Ransomware Group intelligence

Dragonforce

Active

Track Dragonforce with 677 published victims and 20 known leak locations in a single intelligence view.

DARK EYE ALERTS

Want an alert every time a new ransomware post is published?

Choose the feeds and the countries you care about — we email you when they move.

Victims 677 Known published victims in this dataset

First discovered 2023-12-13 Earliest victim discovery date

Last discovered 2026-10-30 Latest victim discovery date

Inactive since 0 days Days since the latest known victim

Top country United States 316 victims

Known locations 20 Leak or negotiation infrastructure tracked

Dragonforce is tracked by Dark Eye as a ransomware group with 677 published victims.

United States is currently the most targeted country in this dataset.

20 known leak locations are currently associated with this group.

677

Leaked 472 69.7%
Pending 205 30.3%
Deleted 0 0.0%

Top Countries

Distribution

Label	Type	Availability	Links
Leak location 6	Onion service	Up checked 5h ago	`2q2spejlgz2x5haqe3ygclxj6jwlylgj5rg4jgwax6ub2fbpct27ibyd.onion`
Leak location 5	Onion service	Up checked 5h ago	`xjhmtitnrdrgzw4vmsghirdoo2fk35a3tzj4enlmah4pvehdspydsiyd.onion`
Leak location 2	Onion service	Up checked 5h ago	`3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion`
Leak location 1	Onion service	Up checked 5h ago	`z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion`
Leak location 20	Onion service	Down checked 5h ago	`zsglo7t7osxyk3vcl7zxzup7hs4ir52sntteymmw63zvoxzcqytlw7qd.onion`
Leak location 19	Onion service	Down checked 5h ago	`xtcwd3xmxpggtizn7kmwwqeizexflkkyqsytg2kauccau6ddsfa4gfyd.onion`
Leak location 17	Onion service	Down checked 5h ago	`jziu7k7uee467r2wt66ndrwymmw7tsmqgcqi7aemcaxraqmaf2hdm3yd.onion`
Leak location 18	Onion service	Down checked 5h ago	`nwtetzmrqhxieetg5lvth7szzvg35gfrqt23ly46vku56oo7pkueswyd.onion`
Leak location 14	Onion service	Down checked 5h ago	`eogeko3sdn66gb7vjpwpmlmmmzfx7umtwaugpf5l6tb5jveolfydnuad.onion`
Leak location 13	Onion service	Down checked 5h ago	`dbvczza7nhwdb5kdvkzjtkrcvwnrt5viw7mihutueprvajy7rxhwq6id.onion`
Leak location 16	Onion service	Down checked 5h ago	`guestuctexqqaoxuahuydfa6ovxuhtng66pgyr5gqcrsi7qgchpkad.onion`
Leak location 15	Onion service	Down checked 5h ago	`ewrxgpvv7wsrqq7itfwg5jr7lkc6zzknndmru5su2ugrowxo3wwy5yad.onion`
Leak location 11	Onion service	Down checked 5h ago	`73h3lxn24kuayyfkn4t6ij7e67jklo24vqzqdhpts3ygmim7hu6u6aid.onion`
Leak location 10	Onion service	Down checked 5h ago	`6dgi54prfmpuuolutr4hl3akasxbx4o34g5y2bj4blrvzzkjemhxenad.onion`
Leak location 12	Onion service	Down checked 5h ago	`bpoowhokr3vi32l3t4mjdtdxfrfpigwachopk5ojwmgxihnojhsawuyd.onion`
Leak location 9	Onion service	Down checked 5h ago	`4wcrfql53ljekid3sn66z6swjot725muveddq77utxltaelw64eikfid.onion`
Leak location 8	Onion service	Down checked 5h ago	`3ro23rujyigqrlrwk3e4keh3a3i6ntgrm3f42tbiqtf7vke47c6a6ayd.onion`
Leak location 7	Onion service	Down checked 5h ago	`2yczff6zyiey3gkgl5anwejktdp73abxbzbnvwobmrwkwgf3hudpyvyd.onion`
Leak location 3	Onion service	Down checked 5h ago	`dragonforxxbp3awc7mzs5dkswrua3znqyx5roefmi4smjrsdi22xwqd.onion`
Leak location 4	Onion service	Down checked 5h ago	`dragongoztkdfmnd7jkchznd3fvkpdmeh4vhbt6p3usrlsoy5dw2bhyd.onion`

Communication / Marketing 130
Manufacturing / Engineering 92
Finance / Legal / Insurance 71
Services 58
IT 50
Construction / Real Estate 45
Healthcare / Pharma 37
Hospitality / Food & Beverage / Tourism 25
Not identified 24
Retail / E-commerce 23
Energy 22
Transportation / Travel / Logistics 20
Public Sector 20
Education 14
Agriculture / Food 13
NGOs / Associations 12
Telecommunications 10

Typical Attacks (10)

▼

MITRE ATT&CK does not currently catalogue Dragonforce, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v20.0. Confidence: medium. Treat it as orientation, not attribution.

T1059.001 PowerShell Execution

What they do: dragonforce executes malicious payloads via PowerShell scripts injected into legitimate processes for command execution.

What that means: Adversaries may abuse PowerShell commands and scripts for execution.
T1685 Disable or Modify Tools Defense Impairment

What they do: dragonforce disables antivirus tools by terminating security processes and modifying Windows Defender settings.

What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
T1027.002 Software Packing Stealth

What they do: dragonforce packs its malware binaries to evade static detection by security tools.

What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
T1070.004 File Deletion Stealth

What they do: dragonforce deletes Volume Shadow Copies via vssadmin /delete shadows to prevent rollback recovery.

What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
T1110 Brute Force Credential Access

What they do: dragonforce brute-forces local accounts using Hydra to obtain credentials for initial access.

What that means: Adversaries may use brute force techniques to gain access to accounts when passwords are unknown or when password hashes are obtained.
T1018 Remote System Discovery Discovery

What they do: dragonforce discovers remote hosts via SMB enumeration to identify high-value targets across networks.

What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
T1135 Network Share Discovery Discovery

What they do: dragonforce scans network shares using net use commands to discover victim file structures for targeting.

What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
T1021.002 SMB/Windows Admin Shares Lateral Movement

What they do: dragonforce moves laterally through SMB shares using mapped drives to access additional systems.

What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
T1486 Data Encrypted for Impact Impact

What they do: dragonforce encrypts victim files using a custom ransomware binary with AES-256 encryption keys.

What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
T1490 Inhibit System Recovery Impact

What they do: dragonforce runs system shutdown commands to prevent recovery attempts and maximize disruption.

What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.

Tools Observed (20)

▼

Software Dragonforce has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.

Credential theft

LaZagne Mimikatz

Defense evasion

ADVobfuscator Darkside/TrueSight driver (BYOVD) Hangzhou Shunwang Technology driver (BYOVD) PCHunter ProcessHacker

Discovery

AdFind Advanced IP Scanner PingCastle SoftPerfect NetScan

Discovery & enumeration

AdFind Advanced IP Scanner PingCastle SoftPerfect NetScan

Exfiltration

MEGA RClone

LOLBAS (living-off-the-land binaries)

PsExec

OffSec

Cobalt Strike

Offensive security tooling

Cobalt Strike

Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Dark Eye.

Ransom Notes (2)

▼

The note this group leaves on a compromised machine. Click a filename to read it.

readme.xt txt · 1966 chars

Good afternoon,

As you can see you have been attacked by a ransomware program! We The DragonForce Ransomware Cartel offer you to make a deal with us. We can make a deal with you, all you need to do is contact us by following the instructions below.
We are in no way connected to politics, we always keep our word. You have a chance to decrypt your files and avoid being published on our blog! Use this opportunity and also don't waste your time.
The approximate date of deletion of the decryptor program, as well as publication on our blog 26/04/2025 00:00 UTC.

- # 1 Communication Process,

In order to contact us you need to click on the special link below, which is listed in #2.
After that the negotiation process begins, in which you have the opportunity to request several things from us,

1. make a test decrypt.
2. get a list of the files stolen from you.

At the conclusion of our negotiations we agree on a price, we set the price ourselves based on your income/your insurance.
We scrutinize your documents and are well aware of how much income your company has per year.

- # 2 Access to the meeting room,

To access us please download Tor Browser which is available here. (https://www.torproject.org/)
Once you download the special anonymous browser you need to follow this link, http://3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion
Your unique ID: [snap] - use it to enter our meeting room.

- # 3 Additional Support Contacts,

Tox: 1C054B722BCBF41A918EF3C485712742088F5C3E81B2FDD91ADEA6BA55F4A856D90A65E99D20

- # 4 Recommendations,

Do not try to recover your files with third-party programs, you will only do harm.
Do not turn off / reboot your computer.
Be courteous in our meeting room.
Do not procrastinate.

- # 5 Blog and News,

Blog: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion
DragonNews: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/news

View on RansomLook

[rand].README.txt txt · 1625 chars

Hello! 

Your files (orcl, IADeAPP, [snip] dbs) have been stolen from your network and encrypted with a strong algorithm. We work for money and are not associated with politics.
All you need to do is contact us and pay.

--- Our communication process:

	1. You contact us.
	2. We send you a list of files that were stolen.
	3. We decrypt 1 file to confirm that our decryptor works.
	4. We agree on the amount, which must be paid using BTC.
	5. We delete your files, we give you a decryptor.
	6. We give you a detailed report on how we compromised your company, and recommendations on how to avoid such situations in the future.
   
--- Client area (use this site to contact us):

	Link for Tor Browser: http://3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion
	>>> Use this ID: [snip] to begin the recovery process.
	
	* In order to access the site, you will need Tor Browser, 
	  you can download it from this link: https://www.torproject.org/

--- Additional contacts:

	Support Tox: 1C054B722BCBF41A918EF3C485712742088F5C3E81B2FDD91ADEA6BA55F4A856D90A65E99D20

--- Recommendations: 

	DO NOT RESET OR SHUTDOWN - files may be damaged.
	DO NOT RENAME OR MOVE the encrypted and readme files.
	DO NOT DELETE readme files.

--- Important:

	If you refuse to pay or do not get in touch with us, we start publishing your files.
	21/01/2024 00:00 UTC the decryptor will be destroyed and the files will be published on our blog.
	
	Blog: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion

Sincerely, 01000100 01110010 01100001 01100111 01101111 01101110 01000110 01101111 01110010 01100011 01100101

View on RansomLook

Ransom-note text from RansomLook, licensed CC BY 4.0.

Victims (677)

Search, filter and paginate the victim timeline for Dragonforce. Showing 401–500 of 677.

Type	Target	Discovered	Country	Business Category	Leak status
Ransomware	Marmotech id23385 View details	2025-10-27	Dominican Republic	IT	leaked
It owns and manages eight quarries that include marble, travertine, limestone and coralline stones that are processed with state-of-the-art European technology. Consequently precision of designs and cut is ensured by employing the use of machinery operated with CAD/CAM technology for the manufacturing of all products. In performing both extraction and processing tasks, our corporation is committed to the development of a sustainable mining industry that is based on environmental protection policies that have deserved the acknowledgement of our clients. Marmotech exports its products to America, Europe and the Middle East: namely United Kingdom, Italy, Spain, Israel, Brazil, Argentina, Venezuela, Canada, and United States as well as to nearly the entire Caribbean region. ID 23385
Ransomware	Egaraset id23384 View details	2025-10-27	Spain	Services	leaked
Egaraset specializes in providing adaptable and flexible IT solutions tailored for small and medium enterprises (SMEs) and religious congregations. With over 20 years of experience, they offer services including ERP, financial management, and customer relationship management to improve efficiency for over 400 companies and 1,000 communities worldwide. Their team of IT professionals ensures close and efficient service to clients, understanding their specific needs. The company is committed to evolving its solutions according to the changing environments of its clients ID 23384
Ransomware	Latona Trucking id23383 View details	2025-10-27	United States	Transportation / Travel / Logistics	leaked
latonatrucking.com is a company that operates in the Transportation industry. It employs 100to249 people and has 1Mto5M of revenue. ID 23383
Ransomware	Saturn Machine id23382 View details	2025-10-27	Canada	Manufacturing / Engineering	leaked
Saturn Machine is a leading designer and manufacturer of equipment for major steel companies in North America, specializing in steel fabrication, machining, laser processing, and sandblasting. The company prides itself on delivering high-quality products and problem-solving solutions, supported by a team of skilled professionals and advanced machinery. With capabilities in mechanical and electrical engineering, hydraulic system design, and welding fabrication, Saturn Machine aims to expand its services to a broader client base. Their commitment to customer satisfaction and excellence in design sets them apart in the steel products manufacturing industry. ID 23382
Ransomware	West Welch Reed Engineers id23381 View details	2025-10-27	United States	Manufacturing / Engineering	leaked
West, Welch, Reed Engineers, Inc. offers engineering services focused on transforming ideas into tangible projects. They cater to a diverse range of clients, providing expertise across various engineering disciplines. With a commitment to quality and innovation, the firm aims to deliver solutions that meet their clients' specific needs. Their office is located in Knoxville, Tennessee. ID 23381
Ransomware	Fountains Condominium Operations id23033 View details	2025-10-14	United States	Communication / Marketing	leaked
Fountains Condominium Operations Inc. is an in-house management company dedicated to ensuring the beauty, safety, and stability of the area, promoting neighborliness and pride among the residents, and forming a base for representation in matters affecting the community. This web site provides services to residents of Fountains of Palm Beach. If you need more information or have an issue to bring to our attention, please follow the links for our Board Members or other appropriate contacts contained herein. ID 23033
Ransomware	DragonForce registration available! http://dragongo.org id23032 View details	2025-10-14	—	NGOs / Associations	pending
1.dragongo.org is associated with an NGO and association presence in the Netherlands, a sector made up of nonprofit, mission-driven organizations and member-based groups that operate independently from government. Such organizations typically focus on advocacy, services, community development, or shared-interest support. In a threat-intelligence context, the domain is indexed as a ransomware-victim entry linked to the dragonforce threat actor. The listing does not, by itself, confirm the scope or impact of any incident, but it identifies 1.dragongo.org as a ransomware victim associated with dragonforce. ID 23032
Ransomware	DragonForce invites researchers! http://dragongo.org id23031 View details	2025-10-14	—	NGOs / Associations	pending
3.dragongo.org is a threat-intelligence catalog entry associated with the nongovernmental organization (NGO) sector, a mission-driven part of the nonprofit or civil-society landscape. NGOs typically focus on advocacy or service delivery and operate independently of government control, often serving humanitarian, social, or community needs. The name itself does not identify a specific public-facing organization or location, so the listing should be treated as a sector-based record rather than a verified organizational profile. It was listed as a ransomware victim associated with dragonforce. ID 23031
Ransomware	Start RaaS with DragonForce! http://dragongo.org id23030 View details	2025-10-14	—	NGOs / Associations	pending
4.dragongo.org is a web domain associated with an NGO or association, a nonprofit-sector organization category typically focused on advocacy, community service, or public-interest work rather than commercial sales. NGOs operate outside government and can range from local associations to large civil-society groups that deliver services, coordinate outreach, or support a member base. The domain name itself does not disclose a specific location or offering, so the organization is best described generically as a nonprofit-sector entity. It was listed as a ransomware victim associated with dragonforce. ID 23030
Ransomware	Earn with DragonForce! http://dragongo.org id23029 View details	2025-10-14	—	NGOs / Associations	pending
5.dragongo.org is an online presence associated with an NGO or association in the nongovernmental sector, a category typically used for independent civil-society organizations that may provide advocacy, humanitarian, or community services. As a domain-specific listing, it identifies a site rather than a government entity and may represent an organization operating under the .org namespace. The available information does not reliably disclose the organization’s exact location or service offerings, so those details are not asserted here. It was listed as a ransomware victim associated with dragonforce. ID 23029
Ransomware	DragonForce registration available now! http://dragongo.org id23028 View details	2025-10-14	—	NGOs / Associations	leaked
www.dragongo.org is a nonprofit-sector website associated with an NGO or association, a type of private, mission-driven organization that operates outside government and typically focuses on advocacy, service delivery, or social impact work. NGOs commonly serve civil society through community support, public-interest programs, awareness efforts, and other nonprofit activities, often across local or international contexts. Based on the domain alone, the organization appears to present itself as part of the NGOs / Associations sector, but no verified public site details were available in the provided sources to confirm its specific programs, geography, or offerings. It was listed as a ransomware victim associated with DragonForce. ID 23028
Ransomware	DragonForce looking for partners! http://dragongo.org id23027 View details	2025-10-14	—	NGOs / Associations	pending
2.dragongo.org is a threat-intelligence catalog entry for an organization in the NGOs and associations sector, a category that typically includes non-profit, voluntary groups operating independently of government and focused on social, humanitarian, advocacy, or member services. NGOs and associations commonly work across local, national, or international levels and can provide services, analysis, and community support. In this index, the entity is presented as a victim listing rather than as a verified source of operational details. It was listed as a ransomware victim associated with dragonforce. ID 23027
Ransomware	NEW DragonForce registration: http://dragongo.org id23026 View details	2025-10-14	—	NGOs / Associations	pending
dragongo.org appears to be a nonprofit or association website in the NGOs/Associations sector, a category typically used for mission-driven civil society groups that operate independently of government control. Such organizations often serve social, humanitarian, community, advocacy, or member-support functions rather than commercial ones. In threat-intelligence cataloging, dragongo.org is treated as a sector-relevant entity for tracking ransomware activity against nonprofit organizations. It was listed as a ransomware victim associated with dragonforce. ID 23026
Ransomware	DragonForce team hurry to notify you about new public available registration panel!\n\http... id23002 View details	2025-10-13	—	Public Sector	pending
DragonForce team hurry to notify you about new public available registration panel!\n\http://dragongoztkdfmnd7jkchznd3fvkpdmeh4vhbt6p3usrlsoy5dw2bhyd.onion/registration\nDBKPVG2A5PJEIFCCJRCAO2R2WRX75NJXL3O67U2W5DPCQIMAYJMA ID 23002
Ransomware	Express Logistics and Distribution Ltd id22966 View details	2025-10-11	United Kingdom	Communication / Marketing	leaked
We expect Express Logistics and Distribution Ltd to contact us to prevent the publication of a large volume of private data over many years. Express Logistics and Distribution Ltd. is the most advanced distribution and logistics company in Bulgaria, with the largest direct market coverage, 900 employees and a fleet of 380 vehicles. Express Logistics and Distribution Ltd. is one of the 10 largest companies in Bulgaria. ELD is ranked 5th most dynamic company in Southeast Europe, according to "SEE TOP 100" research. We develop long-term partnership with companies which prefer honesty, reliability and security. ID 22966
Ransomware	Downes id22952 View details	2025-10-10	Australia	Retail / E-commerce	leaked
Proudly managing FMCG brands for over 35 years. With over 94% coverage of the major grocery retailers, Downes services Woolworths, Coles, Independent Supermarkets (including IGA & Foodworks), Bunnings, Big W and Priceline. We have the ability to manage products from development stage, all the way through the submission phase right up to ranging on shelves. With extensive experience in FMCG sales, merchandising and planogram implementation across all retailers Downes is a valuable resource that can be utilised for your brand in the Australian marketplace. In addition to all the major retailers that Downes services, we also have the ability to buy/sell products into each state and territory with our direct to store model for independent retailers. Where supply via the Metcash DC is not an option Downes can give brands a much greater reach with our team of full time sales reps servicing this channel on a regular call cycle. Downes is a business who truly values honesty, integrity and transparency. We are a passionate, loyal business who deliver on our promises. ID 22952
Ransomware	Grupo Serex id22879 View details	2025-10-08	Costa Rica	Communication / Marketing	leaked
Segramar — Bulk Handling at Ports Bulk cargo unloading and loading of raw materials at Maracaibo and Puerto Cabello ports. Berthing assistance for bulk carriers. Import, export and commercialization of animal-feed raw materials. Transmarine — Shipping Agency Full ship agency services for bulk carriers in Venezuela. Operational and logistics support alongside modern procedures focused on safety and environmental compliance. Office in Puerto Cabello (Carabobo). Transcargo — Heavy Transport & Logistics National bulk transport of commodities (corn, wheat, coal, etc.). Heavy/oversized cargo movements: equipment, structures, platforms. National and international logistics solutions; HQ in Zulia state. Proalex (Productora de Alimentos Serex) — Poultry & Feed Poultry processing and commercialization (packed chicken and by-products). Manufacturing of animal balanced feed (ABA). Vertically integrated from breeding to processing. Alto Prado — Cacao Products Production and national/international commercialization of Venezuelan cacao. Product lines: cocoa beans, nibs, liquor (paste), butter, powder. Emphasis on traceability and sustainability. Group overview The group frames itself as integrated solutions for bulk loading/unloading and raw-material transport, with parallel poultry and cacao businesses. Handy if you enjoy conglomerates that do everything from docking a bulker to selling chicken nuggets. ID 22879
Ransomware	Cofiex Asesoría de Empresas, S.L id22878 View details	2025-10-08	Spain	Services	leaked
Cofiex Asesoría de Empresas, S.L. Type: Business consulting and tax advisory firm Location: Navalmoral de la Mata, Cáceres, Extremadura, Spain Industry: Accounting, fiscal and labor management services Main services: Accounting (Contabilidad): bookkeeping, annual reports, and compliance with Spanish GAAP. Tax advisory (Fiscal): corporate and personal tax returns, VAT filings, tax optimization. Labor management (Laboral): payroll, social security filings, employee contracts. Business consultancy (Empresarial): company formation, administrative and legal support. Clients: small and medium-sized businesses, freelancers (autónomos), and local corporations. Typical contact: [email protected] Legal form: Sociedad Limitada (S.L.) — the Spanish equivalent of a limited liability company. Current website: The domain cofiex.es technically exists but hosts a blank WordPress page (“My Blog – Hello world!” as of mid-2025). Their operations appear to continue offline or through direct contact, not through an active website. ID 22878
Ransomware	LC Informatique Sàrl id22872 View details	2025-10-08	Switzerland	Communication / Marketing	leaked
Conseil – Vente Installation informatique Dépannage informatique Réparation toutes marques LC Informatique Sàrl Chemin de la Praille 5 1920 Martigny ID 22872
Ransomware	Allgäu Stern Hotel id22871 View details	2025-10-08	Germany	Hospitality / Food & Beverage / Tourism	leaked
AllgäuSternHotel in Sonthofen is a versatile hotel in the Allgäu region, catering to both vacationers and conference attendees. With over 400 rooms and suites, it offers a blend of relaxation and activity, featuring a wellness area, multiple dining options, and a variety of experiences throughout the year. The hotel is well-equipped for events, boasting over 20 modern meeting rooms and a unique event location, the Sonnenkopfhütte. With a focus on comfort, culinary delights, and natural beauty, AllgäuSternHotel is a prime destination for leisure and business travelers alike. ID 22871
Ransomware	Greenville Legal id22683 View details	2025-09-30	United States	Finance / Legal / Insurance	leaked
David R. Price, Jr., P.A. is a personal injury law firm based in Greenville, South Carolina, specializing in a wide range of legal matters including auto accidents, wrongful death, and workers' compensation. They offer comprehensive legal representation for individuals and families impacted by personal injury and criminal defense cases. The firm has a strong track record of success, having recovered millions for clients and being recognized as Best Law Firm multiple times. Their dedicated team is committed to providing personalized legal services and ensuring clients receive the justice they deserve. ID 22683
Ransomware	Asserson id22603 View details	2025-09-27	United Kingdom	Finance / Legal / Insurance	leaked
(Clients, counterparties, lobbying, deceit, intimidation, pressure on journalists, and other tactics, as revealed in over half a million documents) Asserson Law Offices is a dynamic and creative law firm based in the UK, specializing in various practice areas including dispute resolution, corporate law, and real estate. They aim to support a diverse client base including startups and established businesses in navigating legal challenges in areas such as banking finance and employment law. The firm is recognized for its innovative approach to legal services and commitment to providing effective solutions. Asserson Law Offices is regulated by the Solicitors Regulation Authority, emphasizing their adherence to professional standards. ID 22603
Ransomware	Rothmann Immobilien id22600 View details	2025-09-26	Germany	Construction / Real Estate	leaked
(Client data inside) Rothmann Immobilien GmbH is a company that operates in the Real Estate industry. It employs 1to4 people and has 1Mto5M of revenue. ID 22600
Ransomware	FTCS Forage id22599 View details	2025-09-26	United States	Finance / Legal / Insurance	leaked
(Client data, accounting records, and internal documentation) FTCS Forage is a company that operates in the Civil Engineering Construction industry. It employs 100to249 people and has 5Mto10M of revenue. The company is headquartered in Fretin, Hauts-de-France, France. ID 22599
Ransomware	Memphis Millwork id22598 View details	2025-09-26	United States	Communication / Marketing	leaked
(Client data, accounting records, and internal documentation) Memphis Millwork specializes in commercial architectural millwork, catering to clients in Memphis and the surrounding areas. The company focuses on providing high-quality millwork solutions for various architectural projects. They are known for their expertise in crafting custom millwork that enhances the aesthetics and functionality of commercial spaces. Memphis Millwork is committed to delivering exceptional craftsmanship and customer service. ID 22598
Ransomware	Cardinal Machinery id22597 View details	2025-09-26	United States	Manufacturing / Engineering	leaked
(Full data) Cardinal Machinery is a family-owned business with over 50 years of experience in the Machine Tool Industry, serving clients across Tennessee, Alabama, Mississippi, Louisiana, Arkansas, Georgia, and Florida. They provide a range of products including metal cutting tools, EDM, grinding equipment, and various parts and accessories. The company emphasizes customer support with services such as preventative maintenance and quick diagnostics by experienced technicians. With a strong commitment to superior service, Cardinal Machinery aims to enhance clients' production and uptime capabilities through advanced technology solutions. ID 22597
Ransomware	Concord New Energy Group id22429 View details	2025-09-16	China	Energy	leaked
Concord New Energy Group Limited (CNE) specializes in wind and solar power operation. To date, we are the only pure vertical integrated clean energy power company listed on the Hong Kong Stock Exchange. ID 22429
Ransomware	Engineered Advantage id22169 View details	2025-09-08	United States	Manufacturing / Engineering	leaked
Engineered Advantage, PSC (EA) is an architecture and engineering (A/E) firm dedicated to serving the public and private sector in the areas of architecture, civil engineering, structural engineering, field inspections, and construction management in Puerto Rico, Florida and recently after hurricane Irma and Maria in St. Thomas, St. Croix and St. Maarten. ID 22169
Ransomware	Caprez Ingenieure AG id22068 View details	2025-09-01	Switzerland	Communication / Marketing	leaked
Caprez Ingenieure AG provides structural, civil, bridge, water supply, sewage, snow-making, building maintenance, and special fields engineering services. ID 22068
Ransomware	Engineered Components id22051 View details	2025-08-30	United States	Manufacturing / Engineering	leaked
(Financial documents, counterparties, clients) We also distribute a multitude of other components that are utilized by original equipment manufacturers worldwide. Our Anchor Bolt division provides these products to countless fastener companies that operate in a range of industries, from coast to coast. Founded in 1983, ECC has continually grown in the areas of technology, market share and acquisition. Our highly-trained and tenured sales staff offers an unparalleled level of technical knowledge, service and personality. Additionally, with stocking warehouses located across the country that support a variance of VMI and in-plant material management programs, we have the ability to respond rapidly - and effectively - to our customers' needs. 1983 - Established ID 22051
Ransomware	ABM Wireless INC id22050 View details	2025-08-30	United States	Telecommunications	leaked
Inscope is a New York based Master Dealer in the wireless distribution space. Established in 2002, we have grown to become one of the largest Master Dealers for AT&T in the Tri-State area; and among the largest sellers of wireless accessories in the US. InScope has achieved recognition for its growth from its Carrier partners and from Entrepreneur magazine, which recognized us as #33 in its Hot 100 list of fastest growing businesses in the US in 2008. InScope has been founded by wireless industry veterans that understand and embrace the constantly evolving nature of our industry. Our operations have been built to adapt to the varying requirements of our customers over the years, our latest iteration being a focus on accessories to increase the effectiveness of todays multi-functional wireless communication devices. ID 22050
Ransomware	Hilco Metal Building & Roofing Supply id22049 View details	2025-08-30	United States	Manufacturing / Engineering	leaked
Hilco Metal Building & Metal Roofing Supply specializes in providing a comprehensive range of metal buildings, roofing materials, and custom-designed arenas specifically aimed at clients in industrial, oil field, and retail sectors. They offer products such as barndominiums, fencing supplies, and other building components to suit both residential and commercial needs. Serving a wide geographic area in Texas, they cater to clients requiring durable and efficient building materials for storage, equestrian, and construction projects. Their commitment to quality and customer service ensures that clients can source both in-stock and custom order items efficiently. ID 22049
Ransomware	Park Country Club id22048 View details	2025-08-30	United States	Communication / Marketing	leaked
(financial documentation and clients' data internally) Park Country Club is a premier traditional country club located in Western New York. The club offers a comprehensive, member-focused experience with a diverse range of activities suitable for all ages. It emphasizes a welcoming atmosphere of fellowship and friendship, striving to provide exceptional service to its members. The intended clients are individuals and families seeking a community-oriented recreational environment. ID 22048
Ransomware	Toowoomba Friendly Society Dispensary id22047 View details	2025-08-30	Australia	Healthcare / Pharma	leaked
(Financial documents, counterparties, clients) Friendlies Mobility & Independent Living is a trusted community health partner based in Toowoomba, offering mobility products for sale and hire, as well as pharmacy and NDIS services. With a focus on enhancing health, wellbeing, and independence, they provide expert advice and support to their members and the broader community. The company is committed to maintaining old-fashioned customer service while adapting to advances in medical research and technology. Their offerings include a range of mobility aids like lifting chairs, grab rails, and non-slip mats. ID 22047
Ransomware	Provalve Armaturen GmbH & Co. KG id22046 View details	2025-08-30	Germany	Communication / Marketing	leaked
(Financial documents, counterparties, clients) PROVALVE Armaturen GmbH & Co. KG specializes in high-quality valves and fittings designed for demanding applications, primarily in the power generation and chemical industries. The company focuses on manufacturing high-pressure and special valves capable of safely transporting hazardous materials under extreme conditions. They ensure a consistently high quality throughout all stages of development and production. Their product range includes a variety of valve types such as gate valves, check valves, and low-temperature fittings, adhering to DIN and ASME standards. ID 22046
Ransomware	The Smile Spa id21983 View details	2025-08-27	Canada	Healthcare / Pharma	leaked
At the Smile Spa in Baton Rouge, LA, Dr. Aimee Russo-Mounger provides a variety of dental and spa services. Schedule a dentist appointment or fun spa day. ID 21983
Ransomware	Grupo DIRIA id21982 View details	2025-08-27	Costa Rica	Hospitality / Food & Beverage / Tourism	leaked
Grupo Diria is a provider of luxury accommodation in Tamarindo Beach, Costa Rica, offering a range of hotels and resorts. The company is committed to respecting cultural traditions while ensuring modern comfort and security for its guests. Their mission is focused on tourism and hospitality, delivering an authentic Costa Rican experience. Intended clients include travelers seeking high-quality lodging and an immersive cultural experience. ID 21982
Ransomware	Dottori Commercialisti Associati id21916 View details	2025-08-23	Italy	Services	leaked
(including financial documentation and client data) DCA - Dottori Commercialisti Associati is a professional association founded by members with over 20 years of experience in tax and corporate consulting. They offer services including tax and fiscal advice, corporate consulting, and business and accounting advice. The firm aims to assist clients needing guidance in various financial matters. Their location is in Milan, Italy. ID 21916
Ransomware	George Haney & Son id21915 View details	2025-08-23	United States	Services	leaked
George Haney & Son Inc is a family-owned HVAC contractor based in Pasadena, CA, providing services to the San Fernando and San Gabriel Valleys. With a strong reputation since 1927, they specialize in the installation, maintenance, and repair of various HVAC systems, including central AC, heating, and mini-split systems. As a Carrier Factory Authorized Dealer, they cater to both residential and commercial clients, offering customized solutions with a focus on energy efficiency. Their experienced technicians are available for emergency services and emphasize outstanding customer service and value. ID 21915
Ransomware	Selartex id21914 View details	2025-08-23	France	Communication / Marketing	leaked
Selartex is a prominent wholesaler of home textiles in France, boasting over 35 years of experience. The company specializes in offering a wide range of home linen products, including bed linen, decorative textiles, table linen, and bath linen, with more than 6000 items available in stock. Selartex puts a strong emphasis on quality while providing competitive prices, making it a reliable choice for professionals seeking home textile supplies. Committed to staying on top of current living trends, Selartex regularly updates its product offerings and tailors its services to meet the diverse needs of its clientele. ID 21914
Ransomware	GEA Consulting Engineers id21913 View details	2025-08-23	United States	Services	leaked
(including financial documentation and client data) Founded in 1996, GEA Consulting Engineers is an engineering firm specializing in the design of mechanical, electrical, plumbing and fire protection systems for other businesses in the area. The company is based in New York City, New York. ID 21913
Ransomware	Fullcolour.com Limited id21908 View details	2025-08-22	Hong Kong	Communication / Marketing	leaked
We are a family printing business providing Printed Products since 1993. Brochures, leaflets, folders, business stationery, banners, pads and much more. ID 21908
Ransomware	Dualinfor hito inovation id21897 View details	2025-08-21	Portugal	Communication / Marketing	leaked
Dualinfor : Desde 1998 Operamos no mercado português desde Novembro de 1998. Oferecemos uma gama selecionada de produtos e de serviços especialmente orientados ao Mercado Empresarial, PMEs, Profissionais Liberais, Administrações Públicas e Privadas. Uma equipa altamente qualificada, comprometida e motivada, a par de uma sólida carteira de clientes e de parceiros de negócio, constituem o principal ativo desta organização que tem por objetivo continuar a merecer a confiança e reconhecimento da comunidade em geral. ID 21897
Ransomware	fiermann-eller.de id21896 View details	2025-08-21	Germany	Other	leaked
Fachärzte für Allgemeinmedizin und Innere Medizin Die hausärztliche Medizin bildet die Grundsäule der ärztlichen Versorgung. Wir beraten Sie gerne als erste Anlaufstelle zu allen Gesundheitsfragen wie auch Vorsorge, Nachsorge und Rehabilitation. ID 21896
Ransomware	TechSourceOne IT Solutions Provider id21895 View details	2025-08-21	United States	Communication / Marketing	leaked
Email services & protection Managed email services including SPAM filters, anti-virus, anti-malware protection. ID 21895
Ransomware	InEar hear the difference id21894 View details	2025-08-21	Germany	Communication / Marketing	leaked
InEar GmbH & Co. KG ist ein deutscher Hersteller hochwertiger Hörlösungen mit Sitz in Dieburg. Das Unternehmen entwickelt, produziert und vertreibt innovative In-Ear-Monitore und Audiotechnik für professionelle Nutzung sowie Endkunden. Mit modernsten Fertigungstechniken, eigenem Support und Service garantiert InEar höchste Qualität und langjährige Erfahrung in der Audioindustrie. ID 21894
Ransomware	Krewett id21893 View details	2025-08-21	Germany	Communication / Marketing	leaked
Das Ingenieurbüro Dipl.-Ing. K. Krewett in Iserlohn bietet fundierte Ingenieurdienstleistungen in verschiedenen Bereichen wie Bauplanung, technische Beratung und Projektmanagement. Mit langjähriger Erfahrung und hoher Fachkompetenz unterstützen wir private und gewerbliche Kunden bei der Planung, Umsetzung und Betreuung technischer Projekte – kompetent, zuverlässig und individuell. ID 21893
Ransomware	IT-Welt und Telekommunikation verschmelzen id21892 View details	2025-08-21	Germany	IT	leaked
IT-Welt und Telekommunikation verschmelzen Wir haben uns auf diese Entwicklung eingestellt und stehen für unsere Kunden als Komplettanbieter für Branchensoftware, Büroanwendungen und Telekommunikationslösungen bereit. ID 21892
Ransomware	Tomb Multimedia Productions id21891 View details	2025-08-21	Australia	Communication / Marketing	leaked
Providing guidance to the right solution in this ever-evolving landscape we call tomorrow. ID 21891
Ransomware	Sonitrol Security Solutions (SecureFL) id21890 View details	2025-08-21	United States	Services	leaked
Our mission is to provide the best in electronic security so that OUR community is a safer place to live and work. ID 21890
Ransomware	PLN id21886 View details	2025-08-21	Indonesia	Services	leaked
Core business is the supply of electricity, especially in generation, transmission and distribution. Obtaining the task of electrifying all over the archipelago, PLN has the obligation to increase installed capacity for power supply and the development of electricity infrastructure such as transmission networks, substations, and distribution networks. At all times, we continue to improve ourselves and improve services, considering that electricity is a basic infrastructure need that will create a multiplier effect for the progress of the Indonesian economy. Our business continues to expand into various business sectors through subsidiaries, associated entities, joint ventures, and special purpose vehicles (SPV) under the auspices of the PLN Group. Through the implementation of SOLID (Securing Business Sustainability, Optimizing Cost Efficiency, Leading Industry Capabilities, Increasing Profit Contribution and Developing New Edge) business portfolios, we will continue to develop services to become a World Class Electricity Company. ID 21886
Ransomware	Diversified Project Services International id21558 View details	2025-08-06	United States	Services	leaked
Diversified Project Services International, Inc. (DPSI) is a leader in engineering, geomatics (surveying), planning, permitting, inspection, energy management and construction management. ID 21558
Ransomware	Newton Electrical Contractors id21530 View details	2025-08-05	United Kingdom	Construction / Real Estate	leaked
High profile NICEIC Approved Electrical Contractors based in Harrogate and Ripon. We pride ourselves on our quality workmanship within our local family run business ID 21530
Ransomware	Wedlich id21517 View details	2025-08-04	Germany	Communication / Marketing	leaked
WEDLICH. Immobilien & Projektentwicklung war bis 2023 ein Fullservice-Logistiker mit Hauptsitz in Bayreuth. Unser Unternehmen bietet seit 2024 bundesweit zuverlässige und flexible Leistungen in den Segmenten Gewerbeimmobilien, Projektierung und Projektentwicklung. Ihre Zufriedenheit steht für uns an erster Stelle. ID 21517
Ransomware	Koenig Hausverwaltung id21516 View details	2025-08-04	Germany	Other	leaked
Seit mehr als 30 Jahren beschäftigen wir uns zuverlässig, kompetent und mit großem Engagement mit der Verwaltung ID 21516
Ransomware	K2L id21515 View details	2025-08-04	United Kingdom	IT	leaked
Die Digitalisierung schreitet mit Riesenschritten voran. Seit unserer Gründung im Jahr 2003 beraten wir stets auf dem neuesten technischen Stand und unterstützen unsere Kunden dabei, mit der Entwicklung schrittzuhalten. ID 21515
Ransomware	Banco Guanabara id21512 View details	2025-08-03	Brazil	Finance / Legal / Insurance	leaked
Banco Guanabara, financiamento de veculos comerciais, financie seu nibus, caminhes e Sprinters, CDC, Leasing, BNDES Finame e Finame Leasing, Av. Brasil 8.255 Ramos Rio de Janeiro RJ CEP: 21030.000, Tel.: (21) 2562-9600 ID 21512
Ransomware	Clemens Construction id21500 View details	2025-08-02	United States	Construction / Real Estate	leaked
(Banking, insurance, financial, and HR documentation. Audit. Client documentation.) Clemens Construction is a reputable construction firm based in Philadelphia, specializing in renovation and construction projects for the hospitality and commercial sectors. They serve a diverse clientele including hotels, educational institutions, and commercial properties, emphasizing quality and open communication throughout their projects. With a strong track record of successful collaborations, they have earned recognition for their professionalism and ability to manage complex projects while minimizing disruption to operations. The company is committed to delivering exceptional results, making them a preferred partner for construction needs in their market. ID 21500
Ransomware	Pitman Farms id21499 View details	2025-08-02	United States	Agriculture / Food	leaked
(Financial, banking, and audit documentation. Suppliers, clients, mail correspondence, and many more interesting things about how to significantly increase profits while store shelves are empty due to the H5N1 virus.) Pitman Farms has been distributing fine poultry meats since 1954, establishing partnerships to deliver premium poultry products at both local and national levels. The company prides itself on offering quality protein sources to its diverse clientele. By choosing Pitman Farms, customers can expect high-quality poultry that meets their needs. With over 65 years of experience, Pitman Farms continues to prioritize quality in its offerings. ID 21499
Ransomware	Framon S.p.A. id21477 View details	2025-07-31	Italy	Communication / Marketing	leaked
FRAMON S.p.A. is an important company that since 1973 is present in the worldwide market as one of the main manufacturing company of non-ferrous casting components for the furniture and lighting industry. It has three catalogues with about 10.000 articles ; a very good part of them is available in the warehouse. FRAMON S.p.A. is a very flexible " foundry " that makes use of some of the most important technologies of transformation of the raw materials, like die-casting, gravity casting with and without core, hot stamping; mainly product are made with aluminium, brass, zama and plastic. With the support of an internal designer and qualified technicians, today FRAMON S.p.A. is able to conceive, propose and develop new articles starting with the realization of drawings and possible prototypes, creating projects and stamps, up to the concrete manufacturing also under customer exclusive projects and design. ID 21477
Ransomware	Software Design Consulting Group id21405 View details	2025-07-28	United States	Services	leaked
Software Design Consulting Group specializes in tailored software solutions aimed at optimizing business processes across various industries in Dubai, Beirut, and Riyadh. The company offers a range of products, including ERP systems, mobile solutions, and management tools, designed for retail, media booking, and construction sectors. Their services also include project management, training, customization, and ongoing support to ensure successful software implementation and client satisfaction. With over 40 years of ERP experience, they focus on innovative solutions and exceptional customer service to drive clients' business growth. ID 21405
Ransomware	Votava Nantz & Johnson id21399 View details	2025-07-28	United States	Finance / Legal / Insurance	leaked
(Including customer data) VNJ Law is a prominent law firm in Kansas and Missouri that specializes in personal injury cases, including auto accidents, medical malpractice, and wrongful death. The firm boasts over 75 years of combined experience, focusing on maximizing client compensation through skilled representation. Their commitment to providing dedicated legal support ensures clients receive personal attention during challenging times. VNJ Law offers free consultations and operates on a no recovery, no fee basis, making their services accessible to those in need. ID 21399
Ransomware	DA Whitacre Construction id21398 View details	2025-07-28	United States	Construction / Real Estate	leaked
D.A. Whitacre Construction, Inc. is a San Diego-based commercial construction firm with nearly 40 years of experience. The company specializes in framing and has worked on notable projects such as the US Fish Wildlife HQ, SeaWorld attractions, and various educational and hospitality facilities. Their clients include prominent institutions like San Diego State University and Hotel Del Coronado, highlighting their expertise in both commercial and large-scale construction projects. D.A. Whitacre is committed to quality construction services in the residential and commercial markets. ID 21398
Ransomware	md-labels-gmbh.com id21360 View details	2025-07-25	Germany	Communication / Marketing	leaked
Property of the Company Production of product labels. Brief description of Mehmet-Serif Dalyanoglu, label production, "MD Labels" Mehmet-Serif Dalyanoglu, label manufacturer, "MD Labels," based in Bochum is listed in the Creditreform company database with the legal form of a commercial enterprise. The company is economically active. The company is currently managed by one manager (one owner). The company's VAT ID is available in the company data. The company has one location. Data on a principal bank is available. ID 21360
Ransomware	Emerson Chiropractic id21359 View details	2025-07-25	United States	Communication / Marketing	leaked
Emerson Chiropractic has been serving the Southside of Indianapolis, Greenwood, and surrounding communities for over 25 years. Dr. Christian Carter is dedicated to helping the community they are in and providing the care to improve your quality of life. Main business activities are Chiropractics, Massage, Therapeutic Exercises, Nutrition, and Soft Tissue Taping. ID 21359
Ransomware	Greeniverse id21246 View details	2025-07-19	United States	Energy	leaked
Greeniverse is a leading solar system company that assists to design and install a solar system to meet the needs of homes and businesses. ID 21246
Ransomware	Farben-Zentrum Schlegel id21245 View details	2025-07-19	Germany	Manufacturing / Engineering	leaked
We are always happy to help you, whether it is roof paints for the renovation of your roof tiles, filling spray cans with varnishes, industrial varnishes or paints, as well as floor coatings and design coverings of all kinds. ID 21245
Ransomware	Home Solutions of Iowa id21225 View details	2025-07-18	United States	Services	leaked
Home Solutions of Iowa is a comprehensive exterior remodeling company that specializes in offering high-quality LeafGuard® gutters, roofing solutions, and insulation services to homeowners throughout Iowa. ID 21225
Ransomware	Joni L Janecki & Associates id21184 View details	2025-07-16	United States	Education	leaked
Joni L. Janecki & Associates has been designing ecologically restorative and award-winning outdoor environments for over 30 years, fostering connections to nature. Their diverse projects include libraries, community centers, parks, and educational facilities, showcasing their expertise in creating functional and beautiful landscapes. They serve a wide range of clients, including nonprofits, community foundations, and educational institutions. Their work emphasizes sustainability and community engagement, making them a leader in landscape architecture. ID 21184
Ransomware	Waverly Cabinets id21183 View details	2025-07-16	United States	Communication / Marketing	leaked
Waverly Cabinets specializes in providing affordable, high-quality Ready-To-Assemble (RTA) cabinets and related products, including vanities and flooring. Their services include professional design consultations, financing options, and online resources for assembly and installation. The company caters to both individual homeowners and trade professionals seeking quality cabinetry solutions. Waverly Cabinets is committed to excellent customer service and fast shipping, making it a top choice for kitchen and bathroom renovations. ID 21183
Ransomware	Burnett and Son Meat id21182 View details	2025-07-16	United States	Communication / Marketing	leaked
Burnett and Son Meat Company develops ready-to-eat microwaveable meats and meals using a unique blend of culinary proficiency, food trend knowledge, food science, and manufacturing expertise. Have our fully cooked meats delivered frozen directly to your door. You'll love how flavorful and easy a meal from Burnett and Son Meat Co actually is! Our product development team is composed of food scientists and professional chefs dedicated to developing creative new precooked meals for the whole family to enjoy. ID 21182
Ransomware	5àSec id21178 View details	2025-07-16	France	Communication / Marketing	leaked
To our surprise, company representatives stated that for a network of over 2000 dry cleaners, publishing database dumps for several countries of presence would not cause problems, and customers are not important. Their investors expressed the same opinion. Therefore, we are forced to keep our promise and publish this data in full. Current and future partners of the network, as well as all customers, should think very carefully about who they trust. 5aSec was created in 1968 from a real innovative concept based on services with a good quality/price ratio accessible to everybody, straight forward rates with only 5 different prices (hence the «5» in 5aSec) and with fast delivery return. From then on, 5aSec has benefited from a huge development thanks to a commercial offer which came at the right moment. In 30 years, the brand has first expanded in the French territory and then began its great international expansion. In 2001, 5aSec took a new dimension with the arrival of a new investor - EAC Group - and of Olivier Bedat who gave a new dynamism to the group. In 2007, 5aSec's shareholder changed and the Investment company ING Parcom acquires the group. This evolution allowed the 5aSec Group to strenghten its leader position, to continue its international development and to reinforce its shops network. ID 21178
Ransomware	Mausolff Immobilien id21168 View details	2025-07-15	Germany	Construction / Real Estate	leaked
Selling and renting real estate is a matter of absolute trust. With over 35 years of experience and numerous continuing education courses, I am confident that I am the right partner for your project as a real estate agent in Moers. ID 21168
Ransomware	Belk id21136 View details	2025-07-14	United States	Public Sector	leaked
Headquartered in Monroe, North Carolina, Belk is a department store that offers apparel, shoes, accessories, cosmetics, home furnishings and wedding registry online and in-store. Public Statement: Our intention was never to destroy your business. We provided you with the opportunity to address your negligence and keep your customer data intact, but you chose to refuse payment at the agreement stage. As a result, people have suffered. We hope this serves as a lesson for others. ID 21136
Ransomware	City of Keene, NH id21100 View details	2025-07-11	United States	Public Sector	leaked
Keene is a city in Cheshire County, New Hampshire, United States. The population was 23,409 at the 2010 census. It is the seat of Cheshire County. Keene is home to Keene State College and Antioch University New England and formerly hosted the state's annual Pumpkin Festival. ID 21100
Ransomware	PPC Mechanical Seals id21079 View details	2025-07-09	United States	Communication / Marketing	leaked
PPC Mechanical Seals was founded in 1958 in Baton Rouge, Louisiana and was one of the first mechanical seal companies to provide repair service on all types of seals. PPC then took the knowledge and experience it gained from repairing seals to design, engineer, and manufacture their own proprietary products. Today PPC Mechanical Seals products are operating in some of the most demanding applications throughout the process industry. Customers large and small are utilizing the quality products produced by PPC, and relying upon the excellent service and support provided by our experienced staff. Sealing pumps, mixers, compressors, centrifuges, and other pieces of rotating equipment is routine for PPC. PPC offers a complete range of seal designs including single and double cartridge seals, metal bellows seals, split single and double seals, as well as custom engineered seals. Each is available in a broad range of materials and sizes. PPC places a significant emphasis on "service". ID 21079
Ransomware	Cahill Seeds id21046 View details	2025-07-07	Australia	Services	leaked
Cahill Seeds is one of the largest seed growers in eastern Montana, established in 1996. The company specializes in identifying, testing, and multiplying seed genetics to support growers and processors. They offer a wide variety of seeds including wheat, peas, lentils, chickpeas, canola, and various forage crops. Cahill Seeds serves clients across eastern Montana, other states, and Canada, working closely with plant breeders to deliver optimal seed solutions. ID 21046
Ransomware	Silver Lining Herbs id20972 View details	2025-07-05	United States	Healthcare / Pharma	leaked
Silver Lining Herbs specializes in herbal supplements for horses, dogs, and humans, providing natural health products aimed at enhancing the well-being of both pets and their owners. Their range includes various formulations that address health needs such as immune support, joint health, and digestive function. The company is family-owned and has over 25 years of experience in promoting animal health and performance. With a focus on education and optimal care, they offer product bundles designed to ensure the wellness of all family members, including pets. ID 20972
Ransomware	Allegheny Answering Service id20937 View details	2025-07-02	United States	Services	leaked
Allegheny Answering Service offers a diverse range of communication solutions including answering services and call center services, operating 24/7/365 from their location in the United States. They cater to a wide array of clients, from startups to Fortune 500 companies, ensuring that their services can be tailored to meet various business needs. The company emphasizes security and disaster recovery to provide reliable service during any circumstances. Additionally, they prioritize social responsibility by supporting community initiatives and causes important to their clients and employees. ID 20937
Ransomware	HKG Duty Free id20936 View details	2025-07-02	Hong Kong	Retail / E-commerce	leaked
(database dumps inside) HKG Duty Free is the market leader in electronics, but also now developing comprehensive fashion brand portfolio including Mont Blanc, Fossil, Michael Kors, A/X Armani Exchange, Diesel, DKNY, Adidas, Guess, Tommy Hilfiger, Casio, and Lacoste. Also, HKG Duty Free offers wide array of famous fragrance brands launching new programs throughout the year. In addition, popular international and domestic spirits and tobacco brand are offered tax free for export in all HKG Duty Free locations. Moving south, HKG recently acquired two stores located in Belize offering the same brands and categories to customers crossing into Mexico. Coming soon, HKG will introduce its first Duty Free Store opening in Queretaro International Airport, Mexico. ID 20936
Ransomware	JCC Rockland id20935 View details	2025-07-02	United States	Communication / Marketing	leaked
The JCC Rockland is dedicated to the enrichment and continuity of Jewish life and to the preservation and celebration of our rich heritage. The center shall strengthen individual awareness and connection to the Jewish community, the state of Israel, and the community at large through recreational, physical, educational, social, and cultural programs. ID 20935
Ransomware	Johnstone Supply Dallas-Fort Worth id20849 View details	2025-06-26	United States	Retail / E-commerce	leaked
Our team is driven by the opportunity to deliver outstanding service to everyone who may visit our stores. Ethics, partnership and integrity are the main values which moves our business forward. Fissco Supply was born on the expansion of our brazilian parent company, Frigelar North American, Inc. Frigelar North America, Inc. is a 55 years old enterprise, which works with the best suppliers in the world. We are happy to bring the same excellence to the US. ID 20849
Ransomware	Antigo Construction id20848 View details	2025-06-26	United States	Construction / Real Estate	leaked
(including email) Antigo Construction is located in Antigo, Wisconsin, and is the company headquarters for the North American and international business operations. Antigo entered the pavement rehabilitation business in 1982 when it imported from Germany the first of six guillotine-style concrete pavement breakers. In 1988 Antigo began operating the 8600 Badger Breaker® and in 1995 introduced the MHB Badger Breaker® to respond to the growing demand for more efficient and effective concrete breaking technology. Today Antigo is the worldwide leader in concrete pavement rehabilitation: concrete rubblization - 45 million square yards (38m m2), crack/break and seat - 82 million square yards (69m m2), break for removal - 106 million square yards (88m m2). Antigo has the equipment, people and experience to get the job done right. ID 20848
Ransomware	Dealmed Medical Supplies id20847 View details	2025-06-26	United States	Healthcare / Pharma	leaked
(Data of the entire group of companies) Dealmed provides a comprehensive range of medical supplies designed for healthcare professionals. Their products cater to various medical needs, ensuring quality and reliability. Dealmed serves hospitals, clinics, and other healthcare facilities as its primary clients. The company is dedicated to enhancing patient care through its innovative supply solutions. ID 20847
Ransomware	Pay Tel Communications id20836 View details	2025-06-26	United States	Public Sector	pending
Pay Tel Communications, Inc. specializes in providing technology solutions designed to enhance safety and efficiency within confinement facilities and support the needs of incarcerated individuals. Their product offerings include secure communication platforms, educational resources, and multi-function tablets aimed at improving the lives of detainees. The data includes: 10,000+ video call recordings 10,000+ audio call recordings 20,000+ scans of physical mail 70,000+ work-related documents The list of facilities affected by the breach: Alexander County NC Alleghany County Jail NC Alleghany Covington Regional Jail VA Anderson County SC Ashe County Jail NC Barnwell County Jail SC Bartow County GA Beaufort County Detention Center NC Bertie Martin Regional Jail NC Bleckley County Jail GA Bradford County Jail FL Burke Catawba NC Burke County GA Burke County Jail NC Butts County GA Carteret County Detention Center NC Caswell County Detention Center NC Catawba County NC Chatham County GA Citrus County Jail Colleton County Jail SC Columbia County GA Coweta County GA Crisp County Jail GA Currituck County Detention Center NC Dare County Jail NC Davidson County Detention NC Davie County Jail NC Dooly County Jail GA Dorchester SC (St George and Summerville) Duchesne County Detention Center UT Duplin County Detention Center NC Eastern Shore Regional VA Edgecombe County Jail NC Elbert County Jail GA Emanuel County Jail GA Fauquier County Det Center VA Flagler County Jail FL Florence County Jail SC Forsyth County Jail GA Forsyth County Jail NC Franklin County Jail FL Franklin County Jail GA Franklin County Jail MO Franklin County Jail NC Gadsden County FL Gilmer County Jail GA Glynn County Detention Center GA Gordon County Jail GA Granville County Jail NC Greene County NC Guilford County Juvenile Center Guilford County NC Halifax County Jail NC Haralson County Jail GA Heard County Jail GA Hertford County Jail NC Hertford County Jail NC Holmes County FL Houston County Jail GA Jasper County Jail GA Jefferson County Jail FL Jones County Jail GA Jones County Jail NC Laurens County Jail GA Lee County Jail NC Levy County Jail FL Liberty County Jail GA Lincoln NC Lumpkin County Jail Madison County Jail GA Marion County Jail SC McDowell County Detention Center Marlboro County Jail SC Martinsville City Jail VA McDowell County Detention Center NC McIntosh County Jail GA McKinley County Adult Detention Center NM McKinley County Juvenile Detention Center NM Meigs County Jail TN Meriwether County GA Mitchell County Jail GA Monroe County Jail GA Montgomery County, OH Montgomery County, OH Murray County Jail GA Nash County NC Newton County Jail GA Northampton County Jail NC Oconee County Jail GA Okanogan County Corrections Center WA Onslow NC Orange County Jail NC Orangeburg County Jail SC Page County VA Pamlico County Detention Center NC Pamunkey Regional Jail Authority VA Peach County Jail GA Pickens County Jail GA Pierce County Jail GA Pitt County NC Pittsylvania County Jail Polk County Jail NC Pulaski County Jail GA Putnam County Jail GA Randolph County Jail GA Randolph County Jail NC Richmond County Jail NC Robeson County Jail NC Rockbridge Regional Jail VA Saluda County Jail SC Sampson County Detention Center NC Schley County Jail GA SCORE – South Correctional Entity Siskiyou County Jail CA Stanly County NC Stokes County Jail NC Taylor County Jail GA Telfair County Jail GA Thomas County Correctional Institution GA Toombs County Jail GA Treutlen County Jail GA Twiggs County GA Vance County Jail NC Wake County Jail NC Walton County Jail GA Washington County GA Washington County FL Washington County NC Wayne County Jail GA Wayne County Jail NC White County Jail GA Whitfield County Jail GA Wilkes County Jail Main NC Wilkes County Female Annex NC Williamsburg County Jail SC Wilson County Jail NC Worth County GA Wyandotte County Detention Center KS Yadkin County Jail NC York County Prison SC ID 20836
Ransomware	Agganis Driving School id20779 View details	2025-06-23	United States	Education	leaked
Agganis Driving School offers a comprehensive driving program that includes classes, road tests, and specialized training such as defensive driving techniques. The school provides licensed instructors, a fleet of new vehicles, and flexible scheduling options to accommodate diverse learners. They also offer pre-approved vehicle sponsorship for license tests and a unique Parent Awareness Class. Targeting teens and new drivers, Agganis focuses on delivering an elevated driving education experience tailored for safety and professionalism. ID 20779
Ransomware	Hilliard Enterprises id20778 View details	2025-06-23	United States	Communication / Marketing	leaked
Hilliard Enterprises, Incorporated specializes in the worldwide sale, service, and parts supply for used locomotives and marine engines. They pride themselves on providing world-class service and quality parts tailored to meet the unique needs of each customer. Their extensive inventory includes a variety of used Detroit engines, traction motors, and parts from various manufacturers. Hilliard Enterprises serves a diverse clientele in the locomotive and marine industries, ensuring expert support and solutions. ID 20778
Ransomware	Brown & Winters id20777 View details	2025-06-23	United States	Finance / Legal / Insurance	leaked
(Including customer data and email) Brown & Winters is a specialized environmental and environmental insurance law firm operating in California, serving public entities such as ports, cities, counties, and school districts. With over 30 years of experience, they focus on investigating and remediating contaminated sites under the oversight of various environmental agencies. The firm is a recognized leader in Brownfields Redevelopment and actively contributes to environmental education initiatives for California youths. Their innovative approaches combine environmental remediation funding with insights from insurance archaeology to effectively address complex contamination issues. ID 20777
Ransomware	Brown & Brown PC id20776 View details	2025-06-23	United States	Communication / Marketing	leaked
(Including data of several thousand customers) Brown & Brown, P.C., provides the comprehensive legal service and personal, life-long attention of a general practitioner while ensuring that our clients receive the experienced, specialized attention required in todays complex legal environment. ID 20776
Ransomware	AXT id20751 View details	2025-06-20	United States	Communication / Marketing	pending
AXT, Inc. designs, develops, manufactures, and distributes compound and single element semiconductor substrates. The company offers indium phosphide for use in data center connectivity using light/lasers, high-speed data transfer in data centers, 5G communications, fiber optic lasers and detectors, consumer devices, passive optical networks, silicon photonics, photonic integrated circuits, thermo-photovoltaics, RF amplifier and switching, infrared light-emitting diode (LEDS) motion control, lidar for robotics and autonomous vehicles, and infrared thermal imaging. It also provides semi-insulating gallium arsenide (GaAs) substrates for use in Wi-Fi and IoT devices, transistors, direct broadcast television, power amplifiers, satellite communications, and solar cells; and semi-conducting GaAs substrates that are used in LEDs, screen displays using micro-LEDs, printer head lasers and LEDs, 3-D sensing using VCSELs, data center communication using VCSELs, sensors for industrial robotics/near ID 20751
Ransomware	TN CPA id20714 View details	2025-06-17	United States	Services	leaked
(including databases and email) TN CPA offers expert financial solutions and accounting services tailored for businesses in Texas. Their services include tax planning, cash flow management, part-time CFO services, and strategic business coaching, among others. The company aims to assist small business owners and high net-worth individuals by providing reliable bookkeeping, payroll, and tax-integrated strategies. They focus on empowering clients with insightful data to help spot financial issues and opportunities for growth. ID 20714
Ransomware	Huesman Schmid Insurance Agency id20713 View details	2025-06-17	United States	Finance / Legal / Insurance	leaked
(including client documentation and email) Huesman Schmid Insurance Agency is a company that operates in the Insurance industry. It employs 10to19 people and has 5Mto10M of revenue. The company is headquartered in Cincinnati, Ohio. ID 20713
Ransomware	Pressure Dynamics International id20712 View details	2025-06-17	United States	Communication / Marketing	leaked
Pressure Dynamics International is a company that operates in the Industrial Machinery & Equipment industry. It employs 50to99 people and has 10Mto25M of revenue. The company is headquartered in Perth Airport, Western Australia, Australia ID 20712
Ransomware	Trackside Services id20711 View details	2025-06-17	United States	Services	leaked
Trackside Services, Inc. manufactures and sells new and remanufactured hydraulic and pneumatic braking systems that eliminate human error, reduce car damage, minimize dwell time and increase capacity by as much as 20 percent. Our equipment is used in railroad freight yards, port authority, mining concerns, coal transfer, automotive and power plants and anywhere car stabilization and speed control are required. Manufactured in the USA, we pride ourselves in: Providing quality products and solutions since 1996. Providing rolling stock energy management. Creating innovative technology to produce efficient and reliable products. Decreasing costs for our customers. Increasing profits for our customers. Providing extensive customer service and support second to none. ID 20711
Ransomware	Clayton Construction id20710 View details	2025-06-17	United States	Construction / Real Estate	leaked
Clayton Construction Company, Inc. is a leading general contractor in the southeast, boasting over forty years of experience in delivering high-quality construction services. Their extensive portfolio includes projects in various sectors such as industrial, healthcare, educational, and commercial spaces. The company is dedicated to building strong relationships with clients through a comprehensive design/build process and excellent post-construction follow-up. Recognized as one of the fastest-growing companies in South Carolina, Clayton Construction prioritizes safety, quality, and innovative technology in project execution. ID 20710
Ransomware	Strait Steel id20709 View details	2025-06-17	United States	Manufacturing / Engineering	leaked
Strait Steel Inc - an AISC Certified Company - specializes in structural steel fabrication with projects varying from 500 tons to 3500 tons, and single projects up to 12,000 tons. As one of the industry leaders in the north east and mid-atlantic regions, Strait Steel takes pride in providing its customers with a quality service which has built our reputation as a premiere fabricator. Strait Steel has been providing a quality product for over 5 decades. ID 20709
Ransomware	Alaffia id20707 View details	2025-06-17	United States	Communication / Marketing	leaked
Alaffia was founded in 2003 in the Olympia, Washington garage of husband and wife team, Olowo-n'djo Tchala and Prairie Rose Hyde. Alaffia crafts popular beauty and body care products using traditional African methods. Alaffia is "Fair for Life" certified by the Institute for Marketecology (IMO), one of the most renowned international inspection and certification agencies for organic and fair trade accountability. ID 20707
Ransomware	TSE Industries & WHK Biosystems id20706 View details	2025-06-17	United States	Healthcare / Pharma	leaked
TSE Industries Inc is a manufacturer of custom-molded plastics, rubber parts, and elastomers. It is based in Clearwater, Florida. Established in 2012, WHK BioSystems is a contract manufacturer of single-use process components and assemblies for the biopharmaceutical, life sciences, and medical industries. ID 20706
Ransomware	coBuilder id20704 View details	2025-06-17	Norway	IT	leaked
(including complete databases) Cobuilder is a tech company providing digital solutions for the construction industry, aiming to enhance collaboration, digitalization, and sustainability across the entire value chain. Their offerings include asset data management, digital product passports, and sustainability reporting to meet new requirements. Cobuilder's solutions facilitate seamless information flow among construction stakeholders by integrating with other BIM software through APIs. They also provide consultancy services to develop digital strategies that optimize efficiency and reduce costs. ID 20704
Ransomware	Technology Consultants Group id20703 View details	2025-06-17	United States	IT	leaked
TCG Sales Technology Consultant Group New, Renew, & Used Systems, Parts We Buy or Trade in Equipment to Recycle, Reuse, or Resell ID 20703