architects View Details | Dark Project | Manufacturing / Engineering | pending | ||
|
About MEI Architects MEI Architects is a firm based in San Francisco that specializes in commercial, residential, and public architecture. They provide elegant and pragmatic solutions tailored for government, nonprofit, and private clients. Their portfolio includes notable projects such as the Portsmouth Square Improvement Project and the VA Palo Alto Polytrauma Aquatic Therapy Center. The firm is committed to community-minded design and successful partnerships. As a result of the attack, 340 GB of data (approximately 130,000 files) was stolen: including Social Security numbers, passports, green cards, invoices, HR documents, and a vast number of architectural drawings—including those from past and current projects, as well as those currently under construction. |
||||||
| Ransomware | University of San Francisco View Details | thegentlemen | Education | — | ||
|
usfca.edu zoominfo.com/c/university-of-san-francisco/346496443 is San Francisco's oldest university — a private Jesuit institution founded in 1855, with ~10,200 students, a $428M endowment, and a 55-acre hilltop campus near Golden Gate Park (plus downtown, Pleasanton and Tokyo sites). A 13:1 student-faculty ratio and #1-ranked online professional studies graduate program anchor its academics; 34% first-gen, 55% students of color, 92% on financial aid — mission-driven access defines it. Athletics: Division I Dons (WCC) with 3 national titles — home of Bill Russell's legendary 1955–56 back-to-back NCAA basketball championships. New president Salvador Aceves (2025) — the first Latino in the role — and an R2 "high research activity" Carnegie classification. Tuition ~$62K with average grants of $38K+; alumni median salary $115K. Bottom line: a mission-driven urban Jesuit university blending social justice, elite basketball history and top professional programs — "Change the World From Here. |
||||||
| Ransomware | Ritz Safety View Details | thegentlemen | Services | — | ||
|
ritzsafety.com zoominfo.com/c/ritz-safety-llc/82166398 Ritz Safety Americas largest privately-held PPE & safety equipment distributors — founded in 1983 in Pompano Beach, Florida by Emily Ritz and her son Peter Merkl, selling work boots and gloves from a truck, now HQ'd in Dayton, Ohio with ~220–250 employees and 17–18 locations nationwide. Hidden twist: in 2006 the family's uniform-rental empire Van Dyne Crotty was sold to Cintas — but the brothers Dan and Bob Crotty kept Ritz Safety out of the deal and built it into a roll-up consolidator: 9 acquisitions (2015–2022), 5,000+ customers monthly, access to 200,000+ SKUs, private-label lines, equipment rental/repair, custom embroidery and free on-site safety training. Revenue: $100–150M (2025: +12% = +$20M growth, best Q2 in the company's 42-year history), 100% family-owned (Crotty family), no PE. Bottom line: a family dynasty that lost its parent empire to Cintas but turned the "leftover" safety distributor into a new national powerhouse |
||||||
| Ransomware | State of Florida DMV View Details | shinyhunters | Public Sector | pending | ||
|
Contact us, you know how. or we will release the files. View download button below for proof (samples). Deadline : 9 11 2026 | Updated: 07 Sep 2026 | Warning: FINAL WARNING |
||||||
| Ransomware | NorthShore Health Centers View Details | insomnia | Healthcare / Pharma | pending | ||
|
NorthShore Health Centers offers comprehensive care in Indiana, including behavioral health, dental, pediatrics, and women’s health. It runs multiple health centers and mobile units across Porter, Lake, La Porte, and Jasper counties. |
||||||
| Ransomware | Wellness Partners network(combined revenue) View Details | incransom | Services | pending | ||
|
Headquartered in Clinton, New York Community Wellness Partners is a faith based non-profit organization that provides healthcare, housing and community services. They also have 24/7 skilled-nursing care to older adults who require residential medical care and support services. |
||||||
| Ransomware | Master Manufacturing Co., Inc. View Details | Dark Project | Manufacturing / Engineering | pending | ||
|
About Master Manufacturing Master Manufacturing Co., Inc. specializes in custom metal stamping and production services, leveraging over 200 years of combined design and engineering expertise. Founded in 1970 and located in southern Indiana, the company offers a range of services including laser cutting, wire bending, and heat treatment, all while maintaining a commitment to high-quality standards certified by IATF 16949. Their intended clients span various industries such as appliance, HVAC, lighting, automotive, and RV, with a focus on delivering innovative and efficient solutions. Master Manufacturing prides itself on quick turnaround times and the ability to meet specific customer needs through early design involvement and advanced manufacturing techniques. Master Manufacturing Co specializing in custom metal stamping and production services has fallen victim to a significant cyberattack. Hackers reportedly exfiltrated 36 gigabytes of sensitive data from the company’s servers. The stolen information includes SQL databases containing personal data, as well as technical plans and schematics for custom metal parts. The breach raises serious concerns regarding intellectual property theft and potential privacy violations for employees and clients. |
||||||
| Ransomware | Precision Vehicle Logistics View Details | direwolf | Transportation / Travel / Logistics | leaked | ||
|
Freight & Logistics Services |
||||||
| Ransomware | Rug & Home View Details | rhysida | Retail / E-commerce | leaked | ||
|
Rug & Home Rug & Home is a leading destination in the USA for rugs, furniture, and home decor, offering a vast selection of unique designs and top brands.Database of 50,193 customers�full names, home addresses, email addresses, phone numbers, purchase amounts (CSV)~10,800 scans�signed delivery notes with customer addresses/phone numbersPlaintext passwords for ~60 B2B supplier portalsW-2, 1099, W-9 � tax forms with employees' and contractors' SSNsPayroll database for all employees (Sage EMPLOYEE/ESWAGE)Company bank details (First Citizens Bank deposits) and employee accounts (direct deposit)HR: background checks, terminations, workplace injuries, 401(k)And much more More |
||||||
| Ransomware | NFM Lending View Details | interlock | Finance / Legal / Insurance | leaked | ||
|
NFM Lending is a national mortgage lender with over 1,000 employees that originated approximately $7.15 billion in mortgages in the past 12 months. The data breach exposed over 2.5 TB of sensitive personal customer information (names, Social Security numbers, bank accounts, credit information, loan terms, addresses, phone numbers, email addresses, borrower and loan identifiers, loan pricing, and itemized loan expense reports), as well as proprietary pricing/profit formulas, in violation of federal GLBA/FCRA, state privacy laws, and the CFPB's data breach reporting rules. You also have access to data from the Encompass database, which contains information on more than 1 million clients, as well as internal databases, an extensive database of tax forms, and employees' personal information. |
||||||
| Ransomware | Lightcast View Details | direwolf | IT | pending | ||
|
Human Resources Software |
||||||
| Ransomware | Jinny Beauty Supply View Details | aurora | Retail / E-commerce | leaked | ||
|
[distributors] Jinny Beauty Supply is one of the largest Korean-American wholesale beauty distributors in the US, operating 9 distribution centers from Doraville, Georgia to Commerce, California. They serve 7,400+ beauty supply stores and 2,800+ international distributors. The exposed material includes: A complete password vault export — 50+ plaintext credentials for PayPal, Braintree, Amazon Seller Central, eBay, Acumatica ERP (production), 12 state tax portals, FedEx, UPS, ShipStation, Microsoft 365, Google Analytics, and internal email. VMware hypervisor root credentials — vCenter and ESXi root passwords giving complete control over the entire virtual infrastructure. 911 scanned credit card authorization forms — full card numbers, CVV, expiry dates, and cardholder signatures for beauty supply store customers across 26 US states. Complete employee compensation database — ~260 employees with Korean and English names, departments, salaries, bonuses, and 1099 contractor data spanning 2015–2018. A 340 MB Shopify database backup — full customer table (names, emails, phones, addresses), product catalog, pricing, and warehouse assignments. Active Directory domain enumeration — all 239+ user accounts including 17 admin accounts, the complete server topology across 7 geographic sites (50+ servers), and DPAPI-encrypted RDP passwords. Employee tax documents — W-4 forms (SSN), I-9 forms (SSN + DOB + citizenship), direct deposit forms (bank account and routing numbers). 3.6 GB of SQL Server database backups — e-commerce customer/order/product data spanning November 2019 to March 2020. |
||||||
| Ransomware | Benshaw, Inc. View Details | aurora | — | pending | ||
|
[manufacturer, research] Benshaw, Inc. (Pittsburgh) and affiliated UTG entities (Unico, Benshaw Canada, AuCom, Excel, Noble Victoria). ~100+ corporate Visa/PCard records with full PAN + SSN + DOB + home address 637 former employees with full SSN/DOB/address on one spreadsheet 88 active employee folders plus multi-year Canada payroll <redacted> <redacted> Global bank account numbers (PNC, BMO, BNZ, St George, Commerzbank, JPM London, BBVA, GNB…) ACH NACHA files with vendor routing/account numbers UEdit source with hardcoded XOR key 4148865678 and date-based CalcBackDoor() Oil & gas customer job packs (Chevron, Petrobras, EOG, Santos AU, KOC…) |
||||||
| Ransomware | SIFCO Industries INC. View Details | metaencryptor | Manufacturing / Engineering | leaked | ||
|
SIFCO Industries is a world-wide provider of highly engineered forged components to the Aerospace, Energy and Defense markets. We supply flight-critical forged components and machined assemblies to all of the leading aircraft and engine manufacturers in the world. These components can be found on virtually all of the commercial and military fixed-wing aircraft as well as helicopters and business jets. Our products are also supplied to the leading steam and gas turbine manufacturers and oil producers serving the energy sector. |
||||||
| Ransomware | Hologic, Inc. View Details | metaencryptor | Healthcare / Pharma | leaked | ||
|
Hologic, Inc. is a U.S.-based medical technology company specializing in women’s health. It develops and manufactures diagnostic, imaging, and surgical products, with a strong focus on breast health, gynecology, diagnostics, and osteoporosis assessment. |
||||||
| Breaches | vertexrc-usa.com.csv View Details | B F R e p o V 3 F i l e s | — | leaked | ||
| Ransomware | rubbermill.com View Details | dragonforce | Manufacturing / Engineering | leaked | ||
|
═════════════════ ═════════════════ ═════════════════ RUBBERMILL, INC. DUMP: BREAKDOWN OF AN OEM MANUFACTURER LEAK ═════════════════ ═════════════════ ═════════════════ Target: RubberMill, Inc. (North Carolina, USA) — contract manufacturer of non-metallic components for appliance, HVAC, automotive, and heavy equipment. Certifications: ISO 9001:2015, WOSB, WBENC. Probable defense contracts (Mil-Spec). DUMP SIZE: ~296K files / 276K data objects / 340+ GB ▸ 146 GB disk image (.mrimg) — full copy of the system ▸ AES PASSWORDS.xlsx file + APWDxx libraries — credentials ▸ outlook.pst (487 MB) — corporate email archive ▸ creditcard.xls — payment data ▸ EMPLOYEE CALL LIST + Employee Information Record Form — PII ▸ Insurance data ▸ Tax forms containing SSNs ENGINEERING DATA: ▸ 3,000+ CAD files (.dxf, .stp, .dwg) with client part numbers: 7J314, K2A31, K7K11, V1324, etc. ▸ Complete set of 3D models ▸ Client drawings FINANCIAL DATA: ▸ Sales analysis.mdb (38 MB) — complete sales database ▸ commercial terms ▸ customer segmentation REGULATORY RISKS: ▸ C-TPAT / NAFTA / Certificate of Origin ▸ Conflict Minerals Reporting Template ▸ Supplier Quality Assurance Manual ▸ Probable Mil-Spec specifications The dump contains a full cross-section of the business: from passwords and SSNs to automotive OEM drawings and military specifications. ═════════════════ ═════════════════ ═════════════════ |
||||||
| Ransomware | Homewood Sales View Details | dragonforce | — | leaked | ||
|
Homewood Sales Corporation specializes in equipment life extension solutions, offering a wide range of products including automatic voltage regulators, control panels, and motors, all built to Westinghouse specifications. With over a century of expertise, they provide exceptional quality in industrial and power distribution units and components. Their services include global sourcing, factory revitalization, and technical support, ensuring precise and expert assistance for their clients. Homewood primarily serves industries requiring reliable power distribution and equipment maintenance solutions. |
||||||
| Ransomware | Norwood Law Firm View Details | dragonforce | Finance / Legal / Insurance | leaked | ||
|
Norwood Law is a Tulsa-based legal firm that specializes in personal injury law, criminal defense, business law, and family law. Founded by attorney Joe Norwood in 2004, the firm is known for its success in high-profile cases and achieving significant legal victories for its clients. The team also includes Todd Maxwell, who specializes in contracts, construction law, and dispute mediation. Norwood Law serves clients in Oklahoma seeking expert legal representation in complex legal matters. |
||||||
| Ransomware | eAssist Dental Solutions View Details | direwolf | Services | leaked | ||
|
Healthcare |
||||||
| Ransomware | evergenbio.com View Details | chaos | Healthcare / Pharma | — | ||
|
Evergen is a leading Contract Development and Manufacturing Organization (CDMO) specializing in biomaterial solutions for regenerative medicine. We work closely with OEM partners to deliver customized biomaterial solutions that meet specific clinical needs |
||||||
| Ransomware | myLaurel View Details | direwolf | Healthcare / Pharma | leaked | ||
|
Elderly Care Services |
||||||
| Ransomware | Mission Pet Health View Details | direwolf | Healthcare / Pharma | leaked | ||
|
Healthcare Services |
||||||
| Ransomware | Spirit Cultural Exchange - US View Details | kazu | Finance / Legal / Insurance | — | ||
|
Spirit Cultural Exchange is a U.S.-based organization that provides international cultural exchange and J-1 visa programs for students, young professionals, teachers, and international participants. Its programs include Summer Work and Travel, internships, professional training, and teaching opportunities in the United States |
||||||
| Ransomware | Leo Schachter Diamonds View Details | thegentlemen | Services | — | ||
|
leoschachter.com Leo Schachter Diamonds (USA/Global) Family diamond house since 1952, four generations; De Beers sightholder for 60+ years. Invented the branded diamond (THE LEO at Kay/Jared, ~2,000 stores) — a diamond sold like a Nike sneaker. Owns one of Botswana's largest cutting factories: 90% women, trained from scratch, plus its own doctor when 60% of staff were HIV-positive. Crisis context: lab-grown diamonds are squeezing the whole natural industry — the moat is now brand + story, not just stones. |
||||||
| Ransomware | Veradigm View Details | thegentlemen | IT | — | ||
|
veradigm.com zoominfo.com/c/veradigm-llc/471134180 3.5+ million personal patient records with PII full name, address, social security number, email, address, phone number,guarantors PII ,Score Veradigm Inc. is a publicly traded American healthcare technology and data analytics company (OTC: MDRX), the former Allscripts, founded in 1986 and renamed Veradigm in January 2023, headquartered in Chicago with about 2,300–2,600 employees. Its core asset is one of the largest multi-EHR data networks in US healthcare — over 450,000 connected providers and 200M+ patient records — which it monetizes through three segments: Provider (EHR, practice management, revenue cycle: $473M in 2024), Payer (quality and risk adjustment analytics: $67.3M) and Life Sciences (real-world data and AI-driven evidence: $54M). |
||||||
| Ransomware | Bauman Law Group View Details | qilin | Finance / Legal / Insurance | leaked | ||
|
N/A |
||||||
| Ransomware | G&S Technologies View Details | qilin | IT | leaked | ||
|
N/A |
||||||
| Ransomware | Nolan Consulting Group View Details | qilin | IT | pending | ||
|
N/A |
||||||
| Ransomware | Colonial Hyundai View Details | qilin | Manufacturing / Engineering | leaked | ||
|
N/A |
||||||
| Ransomware | Metrea LLC/Commuter Air Technology, Inc. View Details | aurora | IT | leaked | ||
|
[defence] Metrea LLC (formerly Meta Special Aerospace, LLC) and its subsidiary Commuter Air Technology, Inc. (CAT) are US defense contractors providing Contractor Owned, Contractor Operated (COCO) ISR aircraft services to US Special Operations Command. They operate modified King Air 350 surveillance aircraft in Niger, East Africa, the Philippines, and other theaters. <redacted> 339 MB of Harris PRC-117G military tactical radio firmware including compiled waveform binaries for SINCGARS, HAVEQUICK II, ROVER, and 10 other ITAR-controlled waveforms (USML Category XI). Named deployment data for 14+ operators at Sable Spear sites in Niger and East Africa, with rotation schedules, SIPRNet access documentation, and divert airfield planning. Complete SOCOM contract pricing portfolios — labor rates, burn rates, TINA-certified cost data, and subcontractor pricing for SOCPAC C3PO, Sable Spear, and Sable Dagger programs. 232 employee personnel files including resumes, W-9 forms (SSN), SERE training certificates, security clearances, expense reports, and deployment records. NSWDG (SEAL Team Six), MARSOC, and 75th Rangers training exercise documentation — 37 separately funded SOCOM training deliveries under the Alpha 28 program. <redacted> |
||||||
| Ransomware | Kovo Healthtech Corp View Details | pear | IT | pending | ||
|
Versatile technology company leading the Charge in AI process automation initiatives to drive Impact and innovation across diverse industries |
||||||
| Ransomware | D-MAX Engineering, Inc View Details | spacebears | IT | — | ||
|
D‑MAX Engineering, Inc. is a San Diego-based environmental consulting firm specializing in storm water services, particularly for governmental agencies. Our multidisciplinary team includes environmental scientists, engineers, chemists, and biologists. Our team is experienced with the National Pollutant Discharge Elimination System (NPDES) permit requirements in Southern California.Since 1996, when the company was founded, we have completed numerous storm water projects for 18 municipalities in San Diego, Orange, Imperial, and Riverside Counties. We have developed a reputation for practical solutions, cost-effectiveness, responsiveness, and flexibility. D-MAX is recognized across the region for our expertise in jurisdictional storm water program development and reporting, water quality monitoring, Industrial General Permit compliance assistance, development and construction services, and inspections of businesses, municipal facilities, construction sites, and treatment control BMPs.Our experience has provided us with a comprehensive understanding of complex, countywide water quality issues and the ability to effectively address them. D-MAX adapts to our clients’ needs and provides a level of quality service that sets us apart. Our diverse team of professionals, central location, and familiarity with the region allows us to provide clients with a wide variety of services at affordable rates. We are a state-certified small business enterprise (SBE).-Personal information of employees and clients -Financial documents-Сommunications drawings https://www.dmaxinc.com/ |
||||||
| Ransomware | pscindustries.com View Details | lockbit5 | Manufacturing / Engineering | pending | ||
|
For over 60 years, PSC Industries has been the number 1 supplier of nsulation, gasketing, seals, adh... |
||||||