Ransomware Group intelligence
BrainCipher
ActiveTrack BrainCipher with 100 published victims and 49 known leak locations in a single intelligence view.
DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
BrainCipher is tracked by Dark Eye as a ransomware group with 100 published victims.
United States is currently the most targeted country in this dataset.
49 known leak locations are currently associated with this group.
Leak Status Distribution
100
- Leaked 45 45.0%
- Pending 52 52.0%
- Deleted 3 3.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (49)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 4h ago | vkvsgl7lhipjirmz6j5ubp3w3bwvxgcdbpi3fsbqngfynetqtw4w5hyd.onion |
| Leak location 49 | Onion service | Down checked 4h ago | zztabnlnggxpbeiyvpievqtxl6te4amttfobwusmgo2l3hcabfpcgyad.onion |
| Leak location 48 | Onion service | Down checked 4h ago | tbspzruwy3qhjg3p3pyl2f6zqa5x4tcn6gpask4rvb672hgjzlkrnpyd.onion |
| Leak location 47 | Onion service | Down checked 4h ago | sjyd42k47guvygfiyfdv5dmllytpgdzr3ioiqsuytz726is6ss67imid.onion |
| Leak location 46 | Onion service | Down checked 4h ago | pcmhzcqprvp3zyiez5tphrjzjqiydaod76idk6k66usmdyvdcb72l4id.onion |
| Leak location 45 | Onion service | Down checked 4h ago | ovw7qnv4pfmah7lae42rynehsrr2v2cvrq6g3uf2nhhpasbr2u3xrwid.onion |
| Leak location 43 | Onion service | Down checked 4h ago | mwf23uiaoiyyg3jgh3diwpmcn2qgg6i7kadivsbyncycz2mw2nyuwtqd.onion |
| Leak location 44 | Onion service | Down checked 4h ago | n2yygycbmyeguft4n6tfokfkbvgkyzchlyn4jbpg7har6goel4eskfqd.onion |
| Leak location 40 | Onion service | Down checked 4h ago | jxyphr6ipbeeusnf64sbqubpl57n7cvao3ef3zi5p64lqaggs6nydgid.onion |
| Leak location 41 | Onion service | Down checked 4h ago | keoz3i32ljvnfrsxo3cwolzv2mhkvbi5y5wlwtn5ngbswu4qzdnjvrqd.onion |
| Leak location 42 | Onion service | Down checked 4h ago | ljex7r7uv7j6lek6jef7o2pqw23ojauom5q7nhgyxjhoebwilbc3eqqd.onion |
| Leak location 39 | Onion service | Down checked 4h ago | ipkxv2cccgrklc2tktzpqe6nm76mikdmvqqgauklvqvv5rl4ib3nmryd.onion |
| Leak location 38 | Onion service | Down checked 4h ago | h4zmek6bf3lebauy7dtyxmui67n6ro5t4zdrooddpw3kyfktg2nmhgid.onion |
| Leak location 34 | Onion service | Down checked 4h ago | ao63qafejccvb2fdfn5vb7dxaeptxnyroktllnxhzh4ru3df26wivoid.onion |
| Leak location 37 | Onion service | Down checked 4h ago | gkwqyosd75hpu72jfalfo7xepdebl5p5rhorbxzfwswyg53jckg7wxad.onion |
| Leak location 36 | Onion service | Down checked 4h ago | cjuogz6kvmozrapbw6cgf3ovfxgxe2fy3ajlgxm53w3xjve5x5sichyd.onion |
| Leak location 33 | Onion service | Down checked 4h ago | 7ept6u4u3bczpq5sagycyd2mapv47ctkehzzc3ybugs7vtjl23i52gid.onion |
| Leak location 35 | Onion service | Down checked 4h ago | bosgzz4d53h6tqoaidjogoiq4jaxszll6q2puiepchxhxxop6dxoozqd.onion |
| Leak location 32 | Onion service | Down checked 4h ago | zijgmuqjzb6dc7pofxhtaiz36qqyg35lhutybmzaz6whzgei2casjgid.onion |
| Leak location 30 | Onion service | Down checked 4h ago | x3nb7qcygpem2j5xzstyzdtgzofzkwkx4eko3ug4r73i6uhcgvyffjyd.onion |
| Leak location 31 | Onion service | Down checked 4h ago | zfpcqpp6kfe5wl72b2cfb5qbp4kkzi4oj6if4r226idr3efvtocgd6id.onion |
| Leak location 29 | Onion service | Down checked 4h ago | urvvoj7wlkh476p2tgntzez3nuke2ylfdkekpnkajxfz43o7jqkokeyd.onion |
| Leak location 27 | Onion service | Down checked 4h ago | rpoeu7zimfpwxbwmjmjyprqaprtvkj3ykfczhbc4x3voydopffn337id.onion |
| Leak location 28 | Onion service | Down checked 4h ago | upiqcdsgvh6v5owteasjzyxbj2xug574dj4fctthehd7zjq7wmuxbwqd.onion |
| Leak location 26 | Onion service | Down checked 4h ago | psv5ejeysrncs6ltu4pkjyazswcmw3atmxi4eg44a6luudin5ufchcqd.onion |
| Leak location 25 | Onion service | Down checked 4h ago | nxetaioe4eelwhdwagi3ikv6ee6tttwvnqikalgkrslz7bwvuwqzdeqd.onion |
| Leak location 20 | Onion service | Down checked 4h ago | inzk64xcf3sm6qzkehmio7piwhkslhnab3rlviniyg7alcgsxvy7kcyd.onion |
| Leak location 24 | Onion service | Down checked 4h ago | mejouwrwja4iou7myj34rqi7cixyhn7vsa42e2n2dhxzc5mmkiaki3yd.onion |
| Leak location 23 | Onion service | Down checked 4h ago | ltxnzpfvmr3c3rcbw5x4q2ejy6fmbp7kc35oql3gooyydg7belfmnyad.onion |
| Leak location 22 | Onion service | Down checked 4h ago | lhsxojxowgtwdqlryl72d2v5cpgqv3sll4d47yyqdisersigvfbl5uid.onion |
| Leak location 21 | Onion service | Down checked 4h ago | kxlw35vctxgbmwtz6474xwtkm2kywifg4efs6ixmvgdgbgi2uaurenid.onion |
| Leak location 19 | Onion service | Down checked 4h ago | hv5on6i3k3g24qtu3ac6vtbrcgl2imz3sasakhfslhbnbqbcri73mqad.onion |
| Leak location 18 | Onion service | Down checked 4h ago | guonv3yxlb5t7mptz2cwxsqrsnmsocrufkz3z3nvuv45h66submxe4yd.onion |
| Leak location 17 | Onion service | Down checked 4h ago | emdnfl2fv32jhssxcbxlo6dzg2at4d7qbw2md6inz63qzdfgyln5cwyd.onion |
| Leak location 16 | Onion service | Down checked 4h ago | dkeqrg3fxrijolpgpbsmk6eacare4bg5awrracxdiestki2onyz5bnyd.onion |
| Leak location 14 | Onion service | Down checked 4h ago | aj3ocrawf43r6u5miezvmzh5sjtuv2rx6na3tm26fao3laobu5unfhyd.onion |
| Leak location 15 | Onion service | Down checked 4h ago | alkkq3vhb7epl3jh6qzutj2vyyfdgvs2nukw5hwdsijl5la3jrinrryd.onion |
| Leak location 13 | Onion service | Down checked 4h ago | a4vbe7yp4kluped6khuhpr5nmzshiimx2jt5j22ozriiq6ngsm3fcpyd.onion |
| Leak location 12 | Onion service | Down checked 4h ago | 7n4vqiaqxenaqy4t47ayqvurbmg6vfg2ir7iobwjazwizjncwyt7jhad.onion |
| Leak location 11 | Onion service | Down checked 4h ago | 6ft2dfh26wm3w44orpjcgviutvfp25ez2iyh5ego5egvfmifrws7vvqd.onion |
| Leak location 10 | Onion service | Down checked 4h ago | 3frnhzcnlkjnw5q3tm6elzizinm2k3bmrtf2xwqjzpcxzeqwn2tv6wyd.onion |
| Leak location 9 | Onion service | Down checked 4h ago | 3fg2gfwrdks46drwvejpgpak5klrflclsjjo35dxtqfk3poeez6oezad.onion |
| Leak location 8 | Onion service | Down checked 4h ago | p6wmotxzvg34tdmpwm4beqgrcyp5iys43snkccsahnw74la3k3xx6pad.onion |
| Leak location 7 | Onion service | Down checked 4h ago | cuuhrxbg52c5agytmtjpwfu7mrs4xtaitc4mukkiy2kqdxeqbcmuhaid.onion |
| Leak location 6 | Onion service | Down checked 4h ago | 77nrxelcwh47yikvpaz2rvtsten4sen2elybo5r5st6wlxsbitv255qd.onion |
| Leak location 5 | Onion service | Down checked 4h ago | 4ldgw2wuidqu5ef3rzx4byonf3y7rdnh43jiw2z4sbtjiwic6gkov7yd.onion |
| Leak location 4 | Onion service | Down checked 4h ago | zktnif5vckhmz5tyrukp5bamatbfhkxjnb23rspsanyzywcrx3bvtqad.onion |
| Leak location 3 | Onion service | Down checked 4h ago | brain4zoadgr6clxecixffvxjsw43cflyprnpfeak72nfh664kqqriyd.onion |
| Leak location 2 | Onion service | Down checked 4h ago | mybmtbgd7aprdnw2ekxht5qap5daam2wch25coqerrq2zdioanob34ad.onion |
Top Activity Sectors (13)
- Services 17
- IT 15
- Not identified 15
- Manufacturing / Engineering 14
- Finance / Legal / Insurance 10
- Healthcare / Pharma 8
- Communication / Marketing 7
- Retail / E-commerce 3
- Construction / Real Estate 3
- Hospitality / Food & Beverage / Tourism 2
- Transportation / Travel / Logistics 2
- Agriculture / Food 1
- Public Sector 1
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue BrainCipher, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v20.0. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: BrainCipher executes PowerShell scripts to stage payloads, disable defenses, and propagate across compromised systems.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: BrainCipher leverages registry run keys and startup folders to maintain persistence after reboots.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: BrainCipher disables antivirus tools and security processes to prevent detection and ensure encryption completes successfully.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1027.016 Junk Code Insertion Stealth
What they do: BrainCipher inserts junk code into its malware binaries to evade static analysis and signature-based detection.
What that means: Adversaries may use junk code / dead code to obfuscate a malware’s functionality.
-
T1070.004 File Deletion Stealth
What they do: BrainCipher deletes Volume Shadow Copies and backup files via system commands to eliminate recovery options.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1135 Network Share Discovery Discovery
What they do: BrainCipher uses network share discovery to locate victim file shares and identify high-value directories for encryption.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: BrainCipher moves laterally through SMB/Windows Admin Shares to compromise additional hosts within the network.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1567.002 Exfiltration to Cloud Storage Exfiltration
What they do: BrainCipher exfiltrates stolen data over C2 channels before deployment to enable double extortion.
What that means: Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel.
-
T1486 Data Encrypted for Impact Impact
What they do: BrainCipher encrypts victim files using its ransomware payload, targeting business documents and backups to maximize impact.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: BrainCipher calls system recovery inhibitors to block restore processes and harden its impact phase.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Ransom Notes (3)
▼The note this group leaves on a compromised machine. Click a filename to read it.
[id].README_2.txt
ATTENTION: YOUR DATA HAS BEEN LOCKED! Dear representatives of the company, We are compelled to inform you that your information system has been successfully breached by our group. All your data, including financial reports, customer databases, internal documentation, correspondence, and even backup files, have been encrypted using state-of-the-art cryptographic algorithms. Without our unique decryption key, restoring access to this data is impossible. We strongly advise against attempting to resolve this issue independently, as any such attempts may result in irreversible data loss. Your company is now in an extremely vulnerable position. Disclosure or destruction of the data may lead to serious consequences, including: Financial losses: Leakage of confidential information can result in lawsuits, fines, and compensation claims. Moreover, your competitors may exploit this data to gain an unfair advantage in the market. Reputational damage: Loss of trust from clients and partners may negatively impact your business. News of the cyberattack will spread quickly, and your brand may become associated with unreliability and an inability to protect data. Legal consequences: Violation of data protection laws (e.g., GDPR, CCPA, or other regional regulations) may lead to significant fines and audits by regulatory authorities. This may also necessitate a mandatory restructuring of your data processing procedures. Operational issues: Lack of access to critical systems may lead to a complete halt in your company�s operations. This could affect not only you but also your customers, partners, and suppliers. ADDITIONAL RISKS AND THREATS: Legal consequences for company leadership: If we decide to disclose the data, it may lead to criminal charges against your company�s management for negligence and violation of data protection rules. You personally may be held accountable, and your career could be at risk. Media and public opinion: We collaborate with various media outlets and are ready to provide them with part of your data for public exposure. Information about your inability to protect data will become public knowledge, leading to further reputational damage. Mass lawsuits from clients and partners: We have prepared anonymous instructions for your clients and partners affected by the leak. These instructions will help them file class-action lawsuits against your company. We understand the importance of the stolen information for your organization. Currently, all data is in our possession. We are ready to discuss the terms of transferring the decryption key and guarantee the complete deletion of all copied data after receiving payment. We also offer an alternative: ignoring this message will either lead to the public leakage of data through our special portal on the Dark Web or result in its complete destruction. *** Brain Cipher Leaks: http://vkvsgl7lhipjirmz6j5ubp3w3bwvxgcdbpi3fsbqngfynetqtw4w5hyd.onion/ *** PLEASE NOTE: Any contact with law enforcement agencies or data recovery companies will be considered a violation of our agreement. If we discover that you are collaborating with third parties, this will immediately lead to the following actions: Key deletion: all decryption keys will be irrevocably deleted. Public leak: We will release part of the data on public resources to ensure maximum reputational damage. Increased recovery cost: The price for decryption will double, and the timeframe for providing the key will be extended. Legal consequences for leadership: We will pass information about your collaboration with law enforcement to the media and regulatory bodies, leading to additional legal and reputational problems. We understand that this is a difficult situation and would like to offer you a way to resolve it. For this purpose, we provide clear instructions for data recovery. Please note that time is limited. If we do not receive a response within 72 hours, the cost of recovery will increase, and the likelihood of data preservation will significantly decrease. WHY YOU SHOULD CONTACT US DIRECTLY? Guaranteed security: We guarantee the complete deletion of all data copies after receiving payment. Professional approach: We use cutting-edge technologies to ensure reliable encryption and decryption of data. Confidentiality: Our communication channels are fully anonymous, and we do not share information with third parties. Flexibility: We are ready to discuss payment terms and provide additional time for decision-making. No risks: Cooperation with us is the only way to avoid a public data leak and irreversible data loss. Protection from legal consequences: We will ensure that information about your company does not fall into the hands of law enforcement or the media if you meet our requirements. ======================================== To contact us, follow these instructions: 1.Download and install Tor Browser (https://www.torproject.org/download/) 2.Go to our support page: http://braincgksuixxkpkme7zlpkh7u47oryxx574d74ws4eal4t2mxyahbqd.onion (This page can take up to 30 minutes to load.) 3.Enter your encryption ID: [snip] We will provide further instructions on payment and data recovery. After confirming payment, we will transfer a unique decryption key that will allow you to restore access to all your files. We strongly recommend acting quickly and professionally! Any delays or attempts to ignore this message may lead to irreversible consequences. We are ready to cooperate and ensure a secure resolution to this issue. Email to support: [email protected] Welcome to BrainCipher!
How To Restore Your Files.txt
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\Welcome to Brain Cipher Ransomware!\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\Dear managers!\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\If you're reading this, it means your systems have been hacked and encrypted and your data stolen.\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\The most proper way to safely recover your data is through our support. We can recover your systems within 4-6 hours.\\\\\\ \\\\\\\\\\\\\In order for it to be successful, you must follow a few points:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\1.Don't go to the police, etc.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\2.Do not attempt to recover data on your own.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\3.Do not take the help of third-party data recovery companies.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\\\\In most cases, they are scammers who will pay us a ransom and take a % for themselves.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\If you violate any 1 of these points, we will refuse to cooperate with you!!!\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\ \\ ATTENTION!!! If you do not contact us within 48 hours, we will post the record on our website: \\ \\ \\ http://vkvsgl7lhipjirmz6j5ubp3w3bwvxgcdbpi3fsbqngfynetqtw4w5hyd.onion/ \\ \\ \\ \\ 3 steps to data recovery: \\ \\ \\ 1. Download and install Tor Browser (https://www.torproject.org/download/) \\ \\ 2. Go to our support page: http://mybmtbgd7aprdnw2ekxht5qap5daam2wch25coqerrq2zdioanob34ad.onion \\ ******* This page can take up to 30 minutes to load. \\ \\ 3. Enter your encryption ID: [snip] \\ \\ \\ Email to support: [email protected] \\ \\ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ _ _ | | (_) | |__ _ __ __ _ _ _ __ | '_ \| '__/ _` | | '_ \ | |_) | | | (_| | | | | | |_.__/|_| \__,_|_|_| |_| ,--""-. (_,=- ) `---#{ `}
[id].README.txt
***
Welcome to Brain Cipher Ransomware!
***
Dear managers!
If you're reading this, it means your systems have been hacked and encrypted and your data stolen.
***
The most proper way to safely recover your data is through our support. We can recover your systems within 4-6 hours.
In order for it to be successful, you must follow a few points:
1.Don't go to the police, etc.
2.Do not attempt to recover data on your own.
3.Do not take the help of third-party data recovery companies.
In most cases, they are scammers who will pay us a ransom and take a for themselves.
***
If you violate any 1 of these points, we will refuse to cooperate with you!!!
3 steps to data recovery:
1. Download and install Tor Browser (https://www.torproject.org/download/)
2. Go to our support page: http://mybmtbgd7aprdnw2ekxht5qap5daam2wch25coqerrq2zdioanob34ad.onion
3. Enter your encryption ID: [snip]
Email to support: [email protected]
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (100)
Search, filter and paginate the victim timeline for BrainCipher. Showing 1–100 of 100.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | novagroupgbc.com id35397 View details | United Kingdom | Services | leaked | ||
|
PENDING novagroupgbc.com Total size - 70GB. Contents: Invoices with numbers and amounts, draw payment schedules, unit costs; reports listing owners' names; property details. If you think you are here by m... ⏳ 9d 10h 42m 25s remaining |
||||||
| Ransomware | oflaherty-law.com id35398 View details | Ireland | Finance / Legal / Insurance | pending | ||
|
PENDING oflaherty-law.com 32GB - materials related to adoptions, paternity, and DNA tests involving minors, as well as phone records and correspondence. If you think you are here by mistake, please contact ... ⏳ 9d 10h 42m 25s remaining |
||||||
| Ransomware | clinicaromero.com id35399 View details | Argentina | Healthcare / Pharma | pending | ||
|
clinicaromero.com 16,000 files, include: Patients in the psychiatric service; Patients in the substance abuse treatment service; Staff medical records and internal correspondence. If you think you are here by mistake, please contact us at [email protected] ⏳ Deadline: October 31, 2026 at 11:00 |
||||||
| Ransomware | sodali.com id35400 View details | United States | IT | pending | ||
|
PENDING sodali.com 13,000 documents include: Annual Shareholders' MeetingsSwiss and German Clients. A complete list of issuer clients, their corporate documents, voting schedules, and voting result... ⏳ 9d 10h 42m 25s remaining |
||||||
| Ransomware | srsnodgrass.com id35401 View details | United States | IT | leaked | ||
|
PENDING srsnodgrass.com Total size - 100GB, 45,000 documents. Contents: Financial statements and pre-audit working papers; lists of bank employees; insider information on the financial condition of approx... ⏳ 9d 10h 42m 25s remaining |
||||||
| Ransomware | prosomnus.com id35402 View details | United States | IT | leaked | ||
|
PENDING prosomnus.com Total size - 100GB, 78,000 files. Contents: Patients' PHI; Kaiser Permanente Patient-Partner Tracking Sheet; Non-public FDA regulatory files; .bak; .pst.; If you think you are here... ⏳ 9d 10h 42m 25s remaining |
||||||
| Ransomware | olyortho.com id35403 View details | United States | Healthcare / Pharma | leaked | ||
|
PENDING olyortho.com Total size - 105GB, 146,000 files. Contents: Patients' medical information (PHI under HIPAA); employee HR data; legally privileged materials; email; operational/technical documents... ⏳ 9d 10h 42m 25s remaining |
||||||
| Ransomware | mvjllp.com id35404 View details | United States | Other | pending | ||
|
PENDING mvjllp.com Big Data - total size 1.66TB, over 500k files. 413 court cases, internal work documents of the law firm and its clients, including privileged materials and PII/PHI. If you think yo... ⏳ 15d 10h 42m 25s remaining |
||||||
| Ransomware | huntcompanies.com id33716 View details | United States | — | leaked | ||
|
[AI generated] N/A I don't have verified, reliable information about a specific company at "huntcompanies.com" to describe accurately. Providing fabricated details about a company's operations, industry, or location would risk spreading misinformation in a threat intelligence context, where factual accuracy is critical. If you can share additional context or verified source material about this company, I can help analyze or summarize that information instead. |
||||||
| Ransomware | latitudesubro.com id33276 View details | Brazil | IT | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | trailerbridge.com id33278 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] Trailer Bridge is a U.S.-based transportation and logistics company headquartered in Jacksonville, Florida. It operates in the maritime shipping industry, providing container and trailer-on-barge ocean freight services, primarily between the continental United States and Puerto Rico. The company offers intermodal trucking, warehousing, and logistics solutions, serving commercial and government customers across domestic and Caribbean trade routes. |
||||||
| Ransomware | mccordclaims.com id33279 View details | United States | Finance / Legal / Insurance | leaked | ||
|
[AI generated] N/A I don't have verified information about a company operating at "mccordclaims.com." Rather than speculate about its industry, services, or country of operation, I should note that this appears to be a claims-related domain name (possibly insurance claims adjusting, legal claims, or similar), but I cannot confirm details without reliable, verifiable data about this specific entity. |
||||||
| Ransomware | goriteway.com id33280 View details | United States | Retail / E-commerce | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | northeastrehab.com id33281 View details | United States | Services | leaked | ||
|
[AI generated] N/A I don't have reliable, verified information about a specific company operating at this domain. Rather than provide potentially inaccurate details about its services, industry specifics, or operational location, I'm flagging this as unconfirmed. If you have access to threat intelligence databases, WHOIS records, or can share verified details about this domain, I can help analyze that information instead. |
||||||
| Ransomware | mulholland.com id33282 View details | United States | Hospitality / Food & Beverage / Tourism | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | wildmanbg.com id33283 View details | Bulgaria | Services | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | maxwell-group.com id33284 View details | United Kingdom | Services | deleted | ||
|
[AI generated] N/A I don't have reliable, verified information about a specific company operating at "maxwell-group.com." There are multiple businesses that use variations of "Maxwell Group" as a name across different industries and countries, and without access to current, verifiable data tied specifically to this domain, I cannot provide accurate details about its operations, industry, or country without risking providing false information. |
||||||
| Ransomware | goldstarfinancial.com id33122 View details | United States | Finance / Legal / Insurance | leaked | ||
|
[AI generated] N/A I don't have reliable, verified information about a specific company operating at "goldstarfinancial.com." There are multiple businesses that have used similar "Gold Star Financial" naming conventions in different jurisdictions (this is a fairly generic name used by mortgage brokers, lending companies, and financial services firms in various countries), so I cannot confidently confirm which specific entity this domain refers to, its current operational status, ownership, or verified business details without risking inaccurate attribution. If you can provide additional context (such as the specific country, registration details, or services advertised on the site), I can help assess it more accurately. Alternatively, if this is for threat intelligence purposes, I'd recommend verifying details through domain registration records (WHOIS), business registries, or regulatory filings relevant to |
||||||
| Ransomware | hoyletanner.com id32938 View details | United Kingdom | Manufacturing / Engineering | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | aecom.com id32939 View details | United States | Services | deleted | ||
|
[AI generated] AECOM is a global infrastructure and engineering firm headquartered in the United States. The company provides design, consulting, construction, and management services across sectors including transportation, water, environment, energy, and government facilities. Operating in over 150 countries, AECOM serves public and private clients worldwide and is recognized as one of the largest engineering services firms globally. |
||||||
| Ransomware | xpera.ca id32936 View details | Canada | IT | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | icot.es id32358 View details | Spain | IT | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | aeiconsultants.com id32359 View details | United States | Services | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | syc.es id32360 View details | Spain | Finance / Legal / Insurance | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Adviesbureau De Beuckelaer BV id32361 View details | Netherlands | Services | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | ahadandco.com id32362 View details | United Arab Emirates | Services | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | sago.com id32363 View details | United States | IT | deleted | ||
|
[AI generated] Sago is a market research and insights company headquartered in the United States. It specializes in connecting brands and researchers with qualified participants for qualitative and quantitative research studies, including focus groups, online surveys, and in-depth interviews. Formerly known as Schlesinger Group, Sago serves clients across various industries seeking consumer and professional insights to inform business decisions. |
||||||
| Ransomware | crmeyer.com id32364 View details | Germany | Services | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | ccsperfusion.com id32365 View details | United States | Healthcare / Pharma | leaked | ||
|
[AI generated] CCS Perfusion is a US-based company operating in the medical and healthcare industry, specializing in perfusion services and cardiovascular surgery support. The company provides clinical perfusion professionals who operate heart-lung bypass machines during open-heart surgeries. It serves hospitals and surgical centers, ensuring patient safety during cardiopulmonary bypass procedures. The company operates within the United States healthcare sector. |
||||||
| Ransomware | windiam.com id30757 View details | Belgium | IT | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | robroy.com id30380 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] Rob Roy Industries, operating through robroy.com, is a US-based manufacturer specializing in electrical conduit systems and enclosures. The company produces PVC-coated steel conduit, fiberglass conduit, and industrial enclosures used in corrosive and hazardous environments. Headquartered in Verona, Pennsylvania, Rob Roy serves industries such as oil and gas, chemical processing, wastewater treatment, and utilities, providing durable electrical protection solutions across North America. |
||||||
| Ransomware | iac-intl.com id30381 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | digitaldynamics.com id30160 View details | United States | IT | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | goldenstateortho.com id30161 View details | United States | Healthcare / Pharma | leaked | ||
|
[AI generated] Golden State Ortho appears to be an orthopedic medical practice or orthopedic supply company based in the United States, likely California given the "Golden State" reference. It operates in the healthcare industry, potentially offering orthopedic surgical services, prosthetics, orthotics, or related medical products and patient care. Specific verified details about this company are limited, so full operational details cannot be confirmed with certainty. |
||||||
| Ransomware | printronix.com id30162 View details | United States | Manufacturing / Engineering | pending | ||
|
[AI generated] Printronix is a US-based company specializing in industrial printing solutions. Founded in 1974 and headquartered in Irvine, California, it manufactures line matrix printers, thermal printers, and related accessories primarily for enterprise and industrial environments. Its products serve industries such as manufacturing, logistics, and supply chain management, offering high-volume, mission-critical printing capabilities used in warehouses and distribution centers worldwide. |
||||||
| Ransomware | paipharma.com id30136 View details | Brazil | Healthcare / Pharma | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | eggetttax.ca id30099 View details | Canada | Finance / Legal / Insurance | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | sterlinggloballtd.com id30100 View details | United Kingdom | Finance / Legal / Insurance | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | themintgaming.com id30005 View details | — | IT | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | alu-rex.com id29918 View details | Austria | Manufacturing / Engineering | leaked | ||
|
[AI generated] Alu-Rex is a Canadian company specializing in the manufacturing of gutter protection systems and accessories. Based in Quebec, Canada, the company produces aluminum-based products designed to prevent debris from clogging eavestroughs. Their product lines include continuous hanger systems and gutter guards primarily marketed to roofing and eavestrough installation professionals across North America. |
||||||
| Ransomware | anglomoil.com id29923 View details | United Kingdom | — | leaked | ||
|
[AI generated] Anglomoil is an Australian company specialising in the manufacture and supply of lubricants and associated products. Operating in the industrial and automotive lubricant sector, it serves mining, transport, agriculture, and general industry markets. Headquartered in Australia, the company produces engine oils, greases, hydraulic fluids, and specialty lubricants, distributing products nationally and to select international markets. |
||||||
| Ransomware | squamish.net id29543 View details | Canada | IT | leaked | ||
|
[AI generated] squamish.net appears to be an internet service provider and telecommunications company operating in Squamish, British Columbia, Canada. It offers broadband internet connectivity and related services to residential and business customers in the Squamish region. The company serves as a local ISP, providing connectivity solutions to the Sea-to-Sky Corridor area of British Columbia, positioning itself within the Canadian telecommunications and internet services industry. |
||||||
| Ransomware | sheppadviser.com.au id29304 View details | Australia | Other | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | ice.org.uk id29062 View details | United Kingdom | Construction / Real Estate | leaked | ||
|
[AI generated] ICE, the Institution of Civil Engineers, is a UK-based professional membership organisation founded in 1818. It supports civil engineers worldwide through qualifications, knowledge sharing, policy influence, and professional development. Headquartered in London, it operates across infrastructure, construction, and engineering sectors. ICE sets industry standards, accredits engineering programmes, and advocates for sustainable infrastructure development globally. |
||||||
| Ransomware | flbgroup.com id28382 View details | United Kingdom | Manufacturing / Engineering | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | kisnet.co.jp id28383 View details | Japan | IT | leaked | ||
|
[AI generated] Kisnet Co., Ltd. is a Japanese internet service provider based in Japan. The company offers broadband and network connectivity services primarily to residential and business customers. Operating within the telecommunications and ISP industry, Kisnet provides internet access solutions in the Japanese market. The company is part of Japan's regional ISP sector, delivering reliable network infrastructure and related services to its subscriber base. |
||||||
| Ransomware | nwlr.ca id28384 View details | Canada | Transportation / Travel / Logistics | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | liteline.com id28385 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] Liteline is a Canadian lighting manufacturer and distributor based in Ontario, Canada. The company specializes in designing and supplying innovative LED lighting solutions for residential and commercial applications. Its product portfolio includes recessed lighting, track lighting, and decorative fixtures. Liteline is known for combining energy-efficient technology with modern design, serving contractors, architects, and consumers across North America through various retail and wholesale channels. |
||||||
| Ransomware | westonconsulting.com id28386 View details | United States | Construction / Real Estate | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | exceldor.ca id28387 View details | Canada | Agriculture / Food | leaked | ||
|
[AI generated] Exceldor is a Canadian agricultural cooperative specializing in poultry production and processing. headquartered in Quebec, Canada, the company produces and distributes chicken and turkey products under various brands. It operates processing facilities across Quebec and Ontario, supplying retail, foodservice, and industrial customers throughout Canada. Exceldor is one of the largest poultry cooperatives in the country, known for its focus on quality and sustainable farming practices. |
||||||
| Ransomware | soundinsurance.ca id28388 View details | Canada | Finance / Legal / Insurance | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | endeavourautomotive.co.uk id28389 View details | United Kingdom | Retail / E-commerce | leaked | ||
|
[AI generated] Endeavour Automotive is a UK-based car dealership group operating across England. The company sells new and used vehicles from multiple mainstream and premium brands, including Ford, Nissan, and others. It also provides vehicle servicing, parts, and aftersales support. Operating within the automotive retail industry, Endeavour Automotive runs several dealership locations primarily in the south and east of England. |
||||||
| Ransomware | eworldme.com id28390 View details | United Arab Emirates | IT | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | bridgeway-consulting.co.uk id28391 View details | United Kingdom | Transportation / Travel / Logistics | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | fsbgroup.ca id23495 View details | Canada | Services | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | semag.fr id23494 View details | France | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | axxia.fr id23493 View details | France | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | oxfordcounty.ca id23238 View details | Canada | Public Sector | pending | ||
|
[AI generated] Oxford County represents the best of both worlds: urban communities full of life, entertainment, and commerce; and rural areas that are rich in natural resources, history, and farming communities. Located in the heart of Southwestern Ontario, it is home to several thriving communities. As a municipality, its mission is to provide public services that enhance the quality of life for its citizens. |
||||||
| Ransomware | cdom.org id23237 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | bmsi.org id22432 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | bw-lv.de id21518 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | VIRTUALWEB.US id21409 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | jorgefernandez.es id21369 View details | Spain | Communication / Marketing | pending | ||
|
[AI generated] "Jorgefernandez.es" is a Spain-based company engaged in the distribution of home improvement materials and tools. Their vast catalog includes supplies for plumbing, heating, electrical, lumber, and tools. They cater to individual consumers and also supply to professional building and construction businesses. In addition to product sales, they provide customer service and support. |
||||||
| Ransomware | Pulmonary Physicians of South Florida Clinics | Data security breach! id19736 View details | United States | Healthcare / Pharma | pending | ||
|
Pulmonary Physicians of South Florida Clinics is a healthcare group in South Florida offering Pulmonary, Critical Care, and Sleep Medicine services across Miami-Dade, Broward, and Monroe counties. The organization provides state-of-the-art diagnosis and treatment for lung diseases, along with accredited Sleep Disorder Diagnostic Centers for conditions like Obstructive Sleep Apnea. It operates in multiple hospitals throughout the region, serving patients with experienced and highly qualified physicians. The clinic was listed as a ransomware victim associated with the threat actor BrainCipher, as discovered by Ransomware.live on May 5, 2025. |
||||||
| Ransomware | Pulmonary Physicians of South Florida Clinics id19739 View details | United States | Healthcare / Pharma | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | neatem.fr | Update! id19735 View details | France | Other | pending | ||
|
neatem.fr is the website of Neatem, an information services company based in Croissy-Beaubourg, Île-de-France, France. Company profiles describe Neatem as providing IT infrastructure, support services, system security, cloud hosting, and related technical engineering services. Its stated activity also includes engineering and technical studies in computing, alongside services in the information technology domain. In threat-intelligence records, neatem.fr was listed as a ransomware victim associated with BrainCipher. |
||||||
| Ransomware | neatem.fr id19738 View details | France | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | mbmdubai.com id19734 View details | United Arab Emirates | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | ddecor.com id19733 View details | India | IT | pending | ||
|
[AI generated] D'Decor is a leading home decor company known for its innovative and stylish range of home furnishings. Originating from India, it's recognized globally for curtains, upholfurniture fabrics, bed and bath linen. D'Decor aims to blend traditional craftsmanship with innovative technology, offering an extensive collection of designs to cater to a wide variety of tastes. |
||||||
| Ransomware | ruizre.es id19732 View details | Spain | Construction / Real Estate | pending | ||
|
[AI generated] Ruizre.es is a real estate company based in Valencia, Spain that specializes in property rentals and sales. They provide a variety of services including assessment, property management, purchase and sale of properties, rental management, and property investment consultation. They pride themselves in helping their clients navigate the complex real estate market with ease. |
||||||
| Ransomware | soundtransit.org id19731 View details | United States | Communication / Marketing | pending | ||
|
[AI generated] Sound Transit, operating under the domain "soundtransit.org", is a mass transit agency serving the Seattle, Washington, USA, metropolitan area. Founded in 1996, it offers public transit services including bus, light rail, and commuter rail services throughout King, Pierce, and Snohomish counties. Its major transportation systems include Link Light Rail, Sounder Commuter Rail, and ST Express buses. |
||||||
| Ransomware | valedolobo.com id19730 View details | Portugal | Hospitality / Food & Beverage / Tourism | pending | ||
|
[AI generated] "Valedolobo.com" is the online platform for the Vale do Lobo resort located in Portugal's Algarve region. Specializing in luxury experiences, it features multiple leisure facilities including two 18-hole golf courses, a wellness center, and various restaurants. It offers properties for sale or rent for vacation purposes, making it a premier destination for tourists. |
||||||
| Ransomware | edisoft.es id19729 View details | Spain | Services | pending | ||
|
[AI generated] Edisoft is a Spanish technological company specializing in development and implementation of software systems for businesses. They offer solutions in areas such as ERP (Enterprise Resource Planning), CRM (Customer Relationship Management), business intelligence, and eCommerce. They also provide IT consulting, training, and ongoing technical support for clients. Their goal is to help businesses improve their efficiency and productivity through innovative technology solutions. |
||||||
| Ransomware | iycsa.com.co id19728 View details | Colombia | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | Rhode Island Department of Humain Services id16290 View details | United States | Services | pending | ||
|
Provides support and resources for health, financial aid, and social services in Rhode Island. |
||||||
| Ransomware | Modern Dental Group Limited id16157 View details | Hong Kong | Healthcare / Pharma | pending | ||
|
[AI generated] Modern Dental Group Limited is a global dental service provider headquartered in Hong Kong. The company specializes in the production and distribution of dental prosthetic devices and related services. It operates a network of facilities across multiple countries, offering products like crowns, bridges, and orthodontic devices to dental professionals, emphasizing quality and innovation. |
||||||
| Ransomware | Estar Seguros, S.A. id16002 View details | Mexico | Communication / Marketing | pending | ||
|
[AI generated] Estar Seguros, S.A. is an insurance company that specializes in providing a range of insurance products and services. It focuses on offering tailored solutions to meet the diverse needs of its clients, including auto, home, and life insurance. The company is known for its customer-centric approach, competitive pricing, and reliable coverage options, aiming to deliver peace of mind and financial protection. |
||||||
| Ransomware | Cristal y Lavisa S.A. de C.V. id16001 View details | Mexico | Communication / Marketing | pending | ||
|
[AI generated] Cristal y Lavisa S.A. de C.V. is a Mexican company specializing in the production and distribution of glass products. Known for its high-quality glassware, the company serves various industries, including construction, automotive, and consumer goods. With a focus on innovation and customer satisfaction, Cristal y Lavisa has established a strong presence in the domestic and international markets. |
||||||
| Ransomware | Deloitte UK id15858 View details | United Kingdom | Services | pending | ||
|
[AI generated] Deloitte UK is a leading professional services firm, part of the global Deloitte network. It offers audit, consulting, financial advisory, risk management, and tax services across various industries. Known for its expertise and innovation, Deloitte UK helps clients solve complex business challenges. It emphasizes diversity, inclusion, and sustainability in its operations and corporate culture. |
||||||
| Ransomware | Royce Corporation id15810 View details | United States | Manufacturing / Engineering | pending | ||
|
[AI generated] Royce Corporation is a global trading company specializing in the distribution and marketing of industrial raw materials and chemicals. The company serves a diverse range of industries, including metallurgy, electronics, and energy. Known for its strong supply chain management and strategic partnerships, Royce Corporation aims to deliver quality products and services to meet the evolving needs of its clients worldwide. |
||||||
| Ransomware | G-ONE AUTO PARTS DE MÉXICO, S.A. DE C.V. id15797 View details | Mexico | Manufacturing / Engineering | pending | ||
|
[AI generated] G-ONE Auto Parts de México, S.A. de C.V. is a company based in Mexico specializing in the distribution and sale of automotive parts. It caters to a wide range of vehicles, providing high-quality components and accessories to meet the needs of both individual customers and businesses. The company is known for its commitment to customer satisfaction and reliable service within the automotive industry. |
||||||
| Ransomware | COOPERATIVA TELEFONICA DE CALAFATE LTD. id15290 View details | Argentina | Communication / Marketing | pending | ||
|
[AI generated] COOPERATIVA TELEFONICA DE CALAFATE LTD. is a telecommunications cooperative based in El Calafate, Argentina. It provides a range of services including telephony, internet, and other communication solutions to the local community. As a cooperative, it operates with a focus on member needs and community development, emphasizing service quality and accessibility. |
||||||
| Ransomware | G-One Auto Parts de México S.A. de C.V. id15289 View details | Mexico | Manufacturing / Engineering | pending | ||
|
[AI generated] G-One Auto Parts de México S.A. de C.V. is a Mexican company specializing in the distribution and sale of automotive parts. It focuses on providing high-quality components for various vehicle makes and models, serving both retail and wholesale markets. The company is known for its customer-centric approach, competitive pricing, and extensive inventory, catering to the needs of automotive professionals and enthusiasts alike. |
||||||
| Ransomware | Berridge Manufacturing Co. id15033 View details | United States | Manufacturing / Engineering | pending | ||
|
[IA generated] Berridge Manufacturing Co. specializes in the production of high-quality metal roofing and siding products. Established in 1970, the company is known for its innovative design and engineering, offering a wide range of metal panels, architectural products, and portable roll-forming machines. Berridge is committed to sustainability and provides solutions for both residential and commercial applications. |
||||||
| Ransomware | K&S Tool & Mfg Co. id15030 View details | United States | Services | pending | ||
|
[IA generated] K&S Tool & Mfg Co. is a company specializing in precision manufacturing and tooling services. They offer a range of services including CNC machining, custom tool making, and engineering support. Known for high-quality craftsmanship and reliability, K&S serves various industries by providing tailored solutions that meet specific client needs. Their commitment to innovation ensures they stay at the forefront of manufacturing technology. |
||||||
| Ransomware | Basilio Advogados id15029 View details | Brazil | Finance / Legal / Insurance | pending | ||
|
[IA generated] Basilio Advogados is a prominent law firm based in Brazil, known for its expertise in various legal areas including corporate law, litigation, and arbitration. The firm is recognized for delivering high-quality legal services with a focus on client needs and strategic solutions. Its team of experienced lawyers is committed to providing personalized and effective legal advice to both domestic and international clients. |
||||||
| Ransomware | CHRISTODOULOS G. VASSILIADES & CO. LLC id15028 View details | Cyprus | Finance / Legal / Insurance | pending | ||
|
[IA generated] CHRISTODOULOS G. VASSILIADES & CO. LLC is a prominent law firm based in Cyprus, specializing in corporate and commercial law. The firm offers a wide range of services, including legal consultancy for international business transactions, tax planning, intellectual property, and dispute resolution. Known for its expertise and client-focused approach, the firm serves a diverse clientele, including multinational corporations and individuals. |
||||||
| Ransomware | hanwa.co.th id14409 View details | Thailand | Manufacturing / Engineering | pending | ||
|
Hanwa Co., Ltd. (Thailand) is a subsidiary of Hanwa Co., Ltd., a Japan-based global trading company. Established to expand Hanwa’s operations in Southeast Asia, this firm specializes in trading a diverse range of products including steel, metals, food, petroleum, and chemicals. Leveraging its parent company's extensive network, Hanwa Thailand aims to provide comprehensive trading solutions and foster strong business relationships in the region. |
||||||
| Ransomware | rmn.fr id14045 View details | France | Communication / Marketing | pending | ||
|
Réunion des Musées Nationaux-Grand Palais (RMN-GP) is a French cultural institution dedicated to managing and promoting national museums and monuments. It organizes exhibitions, publishes art books, and oversees museum shops and cafes. RMN-GP plays a crucial role in preserving and showcasing France's cultural heritage to a global audience. |
||||||
| Ransomware | ghanare.com id14043 View details | Ghana | Communication / Marketing | pending | ||
|
Ghanare.com is an online platform dedicated to providing comprehensive real estate services in Ghana. It connects buyers, sellers, and renters with property listings, including residential, commercial, and land options. The platform aims to simplify the property search process, offering detailed property information, images, and contact details to facilitate seamless transactions. |
||||||
| Ransomware | beinlaw.co.il - Prof. Bein & Co. id13934 View details | Israel | Finance / Legal / Insurance | pending | ||
|
Prof. Bein & Co., accessible via beinlaw.co.il, is a reputable law firm based in Israel. It specializes in various legal fields, offering expert services in commercial law, real estate, litigation, and intellectual property. The firm is known for its professional approach, experienced team, and commitment to providing tailored legal solutions to meet the unique needs of its clients. |
||||||
| Ransomware | tiendasmacuto.com id13869 View details | Venezuela, Bolivarian Republic of | Retail / E-commerce | pending | ||
|
Tiendasmacuto.com is an online retail store specializing in outdoor and adventure gear. They offer a wide range of products including backpacks, tents, sleeping bags, and hiking accessories. The company focuses on high-quality, durable items suitable for camping, trekking, and other outdoor activities. Customer service and satisfaction are key priorities, ensuring a reliable shopping experience. |
||||||
| Ransomware | fabamaq.com id13794 View details | Argentina | Other | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | cyceron.fr id13793 View details | France | Other | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | Sherbrooke Metals id13464 View details | United States | Manufacturing / Engineering | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | Apex Global | Big leak outlooks - 2tb. id13463 View details | Netherlands | Services | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | Cole Technologies Group id13462 View details | United States | IT | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | Family Wealth Advisors Ltd. id13461 View details | Israel | Services | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | Mars 2 LLC id13460 View details | United States | Services | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | Indonesia Terkoneksi id13220 View details | Indonesia | Other | pending | ||
|
More important than money, only honor. |
||||||