Ransomware Group intelligence
Payoutsking
ActiveTrack Payoutsking with 144 published victims and 1 known leak locations in a single intelligence view.
DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Payoutsking is tracked by Dark Eye as a ransomware group with 144 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Leak Status Distribution
144
- Leaked 96 66.7%
- Pending 47 32.6%
- Deleted 1 0.7%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 4h ago | payoutsgn7cy6uliwevdqspncjpfxpmzgirwl2au65la7rfs5x3qnbqd.onion |
Top Activity Sectors (16)
- Not identified 27
- Manufacturing / Engineering 24
- IT 12
- Construction / Real Estate 8
- Healthcare / Pharma 7
- Retail / E-commerce 7
- Communication / Marketing 5
- Hospitality / Food & Beverage / Tourism 4
- Energy 3
- Agriculture / Food 3
- Education 3
- Transportation / Travel / Logistics 3
- Services 3
- null 2
- Telecommunications 2
- Finance / Legal / Insurance 2
Typical Attacks (8)
▼MITRE ATT&CK does not currently catalogue Payoutsking, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v20.0. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: payoutsking uses PowerShell scripts to execute malicious commands and deploy ransomware payloads across compromised systems.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: payoutsking persists by adding malicious entries to Windows Registry Run Keys to ensure recurring execution.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: payoutsking disables antivirus tools and security monitoring by terminating security processes and modifying system configurations.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1070.004 File Deletion Stealth
What they do: payoutsking deletes Volume Shadow Copies and backup directories using built-in Windows utilities to prevent recovery.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1018 Remote System Discovery Discovery
What they do: payoutsking moves laterally via SMB shares and mapped drives to access additional servers within the victim network.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1135 Network Share Discovery Discovery
What they do: payoutsking scans network shares to discover victim file structures and identify high-value targets for encryption.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1041 Exfiltration Over C2 Channel Exfiltration
What they do: payoutsking exfiltrates stolen data through encrypted C2 channels before deploying ransomware to enable double extortion.
What that means: Adversaries may steal data by exfiltrating it over an existing command and control channel.
-
T1486 Data Encrypted for Impact Impact
What they do: payoutsking encrypts victim files using a custom ransomware engine, targeting business documents and backups for maximum disruption.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
Ransom Notes (1)
▼The note this group leaves on a compromised machine. Click a filename to read it.
readme_locker.txt
The files on the company's network have been encrypted, and significant amount of confidential data has been downloaded from it. To recover your files to the initial state and prevent disclosure of your sensitive information contact us as soon as possible via the TOX chat platform. - Download a TOX messaging client(https://tox.chat); - Create an account; - Add the following contact ID for futher negotiations: 74FB30F3FCC73D6B1BCE403238D082426F43D95F42CA25DF20CB278D91E8754B151651ED12DD In case you don't get in touch within 7 days, the exfiltrated data will be disclosed on our website: https://payoutsgn7cy6uliwevdqspncjpfxpmzgirwl2au65la7rfs5x3qnbqd.onion
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (144)
Search, filter and paginate the victim timeline for Payoutsking. Showing 1–100 of 144.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Merical LLC id35409 View details | United States | IT | leaked | ||
|
Merical LLC Published: 2026-10-01 Status: Proof Data size: 800GB Views: 11 Website: https://merical.com/ Country: USA Revenue: $178M Employees: 500 About company: Merical LLC is a contract manufacturer and private-label producer of dietary supplements, vitamins, and probiotics. Data description: Confidential, Correspondence, R&D, Leak countdown: 6d 23:34 |
||||||
| Ransomware | W****s id35394 View details | United States | — | pending | ||
|
W****s Published: 2026-10-15 Status: Declared Data size: 720GB Views: 0 Country: USA Revenue: $140M Employees: ** Leak countdown: 8d 04:15 |
||||||
| Ransomware | Irwin Car id34694 View details | United States | Manufacturing / Engineering | leaked | ||
|
Irwin Car Published: 2025-11-04 Status: Disclosed Data size: 272GB Views: 82088 Website: https://irwincar.com/ Country: USA Revenue: $22M Employees: 200 About company: Irwin Car and Equipment engineers and manufactures custom heavy-duty material handling equipment for a wide array of industries and applications. Irwin Car’s Industrial Sales Group and its business units serve the metals, automotive, aerospace and heavy manufacturing industries with custom transfer cars, transporters and trailers. Commentaries: Database backups, corporate correspondence, contracts, financial data\payrolls, production documents, drawings, employees personal data. |
||||||
| Ransomware | Accord Carton id34693 View details | United States | Communication / Marketing | leaked | ||
|
Accord Carton Published: 2025-11-14 Status: Disclosed Data size: 1.5TB Views: 68237 Website: https://accordcarton.com/ Country: USA Revenue: $38M Employees: 200 About company: Accord Carton is a leading manufacturer of quality custom folding cartons. Accord serves global and regional consumer packaged goods companies throughout North America. Commentaries: Financial documents, payrolls, invoices, contracts\NDAs, employees personal data, production documents, drawings, corporate correspondence. |
||||||
| Ransomware | P****y id34686 View details | United States | null | pending | ||
|
P****y Published: 2026-10-13 Status: Declared Data size: 1.8TB Views: 0 Country: USA Revenue: $391M Employees: ** Leak countdown: 5d 06:17 |
||||||
| Ransomware | Morrow Meadows Corporation id34690 View details | United States | Other | leaked | ||
|
Morrow Meadows Corporation Published: 2026-09-23 Status: Proof Data size: 6.8TB Views: 868 Website: https://morrow-meadows.com/ Country: USA Revenue: $730M Employees: 2000 About company: Morrow Meadows Corporation is a full-service electrical and technology contractor providing single-source construction, engineering, and maintenance across California and the Pacific Northwest. Data description: Employees' PII (Personally Identifiable Information), Correspondence, Financial, Projects, Engineering, Contracts, Agreements, NDA, Leak countdown: 4d 06:17 |
||||||
| Ransomware | Merrill Iron & Steel id33652 View details | United States | — | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Watermark Retirement Communities id33653 View details | United States | — | leaked | ||
|
[AI generated] Watermark Retirement Communities is a U.S.-based senior living company that develops, manages, and operates retirement communities offering independent living, assisted living, memory care, and skilled nursing services. Headquartered in Tucson, Arizona, it operates numerous communities across the United States. The company belongs to the senior care and hospitality-adjacent real estate industry, focusing on resident-centered lifestyle programming and care. |
||||||
| Ransomware | M****C id33438 View details | United States | — | — | pending | |
|
m****.com is a US-based entity cataloged within the threat-intelligence index under the listing type ransomware victim. Its sector and operational offerings are contextualized within the intelligence record to support analytical correlation and threat-mapping workflows. The entity is explicitly associated with the threat actor payoutsking in this listing. No incident specifics, breach confirmations, data details, or financial claims are included per strict reporting guidelines. This description provides neutral, authoritative context for catalog users reviewing compromised entities and their linked threat actors. |
||||||
| Ransomware | M****n id33185 View details | United States | IT | — | pending | |
|
M****n is a ransomware victim entity operating within the United States IT sector. The entity represents a compromised organization or infrastructure asset cataloged within the threat-intelligence index under its designated listing type. Its association with the threat actor payoutsking contextualizes its inclusion within active cyber threat monitoring frameworks. This entry provides neutral reference data for analysts tracking ransomware incidents across technology sectors and geographic regions. M****n was listed as a ransomware victim associated with payoutsking. |
||||||
| Ransomware | Proliance Surgeons id32415 View details | United States | Healthcare / Pharma | leaked | ||
|
[AI generated] Proliance Surgeons is a large physician-owned surgical group based in the United States, primarily operating in Washington State. The organization brings together hundreds of independent surgeons across dozens of specialties, including orthopedics, general surgery, and sports medicine. It operates numerous clinics and surgical centers throughout the Pacific Northwest, providing outpatient and inpatient surgical care to patients across the region. |
||||||
| Ransomware | H.W. Lochner id32247 View details | United States | Hospitality / Food & Beverage / Tourism | leaked | ||
|
[AI generated] H.W. Lochner is a US-based civil engineering and infrastructure consulting firm. Founded in 1944 and headquartered in Chicago, Illinois, the company specializes in transportation planning, highway design, bridge engineering, environmental services, and construction management. It primarily serves state and local government clients across the United States, supporting public infrastructure projects including roads, transit systems, and related civil works. |
||||||
| Ransomware | W****s id32216 View details | United States | — | — | pending | |
|
w****.com is a United States-based entity operating within a specific commercial sector, cataloged in the threat-intelligence index under the classification of ransomware victim. The entity's operational profile and public information are documented within cybersecurity intelligence frameworks to support threat actor analysis and incident response tracking. This listing reflects an association with the threat actor payoutsking, indicating a ransomware-related context tied to the entity's geographic and sectoral positioning. The description maintains neutrality regarding specific incident details, avoiding speculation on data impacts or recovery status while providing authoritative catalog context for security professionals and researchers monitoring evolving cyber threats. |
||||||
| Ransomware | H****r id31250 View details | United States | null | leaked | ||
|
H****r is a company operating in the hospitality and food beverage sector in the US, offering various services to its customers. The company is part of the tourism industry, providing accommodations and dining experiences. H****r was listed as a ransomware victim associated with payoutsking. |
||||||
| Ransomware | H****r id33895 View details | United States | null | — | pending | |
|
H****r is cataloged as a ransomware victim entity originating from the United States. The entity operates within an unspecified sector, with no further operational or technical details provided in available records. As part of the threat-intelligence index, H****r is associated with threat actor payoutsking, reflecting its classification within cybersecurity incident documentation. This entry serves to document the relationship between the victim entity and the identified threat actor for analytical and reporting purposes. The listing neutrally confirms H****r was listed as a ransomware victim associated with payoutsking. |
||||||
| Ransomware | T****r id30838 View details | United States | Retail / E-commerce | — | pending | |
|
T****r is a retail and e-commerce company based in the US, offering various products and services to its customers. The company operates in the retail sector, providing a range of offerings to its clients. T****r was listed as a ransomware victim associated with payoutsking. |
||||||
| Ransomware | Casta Diva Group id30554 View details | Italy | IT | leaked | ||
|
[AI generated] Casta Diva Group is an Italian communications and entertainment company headquartered in Milan, Italy. It operates in the media, events, and live entertainment industry, offering services including event production, branded entertainment, digital communication, and audiovisual content creation. The group serves corporate clients and institutions, managing large-scale events, product launches, and integrated communication campaigns across Italy and international markets. |
||||||
| Ransomware | Welldyne id30350 View details | United States | Healthcare / Pharma | deleted | ||
|
[AI generated] Welldyne is a pharmacy benefit management (PBM) company based in the United States. It provides prescription drug management services to health plans, employers, and government programs. The company focuses on improving medication adherence and controlling prescription costs through its pharmacy network, mail-order pharmacy services, and data-driven clinical programs. Welldyne operates primarily across the US healthcare sector. |
||||||
| Ransomware | C****p id30351 View details | Italy | — | leaked | ||
|
c****.com is an Italian company operating in the IT sector, providing various services and solutions. The company is based in Italy and caters to the local market with its offerings. c****.com was listed as a ransomware victim associated with payoutsking |
||||||
| Ransomware | W****e id30106 View details | United States | Retail / E-commerce | — | pending | |
|
W****.com operates in the retail and e-commerce sector, offering various products and services to customers in the United States. As an e-commerce company, it provides online shopping experiences, allowing customers to browse and purchase products remotely. W****.com was listed as a ransomware victim associated with payoutsking |
||||||
| Ransomware | C****h id30107 View details | United States | IT | — | pending | |
|
c****.com is an IT company based in the United States, providing various IT services. The company operates in the IT sector, offering services to clients across the country. c****.com was listed as a ransomware victim associated with payoutsking |
||||||
| Ransomware | NTN Bearing Corporation of America id29115 View details | United States | Hospitality / Food & Beverage / Tourism | leaked | ||
|
[AI generated] NTN Bearing Corporation of America is a US-based subsidiary of Japan's NTN Corporation, operating in the industrial manufacturing sector. The company produces and distributes precision bearings, driveshafts, and related mechanical components used in automotive, aerospace, and industrial machinery applications. Headquartered in Mount Prospect, Illinois, it serves customers across North America with engineering support and distribution services. |
||||||
| Ransomware | Caunton Engineering id28424 View details | United Kingdom | Other | leaked | ||
|
[AI generated] Caunton Engineering is a UK-based structural steelwork contractor and fabricator headquartered in Nottinghamshire, England. The company specialises in the design, fabrication, and erection of structural steelwork for commercial, industrial, and infrastructure projects. Operating within the construction and engineering sector, Caunton serves clients across the United Kingdom and has built a reputation for delivering large-scale steel frame structures. |
||||||
| Ransomware | V. FRAAS id28425 View details | Germany | Other | leaked | ||
|
[AI generated] V. Fraas is a German textile manufacturer specializing in scarves, shawls, blankets, and accessories. Founded in 1880 and headquartered in Helmbrechts, Bavaria, Germany, the company is known for producing high-quality woven and knitted textiles. It operates in the fashion and home textile industry, serving both retail and wholesale markets globally. V. Fraas is recognized for its craftsmanship and broad range of seasonal accessories. |
||||||
| Ransomware | Bespoke Home Interior Design Group id28426 View details | United Kingdom | Other | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Vortex Companies id28427 View details | United States | Construction / Real Estate | leaked | ||
|
[AI generated] Vortex Companies is a US-based infrastructure rehabilitation firm specializing in trenchless technology solutions for underground pipe and sewer systems. Operating in the water and wastewater industry, the company provides services including pipe lining, manhole rehabilitation, and structural repair. It serves municipalities and utilities across North America, helping extend the life of aging infrastructure without extensive excavation. |
||||||
| Ransomware | Telia Norge AS id28428 View details | Norway | Telecommunications | leaked | ||
|
[AI generated] Telia Norge AS is a Norwegian telecommunications company and a subsidiary of the Swedish Telia Company group. Operating in Norway, it provides mobile and fixed-line services, broadband internet, and TV solutions to both consumer and business customers. The company is a major player in the Norwegian telecom market, competing with providers like Telenor and Ice, and operates infrastructure supporting voice, data, and digital services across the country. |
||||||
| Ransomware | Prater Engineering Associates id28429 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | ESENTIA Energy Systems id28430 View details | Mexico | Energy | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Del Monte Foods id28431 View details | United States | Agriculture / Food | leaked | ||
|
Del Monte Foods Published: 2026-02-18 Status: Disclosed Data size: 1.2TB Views: 35133 Website: https://delmontefoods.com/ Country: USA Revenue: $2.1B Employees: 7000 About company: Del Monte Foods, is a North American food production and distribution company. The Company offers snacks, packaged fruits, vegetables, soups, sauces, and other canned food products. Data description: Confidential, Employees' PII (Personally Identifiable Information), Legal, Litigations, complaints, Correspondence, Financial, R&D, Contracts, Agreements, NDA, |
||||||
| Ransomware | I****G id28432 View details | United States | IT | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | O****C id28433 View details | United States | IT | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | UFP Technologies id28434 View details | United States | Education | leaked | ||
|
UFP Technologies Published: 2026-02-18 Status: Disclosed Data size: 620GB Views: 28244 Website: https://ufpt.com/ Country: USA Revenue: $598M Employees: 4000 About company: UFP Technologies is a medical designer and manufacturer of custom devices, sub-assemblies, components and packaging utilizing foams, films, and plastics. Data description: Military, Employees' PII (Personally Identifiable Information), Correspondence, Financial, Engineering, QA, |
||||||
| Ransomware | G****s id28435 View details | United States | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | E****b id28436 View details | United States | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | Aero-Coating id28437 View details | Germany | Other | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Peachtree Group id28438 View details | United States | Finance / Legal / Insurance | leaked | ||
|
[AI generated] Peachtree Group is a US-based hospitality-focused investment and management firm headquartered in Atlanta, Georgia. The company operates across real estate private equity, credit, and hotel management, specializing in acquiring, developing, and managing hotel properties. It serves institutional and private investors and is active across the United States hospitality and commercial real estate sectors. |
||||||
| Ransomware | Ash & Lacy Holdings id28439 View details | United Kingdom | Other | leaked | ||
|
[AI generated] Ash & Lacy Holdings is a UK-based manufacturing company specialising in building envelope products and construction systems. It produces metal framing, rainscreen cladding, and roofing solutions primarily for the construction industry. Operating from the West Midlands, England, the company serves commercial and residential sectors, supplying architects, contractors, and specifiers with structural and aesthetic building components. |
||||||
| Ransomware | Maderas del Alto Urgel id28440 View details | Spain | Other | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Eyemart Express id28441 View details | United States | Retail / E-commerce | leaked | ||
|
[AI generated] Eyemart Express is a United States-based retail optical chain specializing in prescription eyeglasses and contact lenses. Founded in 1990 and headquartered in Farmers Branch, Texas, the company operates hundreds of stores across the country. It offers eye exams, frames, and lenses with an emphasis on fast turnaround times. Eyemart Express competes in the optical retail industry alongside brands like LensCrafters and Visionworks. |
||||||
| Ransomware | Sofinter S.p.a id28442 View details | Italy | Manufacturing / Engineering | leaked | ||
|
[AI generated] Sofinter S.p.A. is an Italian industrial company specializing in the design and manufacturing of heat recovery systems, boilers, and thermal energy equipment. Operating in the energy and power generation sector, it serves industries including oil and gas, petrochemical, and power plants. Headquartered in Italy, Sofinter provides engineering solutions focused on steam generation and waste heat recovery, supporting both domestic and international markets. |
||||||
| Ransomware | Grant Production Testing Services id28443 View details | Canada | Healthcare / Pharma | leaked | ||
|
[AI generated] Grant Production Testing Services is an oilfield services company specializing in well testing, flow measurement, and production testing solutions for the oil and gas industry. The company provides temporary and permanent testing equipment, data acquisition, and technical expertise to support operators during exploration and production activities. It operates primarily in Canada, serving clients across the upstream energy sector. |
||||||
| Ransomware | Kichler Lighting id28444 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] Kichler Lighting is an American company headquartered in Garland, Texas, specializing in the design and distribution of decorative lighting fixtures, ceiling fans, and landscape lighting products. Founded in 1938, it operates within the residential and commercial lighting industry, offering a wide range of indoor and outdoor lighting solutions. Kichler sells its products through wholesale distributors and retail partners across the United States and internationally. |
||||||
| Ransomware | Powell Electronics id28445 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] Powell Electronics is a US-based authorized distributor of electronic components and assemblies. Founded in 1946 and headquartered in Camp Hill, Pennsylvania, the company serves aerospace, defense, industrial, and commercial markets. It supplies connectors, cables, electromechanical components, and custom assemblies from leading manufacturers, offering supply chain solutions, engineering support, and value-added services to customers across North America. |
||||||
| Ransomware | Central National Gottesman id28446 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] Central National Gottesman is a privately held global pulp and paper merchant headquartered in Purchase, New York, USA. Founded in 1886, the company distributes printing and writing papers, packaging materials, pulp, and tissue products. It operates across multiple continents, serving publishers, printers, and converters. It is one of the largest independent paper distribution companies in the world. |
||||||
| Ransomware | Florida East Coast Railway id28447 View details | United States | Retail / E-commerce | leaked | ||
|
[AI generated] Florida East Coast Railway is a regional freight railroad operating in the United States, primarily serving the state of Florida. Founded in the 1890s by Henry Flagler, it runs approximately 351 miles of track along Florida's eastern corridor from Jacksonville to Miami. The company transports intermodal containers, vehicles, and various commodities, playing a key role in Florida's freight logistics and supply chain infrastructure. |
||||||
| Ransomware | Blanchard id28448 View details | United States | Education | leaked | ||
|
[AI generated] Blanchard is a US-based professional development and leadership training company founded by Ken Blanchard, co-author of "The One Minute Manager." Operating in the corporate training and consulting industry, it offers leadership development programs, coaching services, and organizational effectiveness solutions to businesses worldwide. Headquartered in Escondido, California, the company serves clients across various sectors globally. |
||||||
| Ransomware | Grace Design Studios id28449 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | TESSCO id28450 View details | United States | Telecommunications | leaked | ||
|
[AI generated] TESSCO Technologies is a United States-based company operating in the wireless technology distribution industry. Founded in 1982 and headquartered in Hunt Valley, Maryland, TESSCO serves as a value-added distributor and solutions provider for wireless networking products, infrastructure equipment, and mobile devices. The company supplies carriers, contractors, system integrators, and government agencies with products from leading manufacturers across the telecommunications sector. |
||||||
| Ransomware | Englewood Lab id28451 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] Englewood Lab is a contract development and manufacturing organization (CDMO) based in the United States, operating out of Englewood, New Jersey. The company specializes in the development and manufacturing of topical, sterile, and liquid pharmaceutical products. It serves clients in the pharmaceutical and personal care industries, offering formulation development, stability testing, and regulatory support services. |
||||||
| Ransomware | Lc Industries id28452 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] LC Industries is a nonprofit organization based in the United States that provides employment and training opportunities for people who are blind or visually impaired. Operating primarily in North Carolina, it manufactures and supplies a range of products including military and government goods, fulfilling contracts through the AbilityOne Program, which connects nonprofit agencies with federal procurement opportunities. |
||||||
| Ransomware | SCS Engineers id28453 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] SCS Engineers is a United States-based environmental consulting and engineering firm. Founded in 1970, the company specializes in solid waste management, landfill design and operations, environmental remediation, and sustainability services. It serves municipal, industrial, and government clients across the country, offering technical solutions related to waste infrastructure, gas collection systems, and environmental compliance. |
||||||
| Ransomware | Epcon Communities id28454 View details | United States | Construction / Real Estate | leaked | ||
|
[AI generated] Epcon Communities is a US-based homebuilding and franchise company founded in 1986 and headquartered in Dublin, Ohio. It specializes in developing and selling single-story, low-maintenance homes primarily targeting active adults aged 55 and older. Operating in the residential real estate and construction industry, Epcon also franchises its community development model to builders across the United States. |
||||||
| Ransomware | Data Exchange Corporation id28455 View details | United States | Communication / Marketing | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | SunSource id28456 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] SunSource is a US-based industrial distribution company specializing in the supply of fluid power, fluid process, and motion control components and systems. It serves a wide range of industries including manufacturing, agriculture, and construction. The company provides products such as hydraulics, pneumatics, and related technical services, helping businesses maintain and optimize their industrial equipment and operations. |
||||||
| Ransomware | A****y id28457 View details | United States | IT | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | H****o id28458 View details | United States | IT | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | F****p id28459 View details | United States | Transportation / Travel / Logistics | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | S****p id28460 View details | United States | Manufacturing / Engineering | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | H****l id28461 View details | United States | Manufacturing / Engineering | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | N****a id28462 View details | United States | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | Vereinigte-stadtwerke id25524 View details | Germany | Other | leaked | ||
|
[AI generated] Vereinigte Stadtwerke is a German utility company that supplies electricity, natural gas, and water to its customers. Apart from these, the company also offers telecommunication services including Internet and fixed network. It primarily serves residents and businesses in the Northern Germany region. The company was founded in 2012 as a merger of several municipal utilities to increase efficiency and service quality. |
||||||
| Ransomware | Peugeot Motocycles id25523 View details | France | Other | leaked | ||
|
[AI generated] Peugeot Motocycles is a French company that manufactures a wide range of scooters and small motorcycles. It is one of the oldest motorcycle manufacturers in the world, having started production in 1898. Over the years, the company has become renowned for its innovative designs and high-performance bikes. It's currently owned by Indian multinational conglomerate Mahindra & Mahindra. |
||||||
| Ransomware | JJ White id25522 View details | United States | Other | leaked | ||
|
[AI generated] JJ White is a multi-divisional construction company based in Philadelphia, Pennsylvania. It specializes in general, mechanical and industrial construction with additional services in HVAC maintenance and service, fire protection, and rigging projects. The company operates across the United States working with industries such as healthcare, pharmaceutical, petrochemical, and manufacturing. |
||||||
| Ransomware | Soapeople id25521 View details | Belgium | Other | leaked | ||
|
[AI generated] Soapeople is a consulting company that specializes in SAP and salesforce implementation to drive digital transformation. They are an accredited SAP and Salesforce partner. With a team of experts, they provide solutions to businesses in areas like ERP, CRM, Analytics, Cloud infrastructure, and more. Their solutions are focused on improving business performance and efficiency. |
||||||
| Ransomware | Visionwheel id25520 View details | United States | Other | leaked | ||
|
[AI generated] Visionwheel is a prominent manufacturing company that produces high-quality, aesthetically-designed alloy wheels for various vehicles such as cars, light trucks, and SUVs. The company offers a wide range of styles, finishes, and sizes, catering to diverse customer requirements. Visionwheel ensures a rigorous testing process to maintain robust safety standards. It also continually innovates in design to stay abreast in the competitive auto industry. |
||||||
| Ransomware | Sanko Gosei Technology id25519 View details | United Kingdom | IT | leaked | ||
|
[AI generated] Sanko Gosei Technology is a Japanese company specializing in development, design, and manufacturing of plastic components. They serve various sectors, including automotive, electrical, & consumer products. Their expertise includes Injection moulding, design assistance, & tool production. Meanwhile, it has international operations, with facilities in Europe, Asia, & America. |
||||||
| Ransomware | Chemirol id25518 View details | Poland | Agriculture / Food | leaked | ||
|
[AI generated] Chemirol is a Polish company acknowledged in the agricultural market for offering a wide variety of services including purchase of agricultural produce, supply of fertilizers, and fuel. It also engages in grain trading, milling, oil industry and provides financial consulting to farmers. The company has been operating since 1992 with the purpose of supporting the growth and advancement of Polish agriculture. |
||||||
| Ransomware | Rameder id25517 View details | Germany | Hospitality / Food & Beverage / Tourism | leaked | ||
|
[AI generated] Rameder is a German company that specializes in the sale of towbars and transport solutions. Founded in 1996, it offers a broad variety of towing equipment and accessories, removable and fixed towbars, electrical sets, bike carriers, roof boxes, and roof racks. Noted for its online business model, Rameder operates in several European countries. |
||||||
| Ransomware | Bär Cargolift id25516 View details | Germany | Transportation / Travel / Logistics | leaked | ||
|
[AI generated] Bär Cargolift is a leading European manufacturer of hydraulic tail lifts, often utilized in trucks and commercial vehicles. Founded in 1981 in Heilbronn, Germany, it provides a wide range of products, from standard liftgates to retractable lifts, designed for different vehicle types and load capacities. Bär Cargolift is recognized for its innovation, quality, and safety in producing transport solutions. They also offer value-added services like training, repair, and maintenance. |
||||||
| Ransomware | A****s id25515 View details | United Kingdom | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | A****g id25514 View details | Germany | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | L****p id25513 View details | United States | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | V****S id25512 View details | Germany | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | B****p id25511 View details | United Kingdom | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | C****g id25510 View details | United Kingdom | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | M****l id25509 View details | Spain | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | Accord Carton id24209 View details | United States | Communication / Marketing | leaked | ||
|
[AI generated] Accord Carton is a family-owned company that specializes in designing and manufacturing high-quality folding cartons. Founded in 1940, the company is based in Alsip, Illinois. Accord Carton utilizes advanced printing and finishing technologies to produce innovative packaging design solutions. Their services are widely used across industries, including food and beverage, healthcare, and beauty products. |
||||||
| Ransomware | Accord Carton id32890 | United States | Communication / Marketing | pending | ||
|
[AI generated] Accord Carton is a family-owned company that specializes in designing and manufacturing high-quality folding cartons. Founded in 1940, the company is based in Alsip, Illinois. Accord Carton utilizes advanced printing and finishing technologies to produce innovative packaging design solutions. Their services are widely used across industries, including food and beverage, healthcare, and beauty products. |
||||||
| Ransomware | S****e id24204 View details | Belgium | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | V****l id24203 View details | United States | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | Klüber Elektroanlagenbau GmbH id32891 | Germany | — | pending | ||
|
[AI generated] "Klüber Elektroanlagenbau GmbH" is a German electrical installation company. They are experts in implementing and maintaining electrical systems for buildings and industrial operations. The company's services include planning and installation of electrical systems, creation of digital planning documents, and comprehensive electrical maintenance. |
||||||
| Ransomware | Klüber Lubrication id24180 View details | Germany | Manufacturing / Engineering | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Klüber Lubrication id32893 | Germany | Manufacturing / Engineering | pending | ||
|
[AI generated] Klüber Lubrication is a German-based company specializing in the development, production, and distribution of high-quality lubricants for a wide array of industries. These range from automotive and rail to wind energy and food & beverages. With a longstanding history, Klüber Lubrication is well-known for its innovative, efficient, and environmentally-friendly specialties that cater to specific customer requirements. Its services also include comprehensive consultation and support. |
||||||
| Ransomware | Lithographix id24179 View details | United States | Other | leaked | ||
|
[AI generated] Lithographix is a printing company based in Hawthorne, California, specializing in offering high-quality printing solutions. They provide services including large format printing, direct mail, digital printing, commercial printing, and binding services. They cater to a range of industries such as advertising, publishing, retail, and more. Established in 1975, Lithographix is known for delivering comprehensive, innovative, and eco-friendly printing solutions. |
||||||
| Ransomware | Lithographix id32894 | United States | Other | pending | ||
|
[AI generated] Lithographix is a printing company based in Hawthorne, California, specializing in offering high-quality printing solutions. They provide services including large format printing, direct mail, digital printing, commercial printing, and binding services. They cater to a range of industries such as advertising, publishing, retail, and more. Established in 1975, Lithographix is known for delivering comprehensive, innovative, and eco-friendly printing solutions. |
||||||
| Ransomware | V****e id24015 View details | Germany | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | P****s id24014 View details | France | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | J****e id24013 View details | United States | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | K****n id23948 View details | Germany | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | L****x id23947 View details | United States | — | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | A****n id23896 View details | United States | Other | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | Irwin Car id23810 View details | United States | Manufacturing / Engineering | leaked | ||
|
[AI generated] Irwin Car and Equipment is a manufacturing company specialized in the production of heavy-duty material handling equipment. They create custom mining cars, conveyor cars, tunneling cars and more. It aids various industries, including mining and tunneling, in improving their efficiency and safety. The company is based in the USA and is recognized for its innovative and durable equipment. |
||||||
| Ransomware | Irwin Car id32896 | United States | Manufacturing / Engineering | pending | ||
|
[AI generated] Irwin Car and Equipment is a manufacturing company specialized in the production of heavy-duty material handling equipment. They create custom mining cars, conveyor cars, tunneling cars and more. It aids various industries, including mining and tunneling, in improving their efficiency and safety. The company is based in the USA and is recognized for its innovative and durable equipment. |
||||||
| Ransomware | I****r id23599 View details | United States | Other | leaked | ||
|
No additional victim description available. |
||||||
| Ransomware | Time Equities id23492 View details | United States | Construction / Real Estate | pending | ||
|
[AI generated] Time Equities is a globally diversified real estate firm, founded in 1966, based in New York City. The company focuses on 3 main aspects: acquisition, development, and management of properties. It handles a variety of types, ranging from office and retail to industrial and residential. They have properties in 30 states in the US, as well as in Europe and Canada. |
||||||
| Ransomware | Time Equities id32901 | United States | Construction / Real Estate | pending | ||
|
[AI generated] Time Equities is a globally diversified real estate firm, founded in 1966, based in New York City. The company focuses on 3 main aspects: acquisition, development, and management of properties. It handles a variety of types, ranging from office and retail to industrial and residential. They have properties in 30 states in the US, as well as in Europe and Canada. |
||||||
| Ransomware | T****s id23281 View details | United States | Other | — | pending | |
|
No additional victim description available. |
||||||
| Ransomware | Linxx Global Solutions id22881 View details | United States | Services | leaked | ||
|
[AI generated] Linxx Global Solutions is a U.S. based company that provides training and operational support services for the defense sector. Their offerings include security and defense training, protective services, intelligence, and maritime solutions. Linxx works in partnership with the federal government and military, and is particularly specialized in counter-terrorism and law enforcement training. |
||||||
| Ransomware | Linxx Global Solutions id32908 | United States | Services | pending | ||
|
[AI generated] Linxx Global Solutions is a U.S. based company that provides training and operational support services for the defense sector. Their offerings include security and defense training, protective services, intelligence, and maritime solutions. Linxx works in partnership with the federal government and military, and is particularly specialized in counter-terrorism and law enforcement training. |
||||||