United States
Targets by Group
Leak Coverage — United States
- Leaked311928%
- Pending814972%
- Deleted390%
- Other indexed sources
- Data breaches510
- Stealer logs0
- Leads12
United States - Targeted Attacks in All period
Posts 11851 total Page 1 / 119
| Type | Target | Source | Discovered | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Illinois Work Injury Resource Center (IWIRC) View Details | genesis | NGOs / Associations | pending | ||
|
Illinois Work Injury Resource Center (IWIRC) A comprehensive occupational health and rehabilitation service provider located in Peoria, IL. 2026-10-30·1min Illinois Work Injury Resource Center (IWIRC) |
||||||
| Ransomware | Gilliam & Associates, P.C View Details | genesis | Finance / Legal / Insurance | pending | ||
|
Gilliam & Associates, P.C A full service CPA firm. 2026-10-30·1min Gilliam & Associates, P.C |
||||||
| Ransomware | Acclaim Companies / JCJ Investment View Details | genesis | Finance / Legal / Insurance | pending | ||
|
Acclaim Companies / JCJ Investment A privately-held, real estate development and property management company. 2026-10-30·1min Acclaim Companies / JCJ Investment |
||||||
| Ransomware | EAS Engineering View Details | genesis | Manufacturing / Engineering | pending | ||
|
EAS Engineering Specializes in navigating wetland regulations for landowners, developers, and their legal representatives at local, state, and federal levels. 2026-10-30·1min EAS Engineering |
||||||
| Ransomware | Louisiana Crane & Construction View Details | genesis | Construction / Real Estate | pending | ||
|
Louisiana Crane & Construction A construction management company. 2026-10-30·1min Louisiana Crane & Construction |
||||||
| Ransomware | Suburban Orthopaedics View Details | Wallstreet | Healthcare / Pharma | pending | ||
|
Suburban Orthopaedics Suburban Orthopaedics is a New Jersey medical center offering coordinated care for back, neck, and shoulder pain and injuries. Its services include orthopaedic care, chiropractic, interventional pain management, physical medicine and rehabilitation, and physical therapy DOCUMENTS +6 MORE ENDS IN 6d 23h 34m 13s Suburban Orthopaedics ✕ ENDS IN 6d 23h 34m 12s DOCUMENTS EMAILS DATABASE FINANCIAL CREDENTIALS PERSONAL DATA MEDIA Suburban Orthopaedics is a New Jersey medical center offering coordinated care for back, neck, and shoulder pain and injuries. Its services include orthopaedic care, chiropractic, interventional pain management, physical medicine and rehabilitation, and physical therapy |
||||||
| Ransomware | Rapid Manufacturing View Details | aurora | Manufacturing / Engineering | pending | ||
|
[manufacturer] Rapid Manufacturing — a 50-year-old electronics contract manufacturer in Anaheim, California with operations in Ensenada, Mexico. Rapid Manufacturing is not a household name. But it is a critical Tier-1 supplier to SpaceX (Falcon & Starship programs), Anduril, Northrop Grumman, Rocket Lab, L3Harris, Collins Aerospace (RTX), and Millennium Space (Boeing). It builds the wire harnesses, electro-mechanical assemblies, and box builds that go inside rockets, missiles, and satellites. The exposed material includes: <redacted>> ITAR-controlled engineering drawings and manufacturing processes for Falcon 9/Heavy, Starship, and Draco propulsion systems — RTD soldering acceptance criteria, visual inspection standards, cable thermocouple assemblies, and production master plans. 26 ITAR customer quoting accounts including SpaceX, Anduril, Northrop Grumman, Rocket Lab, L3Harris, Collins Aerospace, and Millennium Space — the complete defense/space revenue architecture. <redacted> <redacted> 600–1,200 employee records spanning US (SSN, bank accounts, payroll, I-9/immigration) and Mexico (RFC, CURP, IMSS, bank accounts, nóminas) with data from 2019 through August 2026. <redacted> Attorney-client privileged materials — settlement agreements, severance terms, internal investigation files, and a recorded termination meeting (audio). |
||||||
| Ransomware | FrenchCreek Production View Details | akira | Manufacturing / Engineering | pending | ||
|
FrenchCreek Production Published: 2026-10-30 FrenchCreek Fall Safety specializes in manufacturing high-quality fall protection equipment. Th | | eir product range includes harnesses, lanyards, self-retracting lifelines, and comprehensive sa | | fety systems for various applications, including confined space entry and rescue. | | | | We will upload 40gb of corporate data soon. Detailed employee information (phones numbers, addr | | esses and so on), contracts and agreements, client and partners information, financials, specif | | ications and so on. | | Terminal status: pending |
||||||
| Ransomware | Phillips Nizer View Details | ransomhouse | Other | pending | ||
|
Phillips Nizer https://www.phillipsnizer.com/ 137 Status: EVIDENCE Action: Encrypted Action date: 11/10/2026 |
||||||
| Ransomware | Hudson & Hudson Sign Products View Details | akira | Manufacturing / Engineering | pending | ||
|
Hudson & Hudson Sign Products Published: 2026-10-30 Hudson & Hudson is a second generation sign company, located in the heart of Houston. From its | | humble beginnings, in the back of a garage near downtown Houston, it has grown to one of the pr | | emier sign manufacturing facilities in the US. | | | | We will upload 14gb of corporate data soon. Employee information, contracts and agreements, cli | | ent information, financials, drawings and so on. | | Terminal status: pending |
||||||
| Ransomware | Service One Transportation View Details | akira | Transportation / Travel / Logistics | pending | ||
|
Service One Transportation Published: 2026-10-30 Service One Transportation, Inc. is a trucking and logistics company based in Wisconsin, offeri | | ng a wide range of transportation services including Over the Road, Regional, and Refrigerated | | truckload services. | | | | We will upload 5gb of corporate data soon. Detailed employee information (passports, SSN number | | s, tax ID numbers and much more), lots of contracts and agreements, client information, detaile | | d financials, NDA and so on. | | Terminal status: pending |
||||||
| Ransomware | GRUPO CIOSA, SAPI DE CV View Details | qilin | Services | pending | ||
|
GRUPO CIOSA, SAPI DE CV Business Services COMPANY URL ZOOM INFO OCT 30, 2026 0 photos Time till publication: 96h : 36m Learn More |
||||||
| Ransomware | CP Manufacturing, Inc. View Details | aurora | Manufacturing / Engineering | pending | ||
|
CP Manufacturing, Inc. CP Manufacturing, Inc. — a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since the 1970s under the CP Group / CPG Sorting Technologies brand, with subsidiaries MSS Inc. (Nashville, TN), IMS Electronics Recycling, IMS Logistics, IMS Recycling Services, Material Sales, HMM, and UK partner Recycleye. The dataset includes complete server mirrors from HR, finance, engineering, legal, operations, and sales infrastructure, capturing the company's entire digital footprint: Sage/Epicor ERP accounting system for 8 entities (CPM, MSS, HMM, IMSR, IMSRE, MSIRE, CPGH, CP Global) with consolidated P&L showing $109.1M revenue, $10.2M net income, and $12.1M EBITDA for FY2024, plus multi-year budgets (2021–2024), daily cash reports, and AR/AP data ~340 Social Security Numbers with full identity packages (name, DOB, health coverage status, premium amounts, tax withholdings) across 4 entities via ACA 1095-C filings (2016–2022), biweekly payroll registers, 401(k) participant records, 10-year salary histories (2013–2023), and benefits administration across 5 carriers (Anthem, Blue Shield, SIMNSA, UNUM, Western Dental) <redacted> <redacted> Truist bank account details — routing number 053101121 and account number 1180009812409 for CP Manufacturing LLC, plus ACH payment batch files spanning August 2025 through August 2026 277+ GB of proprietary engineering IP — 22G of AutoCAD Electrical MRF designs with proprietary component catalogs (1.2G), 195G of Artec 3D scanner data for manufactured equipment, 38G of CNC laser fabrication data (Amada LCG3015 AJ / FabriWin), PCB board designs (5 boards), SolidWorks Electrical templates, and Epicor ERP Bill of Materials with proprietary part numbers 60+ customer contracts and 30+ NDAs with Republic Services, Waste Management, Recycleye/Nestlé, Cal-Waste, Balcones, Wasatch, and international partners, plus Declaration Partners acquisition due diligence documents, competitor proposals (BHS, Machinex, MISTRAL), and a complete project green list Privileged legal materials — active litigation subpoena (Hans Ouellet), Coastal Resources MWS settlement agreement with UCC1 financing statements, separation/termination documents for named employees, restrictive covenant cease-and-desist letters, PIIAAs (invention assignment agreements), wage garnishment orders, and corporate equity documents 200+ named job applicant resumes, 51 employee headshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents manufacturer 33 |
||||||
| Ransomware | CommTank View Details | thegentlemen | IT | pending | ||
|
CommTank commtank.com CommTank Inc is a US storage tank contractor founded in 1997 in Winchester, Massachusetts, specializing in installation, removal, inspection and maintenance of underground and aboveground storage tanks across New England and the Mid-Atlantic. With 50 to 100 employees and estimated revenue of 10 to 25 million dollars, it serves government facilities, hospitals, schools and industrial clients across 8 states. Its services cover the full tank lifecycle including UST and AST installation, leak testing, cathodic protection, soil remediation and emergency spill response. Led by founder Rick Connolly, it holds EPA, MA DEP, CT DEEP and NFPA certifications and runs its own field crews without subcontracting core work. It also provides Phase I and II environmental site assessments and SPCC compliance planning. The company has built a niche in high-barrier tank services requiring specialized licensing and regulatory expertise. Activates in 238:07:04 |
||||||
| Ransomware | Ined View Details | thegentlemen | IT | pending | ||
|
Ined ined.fr INED is France's National Institute for Demographic Studies, founded in 1945 in Paris as a public scientific research institution under CNRS patronage and the world's largest demographic research center with 200 staff and 120 researchers. It holds a unique mandate as France's national population statistics authority, producing the annual Démographie de la France report and the monthly Population and Sociétés bulletin. Its 8 research departments cover mortality, fertility, migration, social stratification and global health, publishing over 300 scientific papers per year. INED maintains 20 plus demographic databases including the global Human Fertility and Human Mortality Databases with Max Planck and UC Berkeley. Led by Director Cyrille Schott, it partners with the UN, WHO and 50 plus international institutions while offering open access to all publications. Activates in 238:10:29 |
||||||
| Ransomware | Five Star Jewelers 🇺🇸 View Details | pear | Manufacturing / Engineering | pending | ||
|
Five Star Jewelers 🇺🇸 ANNOUNCED Premier jewelry store located in Miami, FL Data Volume: 1.7 Tb Show more Date Company Notified: 10/28/2026 🔔 Site: fivestarjewelers.com 🔗 Industry: Jewelry & Watch Retail Location: USA 📍 Revenue: $28M Details 🔓 |
||||||
| Ransomware | lyserp.com View Details | dragonforce | IT | leaked | ||
|
WWW.LYSERP.COM lyserp.com www.lyserp.com 2F.-1, No. 46, Sec. 1, Chang'an E. Rd., Zhongshan Dist., Taipei City, 104, Taiwan 45.53 GB ERP systems and automation: Inventory management, finance and accounting, logistics, production management and supply chain. Publicated files: click here to go |
||||||
| Ransomware | Minutes Quick Services View Details | N0n | Services | pending | ||
|
RETAIL AND FACILITY SERVICES · UNITED ARAB EMIRATES Minutes Quick Services NOT PAID — EXPOSED 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 h 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 m 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 s until leak Details |
||||||
| Ransomware | Susman Godfrey LLP View Details | SilentRansomGroup | Finance / Legal / Insurance | pending | ||
|
Susman Godfrey L.L.P. is a premier litigation firm recognized for its exceptional courtroom talent and… |
||||||
| Ransomware | TDS Telecommunications LLC. View Details | Global Secret Group | Telecommunications | pending | ||
|
FUCKED TDS Telecommunications LLC. 🇺🇸 United States $1.30 Billion Country: Madison, Wisconsin, US | Website: tdstelecom.com | Revenue: $1.30 Billion | Industry: Telecommunications, Internet Service Providers | Employees: 3,000-5,000 | Properties: 27.4 GB (79,679 Files, 1,943 Folders) 79,679 FILES CHECKED 27.4 GB DATA ANALYZED |
||||||
| Ransomware | Friendly Senior Living View Details | Shiba | Healthcare / Pharma | pending | ||
|
Hospitals & Physicians Clinics |
||||||
| Ransomware | corp-smart.com View Details | everstake | IT | leaked | ||
|
Company profile corp-smart.com USA / Corporate Compliance CORPSMART provides vendor management services tailored for small business owners, entrepreneurs, Fortune 500 companies, lenders, and law firms across the nation. Their platform focuses on due diligence and verification needs, offering no subscription fees and complete invoicing for services rendered. With a commitment to excellent customer service and advanced technology, CORPSMART aims to streamline business formation and operational processes. They offer various business packages to assist clients in starting and managing their businesses efficiently. Download: http://qg6l6zdr322ebyws6w3g5ukxbe4mawx62oa4aysnkdsrkf7gjcr4maid.onion/corpsmart Leaked size: 417.94 Gb https://corp-smart.com/ Release: 2026-10-26 12:00 UTC |
||||||
| Ransomware | rolly.io View Details | Whitearmor | IT | pending | ||
|
rolly.io 10/29/2026 05:51 PM Rolly.io is an on-chain crypto casino on Arbitrum featuring a public bankroll, transparent bonus formulas (rakeback, weekly bonuses), and active player reward systems. We hold 1,364 rolly.gg player PII records with linked on-chain wallets, 430K+ ledger transactions, 11,442 wallet addresses, 155 whale payout maps, 299 deanonymized staff/CTO emails, and 313 internal chat messages. We aren't asking for any ransom, we just thought it was funny to hack a casino that made a joke about Gamdom. 2 FILE(S) 15 |
||||||
| Ransomware | 🇺🇸 USClaims View Details | direwolf | Finance / Legal / Insurance | leaked | ||
|
🇺🇸 USClaims Published: 2026-10-29 Company: USClaims Website: https://usclaims.com/ Industry: Finance GDPR: Yes Data Size: 30GB Read More → 15d 16h |
||||||
| Ransomware | PROTERIAL View Details | qilin | Manufacturing / Engineering | pending | ||
|
PROTERIAL Building Materials COMPANY URL ZOOM INFO OCT 29, 2026 0 photos Time till publication: 196h : 15m Learn More |
||||||
| Ransomware | CITY OF COLUMBIA, SC View Details | qilin | Public Sector | pending | ||
|
CITY OF COLUMBIA, SC Government COMPANY URL ZOOM INFO OCT 29, 2026 0 photos Learn More |
||||||
| Ransomware | INTAX, Inc. View Details | rhysida | Finance / Legal / Insurance | pending | ||
|
INTAX, Inc. INTAX, Inc. Complete file server of INTAX, Inc. (Lexington, KY, USA) - a property-tax compliance and bill-pay firm. 892,867 files, 1.27 TB Client tax returns: 649,905 PDFs. Clients include AARP, ADT, Pilot Travel Centers, Wendy's, Valvoline, Zions, Raytheon (~100 companies). Client accounting: 100+ QuickBooks company files � full ledgers, banks, payroll. Money: bank account + routing numbers, $910,000 wire form, signed W-9, proof the firm opens dedicated accounts and pays client taxes (~$73.6M/yr moved). Identity data: US passports of the owner and employees, driver license, birth certificate, W-2s with SSNs, IRS filings 2025�2026, medical insurance cards. 60+ cleartext password files: US government tax portals + the firm's own QuickBooks. 24,000+ emails, personal employee folders, lawsuit records, owner exit/sale planning. With just 7 days on the clock, seize the opportunity to bid on exclusive, unique, and impressive data. Open your wallets and be ready to buy exclusive data. We sell only to one hand, no reselling, you will be the only owner! Price: 11 BTC Send Complete file server of INTAX, Inc. (Lexington, KY, USA) - a property-tax compliance and bill-pay firm. 892,867 files, 1.27 TB Client tax returns: 649,905 PDFs. Clients include AARP, ADT, Pilot Travel Centers, Wendy's, Valvoline, Zions, Raytheon (~100 companies). Client accounting: 100+ QuickBooks company files � full ledgers, banks, payroll. Money: bank account + routing numbers, $910,000 wire form, signed W-9, proof the firm opens dedicated accounts and pays client taxes (~$73.6M/yr moved). Identity data: US passports of the owner and employees, driver license, birth certificate, W-2s with SSNs, IRS filings 2025�2026, medical insurance cards. 60+ cleartext password files: US government tax portals + the firm's own QuickBooks. 24,000+ emails, personal employee folders, lawsuit records, owner exit/sale planning. |
||||||
| Ransomware | National Association of Credit Management View Details | Booba Project | Services | pending | ||
|
Oct 29, 2026, 12:57 National Association of Credit Management Financial Services Website: www.nacm.org Stolen data: 38 GB. |
||||||
| Ransomware | LifeFone View Details | Booba Project | Services | pending | ||
|
Oct 29, 2026, 12:51 LifeFone Medical Equipment Manufacturing Website: www.lifefone.com Stolen data: Less than 1 GB. |
||||||
| Ransomware | Terrebonne Parish Government View Details | Booba Project | Services | pending | ||
|
Oct 29, 2026, 13:12 Terrebonne Parish Government Government Relations Services Website: www.tpcg.org Stolen data: 105 GB. |
||||||
| Ransomware | Circleville Police Department View Details | Booba Project | Public Sector | pending | ||
|
Oct 29, 2026, 13:09 Circleville Police Department Government Administration Website: www.circlevillepolice.com Stolen data: 15 GB. |
||||||
| Ransomware | Programs for Parents, Inc. View Details | Booba Project | Education | pending | ||
|
Oct 29, 2026, 13:07 Programs for Parents, Inc. Non-profit Organizations Website: www.programsforparents.org Stolen data: 95 GB. |
||||||
| Ransomware | South Weber City View Details | Booba Project | Public Sector | pending | ||
|
Oct 29, 2026, 13:04 South Weber City Government Administration Website: www.southwebercity.gov Stolen data: 295 GB. |
||||||
| Ransomware | California School Boards Association View Details | Booba Project | Services | pending | ||
|
Oct 29, 2026, 13:00 California School Boards Association Education Management Website: www.csba.org Stolen data: 80 GB. |
||||||
| Ransomware | Marie Kruses Skole View Details | thegentlemen | Education | pending | ||
|
Marie Kruses Skole mks.dk Marie Kruses Skole is a private school in Farum, Denmark, founded in 1869 by education pioneer Marie Kruse, offering a full track from kindergarten through gymnasium STX to about 1100 students. It is the only free primary school and the only gymnasium in Furesø Kommune, employing 107 people and led by rektor Carsten Gade. The school runs 8 gymnasium study lines including Biotek, Mat-Fys, sports, business, super languages and music, plus unique programs like Kruse Elitesport and diving. Revenue in 2024 reached 109.5 million Danish kroner with a 1.4 million profit, backed by 68 percent state subsidy and a stable surplus for 5 straight years. Tuition is 2190 kroner per month with financial aid available, and it attracts over 1100 students on its waiting list. Its key strengths are 157 years of heritage, top national exam results and free admissions independent of municipal student distribution rules. Activates in 169:35:29 |
||||||
| Ransomware | Surexport View Details | thegentlemen | Transportation / Travel / Logistics | pending | ||
|
Surexport surexport.es Surexport is the largest independent berry producer in Europe, founded in 1994 in Huelva, Spain, growing strawberries, raspberries, blueberries and blackberries across Spain, Portugal, the Netherlands, Morocco and Kenya. Owned since 2020 by Alantra Private Equity, the group is valued at around 600 million euros with revenue approaching 400 million and over 2500 employees. Its competitive edge is exclusive berry varieties developed with US genetics partner Plant Sciences since 2007, sold under the Doñarosa, Berry Sensations and Fruhi brands. Major clients include Tesco, Lidl, Mercadona and Sainsbury's, with 80 percent of revenue from exports to Northern Europe. The company invested 200 million euros in acquisitions and secured a 250 million euro loan in 2025. Activates in 170:02:49 |
||||||
| Ransomware | Northwest Micro Systems View Details | thegentlemen | IT | pending | ||
|
Northwest Micro Systems nwmicro.com Northwest Micro Systems, formally Northwest Micro Inc., is a private IT services and software company founded in 1998 in Atlanta, Georgia, serving small businesses with managed IT, cloud backup, email, CRM and custom .NET development. Led by founder and owner Leo Zhadanovsky, it has around 11 employees and steady revenue of roughly 5 million dollars. Its unique model offers affordable one-time products like the One 2 One email server and Speed To Success CRM for about 100 dollars with lifetime updates and support. The company positions itself as the anti-corporate alternative to Oracle and Microsoft, focused on keeping small business clients for life. Core strengths are 28 years of market presence, a loyal SMB client base and a low-overhead operation. Its tech stack centers on Microsoft 365, SQL Server and .NET with a mix of SaaS and on-premise tools. Activates in 170:01:06 |
||||||
| Ransomware | MAA Group Consulting Engineers View Details | emperador | Manufacturing / Engineering | pending | ||
|
MAA Group Consulting Engineers 2d 23h 45m 17s MAA Group Consulting Engineers is a leading regional engineering and consulting service provider founded in 1975, with over 1,000 professionals operating across East and Southeast Asia. The group provides comprehensive integrated solutions—ranging from conceptual planning and engineering design to project management—across infrastructure, buildings, land resources, environment, and information technology. Renowned for its industry-leading expertise in Building Information Modeling (BIM), MAA Group has successfully completed major high-speed rail, mass rapid transit (MRT), and tunnel projects throughout Taipei, Hong Kong, Bangkok, and Singapore. The client data and internal documents you’ve leaked go well beyond what you’ve seen here. We have taken several terabytes of files—this is just a small sample. In fact, we have obtained sensitive documents pertaining to virtually all of your clients. Warning: You have 3 days to enter negotiations. Once the deadline passes, the negotiation window will be permanently closed and all exfiltrated data will be published. Additionally, the encrypted data will be rendered completely unrecoverable. sample files: https://mega.nz/file/CgxxTKCZ#PzGFlZt67HDF2oLsP4jn_W_QdrquHJpNAfVm-jXGYxo https://mega.nz/file/2ogzwAyY#r8F31SFQTqyW6bzQA-e8HNzgw-rEW_gn7fhwY5TAByg https://mega.nz/file/2gIRXQwY#-4IzU70FjqvSYotZoaJuod_H2P5sXoGTvsja9Patte0 https://mega.nz/file/alQU0JaT#2GgaPb1Z-z1xB1FfAd_NohXbfkbfRfhfZ_OwtxPd0cc Oct 29, 2026 9:08 AM 18.2 KB 23 |
||||||
| Ransomware | ClaimTek Systems View Details | rhysida | Services | pending | ||
|
ClaimTek Systems ClaimTek Systems ClaimTek Systems specializes in preparing individuals for successful entry into the medical billing and practice management business with a comprehensive training and support system. They offer a range of scalable products and services, including state-of-the-art billing software and marketing tools, targeted towards aspiring entrepreneurs in the healthcare industry. With just 7 days on the clock, seize the opportunity to bid on exclusive, unique, and impressive data. Open your wallets and be ready to buy exclusive data. We sell only to one hand, no reselling, you will be the only owner! Price: 5 BTC Send With a proven business model backed by decades of experience, ClaimTek caters to various medical and dental specialties across the U.S. by providing ongoing training and high client acquisition potential, enabling licensees to thrive in a rapidly growing market. |
||||||
| Ransomware | Epic Health View Details | thegentlemen | Services | pending | ||
|
Epic Health epichealth.com.au Epic Health is an Australian medical group founded in 2001 in Melbourne, running multiple brands including Epic Medical general practice, Epic Youth Health, Epic Skin Health and Alevia Medical Weight Loss. Its fastest-growing division is Alevia, offering doctor-supervised weight loss programs using GLP-1 medications like Mounjaro and Ozempic across four clinics plus telehealth Australia-wide. The group combines traditional family medicine with niche verticals like dermatology, adolescent health and aesthetic medicine under one team-based model. Led by medical director Dr. Neeraj Mahindra, it serves patients nationally through Medicare-compatible telehealth with instant rebates and a dedicated digital app. Key strengths are 24 years of operation, a debt-free financial position and multi-brand diversification into high-demand health niches. The company is well positioned in Australia's booming medical weight loss and telehealth markets. Activates in 178:05:51 |
||||||
| Ransomware | Incomelec View Details | thegentlemen | IT | pending | ||
|
Incomelec incomelec.com Incomelec is a Colombian company founded in 2006 in Bogota, the Latin American leader in pedestrian, vehicle and passenger access control including turnstiles and automated barriers. With 52 employees and operations in 14 countries, it has installed equipment in over 20 airports, 90 parking facilities and 250 buildings, handling more than 85 percent of Colombia's toll booth systems. Its flagship product is BIOMIG, an automated migration control system used at El Dorado and Medellin airports with iris scanning and passport verification. It is the exclusive regional partner of Automatic Systems from the Bollore Group and the only distributor worldwide that locally assembles TR-490 and TR-491 turnstile lines. Led by CEO Kris De Sutter Gomez, it serves Metro de Medellin, TransMilenio and BD Bacata, Colombia's tallest building. Activates in 178:04:04 |
||||||
| Ransomware | StarImage View Details | thegentlemen | Services | pending | ||
|
StarImage starimagesouthlake.com StarImage Dental Boutique & Oral Surgery is a premium dental practice in Southlake, Texas, opened in January 2021 as the second location of StarImage Dentistry founded by Dr. James Green in Wichita Falls over 25 years ago. Led by Dr. Green, oral surgeon Dr. Dustin Van Tassell and Dr. Susan Millner, it offers cosmetic and reconstructive dentistry, dental implants, full mouth rehabilitation, oral surgery, TMJ treatment and sleep apnea care all under one roof. The clinic is one of the most technologically advanced dental offices in the US, equipped with Planmeca ProMax 3D CBCT imaging, MLS laser therapy, VELscope cancer screening and CT-guided implant surgery. Both lead doctors hold Fellow status at the Las Vegas Institute for Advanced Dental Studies, and the practice maintains a perfect 5.0 rating across 50 plus reviews. Its dedicated TMJ and Sleep Center provides a high-margin specialization in jaw disorders and obstructive sleep apnea. Activates in 178:27:40 |
||||||
| Ransomware | SoftwareOne View Details | thegentlemen | IT | pending | ||
|
SoftwareOne softwareone.com SoftwareOne Turkiye is the Turkish arm of SoftwareOne Holding AG, a Swiss-listed global software and cloud solutions provider that merged with Crayon to form a 13,000 person company operating in over 70 countries. Based in Ataşehir, Istanbul and active since 2019, it employs around 40 to 60 people and works with 100 percent of Turkey's top 50 companies and 80 percent of the top 500. Services span software licensing advisory for Microsoft, IBM and Oracle, cloud migration across Azure, AWS and Google Cloud, DevSecOps, cybersecurity, AI and FinOps. In December 2024 SoftwareOne AG acquired full ownership of the Turkish entity, approved by the Turkish Competition Authority. Led by Managing Director Doğa Pekdemir and CFO Hakan Keriş, it has delivered projects for Turkish Airlines, TAV Airports, Coca-Cola and Vakıf Katılım. Key strengths are its unmatched enterprise market coverage in Turkey and full access to the global SoftwareOne and Crayon ecosystem. Activates in 178:13:56 |
||||||
| Ransomware | Belmont Resorts View Details | thegentlemen | Hospitality / Food & Beverage / Tourism | pending | ||
|
Belmont Resorts belmontresorts.com Belmont Resorts is a small boutique hotel in McLeodganj, Dharamshala, Himachal Pradesh, operating as Hotel Satovari Pride on the Strawberry Hills with panoramic views of the snow-capped Dhauladhar mountains. It has just 14 rooms across four categories from Deluxe to Premium Gold corner suites with private balconies, mini-fridges and sunrise-sunset views from both sides. Positioned as a value-for-money alternative next to ITC Hotels and Lemon Tree, it offers a pure vegetarian restaurant with Jain cuisine, 24/7 power backup, fast WiFi and free parking. The hotel caters to relaxation, spiritual tourism, trekking and long-term workation stays with tour packages to Khajjiar and Dalhousie. Activates in 178:43:37 |
||||||
| Ransomware | Acodafe View Details | thegentlemen | IT | pending | ||
|
Acodafe acodafe.com Acodafe S.L. is a Spanish IT services company founded in 2009 in Mataró, Barcelona, providing managed IT, network installation, cybersecurity, cloud backups, data center hosting and GDPR consulting for small and medium businesses. Led by sole administrator Adrián Conde Kuller, it has just 4 employees and annual revenue between 500,000 and 1.5 million euro. The company grew sales by 22.8 percent in 2024 and climbed over 12,000 positions in Spain's national business ranking. Its services cover the full IT lifecycle for SMEs and industrial clients from system maintenance and installation to 24/7 emergency support. In 2019 it expanded into data protection consulting, a growing regulatory niche in Spain. Key strengths are 17 years of market presence, a lean and profitable operation and a diversified service portfolio tailored to small business needs. Activates in 178:56:59 |
||||||
| Ransomware | Betopia Group View Details | thegentlemen | Other | pending | ||
|
Betopia Group betopiagroup.com Betopia Group Betopia Group is a Bangladeshi tech holding based in Dhaka, formally created in July 2025 by consolidating 22 business units including Bdcalling IT, Softvence, Sparktech, JVAI and Zencore, claiming 5,000 employees and 36 million dollars in annual revenue. Founded by Muhammad Monir Hossain, who went from freelancing on oDesk in 2013 to launching Bdcalling IT in 2017 with just 500,000 taka and 7 people, the group now serves clients in over 80 countries with 80 to 90 percent of business from the United States. Its units span software development, AI, cloud infrastructure via ZenexCloud, Odoo ERP implementation, renewable energy through PulseGrid and IT education. In July 2026 the group unveiled Vision 2030, planning to double its workforce and build Betopia City, an AI-powered smart tech hub in Bangladesh. The company is embroiled in a major scandal, with Fiverr suspending around 300 accounts linked to Betopia for coordinated marketplace manipulation. Activates in 178:55:05 |
||||||
| Ransomware | Rexville Radiology View Details | thegentlemen | Healthcare / Pharma | pending | ||
|
Rexville Radiology rexvilleradiology.com Rexville Radiology is a diagnostic imaging center in Bayamón, Puerto Rico, founded by neuro-radiology specialist Dr. Ramón Pizarro Fornaris and accredited by the American College of Radiology. It offers a full range of imaging services under one roof including open MRI, 64-slice CT scanning, 3D digital mammography with tomosynthesis, ultrasound, DEXA bone density and digital X-ray. The center stands out for its open MRI design that accommodates claustrophobic patients and its advanced breast imaging with 3D tomosynthesis for early cancer detection. Led by Dr. Pizarro, a recognized neuro-radiologist, it provides personalized care with fast turnaround times and early opening hours from 6 AM six days a week. Activates in 179:53:24 |
||||||
| Ransomware | SuperScale View Details | thegentlemen | IT | pending | ||
|
SuperScale superscale.com SuperScale is a Slovak game growth platform founded in 2015 in Bratislava, helping over 500 mobile game studios scale their games through AI-powered performance marketing, data science and monetization optimization. With around 60 employees and 1000 plus games grown, it offers both a SaaS platform and managed growth services acting as an outsourced UA and live ops team. Its core technology includes predictive LTV and retention models, automated user acquisition campaigns and AI creative production across Facebook, Google, TikTok and Apple Search Ads. Led by CEO Ivan Trancik, the company specializes in hybrid monetization strategies combining ads, in-app purchases and subscriptions for casual, midcore and hypercasual titles. Activates in 179:50:23 |
||||||
| Ransomware | Mann Group View Details | thegentlemen | Services | pending | ||
|
Mann Group manngroup.com.au Mann Group is an Australian multi-disciplinary engineering and construction company founded in 1992 in Sydney, operating through eight subsidiaries including Mechtronic Engineering, Mann Fab, Mann Energy, Mann Enviro and Mann Solar. With 350 plus employees, it is Australia's leading provider of thermal, electrical, environmental and sanitary engineering solutions. The group covers pipe fabrication, structural steel, pressure vessels, industrial boilers, HVAC, waste-to-energy and renewable energy systems. Its headquarters and central workshop are located in Milperra, Sydney, with a financial year ending in June. Activates in 179:35:27 |
||||||
| Ransomware | Bi Link View Details | thegentlemen | IT | pending | ||
|
Bi Link bi-link.com Revenue $380.2 Million Bi-Link US precision manufacturer founded in 1961 (HQ Bloomingdale, IL), making metal stampings and injection-molded plastics with in-house tooling and assembly for automotive, medical, wireless, and consumer electronics OEMs. It owns plants in Shanghai, Nanning, Mexico (Juárez), and a new Vietnam site (2024), offering prototype-to-production under one roof. Revenue isn't reliably public — broker estimates range wildly from ~$10M to $50M, but a TaiPEX filing suggests ~$5M+/month after consolidation. The critical development: in October 2025 family owners agreed to sell the company to Taiwan-listed Donpon Precision, closed and consolidated from Jan 2026. Despite the site still claiming "family-owned", control is now Donpon's, and long-time CEO Tom Harris has exited. Certifications (ISO 9001, ISO 13485, IATF 16949) support real OEM work (e.g. Teleflex via a 3D Systems case) Activates in 208:05:15 |
||||||
| Ransomware | Cherry Bekaert View Details | thegentlemen | Services | pending | ||
|
Cherry Bekaert cbh.com Revenue $446.7 Million CBH Group Australia's largest grain cooperative, founded in 1933 in Perth and owned by over 3,700 farmer shareholders across Western Australia. It operates the world's largest grain export network with around 200 receival sites, 20 million tons of storage capacity and four export terminals at Kwinana, Albany, Geraldton and Esperance. Each year it handles approximately 20 million tons of grain and exports 15 to 17 million tons, mainly wheat, barley and canola to Asia, the Middle East and beyond. Led by CEO Brendan White, it has invested over 2 billion dollars in infrastructure modernization including rail upgrades, solar energy and digital platforms like the CBH App. The cooperative is financially strong with a BBB credit rating and returns profits to farmers through patronage dividends. It operates its own rail fleet of 360 wagons, runs quality testing laboratories at every site and is expanding port capacity to load Panamax vessels at Kwinana and Albany. Activates in 219:25:54 |
||||||
| Ransomware | SK Capital Partners View Details | thegentlemen | Finance / Legal / Insurance | pending | ||
|
SK Capital Partners skcapitalpartners.com Revenue $63 Million SK Capital Partners is a New York-based private equity firm founded in 2007 as a spinoff from Apax Partners, managing approximately 10 billion dollars across 60 plus investments in specialty chemicals, pharmaceuticals and ingredients. Led by co-founder Barry Siadat, it targets control investments in companies with 100 million to 1 billion dollars in revenue and has built platforms like Advansix, Sartomer and Cura Particles through buy-and-build strategies. Its portfolio companies employ over 12,000 people and generate more than 5 billion dollars in annual revenue. Recent deals include the July 2026 acquisition of Lorama Group and the October 2026 purchase of Vesuvius Americas refractory assets. Key strengths are deep sector expertise in real-economy industrial businesses and proven IPO and trade sale exits. Activates in 219:22:32 |
||||||
| Ransomware | Angeles Contractor View Details | thegentlemen | Construction / Real Estate | pending | ||
|
Angeles Contractor angelescontractor.com Angeles Contractor Inc is a general contractor founded in 1998 in City of Industry, California, with 8 CSLB license categories and 63 to 95 employees delivering construction projects across Southern California. It has completed 259 public works projects worth over 197 million dollars for 47 government agencies, led by San Bernardino County with 73 contracts. Its portfolio includes the Rose Bowl renovation, UCLA dining hall, CGV Cinemas, Paakuma K-8 School and a 14.5 million dollar Big Bear Airport terminal rebuild. Led by President Young W. Kang and VP Alex Cho, it maintains over 90 percent repeat business across education, healthcare, commercial and residential sectors. It holds multiple JOC contracts with San Bernardino, San Mateo and Sourcewell worth up to 30 million dollars per year. The company is a certified Minority Business Enterprise with active expansion into Northern California through offices in San Jose and Salinas. Activates in 219:14:24 |
||||||
| Ransomware | First Dental View Details | thegentlemen | Healthcare / Pharma | pending | ||
|
First Dental myfirstdental.com First Dental Care is a dental practice network in Massachusetts founded by Dr. Farshad Ghobbeh, who opened his first clinic in Medford in 2008 and expanded to Somerville in 2012 and four more locations including Arlington, Watertown, Acton and Bedford. With over 20,000 patients and 18 years of experience, it offers general and cosmetic dentistry, dental implants, Invisalign, emergency care and smile makeovers across six clinics. Its Smile Now Pay Later model with Klarna makes implants available from 58 dollars per month and whitening at 149 dollars instead of 500. The team is multilingual speaking English, Spanish, Portuguese, Russian, Chinese and Persian to serve diverse Massachusetts communities. It accepts over 15 insurance plans including Aetna, Blue Cross Blue Shield, Delta Dental and MassHealth. Key strengths are 18 years of community trust, multi-location accessibility, affordable payment plans and Dr. Ghobbeh's personal commitment to quality oral health. Activates in 217:20:16 |
||||||
| Ransomware | GIO Dental View Details | thegentlemen | Healthcare / Pharma | pending | ||
|
GIO Dental giodentalsl.com GIO Dental SL is a modern dental clinic and laboratory founded by Nigerian dentist Dr. Gift Nwachukwu Obiorah in Freetown, Sierra Leone, with an additional location in Koidu, Kono District. It is Sierra Leone's first fully integrated dental provider offering clinical treatment, a prosthetics laboratory, dental technology education and equipment repair under one brand. Services span general and cosmetic dentistry, orthodontics, oral surgery, custom prosthetics fabrication and community oral health programs. Led by founder Dr. Gio, the company trains local dental technicians and runs outreach campaigns to make premium dental care accessible across the country. Its vertical model combining treatment, manufacturing and education is unique in the Sierra Leonean healthcare market. It also provides equipment repair and supply services to other dental clinics in the region. Activates in 223:40:34 |
||||||
| Ransomware | susannecerda.com View Details | lockbit5 | Services | pending | ||
|
susannecerda.com 14d 21h 23m 21s Die Unternehmensgruppe Susanne Cerdá bietet nicht nur Dienstleistungen im Bereich Unternehmensgründu... 28 Oct, 2026, 21:47 UTC 59 |
||||||
| Ransomware | xspringcapital.com View Details | lockbit5 | Finance / Legal / Insurance | pending | ||
|
xspringcapital.com 14d 21h 18m 11s XSpring Capital Public Company Limited is a company that operates in the business of investing in va... 28 Oct, 2026, 21:42 UTC 62 |
||||||
| Ransomware | Santiam Hospital & Clinics View Details | anubis | Healthcare / Pharma | pending | ||
|
Santiam Hospital & Clinics "Santiam Hospital & Clinics operates as a community-focused healthcare organization dedicated to delivering comprehensive medical services within a regional setting. The organization functions with a mission centered on providing high-quality care to individuals experiencing illness, injury, or disability, while simultaneously promoting the overall health and well-being of the surrounding population through education, outreach, and supportive medical programs" The healthcare system is built around a simple idea: helping people get better. At least, that is how the industry presents itself. In the United States, however, healthcare is also a massive business. And like any other business, it has its own problems and contradictions. Those become particularly visible when you examine the internal documents of healthcare organizations, where the polished public image gives way to the realities of how the business actually operates. One of the first things that usually stands out is the behavior of the staff and the compromises healthcare organizations may have to make when dealing with their employees. In the United States, working in healthcare is undoubtedly a prestigious profession, much like being a lawyer or a financial professional. Despite this, complaints about unprofessional behavior by doctors and other medical staff are fairly common across healthcare institutions. Of course, it would be unfair to compare doctors directly with lawyers. Their work is far more demanding and stressful, which can make them more prone to harshness and cynicism than people in many other professions. That, however, does not excuse such behavior. While examining the data, we found that Santiam Hospital & Clinics has its own problems with staff being rude or disrespectful toward patients, along with other allegations that raise questions about the professionalism of their conduct. Another serious problem facing healthcare organizations in the United States is the imbalance between how attractive the healthcare sector is as a target for hacking groups and how much these organizations actually do to protect themselves from such threats. Sometimes this comes down to cost-cutting, sometimes to a lack of professionalism among the employees responsible for security, and sometimes to the company’s overall security policies. The leaked data suggests that the company did take some security measures. We found various HIPAA guidelines, and there are also indications that the company responded when employees attempted to gain unauthorized access to information. At the same time, however, the data also contains passwords stored in plain text. We will leave the conclusions to you. So, what exactly was affected by this breach, aside from the company’s reputation? The leaked data includes various internal operational documents, including financial records, as well as employee information collected into convenient databases that could easily be used for spam campaigns. But we saved the most serious part of the leak for last. The data includes a massive database of patient medical records, containing nearly 30,000 files with extremely sensitive information, including names, dates of birth, addresses, phone numbers, diagnoses, and other medical details. Many of these people are already elderly, which puts them at greater risk of falling victim to phone scams. With this much personal and medical information in their hands, scammers could potentially gain their trust far more easily and manipulate them. As you can imagine, this breach could affect a large number of people, with consequences ranging from relatively minor to extremely serious. And the only party that can prevent that from happening is the company itself. If the company failed to respond in time, the data has already been exfiltrated, and its infrastructure has been compromised, there is still a second chance: negotiate with those responsible for the breach. But if this article appears publicly, it means the company chose to do nothing. At that point, it is only fair that the company should be held accountable to those affected. |
||||||
| Ransomware | Lowenstein Sandler LLP View Details | SilentRansomGroup | Finance / Legal / Insurance | leaked | ||
|
Founded in 1961 and headquartered in New York City, New York, Lowenstein Sandler is a national law fir… |
||||||
| Ransomware | Cyrious Software View Details | pear | IT | pending | ||
|
Cyrious Software 🇺🇸 ANNOUNCED Specialized business management software designed for sign, graphics, and print providers Data Volume: 3.5 Tb Show more Date Company Notified: 10/26/2026 🔔 Site: cyrious.com 🔗 Industry: Enterprise Resource Planning (ERP), Software Location: USA 📍 Revenue: <$5M Details 🔓 |
||||||
| Ransomware | Fortrex View Details | Wallstreet | IT | pending | ||
|
Fortrex Fortrex is the premier provider of food safety solutions in North America, offering comprehensive sanitation services, chemical products and intervention solutions for food processing facilities. Our team of skilled food sanitors, microbiologists, technical experts and engineers are committed to keeping USDA, FDA, and CFIA processing facilities clean, safe, and audit-ready DATABASE +5 MORE ENDS IN 07h 21m 37s Fortrex ✕ ENDS IN 07h 21m 36s DATABASE DOCUMENTS EMAILS FINANCIAL PERSONAL DATA MEDIA Fortrex is the premier provider of food safety solutions in North America, offering comprehensive sanitation services, chemical products and intervention solutions for food processing facilities. Our team of skilled food sanitors, microbiologists, technical experts and engineers are committed to keeping USDA, FDA, and CFIA processing facilities clean, safe, and audit-ready |
||||||
| Ransomware | Morrison Foerster View Details | SilentRansomGroup | Finance / Legal / Insurance | leaked | ||
|
Morrison Foerster is a leading international law firm with a presence in the United States, Asia, and … |
||||||
| Ransomware | A&B Lab View Details | genesis | IT | pending | ||
|
A&B Lab 2026-10-27·1min warning Coming soon 3d 4h 30m 57s About company: VeroScience is a biotechnology company that provides laboratory services for the Environmental and Industrial Hygiene field. Website: https://ablabs.com Revenue: $16 Million Description: - 200 Gb of data available. - Environmental Data. - Lab reports. - Pharmaceutical Data. - Customers Data. - Financial Data. - Data taken from company file servers. Tags LabUSA ←Owens Distributors |
||||||
| Ransomware | Noelker and Hull View Details | rhysida | null | pending | ||
|
Noelker and Hull Noelker and Hull NHA-FULL � US ARCHITECTURE FIRM (est. 1971) - HEALTHCARE / SENIOR-LIVING DESIGN - COMPLETE INTERNAL FILE-SERVER - FRESH TO 2026 No credentials in this lot (excluded by decision). Focus: identity and family packages, payroll SQL, tax/bank pipes, litigation, seals & signatures, 26 GB mail. SUBJECT - Noelker and Hull Associates, Inc. (Chambersburg PA, est. 1971) + KAPC legacy (Frederick MD). ~41 employees, 9 shareholders. Revenue $8.56M -> $7.01M. ~990 delivered projects: Penn State Health, WellSpan, Meritus, UPMC, Select Medical, Tower Health, Holland America, Hershey, Gettysburg College - incl. hospital & crisis-center plans. KEY NUMBERS: 990 project folders | 30+ healthcare clients | 26 GB mail | 60+ SSN rows | exec passports+DL x4 | edge 2026. INVENTORY - raw files from the firm's servers, values masked, full set on close. [1] IDENTITY & FAMILY PACKAGES - FULLZ - ~80-100 PA residents Passports+DL of the President and VP (x4); W-2 with full SSN (SSA TY2024), pay stubs (VP, YTD ~$116K, 07/2026), 401(k) x2, I-9; background checks - MD Criminal History + FBI Identity History + fingerprints. 'Kennedy': SSN, mortgage 03/2024, 3 child birth certs, child medical. 'Karpowicz' (employee's mother, dementia): Medicare MBI, bank accounts, Morgan Stanley check $86,650.68, returns 2022-2025, IRS POA. 'Hoffman': UPMC/WellSpan medical, custody. + ~62 resumes, phones ~45. Below PA AG >500 bar - but every name is a plaintiff (Dittman) + a victim. [2] PAYROLL - Ajera ERP SQL backups, 140 tables SSN x61+ | Salary x459 | W-2 x1151 | 1099 x991 | DirectDeposit x176 | BankAccount x1503. Full compensation/bank anatomy for payroll-diversion. [3] TAX & FINANCE - Form 1120 x4 yrs, QuickBooks (KAPC); PPP $802,480 + $803,347.83 forgiven; IRS audit TY2020 closed no-change; BlueRidge acct 104729, positive-pay exports. Fraud precedent: forged checks $45.5K (2022) + fraudulent SBA EIDL #7672918108 in the firm's name - scheme proven. [4] LITIGATION - ACTIVE: PJ Dick v. Lehigh No. 2026-C-2439, $13M+, 'design errors, omissions' against NHA � internal assessments, stop-work, delay claims. Fleet Landing demand ~$1.41M. Vincentian 'DO NOT MOVE OR DELETE' hold; SpiriTrust privileged folder; CIA subpoena response. [5] FORGERY KIT - signatures of 14 employees + architect seals (MD/PA); ~140 Certificates of Insurance; license keys (Autodesk/Adobe) bonus. [6] COMMERCIAL SECRETS - fee pipeline 2010-2026 (5.00-8.50%, markup 10%, Hourly Rates, Past-Due notices); Meritus master specs; CAD Standards 37.7 GB; aborted Olsen merger docs. [7] MAIL - ~26 GB, into 2026. Indexed sample: 6,195 msgs - 401(k)/ERISA/PHI. Rest as-is, unprobed. [+] AS-IS - encrypted browser stores x3 (OWA/banks/PayPal/USCIS listed), Credential Manager x91, .pfx, ACT! DB. Unproven, not in the price. FRESHNESS - A�live: pay stubs 07/2026, COI to 05/2027, case 2026-C-2439, mail. B�recent: Ajera, pipeline, returns 2022-25, litigation. C�archival (KAPC 2009-14): W-2, background - SSN/biometrics don't expire. BUYERS - elder-fraud/fullz (1); BEC/payroll-diversion (2+3); competitor AEC (6); PA/MD plaintiff bar (1+4); contractor scams (5). DEAL - mockup only. 1. Sample: masked docs, table-list screenshot, watermarked seal, SHA-256 manifest. 2. Escrow, multi-sig; whole lot or per-section split. 3. Dead-drop container, hash check vs. manifest, proof-of-deletion on exclusive. DISCLAIMER - HYPOTHETICAL RED-TEAM SCENARIO from a confirmed forensic inventory (60 findings). Nothing is offered for sale. Credential rotation = UNVERIFIED assumption (artifacts dated 2026). '~' = enumerated; unparsed = unproven. With just 7 days on the clock, seize the opportunity to bid on exclusive, unique, and impressive data. Open your wallets and be ready to buy exclusive data. We sell only to one hand, no reselling, you will be the only owner! Price: 20 BTC Send NHA-FULL � US ARCHITECTURE FIRM (est. 1971) - HEALTHCARE / SENIOR-LIVING DESIGN - COMPLETE INTERNAL FILE-SERVER - FRESH TO 2026 No credentials in this lot (excluded by decision). Focus: identity and family packages, payroll SQL, tax/bank pipes, litigation, seals & signatures, 26 GB mail. SUBJECT - Noelker and Hull Associates, Inc. (Chambersburg PA, est. 1971) + KAPC legacy (Frederick MD). ~41 employees, 9 shareholders. Revenue $8.56M -> $7.01M. ~990 delivered projects: Penn State Health, WellSpan, Meritus, UPMC, Select Medical, Tower Health, Holland America, Hershey, Gettysburg College - incl. hospital & crisis-center plans. KEY NUMBERS: 990 project folders | 30+ healthcare clients | 26 GB mail | 60+ SSN rows | exec passports+DL x4 | edge 2026. INVENTORY - raw files from the firm's servers, values masked, full set on close. [1] IDENTITY & FAMILY PACKAGES - FULLZ - ~80-100 PA residents Passports+DL of the President and VP (x4); W-2 with full SSN (SSA TY2024), pay stubs (VP, YTD ~$116K, 07/2026), 401(k) x2, I-9; background checks - MD Criminal History + FBI Identity History + fingerprints. 'Kennedy': SSN, mortgage 03/2024, 3 child birth certs, child medical. 'Karpowicz' (employee's mother, dementia): Medicare MBI, bank accounts, Morgan Stanley check $86,650.68, returns 2022-2025, IRS POA. 'Hoffman': UPMC/WellSpan medical, custody. + ~62 resumes, phones ~45. Below PA AG >500 bar - but every name is a plaintiff (Dittman) + a victim. [2] PAYROLL - Ajera ERP SQL backups, 140 tables SSN x61+ | Salary x459 | W-2 x1151 | 1099 x991 | DirectDeposit x176 | BankAccount x1503. Full compensation/bank anatomy for payroll-diversion. [3] TAX & FINANCE - Form 1120 x4 yrs, QuickBooks (KAPC); PPP $802,480 + $803,347.83 forgiven; IRS audit TY2020 closed no-change; BlueRidge acct 104729, positive-pay exports. Fraud precedent: forged checks $45.5K (2022) + fraudulent SBA EIDL #7672918108 in the firm's name - scheme proven. [4] LITIGATION - ACTIVE: PJ Dick v. Lehigh No. 2026-C-2439, $13M+, 'design errors, omissions' against NHA � internal assessments, stop-work, delay claims. Fleet Landing demand ~$1.41M. Vincentian 'DO NOT MOVE OR DELETE' hold; SpiriTrust privileged folder; CIA subpoena response. [5] FORGERY KIT - signatures of 14 employees + architect seals (MD/PA); ~140 Certificates of Insurance; license keys (Autodesk/Adobe) bonus. [6] COMMERCIAL SECRETS - fee pipeline 2010-2026 (5.00-8.50%, markup 10%, Hourly Rates, Past-Due notices); Meritus master specs; CAD Standards 37.7 GB; aborted Olsen merger docs. [7] MAIL - ~26 GB, into 2026. Indexed sample: 6,195 msgs - 401(k)/ERISA/PHI. Rest as-is, unprobed. [+] AS-IS - encrypted browser stores x3 (OWA/banks/PayPal/USCIS listed), Credential Manager x91, .pfx, ACT! DB. Unproven, not in the price. FRESHNESS - A�live: pay stubs 07/2026, COI to 05/2027, case 2026-C-2439, mail. B�recent: Ajera, pipeline, returns 2022-25, litigation. C�archival (KAPC 2009-14): W-2, background - SSN/biometrics don't expire. BUYERS - elder-fraud/fullz (1); BEC/payroll-diversion (2+3); competitor AEC (6); PA/MD plaintiff bar (1+4); contractor scams (5). DEAL - mockup only. 1. Sample: masked docs, table-list screenshot, watermarked seal, SHA-256 manifest. 2. Escrow, multi-sig; whole lot or per-section split. 3. Dead-drop container, hash check vs. manifest, proof-of-deletion on exclusive. DISCLAIMER - HYPOTHETICAL RED-TEAM SCENARIO from a confirmed forensic inventory (60 findings). Nothing is offered for sale. Credential rotation = UNVERIFIED assumption (artifacts dated 2026). '~' = enumerated; unparsed = unproven. |
||||||
| Ransomware | Roberts Consulting Services View Details | akira | Services | pending | ||
|
Roberts Consulting Services Published: 2026-10-28 RCS is a full-service engineering firm specializing in Construction Materials Testing, Construc | | tion Engineering and Inspection (CEI), and QA/QC services, founded in 2013. With over 60 years | | of combined FDOT experience, RCS provides high-quality professional services to clients in road | | way and bridge construction projects throughout Central Florida. | | | | We will upload 28gb of corporate data soon. Detailed employee information (passport scans, DLs, | | SSN), contracts and agreements, client information, financials, NDA, etc. | | Terminal status: pending |
||||||
| Ransomware | Trulife View Details | akira | Telecommunications | pending | ||
|
Trulife Published: 2026-10-28 Trulife is an internationally recognized company with over 60 years of experience in the develo | | pment and manufacture of specialized healthcare and consumer products. Their extensive product | | range includes breastcare solutions, orthotics, lower limb prosthetics, walking aids, and press | | ure care products. | | | | We will upload 68gb of corporate data soon. Detailed employee information (passport scans, DLs, | | medical certs, birth certs), contracts and agreements, confidential files (employee violations | | , terminations and so on), financials, NDA, etc. | | Terminal status: pending |
||||||
| Ransomware | EWM Group View Details | aurora | Services | pending | ||
|
EWM Group EWM Group — the parent group behind Bonmarché, Edinburgh Woollen Mill, and Peacocks, three of the UK's best-known value fashion chains. The exposed material includes: 503,878 loyalty programme member records — full name, home address, date of birth, phone, mobile, email, loyalty card number, and transaction history spanning 2000–2026. ~21,000 employee records — salary, National Insurance number (via P11D), bank sort code and account number (WAGESTRANSFER database), home address, emergency contacts, maternity/paternity data, sickness absence, accident reports with injury details. <redacted> <redacted> <redacted> <redacted> <redacted> 100+ GB of Outlook PST email archives — complete email histories for named staff members spanning years of business operations. 313+ SQL Server database backups across 122 unique databases — the entire digital brain of the retail operation. 83 GB of e-commerce transaction data — every online order from January 2021 to August 2026. fashion 40 |
||||||
| Ransomware | Broadstreet HEOR View Details | rhysida | IT | pending | ||
|
Broadstreet HEOR Broadstreet HEOR Broadstreet Health Economics & Outcomes Research (Vancouver, Canada) is a consultancy running health-economics and real-world-evidence studies for Pfizer, Bayer, Boehringer Ingelheim, Takeda, Madrigal, Alexion/AstraZeneca, Bristol-Myers Squibb, Sarepta, Taysha, Biohaven and others. - US patient PHI: Medicaid (11.3M rows: DOB, race, diagnoses, NDC drugs, payments), Veradigm/Allscripts EHR tables, licensed IBM MarketScan / Optum Clinformatics data. - Production Alexiondb (PostgreSQL): schema + claims rows. - Live SQL Server credentials of client Taysha Gene Therapies (production DB irsf-nhs-prod-db, public IP). - Confidential pharma materials: unpublished Boehringer Ingelheim slides, Takeda manuscript, Bayer CEM models, Madrigal reports, Pfizer/VA emails. - Staff personal documents. With just 7 days on the clock, seize the opportunity to bid on exclusive, unique, and impressive data. Open your wallets and be ready to buy exclusive data. We sell only to one hand, no reselling, you will be the only owner! Price: 9 BTC Send Broadstreet Health Economics & Outcomes Research (Vancouver, Canada) is a consultancy running health-economics and real-world-evidence studies for Pfizer, Bayer, Boehringer Ingelheim, Takeda, Madrigal, Alexion/AstraZeneca, Bristol-Myers Squibb, Sarepta, Taysha, Biohaven and others. - US patient PHI: Medicaid (11.3M rows: DOB, race, diagnoses, NDC drugs, payments), Veradigm/Allscripts EHR tables, licensed IBM MarketScan / Optum Clinformatics data. - Production Alexiondb (PostgreSQL): schema + claims rows. - Live SQL Server credentials of client Taysha Gene Therapies (production DB irsf-nhs-prod-db, public IP). - Confidential pharma materials: unpublished Boehringer Ingelheim slides, Takeda manuscript, Bayer CEM models, Madrigal reports, Pfizer/VA emails. - Staff personal documents. |
||||||
| Ransomware | Ryder View Details | Whitearmor | Transportation / Travel / Logistics | leaked | ||
|
Ryder is a Fortune 500 transportation and supply chain management company providing fleet management, dedicated transportation, and logistics solutions. What we hold: 18.75M rows, 328 CSVs, consumer names, phones, emails, driver/associate PII, cleartext API keys, LMS credentials, FTP/telematics configs from RyderView, RLM, EFT. Our demand is only $20M in BTC... i swear. Samples can be found below. Emails with instructions will be sent to Ryder shortly, and no we did not buy access from 'shadowbyte' or whatever the niggas name is on pwnforums. Contact if you do not receive the instructions: Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67 Email: [email protected] |
||||||
| Ransomware | Coast 2 Coast View Details | play | IT | pending | ||
|
United States |
||||||
| Ransomware | VPC Builders View Details | play | Construction / Real Estate | pending | ||
|
United States |
||||||
| Ransomware | UPDATE: UNM View Details | BYOD | Education | pending | ||
|
UPDATE: UNM We are offering the decryption key for the remaining of locked devices for free (ONLY for the hospital sector) we did not know that it was running machines related to assisting patients in real-time, (we would keep it locked if it was appointments, patient information + research data only), we are still going to keep the data, but we will provide the decryption key for the hospital sector only. Feel free to contact us on Session. To any patient that was affected, please provide us proof, and we will pay you up to $2500 each for the inconvenience. We are sorry once again. We have morals and we have a heart, we are not villains, but we will still continue to hold companies responsible for bad security leading to the compromise of any customer data. That's the whole reason why we came about and we plan to keep it that way. PSA Updated on 2026-10-27 |
||||||
| Ransomware | Hygiena View Details | play | Healthcare / Pharma | pending | ||
|
United States |
||||||
| Ransomware | Money Concepts Capital View Details | play | Finance / Legal / Insurance | pending | ||
|
United States |
||||||
| Ransomware | MicroSearch View Details | play | IT | pending | ||
|
United States |
||||||
| Ransomware | BASS Medical Group View Details | Booba Project | Healthcare / Pharma | pending | ||
|
Oct 27, 2026, 13:00 BASS Medical Group Medical Practices Website: www.bassmedicalgroup.com Stolen data: 100 GB. |
||||||
| Ransomware | Hudson River Museum View Details | Booba Project | NGOs / Associations | pending | ||
|
Oct 27, 2026, 13:03 Hudson River Museum Museums, Historical Sites, and Zoos Website: www.hrm.org Stolen data: 115 GB. |
||||||
| Ransomware | Horizon Eye Specialists & LASIK Center View Details | Booba Project | Manufacturing / Engineering | pending | ||
|
Oct 27, 2026, 13:16 Horizon Eye Specialists & LASIK Center Medical Practices Website: www.horizonlaservision.com Stolen data: 121 GB. |
||||||
| Ransomware | City of Big Spring View Details | Booba Project | Retail / E-commerce | pending | ||
|
Oct 27, 2026, 12:37 City of Big Spring Government Administration Website: www.mybigspring.com Stolen data: 151 GB. |
||||||
| Ransomware | KING FAMILY MEDICAL View Details | Booba Project | Healthcare / Pharma | pending | ||
|
Oct 27, 2026, 12:41 KING FAMILY MEDICAL Hospitals and Health Care Website: www.kingfamilymedical.net Stolen data: 67 GB. |
||||||
| Ransomware | Charter Township of Commerce View Details | Booba Project | Retail / E-commerce | pending | ||
|
Oct 27, 2026, 12:44 Charter Township of Commerce Government Administration Website: www.commercetwp.com Stolen data: 155 GB. |
||||||
| Ransomware | HAWAII LAW ENFORCEMENT FEDRAL CREDIT UNION View Details | qilin | Manufacturing / Engineering | pending | ||
|
HAWAII LAW ENFORCEMENT FEDRAL CREDIT UNION Finance COMPANY URL ZOOM INFO OCT 27, 2026 0 photos Time till publication: 199h : 40m Learn More |
||||||
| Ransomware | NUVISTA FEDERAL CREDIT UNION View Details | qilin | Finance / Legal / Insurance | pending | ||
|
NUVISTA FEDERAL CREDIT UNION Banking COMPANY URL ZOOM INFO OCT 27, 2026 0 photos Time till publication: 199h : 40m Learn More |
||||||
| Ransomware | MediSolution View Details | everest | Healthcare / Pharma | pending | ||
|
[AI generated] MediSolution was a Canadian software company based in Montreal, Quebec, specializing in enterprise resource planning and management software solutions for the public sector, including healthcare, local government, and education institutions. It provided financial management, human resources, and payroll software systems. The company operated in the enterprise software and information technology industry before being acquired and integrated into Harris Computer Systems. |
||||||
| Ransomware | gamblinglore View Details | Whitearmor | Services | pending | ||
|
gamblinglore 10/27/2026 01:35 AM Verification for Gamblinglore.com VIEW POST 448 |
||||||
| Ransomware | zzq-test View Details | ULose | IT | pending | ||
|
Country: c | Status: Sale |
||||||
| Ransomware | Oneonta City School District View Details | Shiba | IT | pending | ||
|
SHI BA Oneonta City School District Education Morgan White Group Insurance Friendly Senior Living Hospitals & Physicians Clinics IT Foods Industries Manufacturing Overview Gallery Explorer Files publish in 9d 01h 09m 11s Oneonta City School District Education Oneonta City School District is dedicated to empowering students with the knowledge, skills, and values necessary for success in a changing world. The district offers a supportive environment where a caring staff encourages personal responsibility, civic participation, and a lifelong love of learning. Their programs and events are designed for students, families, and the community, fostering engagement and educational growth. The district serves the local community, focusing on preparing students for future careers and active citizenship https://www.oneontacsd.org |
||||||
| Ransomware | Morrison Cohen View Details | SilentRansomGroup | Finance / Legal / Insurance | leaked | ||
|
[AI generated] Morrison Cohen LLP is a United States law firm headquartered in New York City. It provides legal services across practice areas including corporate law, litigation, bankruptcy and restructuring, real estate, intellectual property, and white-collar defense. The firm serves corporate clients, financial institutions, and individuals. It operates within the legal services industry, primarily serving businesses in the New York metropolitan area and nationally. |
||||||
| Ransomware | University of New Mexico View Details | BYOD | Education | pending | ||
|
University of New Mexico 36,000 Machines Compromised, both AD forests (Main Campus + Hospital Sector(with appointments, patient information + research)) With GPOs, Two Oracle databases, every student + employee PII (including SSNs), research information, entire Entra Tenant, Oracle HR + Payroll + Banner Student Records, Internal Emails, Cerner EHR rosters. This is your entire network and infrastructure compromised, the entire university COMPLETELY. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours. PSAUpdated on 2026-10-26 |
||||||
| Ransomware | Afflelou View Details | emperador | Services | pending | ||
|
Afflelou 7d 23h 36m 14s Alain Afflelou is a leading European franchisor of optical and hearing aid products, founded in France in 1972. The company operates a robust network of over 1,500 stores across 20 countries, driven by aggressive marketing innovations like its famous "Tchin-Tchin" multi-pair offer. Key Figures • Network Revenue: €1.13 billion (TTC) for the fiscal year ending July 2025 • Corporate Revenue: €447.3 million (excl. taxes), generated from corporate stores and franchise fees. • Core Segments: Eyewear and audioprosthetics. Oct 26, 2026 8:14 PM 11.1 MB 35 |
||||||
| Ransomware | Gamdom View Details | Whitearmor | IT | leaked | ||
|
Gamdom 10/26/2026 04:45 PM Gamdom is an unregulated crypto casino and sportsbook founded in 2016. It recently suffered a hot-wallet breach, with founder Felix Romer reporting over $3 million in losses, though on-chain analysts estimate the damage closer to $4.2 million. We hold Gamdom's full user database, 15,420,003 accounts with 146 columns, with Gamdom's total combined profit value exceeding $1 billion. The way in was something internal, a machine account that was already sitting in their admin side (Metawin). Issued years back, nobody ever rotated it. Never meant to leave the building. It had admin reach, and everything after that was their own stuff anyway, their control panels and secret stores. About your provably fair: what it promised and what it delivered were never the same thing. We demand $15,000,000 in BTC. Emails with instructions will be sent to you directly. To verify, a sample can be found below. 11d 14:44:22 UNTIL RELEASE 1 FILE(S) 544 |
||||||
| Ransomware | Beasley Allen Law Firm View Details | Falcon | Finance / Legal / Insurance | pending | ||
|
Plaintiff litigation law firm - Our 214 GB extraction includes executed agreements, final settlement participation agreements, court-signed stipulations regarding net worth, privileged internal memos, detailed litigation strategies, rough trial transcripts, comprehensive staff FAQs and much more. |
||||||
| Ransomware | SMITH FEDDELER & SMITH View Details | qilin | Finance / Legal / Insurance | pending | ||
|
SMITH FEDDELER & SMITH Law Firms & Legal Services COMPANY URL ZOOM INFO OCT 26, 2026 0 photos Learn More |
||||||
| Ransomware | Delta Electric Power Association View Details | qilin | Services | leaked | ||
|
Back Delta Electric Power Association |
||||||
| Ransomware | Premier Medical Group View Details | qilin | Healthcare / Pharma | leaked | ||
|
N/A |
||||||
| Ransomware | Zachary Confections View Details | qilin | Manufacturing / Engineering | leaked | ||
|
Back Zachary Confections Food & Beverage Company url May 19, 2026 15415 0 photos Publicated Watch data |
||||||
| Ransomware | THOMAS JORDAN, P.A View Details | qilin | Finance / Legal / Insurance | leaked | ||
|
N/A |
||||||
| Ransomware | Five Star Sheets View Details | qilin | Manufacturing / Engineering | leaked | ||
|
N/A |
||||||
| Ransomware | Mountain Rheumatology View Details | qilin | Healthcare / Pharma | leaked | ||
|
N/A |
||||||
| Ransomware | Natural Energy Laboratory of Hawaii Authority View Details | qilin | Public Sector | leaked | ||
|
Back Natural Energy Laboratory of Hawaii Authority |
||||||