Ransomware Group intelligence
Thegentlemen
ActiveTrack Thegentlemen with 1056 published victims and 2 known leak locations in a single intelligence view.
Overview
Thegentlemen is tracked by Dark Eye as a ransomware group with 1056 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Leak Status Distribution
- Leaked 15 1.4%
- Pending 1041 98.6%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 2h ago | tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion |
| Leak location 2 | Onion service | Down checked 2h ago | i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion |
Top Activity Sectors (21)
- IT 160
- Manufacturing / Engineering 124
- Communication / Marketing 89
- Healthcare / Pharma 85
- Services 78
- Retail / E-commerce 72
- Finance / Legal / Insurance 58
- Construction / Real Estate 50
- Transportation / Travel / Logistics 33
- Not identified 33
- Agriculture / Food 30
- Education 29
- Public Sector 21
- Energy 19
- Hospitality / Food & Beverage / Tourism 14
- NGOs / Associations 13
- Telecommunications 8
- null 3
- Media / Entertainment 1
- Law Enforcement / Public Sector 1
- Research 1
Typical Attacks (17)
▼How Thegentlemen typically operates, as attributed by MITRE ATT&CK v20.0. Attributed via The Gentlemen.
-
T1583.001 Domains Resource Development
What they do: The Gentlemen has maintained a TOR Data Leak Site (DLS) to post stolen victim data.
What that means: Adversaries may acquire domains that can be used during targeting.
-
T1585 Establish Accounts Resource Development
What they do: The Gentlemen and its affiliates have leveraged Tox to communicate with victims.
What that means: Adversaries may create and cultivate accounts with services that can be used during targeting.
-
T1585.001 Social Media Accounts Resource Development
What they do: The Gentlemen has established social media accounts on X.
What that means: Adversaries may create and cultivate social media accounts that can be used during targeting.
-
T1588.002 Tool Resource Development
What they do: The Gentlemen has provided a custom EDR killing tool called GentleKiller and other like software that abuse vulnerable drivers via the Bring Your Own Vulnerable Driver (BYOVD) technique to their affiliates that attempts to disable EDR solutions.
What that means: Adversaries may buy, steal, or download software tools that can be used during targeting.
-
T1683.001 Written Content Resource Development
What they do: The Gentlemen has utilized branded code and ransom notes.
What that means: Adversaries may create or tailor written materials to support targeting and malicious operations.
-
T1683.002 Audio-Visual Content Resource Development
What they do: The Gentlemen has leveraged a branded graphic that is placed on the systems desktop wallpaper that symbolizes the association of malicious activity to the group.
What that means: Adversaries may create or manipulate audio, image, and video content to support targeting and malicious operations.
-
What they do: The Gentlemen has leveraged compromised user credentials to gain access to victim hosts.
What that means: Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
T1190 Exploit Public-Facing Application Initial Access
What they do: The Gentlemen has exploited vulnerable public-facing devices and services to gain access to victim environments.
What that means: Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
-
T1068 Exploitation for Privilege Escalation Privilege Escalation
What they do: The Gentlemen has assisted affiliates with gaining privilege escalation through the use of BYOVD.
What that means: Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
-
T1027.002 Software Packing Stealth
What they do: The Gentlemen has packed The Gentlemen Ransomware binaries utilizing either Themida or Enigma to obfuscate the malicious payloads.
What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
-
T1036 Masquerading Stealth
What they do: The Gentlemen has fabricated the version information of payload files to evade detection.
What that means: Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools.
-
T1036.001 Invalid Code Signature Stealth
What they do: The Gentlemen has copied digital signatures from legitimate executables in attempts to circumvent detection.
What that means: Adversaries may attempt to mimic features of valid code signatures to increase the chance of deceiving a user, analyst, or tool.
-
T1036.005 Match Legitimate Resource Name or Location Stealth
What they do: The Gentlemen has named The Gentlemen Ransomware payload files to resemble well-known software vendors to include security vendors.
What that means: Adversaries may match or approximate the name or location of legitimate files, Registry keys, or other resources when naming/placing them.
-
T1018 Remote System Discovery Discovery
What they do: The Gentlemen has utilized internal network scanning tools to enumerate additional hosts in the victim environment to include Advanced IP Scanner.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1219.002 Remote Desktop Software Command and Control
What they do: The Gentlemen has relied on remote access tools, such as AnyDesk, as a means of maintaining access to victim environment.
What that means: An adversary may use legitimate desktop support software to establish an interactive command and control channel to target systems within networks.
-
T1486 Data Encrypted for Impact Impact
What they do: The Gentlemen has used The Gentlemen Ransomware to encrypt victim’s data.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1657 Financial Theft Impact
What they do: The Gentlemen has used double-extortion tactics to sway victims to pay a ransom to include exfiltrating sensitive data, encrypting files, and threatening public release if a payment is not received.
What that means: Adversaries may steal monetary resources from targets through extortion, social engineering, technical theft, or other methods aimed at their own financial gain at the expense of the availability of these resources for victims.
Tools Observed (64)
▼Software Thegentlemen has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
Defense evasion
Discovery
Discovery & enumeration
Exfiltration
LOLBAS (living-off-the-land binaries)
Networking & tunnelling
OffSec
Offensive security tooling
RMM Tools
Remote monitoring & management
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Dark Eye.
Ransom Notes (3)
▼The note this group leaves on a compromised machine. Click a filename to read it.
README-GENTLEMEN_3.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 13343E50C1B3466F0EA35B5B3E55A044CB7132FD28A8665EFEA0E5848E276D548C21B79F15C2 Download Tox messenger: https://tox.chat/download.html Contact us (add via SimpleX): https://smp14.simplex.im/a#4mlOiePV8NBXOv2QrZ9CaPeRPm1mBUgxn4SdpFnm978 Download SimpleX https://simplex.chat/downloads/ СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/TheGentlemen26 Clearnet blog link: https://thegentlemen.cc/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats. We have stolen more than 100 GB of your corporate information from your servers, including critically important data. Your company is facing a massive information security breach. A total data leak has occurred. This greatly increases the risk of colossal financial and reputational losses.
README-GENTLEMEN_2.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 98C132E2B20B531BE6604397D97040C1E9EB42FCE12EDF119BCE8B4031CA5C70DAF5E65FA3C3 Download Tox messenger: https://tox.chat/download.html Contact us (add via Session ID): 05809b2da1d5b1a302f48b5767fd1843d54f3c516f9ab0eb26b544ffa73340292e Download Session https://getsession.org СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats.
README-GENTLEMEN.txt
[snip] = YOUR ID Gentlemen, your network is under our full control. All your files are now encrypted and inaccessible. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): F8E24C7F5B12CD69C44C73F438F65E9BF560ADF35EBBDF92CF9A9B84079F8F04060FF98D098E Download Tox messenger: https://tox.chat/download.html COOPERATE TO PREVENT DATA LEAK (239 HOURS LEFT) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (1056)
Search, filter and paginate the victim timeline for Thegentlemen. Showing 1–100 of 1056.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | CommTank id35962 View details | United States | IT | pending | ||
|
CommTank commtank.com CommTank Inc is a US storage tank contractor founded in 1997 in Winchester, Massachusetts, specializing in installation, removal, inspection and maintenance of underground and aboveground storage tanks across New England and the Mid-Atlantic. With 50 to 100 employees and estimated revenue of 10 to 25 million dollars, it serves government facilities, hospitals, schools and industrial clients across 8 states. Its services cover the full tank lifecycle including UST and AST installation, leak testing, cathodic protection, soil remediation and emergency spill response. Led by founder Rick Connolly, it holds EPA, MA DEP, CT DEEP and NFPA certifications and runs its own field crews without subcontracting core work. It also provides Phase I and II environmental site assessments and SPCC compliance planning. The company has built a niche in high-barrier tank services requiring specialized licensing and regulatory expertise. Activates in 238:07:04 |
||||||
| Ransomware | Ined id35961 View details | United States | IT | pending | ||
|
Ined ined.fr INED is France's National Institute for Demographic Studies, founded in 1945 in Paris as a public scientific research institution under CNRS patronage and the world's largest demographic research center with 200 staff and 120 researchers. It holds a unique mandate as France's national population statistics authority, producing the annual Démographie de la France report and the monthly Population and Sociétés bulletin. Its 8 research departments cover mortality, fertility, migration, social stratification and global health, publishing over 300 scientific papers per year. INED maintains 20 plus demographic databases including the global Human Fertility and Human Mortality Databases with Max Planck and UC Berkeley. Led by Director Cyrille Schott, it partners with the UN, WHO and 50 plus international institutions while offering open access to all publications. Activates in 238:10:29 |
||||||
| Ransomware | Spontini id35919 View details | Italy | Services | pending | ||
|
Spontini spontinimilano.com Spontini is a Milanese pizza by the slice chain founded in 1953, now run by the third generation of the Innocenti family with Massimo Innocenti as CEO and his son Andrea leading operations. The group runs about 27 stores in Milan and 15 more across 10 countries including Japan, Korea, Qatar and Saudi Arabia, mostly through franchising with partners like M.H. Alshaya. It serves around 2.4 million pizza slices a year using an unchanged 1953 recipe with 100 percent Italian ingredients like Molini Certosa flour and Rodolfi tomatoes. Revenue has grown to roughly 30 million euro with over 800 employees, driven by expansion into travel locations like Milan Central station and Malpensa airport. In 2026 the brand entered retail with a frozen pizza line called Tonda 1953 produced with SanNico Food. Activates in 80:18:16 |
||||||
| Ransomware | Serit CC id35914 View details | Thailand | Services | pending | ||
|
Serit CC serit.no Serit CC, formally C.C. Solution AS, is a Norwegian IT services company founded in 2007 in Bergen, providing cloud, cybersecurity, managed IT, Microsoft 365 and AI automation to small and medium businesses. It has 6 employees and annual revenue of around 17 million Norwegian kroner, and since June 2025 it is part of Serit, one of Norway's largest independent IT groups with 27 offices and over 200 specialists. The company holds Helsenett certification for healthcare clients and runs its own Norwegian data center, keeping all data inside the country. It is led by founder and CEO Christopher Andreas Namtvedt, a former NATO systems administrator, together with CTO Ole Erik Skare who has been with the firm for 17 years. Core strengths are deep Bergen market knowledge combined with the national scale of Serit group partnerships with Microsoft, Fortinet, Dell and Lenovo. A newer focus is secure AI adoption and workflow automation for business clients. Activates in 169:42:58 |
||||||
| Ransomware | Marie Kruses Skole id35915 View details | United States | Education | pending | ||
|
Marie Kruses Skole mks.dk Marie Kruses Skole is a private school in Farum, Denmark, founded in 1869 by education pioneer Marie Kruse, offering a full track from kindergarten through gymnasium STX to about 1100 students. It is the only free primary school and the only gymnasium in Furesø Kommune, employing 107 people and led by rektor Carsten Gade. The school runs 8 gymnasium study lines including Biotek, Mat-Fys, sports, business, super languages and music, plus unique programs like Kruse Elitesport and diving. Revenue in 2024 reached 109.5 million Danish kroner with a 1.4 million profit, backed by 68 percent state subsidy and a stable surplus for 5 straight years. Tuition is 2190 kroner per month with financial aid available, and it attracts over 1100 students on its waiting list. Its key strengths are 157 years of heritage, top national exam results and free admissions independent of municipal student distribution rules. Activates in 169:35:29 |
||||||
| Ransomware | United Rolls id35916 View details | — | Manufacturing / Engineering | pending | ||
|
United Rolls unitedrolls.com United Rolls United Rolls Inc. is a US mill roll manufacturer founded in 1898 in Canton, Ohio, producing horizontally spun cast iron and steel rolls for hot strip, cold strip, plate and roughing mills worldwide. It is a subsidiary of WHEMCO and Park Corporation, employing around 64 to 110 people and generating estimated revenue of 10 to 20 million dollars. Its plant pours, heat treats, grinds and tests rolls under one roof with a capacity of 18,000 tons per year and rolls up to 66 tons. The company is known for its patented Synergy line, including Synergy 100 high-speed steel rolls and UR2-EC niobium carbide iron rolls that extend mill campaign life. Led by President Robert Feielin since 2024, it is part of WHEMCO, the only US maker of all roll types for flat rolling, with sales offices in Berlin and Sheffield. Key strengths are 128 years of heritage and full vertical integration. Activates in 169:32:53 |
||||||
| Ransomware | Pac Production id35917 View details | — | null | pending | ||
|
Pac Production pac.se PAC Group is a Swedish power plant automation company founded in 1979 in Stockholm, delivering control systems, simulation and optimization solutions for thermal, hydro, nuclear and renewable power plants. It has completed over 600 projects on more than 100 power plants across 50 countries with a combined capacity exceeding 110 gigawatts. Its product portfolio includes PAC Control, PAC-Sim full scope simulators, PAC-Balance and the ARTOCloud optimization platform, plus engineering, commissioning and cybersecurity services. The company is independent from major DCS vendors like Siemens and Emerson, giving it flexibility to integrate any technology. Led by CEO Mikael Andersson, many engineers have been with PAC for 20 to 34 years, ensuring deep institutional expertise. New directions include hydrogen power plants, battery energy storage, hybrid plant control and digital twin solutions. Activates in 169:29:40 |
||||||
| Ransomware | Zehren and Associates id35918 View details | — | Services | pending | ||
|
Zehren and Associates zehren.com Zehren and Associates Zehren & Associates is an architecture and design firm founded in 1983 in Avon, Colorado, specializing in resort and mountain architecture with a second office in Santa Barbara, California. Led by founder Jack Zehren, a West Point graduate, the firm has about 37 employees and revenue of roughly 5 million dollars. It offers a full package of architecture, master planning, interior design and landscape architecture, known for projects like The 10th restaurant on Vail Mountain and The Blake hotel at Taos Ski Valley, voted the best ski hotel in North America. The firm designed the Beaver Creek master plan, winner of the Snow Country Best Resort award, and has worked in over 9 countries including Argentina, Korea and Mexico. Key strengths are 43 years of niche expertise and long-term partnerships with Vail Resorts and East West Partners. Activates in 169:26:55 |
||||||
| Ransomware | ASL İnsaat id35911 View details | Türkiye | Services | pending | ||
|
ASL İnsaat aslinsaat.com.tr ASL İnsaat is a Turkish construction company based in Istanbul, operating in civil and industrial building contracting both domestically and internationally. It provides full-cycle services including design, general contracting and project management for residential, commercial and industrial projects. The company is privately held with estimated staffing of several hundred employees scaling with active construction sites. Turkey is the world's second largest market for international construction contractors, and ASL operates within this competitive ecosystem. Key sectors are residential complexes, shopping centers, hotels, factories and infrastructure. Typical strengths of Turkish contractors like ASL are cost competitiveness, speed of delivery and experience in challenging geographies across the Middle East, Africa and Central Asia. Activates in 170:07:47 |
||||||
| Ransomware | Surexport id35912 View details | United States | Transportation / Travel / Logistics | pending | ||
|
Surexport surexport.es Surexport is the largest independent berry producer in Europe, founded in 1994 in Huelva, Spain, growing strawberries, raspberries, blueberries and blackberries across Spain, Portugal, the Netherlands, Morocco and Kenya. Owned since 2020 by Alantra Private Equity, the group is valued at around 600 million euros with revenue approaching 400 million and over 2500 employees. Its competitive edge is exclusive berry varieties developed with US genetics partner Plant Sciences since 2007, sold under the Doñarosa, Berry Sensations and Fruhi brands. Major clients include Tesco, Lidl, Mercadona and Sainsbury's, with 80 percent of revenue from exports to Northern Europe. The company invested 200 million euros in acquisitions and secured a 250 million euro loan in 2025. Activates in 170:02:49 |
||||||
| Ransomware | Northwest Micro Systems id35913 View details | United States | IT | pending | ||
|
Northwest Micro Systems nwmicro.com Northwest Micro Systems, formally Northwest Micro Inc., is a private IT services and software company founded in 1998 in Atlanta, Georgia, serving small businesses with managed IT, cloud backup, email, CRM and custom .NET development. Led by founder and owner Leo Zhadanovsky, it has around 11 employees and steady revenue of roughly 5 million dollars. Its unique model offers affordable one-time products like the One 2 One email server and Speed To Success CRM for about 100 dollars with lifetime updates and support. The company positions itself as the anti-corporate alternative to Oracle and Microsoft, focused on keeping small business clients for life. Core strengths are 28 years of market presence, a loyal SMB client base and a low-overhead operation. Its tech stack centers on Microsoft 365, SQL Server and .NET with a mix of SaaS and on-premise tools. Activates in 170:01:06 |
||||||
| Ransomware | Epic Health id35907 View details | United States | Services | pending | ||
|
Epic Health epichealth.com.au Epic Health is an Australian medical group founded in 2001 in Melbourne, running multiple brands including Epic Medical general practice, Epic Youth Health, Epic Skin Health and Alevia Medical Weight Loss. Its fastest-growing division is Alevia, offering doctor-supervised weight loss programs using GLP-1 medications like Mounjaro and Ozempic across four clinics plus telehealth Australia-wide. The group combines traditional family medicine with niche verticals like dermatology, adolescent health and aesthetic medicine under one team-based model. Led by medical director Dr. Neeraj Mahindra, it serves patients nationally through Medicare-compatible telehealth with instant rebates and a dedicated digital app. Key strengths are 24 years of operation, a debt-free financial position and multi-brand diversification into high-demand health niches. The company is well positioned in Australia's booming medical weight loss and telehealth markets. Activates in 178:05:51 |
||||||
| Ransomware | Incomelec id35908 View details | United States | IT | pending | ||
|
Incomelec incomelec.com Incomelec is a Colombian company founded in 2006 in Bogota, the Latin American leader in pedestrian, vehicle and passenger access control including turnstiles and automated barriers. With 52 employees and operations in 14 countries, it has installed equipment in over 20 airports, 90 parking facilities and 250 buildings, handling more than 85 percent of Colombia's toll booth systems. Its flagship product is BIOMIG, an automated migration control system used at El Dorado and Medellin airports with iris scanning and passport verification. It is the exclusive regional partner of Automatic Systems from the Bollore Group and the only distributor worldwide that locally assembles TR-490 and TR-491 turnstile lines. Led by CEO Kris De Sutter Gomez, it serves Metro de Medellin, TransMilenio and BD Bacata, Colombia's tallest building. Activates in 178:04:04 |
||||||
| Ransomware | WIKA Beton id35902 View details | Germany | Manufacturing / Engineering | pending | ||
|
WIKA Beton wika-beton.co.id WIKA Beton (PT Wijaya Karya Beton Tbk) is Indonesia's largest precast and prestressed concrete manufacturer, founded in 1997 and listed on the Indonesia Stock Exchange since 2014 as part of state-owned Wijaya Karya group. It operates over 20 production plants across Indonesia from Java to Papua, producing more than 189 types of concrete products including bridge girders, piles, culverts and railway sleepers. Revenue is estimated at around 5.3 trillion rupiah with a market cap of 1.9 trillion, offering a 3.5 percent dividend yield and trading well below book value. The company is a primary supplier for Indonesia's massive infrastructure boom including toll roads, the Jakarta-Bandung high-speed railway and new port construction. Led as a state-owned enterprise, it benefits from priority access to government contracts and a unique nationwide plant network. Activates in 178:29:48 |
||||||
| Ransomware | StarImage id35903 View details | United States | Services | pending | ||
|
StarImage starimagesouthlake.com StarImage Dental Boutique & Oral Surgery is a premium dental practice in Southlake, Texas, opened in January 2021 as the second location of StarImage Dentistry founded by Dr. James Green in Wichita Falls over 25 years ago. Led by Dr. Green, oral surgeon Dr. Dustin Van Tassell and Dr. Susan Millner, it offers cosmetic and reconstructive dentistry, dental implants, full mouth rehabilitation, oral surgery, TMJ treatment and sleep apnea care all under one roof. The clinic is one of the most technologically advanced dental offices in the US, equipped with Planmeca ProMax 3D CBCT imaging, MLS laser therapy, VELscope cancer screening and CT-guided implant surgery. Both lead doctors hold Fellow status at the Las Vegas Institute for Advanced Dental Studies, and the practice maintains a perfect 5.0 rating across 50 plus reviews. Its dedicated TMJ and Sleep Center provides a high-margin specialization in jaw disorders and obstructive sleep apnea. Activates in 178:27:40 |
||||||
| Ransomware | Grupo Sanirent id35904 View details | — | null | pending | ||
|
Grupo Sanirent sanirent.com.mx Grupo Sanirent is a 100 percent Mexican company founded in 1983 in Mexico City, the national leader in portable toilet rental, mobile offices, septic services and waste management. With 178 employees and operations in all 32 Mexican states, it serves everything from private events and luxury weddings to massive construction sites and industrial operations. Its business lines include standard and VIP portable toilets, camper-style luxury stations, mobile office rentals, industrial drain cleaning with specialized vactor and guzzler trucks, and full waste collection including hazardous and bio-infectious materials. The company holds ISO 9001 certification and has won 53 government contracts with major institutions like IMSS, CFE, CAPUFE and the National Culture Secretariat. Its premium Eventos Especiales division provides luxury sanitary facilities for high-end events across the country. Key strengths are 43 years of experience, full national coverage, diversified service. Activates in 178:25:09 |
||||||
| Ransomware | Farmacias 911 id35905 View details | Brazil | Healthcare / Pharma | pending | ||
|
Farmacias 911 farmacias911.com.ec Gettareq S.A., known as Farmacias 911, is a major Ecuadorian pharmaceutical company founded in 2013 in Guayaquil, combining retail pharmacy, wholesale distribution, OEM manufacturing and medical consulting across the whole country. The group operates six brands including Farmacias 911 retail, ACOSAR wholesale distribution, Galenic for private label manufacturing, One Laboratory for quality testing and Conseplus for consulting. It has grown from 11 to 500 employees with a 166 percent increase in headcount, working with global pharmaceutical giants like Abbott, Bayer, Bristol Myers Squibb, Takeda and Roche. Led by founder and CEO Marlon Morillo, the company hosted Ecuador's largest pharmaceutical convention in 2025 alongside APESFA. Its vertical integration from import and production to retail and lab testing is unique in the Ecuadorian market. Activates in 178:19:20 |
||||||
| Ransomware | SoftwareOne id35906 View details | United States | IT | pending | ||
|
SoftwareOne softwareone.com SoftwareOne Turkiye is the Turkish arm of SoftwareOne Holding AG, a Swiss-listed global software and cloud solutions provider that merged with Crayon to form a 13,000 person company operating in over 70 countries. Based in Ataşehir, Istanbul and active since 2019, it employs around 40 to 60 people and works with 100 percent of Turkey's top 50 companies and 80 percent of the top 500. Services span software licensing advisory for Microsoft, IBM and Oracle, cloud migration across Azure, AWS and Google Cloud, DevSecOps, cybersecurity, AI and FinOps. In December 2024 SoftwareOne AG acquired full ownership of the Turkish entity, approved by the Turkish Competition Authority. Led by Managing Director Doğa Pekdemir and CFO Hakan Keriş, it has delivered projects for Turkish Airlines, TAV Airports, Coca-Cola and Vakıf Katılım. Key strengths are its unmatched enterprise market coverage in Turkey and full access to the global SoftwareOne and Crayon ecosystem. Activates in 178:13:56 |
||||||
| Ransomware | Belmont Resorts id35898 View details | United States | Hospitality / Food & Beverage / Tourism | pending | ||
|
Belmont Resorts belmontresorts.com Belmont Resorts is a small boutique hotel in McLeodganj, Dharamshala, Himachal Pradesh, operating as Hotel Satovari Pride on the Strawberry Hills with panoramic views of the snow-capped Dhauladhar mountains. It has just 14 rooms across four categories from Deluxe to Premium Gold corner suites with private balconies, mini-fridges and sunrise-sunset views from both sides. Positioned as a value-for-money alternative next to ITC Hotels and Lemon Tree, it offers a pure vegetarian restaurant with Jain cuisine, 24/7 power backup, fast WiFi and free parking. The hotel caters to relaxation, spiritual tourism, trekking and long-term workation stays with tour packages to Khajjiar and Dalhousie. Activates in 178:43:37 |
||||||
| Ransomware | Atlas Stamping Manufacturing id35901 View details | — | Manufacturing / Engineering | pending | ||
|
Atlas Stamping Manufacturing atlasstamping.com Atlas Stamping Manufacturing Corp. is a US metal stamping company founded in 1971 in Richardson, Texas, producing precision stamped parts for automotive, aerospace, electronics, medical and industrial customers. With around 50 to 200 employees and estimated revenue of 5 to 20 million dollars, it operates a full-service plant offering progressive and transfer die stamping, deep draw, forming, welding and assembly. Its own tool and die shop designs and maintains all stamping dies in-house, giving full control over quality and lead times. Press capabilities range from 30 to 400 tons handling materials from thin foil to quarter-inch thick steel, aluminum and specialty alloys. The company has served the Dallas-Fort Worth industrial market for 54 years with ISO 9001 quality systems and PPAP compliance for OEM clients. Activates in 178:33:01 |
||||||
| Ransomware | EPMMOP id35900 View details | — | Other | pending | ||
|
EPMMOP epmmop.quito.gob.ec EPMMOP is the Metropolitan Public Company of Mobility and Public Works of Quito, Ecuador, responsible for urban transportation infrastructure and public works across the capital district of 2.7 million people. It manages the city's integrated transport system including the new Quito Metro, launched in December 2023 as Ecuador's first subway line with 22.4 kilometers and 15 stations. The agency also operates the TelefériQo cable car, one of the highest in the world, plus trolleybus, BRT and cable car systems under the SITM integrated transit framework. It builds and maintains roads, bridges, sidewalks, drainage and one of Latin America's largest cycling networks. The company works within Quito's UNESCO World Heritage context, requiring unique engineering solutions for the historic center. Activates in 178:37:34 |
||||||
| Ransomware | Pure Perfection id35899 View details | — | Other | pending | ||
|
Pure Perfection pureperfection.com Pure Perfection GmbH is a German live communication agency founded in 2008 in Wiesbaden, ranked number one in the 2026 BlachReport German Event Creativity Ranking ahead of insglück and Vok Dams. With 72 to 80 employees across offices in Wiesbaden, Berlin, Düsseldorf and Florida, it delivered 133 events in 2025, with 90 of them abroad including Shanghai, Miami and Singapore. Led by co-founders Jan Rogozinski and Kim Meisinger, the agency works through three units: Pure Live for events, Pure Space for brand spaces and architecture, and Pure Content for storytelling and PR. Major clients include Audi, ŠKODA, L'Oréal, Bentley and Nestlé, with pharma being its largest vertical at 90 events per year. Revenue peaked at 26.4 million euro in 2023 and the agency won 60 MUSE Creative Awards in 2026 alone. Activates in 178:40:38 |
||||||
| Ransomware | Zinkan Enterprises id35897 View details | — | Other | pending | ||
|
Zinkan Enterprises zinkanenterprises.com Zinkan Enterprises is a private US environmental services company founded in 1983 in Hunt Valley, Ohio, operating in water treatment, pond and lake management, oil and gas chemicals and waste management. With 45 to 75 employees and estimated revenue of 5 to 20 million dollars, it owns several brands including Pace Products, the creator of Freeze Free, the world's first anti-freeze pond coating dating back to the 1960s. Its Crystal Clear division manages ponds and water features for prestigious clients including Walt Disney World golf courses and the 2006 Open Championship at Royal Liverpool. Led by founder Thomas Zinkan, the company offers full-cycle solutions from chemical products to fountain equipment and contract pond maintenance. Core strengths are 42 years of experience, a unique patented anti-freeze technology and diversified revenue across four environmental service verticals. Activates in 178:49:45 |
||||||
| Ransomware | WABAG id35892 View details | Philippines | Services | pending | ||
|
WABAG wabag.in VA Tech WABAG is the world's leading pure-play water technology company, founded in 1924 and headquartered in Chennai, India, operating in over 25 countries with 2000 engineers and over 1500 plants delivered. Listed on NSE and BSE, it posted record FY2026 revenue of 3944 crore rupees with PAT of 371 crore and has been net cash positive for 6 straight years with a credit rating of AA minus stable. Its order book surged to an all time high of 19400 crore rupees in Q1 FY2027, over 4 times annual revenue, backed by World Bank, ADB and JICA funded projects across India, the Middle East, Africa and Southeast Asia. Key projects include Southeast Asia's largest 400 MLD desalination plant in Chennai and a 300 MLD mega desalination order in Saudi Arabia. The company holds 125 plus proprietary patents and ranks 3rd globally among private water operators and desalination suppliers per Global Water Intelligence. Led by Chairman Rajiv Mittal. Activates in 179:09:46 |
||||||
| Ransomware | Unisa Shoes id35893 View details | Brazil | Retail / E-commerce | leaked | ||
|
Unisa Shoes unisa.es Unisa Shoes is a Spanish footwear company founded in 1973 in Elche, Alicante, with 52 years of history across three generations of the Pérez Parres family. It designs and produces women's, men's and accessories collections sold in 70 plus countries through around 30 own stores, 150 plus Espacio Unisa points of sale and its e-commerce platform. Revenue reached 25.3 million euro in 2024 with 145 employees, and international online sales hit a record 16 percent in 2025. Led by CEO Carlos Pérez Parres, the company launched its men's line in 2021 and an eco-friendly recycled suede collection, positioning itself as an accessible Spanish lifestyle brand. It opened a 300 square meter showroom in Madrid and a subsidiary in Italy to expand European distribution. Core strengths are family heritage, global reach across 70 countries and a diversified omnichannel sales model. Activates in 179:08:26 |
||||||
| Ransomware | Acodafe id35894 View details | United States | IT | pending | ||
|
Acodafe acodafe.com Acodafe S.L. is a Spanish IT services company founded in 2009 in Mataró, Barcelona, providing managed IT, network installation, cybersecurity, cloud backups, data center hosting and GDPR consulting for small and medium businesses. Led by sole administrator Adrián Conde Kuller, it has just 4 employees and annual revenue between 500,000 and 1.5 million euro. The company grew sales by 22.8 percent in 2024 and climbed over 12,000 positions in Spain's national business ranking. Its services cover the full IT lifecycle for SMEs and industrial clients from system maintenance and installation to 24/7 emergency support. In 2019 it expanded into data protection consulting, a growing regulatory niche in Spain. Key strengths are 17 years of market presence, a lean and profitable operation and a diversified service portfolio tailored to small business needs. Activates in 178:56:59 |
||||||
| Ransomware | Malmsten id35896 View details | Sweden | IT | pending | ||
|
Malmsten malmsten.com Malmsten AB is a Swedish family-owned company founded in 1975 in Täby, the world's leading manufacturer of swimming pool and open water equipment including lane lines, buoys, starting blocks and safety gear. With around 30 employees and global distribution, its equipment has been used at 11 consecutive Olympic Games from Moscow 1980 to Paris 2024. Founder Robert Malmsten received the FINA Gold Pin Award in 2024 for 48 years of service to the international swimming federation's equipment committee. The company's proprietary wave calming technology reduces turbulence in competition lanes, making its Golden Series the gold standard for elite swimming events. Led by CEO David Malmsten in the second generation, it operates a subsidiary in Australia and serves 100 plus national swimming federations worldwide. Key strengths are FINA approval, Olympic heritage and a full product range from elite competition to public pool equipment. Activates in 178:52:01 |
||||||
| Ransomware | Betopia Group id35895 View details | United States | Other | pending | ||
|
Betopia Group betopiagroup.com Betopia Group Betopia Group is a Bangladeshi tech holding based in Dhaka, formally created in July 2025 by consolidating 22 business units including Bdcalling IT, Softvence, Sparktech, JVAI and Zencore, claiming 5,000 employees and 36 million dollars in annual revenue. Founded by Muhammad Monir Hossain, who went from freelancing on oDesk in 2013 to launching Bdcalling IT in 2017 with just 500,000 taka and 7 people, the group now serves clients in over 80 countries with 80 to 90 percent of business from the United States. Its units span software development, AI, cloud infrastructure via ZenexCloud, Odoo ERP implementation, renewable energy through PulseGrid and IT education. In July 2026 the group unveiled Vision 2030, planning to double its workforce and build Betopia City, an AI-powered smart tech hub in Bangladesh. The company is embroiled in a major scandal, with Fiverr suspending around 300 accounts linked to Betopia for coordinated marketplace manipulation. Activates in 178:55:05 |
||||||
| Ransomware | Groupe AC Environnement id35889 View details | — | Services | pending | ||
|
Groupe AC Environnement ac-environnement.com Groupe AC Environnement is a French environmental engineering company founded in 1997 in Pontarlier, delivering integrated solutions for water treatment, wastewater, waste management and bioremediation. With 160 employees across five subsidiaries including GEG, Maraîch'Hydro and Biovéa, it has completed over 120 projects in 13 countries. Its standout project is the STEP des Voraces, France's first large-scale wastewater plant featuring demethanization serving 300,000 equivalent inhabitants. The group offers 26 specialized technical solutions spanning drinking water, industrial effluent, zero liquid discharge and circular economy applications. Led by Johan Hansma, it operates across the full project lifecycle from design and construction to long-term operations and maintenance. Activates in 179:27:27 |
||||||
| Ransomware | SAP id35890 View details | Germany | IT | pending | ||
|
SAP sap.com SAP Latin America and Caribbean is the regional arm of SAP SE, the world's largest enterprise software company, managing operations across 10 countries with about 6,000 employees led by President Adriana Aroulho since April 2025. Brazil is the standout market, cited in 40 straight quarters of global earnings for exceptional cloud revenue growth and now having more customers running on cloud than on-premise. The region serves over 5,000 clients in Brazil alone and holds 50 percent share among large Brazilian enterprises, with major wins including Grupo Nutresa, Honda South America, Votorantim, Chedraui and Motta Internacional. Through RISE with SAP and GROW with SAP, the company drives cloud ERP migration and Business AI adoption with its Joule assistant, targeting up to 30 percent productivity gains for clients. SAP's global cloud revenue reached 6.7 billion euro in Q3 2026 with the LatAm cloud market projected to double to 125 billion dollars by 2030. Activates in 179:22:16 |
||||||
| Ransomware | Trade Union Co id35888 View details | — | NGOs / Associations | pending | ||
|
Trade Union Co tradeunionco.com tuc-dxb.com Trade Union Co. is a family-owned automotive spare parts wholesaler and retailer founded in 1960 in Beirut, Lebanon, with over 65 years of experience serving customers across the Middle East, Africa, Europe, Asia and the Americas. The group operates through its Beirut headquarters and The Trade Union International LLC in Dubai, a 5000 square meter global re-export hub established in 2007 with offices also in Germany, Russia and Nigeria. With over 150 employees and 20 plus international aftermarket brands including Bosch, Mahle, ZF and Sachs, it supplies parts for European, Japanese and American passenger and commercial vehicles. Led by CEO Walid El Bissani and Head of Strategy Tarek Jamil, the company is a member of NEXUS Automotive International, the world's largest automotive distribution community. It regularly exhibits at Automechanika Dubai and Frankfurt, showcasing its growing brand portfolio and global logistics network. Activates in 179:30:13 |
||||||
| Ransomware | Lydenburg Toyota id35891 View details | South Africa | Retail / E-commerce | pending | ||
|
Lydenburg Toyota lydenburg.toyota.co.za Lydenburg Toyota is a Toyota dealership in Lydenburg (Mashishing), Mpumalanga, South Africa, part of the Toyota South Africa Motors dealer network selling new Toyota and Lexus vehicles, certified used cars, service, parts and financial services. The town is also home to Toyota SA Manufacturing, the largest Toyota plant in Africa, assembling Hilux, Fortuner and Corolla Cross with engines and components exported to over 40 countries including the United States. Toyota SA Motors holds 24.2 percent of the South African vehicle market and exported 187 billion rand in FY2023, with 8500 direct employees across its plants. The company invested 2.43 billion rand in hybrid technology and is developing a 2.2 billion dollar Mbombela megaproject including housing, schools and hospitals around the Lydenburg plant. Corolla Cross production from Lydenburg began exports to the US in April 2024. Activates in 179:19:42 |
||||||
| Ransomware | Grundbaulabor Trier id35882 View details | Germany | Manufacturing / Engineering | pending | ||
|
Grundbaulabor Trier gbl-trier.de Grundbaulabor Trier is a German geotechnical engineering firm founded in 1960 in Trier by Dr. Paul Lehmann, now run by the third generation of the Lehmann family with 23 qualified engineers. It has completed over 20,000 projects in soil investigation, foundation design, construction supervision, environmental contamination assessment and hydrogeology across Rhineland-Palatinate, Saarland and Luxembourg. The firm operates its own soil mechanics laboratory offering fast and reliable sample processing with modern testing equipment. Led by Managing Directors Eric Lehmann and Bernd Mertes, it is one of the leading geotechnical bureaus in the Trier-Saarbrücken-Luxembourg region. Activates in 179:57:53 |
||||||
| Ransomware | Rexville Radiology id35883 View details | United States | Healthcare / Pharma | pending | ||
|
Rexville Radiology rexvilleradiology.com Rexville Radiology is a diagnostic imaging center in Bayamón, Puerto Rico, founded by neuro-radiology specialist Dr. Ramón Pizarro Fornaris and accredited by the American College of Radiology. It offers a full range of imaging services under one roof including open MRI, 64-slice CT scanning, 3D digital mammography with tomosynthesis, ultrasound, DEXA bone density and digital X-ray. The center stands out for its open MRI design that accommodates claustrophobic patients and its advanced breast imaging with 3D tomosynthesis for early cancer detection. Led by Dr. Pizarro, a recognized neuro-radiologist, it provides personalized care with fast turnaround times and early opening hours from 6 AM six days a week. Activates in 179:53:24 |
||||||
| Ransomware | SuperScale id35884 View details | United States | IT | pending | ||
|
SuperScale superscale.com SuperScale is a Slovak game growth platform founded in 2015 in Bratislava, helping over 500 mobile game studios scale their games through AI-powered performance marketing, data science and monetization optimization. With around 60 employees and 1000 plus games grown, it offers both a SaaS platform and managed growth services acting as an outsourced UA and live ops team. Its core technology includes predictive LTV and retention models, automated user acquisition campaigns and AI creative production across Facebook, Google, TikTok and Apple Search Ads. Led by CEO Ivan Trancik, the company specializes in hybrid monetization strategies combining ads, in-app purchases and subscriptions for casual, midcore and hypercasual titles. Activates in 179:50:23 |
||||||
| Ransomware | Mercantile Investment Corporation Bolivia S A id35885 View details | Bolivia, Plurinational State of | Finance / Legal / Insurance | pending | ||
|
Mercantile Investment Corporation Bolivia S A Mercantile & Investment Corporation Bolivia S.A. is a Bolivian broker-dealer and investment house founded in 1983 in La Paz, licensed by ASFI, the national financial regulator, with over 43 years of experience in the Bolivian capital markets. It is the investment arm of international Grupo MIC, offering securities trading, foreign exchange, financial leasing, repo operations, centralized securities custody and discretionary portfolio management. Led by Managing Director Alberto Barrón Michel, it serves institutional investors and corporate clients seeking access to Bolivia's Bolsa Boliviana de Valores. Bolivia's capital market is one of the smallest in Latin America, giving licensed players like MIC a niche with limited competition. Key strengths are full ASFI licensing, international group backing and a comprehensive financial product suite spanning brokerage, leasing and asset management. The firm positions itself as a trusted long-term wealth protector in a market dominated by trade Activates in 179:48:11 |
||||||
| Ransomware | Mann Group id35886 View details | United States | Services | pending | ||
|
Mann Group manngroup.com.au Mann Group is an Australian multi-disciplinary engineering and construction company founded in 1992 in Sydney, operating through eight subsidiaries including Mechtronic Engineering, Mann Fab, Mann Energy, Mann Enviro and Mann Solar. With 350 plus employees, it is Australia's leading provider of thermal, electrical, environmental and sanitary engineering solutions. The group covers pipe fabrication, structural steel, pressure vessels, industrial boilers, HVAC, waste-to-energy and renewable energy systems. Its headquarters and central workshop are located in Milperra, Sydney, with a financial year ending in June. Activates in 179:35:27 |
||||||
| Ransomware | FPT Software id35875 View details | Viet Nam | IT | pending | ||
|
FPT Software fptsoftware.com FPT Software is the largest IT services company in Southeast Asia, founded in 1999 in Hanoi with 1.34 billion dollars in revenue and over 33,000 employees across 31 countries. It serves 1,100 clients including 130 Fortune Global 500 companies across automotive, banking, healthcare and energy, with Japan as its largest international market. Its AI-first strategy uses the FleziPT platform delivering 30 percent productivity gains, with AI and data services growing 60 percent in 2026. In 2025 it signed a record 256 million dollar AI transformation deal and secured 26 projects above 10 million dollars. Strategic partnerships span NVIDIA, Microsoft, SAP, AWS and OpenAI. Key strengths are unmatched scale from Vietnam, deep AI capabilities and a 152,000 strong education talent pipeline. Activates in 195:27:52 |
||||||
| Ransomware | Bi Link id35876 View details | United States | IT | pending | ||
|
Bi Link bi-link.com Revenue $380.2 Million Bi-Link US precision manufacturer founded in 1961 (HQ Bloomingdale, IL), making metal stampings and injection-molded plastics with in-house tooling and assembly for automotive, medical, wireless, and consumer electronics OEMs. It owns plants in Shanghai, Nanning, Mexico (Juárez), and a new Vietnam site (2024), offering prototype-to-production under one roof. Revenue isn't reliably public — broker estimates range wildly from ~$10M to $50M, but a TaiPEX filing suggests ~$5M+/month after consolidation. The critical development: in October 2025 family owners agreed to sell the company to Taiwan-listed Donpon Precision, closed and consolidated from Jan 2026. Despite the site still claiming "family-owned", control is now Donpon's, and long-time CEO Tom Harris has exited. Certifications (ISO 9001, ISO 13485, IATF 16949) support real OEM work (e.g. Teleflex via a 3D Systems case) Activates in 208:05:15 |
||||||
| Ransomware | Eichstatt id35877 View details | Germany | null | pending | ||
|
Eichstatt eichstaett.de 1,5 tb information Eichstätt is a small historic town in Upper Bavaria with 13,500 inhabitants and 1400 years of history, famous for its baroque architecture, Jura Museum with Archaeopteryx fossils and UNESCO Altmühltal Geopark. The Katholische Universität Eichstätt-Ingolstadt enrolls about 4,800 students across 4 faculties spanning theology, philosophy, languages and business in Ingolstadt. Under President Dr. Klaus Stüwe since 2023, it received 5.86 million euro in Bavarian funding for digital transformation and AI programs. It is developing an international campus in Shandong, China and launching new sustainability master's degrees. Key strengths are its Catholic identity, small class sizes and strategic location between Munich and Nuremberg. Activates in 193:38:21 |
||||||
| Ransomware | ImmoVia Hausverwaltung id35879 View details | Germany | Services | pending | ||
|
ImmoVia Hausverwaltung immovia-hausverwaltung.de ImmoVia Hausverwaltung GmbH is a German property management company registered in November 2025 in Bautzen, Saxony, founded by property owners who bring their own landlord experience to managing rental properties and condominium associations. Led by Managing Director Ramona Biehle with equal shareholders holding 33.3 percent each, the firm offers rental management, WEG administration, technical building management and DATEV-compatible tax data integration. Its philosophy is reliable, solution-oriented and personal management treating each property as if it were its own. Activates in 181:07:11 |
||||||
| Ransomware | Cherry Bekaert id35870 View details | United States | Services | pending | ||
|
Cherry Bekaert cbh.com Revenue $446.7 Million CBH Group Australia's largest grain cooperative, founded in 1933 in Perth and owned by over 3,700 farmer shareholders across Western Australia. It operates the world's largest grain export network with around 200 receival sites, 20 million tons of storage capacity and four export terminals at Kwinana, Albany, Geraldton and Esperance. Each year it handles approximately 20 million tons of grain and exports 15 to 17 million tons, mainly wheat, barley and canola to Asia, the Middle East and beyond. Led by CEO Brendan White, it has invested over 2 billion dollars in infrastructure modernization including rail upgrades, solar energy and digital platforms like the CBH App. The cooperative is financially strong with a BBB credit rating and returns profits to farmers through patronage dividends. It operates its own rail fleet of 360 wagons, runs quality testing laboratories at every site and is expanding port capacity to load Panamax vessels at Kwinana and Albany. Activates in 219:25:54 |
||||||
| Ransomware | SK Capital Partners id35871 View details | United States | Finance / Legal / Insurance | pending | ||
|
SK Capital Partners skcapitalpartners.com Revenue $63 Million SK Capital Partners is a New York-based private equity firm founded in 2007 as a spinoff from Apax Partners, managing approximately 10 billion dollars across 60 plus investments in specialty chemicals, pharmaceuticals and ingredients. Led by co-founder Barry Siadat, it targets control investments in companies with 100 million to 1 billion dollars in revenue and has built platforms like Advansix, Sartomer and Cura Particles through buy-and-build strategies. Its portfolio companies employ over 12,000 people and generate more than 5 billion dollars in annual revenue. Recent deals include the July 2026 acquisition of Lorama Group and the October 2026 purchase of Vesuvius Americas refractory assets. Key strengths are deep sector expertise in real-economy industrial businesses and proven IPO and trade sale exits. Activates in 219:22:32 |
||||||
| Ransomware | Svedala Kommun id35872 View details | Sweden | Services | pending | ||
|
Svedala Kommun svedala.se Revenue $282.1 Million Svedala kommun is a municipality in Skåne County, Sweden, part of Greater Malmö with 23,722 residents and a projected growth to 26,800 by 2032. It jumped from 63rd to 15th place in Sweden's Bäst att leva 2026 ranking, ranking number one nationwide in business climate, self-sufficiency and outbound commuting. The local economy centers on transport and warehousing driven by Malmö Airport, with Sandvik SRP as the largest private employer and a new Airport City MMX business park planned to create 1,000 jobs. The municipality runs a balanced budget of SEK 1.66 billion with a tax rate below the national average. Education performs above average with 89.8 percent gymnasium eligibility and 80.3 percent qualified teachers. It is investing 431 million kronor in infrastructure 2025 to 2027. Activates in 219:19:22 |
||||||
| Ransomware | Angeles Contractor id35873 View details | United States | Construction / Real Estate | pending | ||
|
Angeles Contractor angelescontractor.com Angeles Contractor Inc is a general contractor founded in 1998 in City of Industry, California, with 8 CSLB license categories and 63 to 95 employees delivering construction projects across Southern California. It has completed 259 public works projects worth over 197 million dollars for 47 government agencies, led by San Bernardino County with 73 contracts. Its portfolio includes the Rose Bowl renovation, UCLA dining hall, CGV Cinemas, Paakuma K-8 School and a 14.5 million dollar Big Bear Airport terminal rebuild. Led by President Young W. Kang and VP Alex Cho, it maintains over 90 percent repeat business across education, healthcare, commercial and residential sectors. It holds multiple JOC contracts with San Bernardino, San Mateo and Sourcewell worth up to 30 million dollars per year. The company is a certified Minority Business Enterprise with active expansion into Northern California through offices in San Jose and Salinas. Activates in 219:14:24 |
||||||
| Ransomware | First Dental id35874 View details | United States | Healthcare / Pharma | pending | ||
|
First Dental myfirstdental.com First Dental Care is a dental practice network in Massachusetts founded by Dr. Farshad Ghobbeh, who opened his first clinic in Medford in 2008 and expanded to Somerville in 2012 and four more locations including Arlington, Watertown, Acton and Bedford. With over 20,000 patients and 18 years of experience, it offers general and cosmetic dentistry, dental implants, Invisalign, emergency care and smile makeovers across six clinics. Its Smile Now Pay Later model with Klarna makes implants available from 58 dollars per month and whitening at 149 dollars instead of 500. The team is multilingual speaking English, Spanish, Portuguese, Russian, Chinese and Persian to serve diverse Massachusetts communities. It accepts over 15 insurance plans including Aetna, Blue Cross Blue Shield, Delta Dental and MassHealth. Key strengths are 18 years of community trust, multi-location accessibility, affordable payment plans and Dr. Ghobbeh's personal commitment to quality oral health. Activates in 217:20:16 |
||||||
| Ransomware | GIO Dental id35869 View details | United States | Healthcare / Pharma | pending | ||
|
GIO Dental giodentalsl.com GIO Dental SL is a modern dental clinic and laboratory founded by Nigerian dentist Dr. Gift Nwachukwu Obiorah in Freetown, Sierra Leone, with an additional location in Koidu, Kono District. It is Sierra Leone's first fully integrated dental provider offering clinical treatment, a prosthetics laboratory, dental technology education and equipment repair under one brand. Services span general and cosmetic dentistry, orthodontics, oral surgery, custom prosthetics fabrication and community oral health programs. Led by founder Dr. Gio, the company trains local dental technicians and runs outreach campaigns to make premium dental care accessible across the country. Its vertical model combining treatment, manufacturing and education is unique in the Sierra Leonean healthcare market. It also provides equipment repair and supply services to other dental clinics in the region. Activates in 223:40:34 |
||||||
| Ransomware | Weld Re 8 School District id35525 View details | United States | Manufacturing / Engineering | pending | ||
|
Weld Re 8 School District weld8.org Weld Re-8 School District public school district founded in 1914 in Fort Lupton, Colorado, serving about 2500 students across 7 schools with a 43.5 million dollar budget. The student body is 76 percent minority with over half on free lunch, and academics are weak, math proficiency 16 to 19 percent, reading 22 to 26 percent, far below state averages. The core problem is teacher pay, starting salaries 47500 dollars versus 53000 to 64500 nearby, driving 23 percent yearly turnover. Voters rejected four tax requests since 2023, and on November 3 2026 they vote Issue 5C, a 4.9 million dollar tax hike, or face 1.3 million in mid-year cuts. New superintendent Dr. Justin Ralston launched a 2026 to 2029 plan reviving agriculture and adding IT and cybersecurity tracks. Oil and gas covers over half the local tax base. Data |
||||||
| Ransomware | Red Oak Technologies id35526 View details | United States | IT | pending | ||
|
Red Oak Technologies redoaktech.com Red Oak Technologies private IT staffing and managed services company founded in 1995 and headquartered in San Jose, California, with offices in Austin and Denver. It has about 250 employees across 5 countries and estimated revenue of roughly 105 million dollars. The company provides contract tech talent, direct hire and full project delivery with offshore and nearshore teams. It specializes in cloud, DevOps, semiconductor and life sciences clients from startups to Fortune 500. Led by President Joel Leege, ex-Randstad Technology, it has completed over 1700 projects in 30 years with 92 percent client retention. Activates in 96:05:10 |
||||||
| Ransomware | Penco Products id35527 View details | United States | Manufacturing / Engineering | pending | ||
|
Penco Products pencoproducts.com Penco Products US metal manufacturer founded in 1869, now based in Greenville, North Carolina, making steel lockers, shelving, pallet racks and garment dispensers at its 375,000 square foot ISO certified plant in Hamilton. It is part of the IMC industrial group and has around 200 employees, up to 350 in summer peaks. Its lockers are an American standard in schools, gyms, hospitals and military facilities, with new smart locker lines for contactless pickup. Led by CEO Craig Atwater since 2021, it sells through a national distributor network with QuickShip warehouses across the country. Strengths are 157 years of brand trust, full US vertical production and diversification into school furniture. Data |
||||||
| Ransomware | Conax Technologies id35528 View details | Norway | IT | pending | ||
|
Conax Technologies conaxtechnologies.com Conax Technologies US manufacturer founded in 1952 in Buffalo, New York, producing temperature sensors like thermocouples and RTDs together with high-pressure compression seal fittings for extreme conditions. Owned by the private equity firm May River Capital, it has around 200 to 500 employees and estimated revenue of roughly 41 million dollars. Its products operate in extreme temperatures up to 2000 Fahrenheit and pressures up to 100,000 psi across aerospace, defense, semiconductor, medical and energy markets. The company runs a 101,000 square foot plant with 150 machines, holds AS9100, NADCAP and ISO certifications, and has over 45 patents with 100 million products installed worldwide. Under CEO John LeFevre since 2023 it is expanding through acquisitions such as Vulcan Electric and Sorregosa Spain plus growth in semiconductor and medical verticals. Data |
||||||
| Ransomware | Wellington College International School Bangkok id34941 View details | Thailand | Education | — | leaked | |
|
wellingtoncollege.ac.th Wellington College Bangkok is a British international school for ages 2 to 18, opened in 2018 as part of Wellington College UK, with around 1100 students on a 28 acre campus in eastern Bangkok. The curriculum runs from the English National Curriculum to IGCSE and A Levels, with the first graduating class in 2026. Fees range from about 639000 baht per year in pre nursery up to 1283500 baht in Year 12, plus a 225000 baht registration fee and a 175000 baht refundable deposit. Results are elite level with 80 percent A star or A at IGCSE and every graduate of 2026 admitted to their first choice university including Stanford, Yale and Imperial College. Admissions are selective with CAT4 testing and interviews, and strong English is required from Year 10. The school is famous for its Olympic pool, FIFA standard pitch, 600 seat theatre, wellbeing curriculum and scholarships in music, swimming, golf and academics. |
||||||
| Ransomware | Gio Dental Med Spa id34942 View details | Italy | Healthcare / Pharma | — | pending | |
|
giodentalspa.com Gio Dental & Med Spa private dental and aesthetic clinic founded around 2006 in Ciudad Juárez, Mexico, targeting patients from the US border region of El Paso and Las Cruces. The practice has about 6 employees and estimated annual revenue of roughly 430000 dollars, making it a small self-owned business with no external funding. Its business model is built on cross-border dental tourism, accepting American HMO and PPO insurance and transporting patients from El Paso directly to the clinic. Core services are dental implants, orthodontics, endodontics, veneers and oral surgery, plus a med spa division with botox, fillers and physiotherapy. The clinical founder and director is Dr. Mauro D. Álvarez, an implantology specialist, working with a team of about five additional dentists. The company is positioned on price: complex dental procedures cost a fraction of US rates while offering full-service treatment and aftercare for American patients. |
||||||
| Ransomware | First Dental Health id34943 View details | United States | Healthcare / Pharma | — | pending | |
|
firstdentalhealth.com First Dental Health, Inc. dental consulting company founded in 1995 and based in Sacramento, California. It is led by Chairman and CEO Michael Zhang together with founder Dr. Rick Kershner, a periodontist who previously worked with Western Dental, Coast Dental and Pacific Dental Services. The company transforms existing dental practices of 40 to 250 chairs through leadership development, culture building and operational excellence, typically raising performance by 40 to 80 percent within 2 to 4 years. Its flagship case is Sacramento Dentistry Group, which grew from around 330000 dollars monthly revenue in 2014 to roughly 640000 dollars by 2023. It also runs a DSO consolidation model that merges 6 to 10 practices under one brand with owners keeping equity and a 3 to 7 year exit path. The team has built 14 companies that made the Inc. 5000 list, positioning it as a small but high-impact operator in US dental business consulting. |
||||||
| Ransomware | AirQ id34945 View details | Andorra | Communication / Marketing | — | pending | |
|
airq-ad.com AirQ UAE drone manufacturer founded in 2021 in Masdar City, Abu Dhabi, producing unmanned aerial systems fully in-house. It was started by Croatian entrepreneurs Dino Dedić as CEO and Igor Pongrac as CTO, who previously worked at Rimac Automobili, and has grown from 6 people to about 100 engineers. The flagship product is the Harara modular VTOL drone, carrying 6 kg of payload and flying up to 7 hours or 600 km in hybrid mode, with over 1000 test flights completed. Other products include the StingJet reusable jet target drone for air defense training and the world's first fully electric UAV launcher. The company is backed by Abu Dhabi institutions such as Tawazun Council and Masdar City Free Zone and runs real operations like medical blood sample delivery between hospitals. Its main strengths are full in-house composite production and dual defense plus commercial markets, while the main risks are its young age, ongoing aviation certification and dependence on UAE defense. |
||||||
| Ransomware | Martin LLP id34532 View details | United Kingdom | Services | — | pending | |
|
martinllp.net Martin LLP Martin LLP is a boutique business law firm founded in 1996, with offices in Stamford and New York. It focuses on middle-market companies, private equity sponsors, lenders, and business owners. Core practices: M&A and private equity, banking and finance, commercial litigation, and commercial real estate. The firm positions itself as partner-led, with small teams and senior lawyers doing hands-on work on deals from a few million to several hundred million dollars. Its people come from large national firms like Skadden, Latham & Watkins, Mayer Brown, and Schulte Roth. It publishes actively on M&A topics, notably representation and warranty insurance (RWI). It is recognized in regional rankings such as Best Law Firms 2026 for Corporate Law in Stamford. |
||||||
| Ransomware | MAP SA id34533 View details | Switzerland | IT | — | pending | |
|
map.ch MAP SA Swiss communications agency in Cossonay, Vaud (UID CHE-106.859.955), operating since 1968 as a business; the current legal entity was registered in 1981. It's a ~13-person full-service shop covering brand strategy, SEO/SEA, social media, and event management. Leadership: Sébastien Graap (took over 2003) and Caroline Müller (partner since 2008). Only revenue figure ever made public is ~CHF 2M for 2010; no current financials are disclosed anywhere. Core clients are French-speaking Swiss SMEs and public bodies — CarPostal, Transports publics de la région lausannoise, La Source, Yverdon Énergies, Changins. A separate training arm, map.academy, publishes rates (CHF 800–3,900 packages, CHF 1,200/day, CHF 890/month coaching); agency project work is quote-only. Portfolio runs ~30 cases with claimed results (e.g. 7% energy savings, 1,200+ event visitors) |
||||||
| Ransomware | Suhai Segurana Pessoal id34534 View details | Brazil | Services | — | pending | |
|
suhaiseguranca.com.br Suhai Segurança Pessoal Brazilian personal security company founded in 1992 — one of the older, established firms in its niche. Core business: bodyguard/executive protection, family and residential security, security drivers, and corporate guarding, delivered nationwide. Teams are described as vetted, licensed professionals backed by 24/7 monitoring and in-house tactical training. The firm claims ISO 9001 and Great Place to Work certification, but doesn't publish certificates — claims are self-reported. No revenue, pricing, or verified headcount is public; everything is custom-quoted per job. Critically: since Brazil's 2024 law, security work is only legal if the firm holds a current federal police permit for that specific service and state — confirm yours before hiring. Also beware the unrelated "Suhai" auto insurer sharing the name — most complaints you'll find online are about insurance, not this company. |
||||||
| Ransomware | SBI Audiovisual Medinbox id34535 View details | Spain | IT | — | pending | |
|
sbiav.com SBI Audiovisuel is a Quebec AV company founded in 1991 (HQ in Saint-Bruno-de-Montarville, ~11 staff), doing corporate event production — sound, lighting, video, webcasting — plus its signature niche: live streaming of surgical operations for medical training. It deploys its own CASTER mobile system and claims exclusive North American rights to France's Medinbox tech, which is used at hospitals like Mount Sinai NY; note SBI is an integrator, not the tech's manufacturer. Public activity runs from 2018 through 2026 (US tours, medical congresses, hiring), with no lawsuits or scam signs found. Revenue is not disclosed — third-party estimates vary ($1–5M range), all unverified. Weak spots: no independent client reviews, no published certificates, and the site blurs its own brand with Medinbox's. For Quebec/Canada corporate events or live-surgery broadcasts it's a credible pick; for critical projects, verify team size, redundancy plans, and patient-data handling in writing. |
||||||
| Ransomware | Saga University id34536 View details | Japan | Education | — | pending | |
|
saga-u.ac.jp Saga University is a national Japanese university in Saga Prefecture, Kyushu — founded in 1949 (roots back to 1875), merged with Saga Medical School in 2003, operating as a national university corporation since 2004. Scale: ~6,600 students, ~3,300 staff, 6 faculties (including medicine with a ~600-bed hospital) across Honjo, Nabeshima, and Arita campuses. Annual revenue ¥44B ($300M), ~57% of it generated by the university hospital; state capital ¥47.3B, with a +¥1.6B surplus in FY2024. Signature strength: the Institute of Ocean Energy (IOES) — a world leader in OTEC (ocean thermal energy), pursuing the world's first 1-MW commercial plant ~2026-27 with Mitsui O.S.K. Lines. Rector since Oct 2025: Koichi Node (cardiologist); 2026 launches include Japan's first national-university cosmetic science program (30 students, 7x oversubscribed) and a joint teacher-training degree with Kumamoto University. Weak points: rankings have slid for a decade (QS Asia 801-850, THE 1501+) |
||||||
| Ransomware | Netcore Unbxd id34537 View details | India | IT | — | pending | |
|
netcoreunbxd.com Netcore Unbxd AI product-discovery platform for enterprise e-commerce: smart site search, 1:1 personalization, recommendations, visual intelligence ("Complete the Look"), catalog enrichment, and — its 2026 bet — a Shopping Agent (agentic commerce). Owned by India's Netcore Cloud since March 2022 (~$100M deal, 90%), run by founders Pavan Sondur and Prashant Kumar; SaaS sits on composable, API-first infra (Cloudflare, Kubernetes, multi-region), with <10ms response on 95% of queries and 35M documents processed monthly. Recognition: Gartner Magic Quadrant Leader 3 years running, highest "Current Offering" score in Forrester Wave Q3 2025, 7 G2 badges Summer 2025. Claimed customer results (self-reported): +38% AOV, +28% conversion, −60% null searches, −53% bounce. Positioning is sharply anti-native-search and anti-generic-AI, aimed at retail merchandisers with no-code workbenches and full override control. Site's main CTA is a free "personalized site experience audit." |
||||||
| Ransomware | REGiO Nord id34538 View details | Germany | Manufacturing / Engineering | — | pending | |
|
regio-nord.com REGiO-Nord mbH (HRB 1203, Amtsgericht Neuruppin) is a municipal regional-development company in Gransee, Brandenburg, founded 2008–2009 to run the shared "Mittelzentrum" of Gransee–Zehdenick–Fürstenberg/Havel. It is 100% publicly owned (Zehdenick 1/3, Fürstenberg 1/3, Gransee 1/6, Amt Gransee 1/6), led by sole managing director Olaf Bechert with a staff of ~5 plus two tourist info offices. Its real money flows through the Kooperationsfonds — ~€8.9M in projects since 2008, with €538K spent in 2025 and €563K budgeted for 2026, of which €312K funds the company's own coordination work. Four workstreams: education (teacher recruitment, apprenticeship exchange), economy (business services, doctor recruitment, arztidylle.de), tourism (two info stations, region portals, RegioApp), and regional marketing (REGiO-Card, library network). Finances are project-transparent (open budget reports) but the GmbH's own annual accounts are only public through 2022 — request 2023–2025. |
||||||
| Ransomware | Museum Siam id34539 View details | Thailand | Education | — | pending | |
|
museumsiam.org Museum Siam museum in Bangkok run by NDMI under the public organization OKMD — the .org domain is real, but it's a government institute, not a private company. It occupies the former Ministry of Commerce building (1921–1922) and opened as a museum on 2 April 2008. The core exhibit Decoding Thainess (14 rooms on how Thai identity was formed) has run since 2017; there's also a free Underground Museum at MRT Sanam Chai (2020). Attendance is ~250–343K per year (different counting methods), 3.8M over 17 years; museum-level revenue isn't disclosed — finances publish only at OKMD level. Tickets: 100 THB adult, 50 students, free for kids under 15, 60+, monks, disabled visitors; open Tue–Sun 10:00–18:00. Beyond exhibits: a 4,000+ resource library, digital archives, venue rental (5–80K THB), and a nationwide museum-network support program. |
||||||
| Ransomware | Skin Center id34540 View details | United States | Healthcare / Pharma | — | pending | |
|
skincenter.com Skin Center dermatology clinic in Fort Lauderdale, FL (6550 N Federal Hwy, Suite 320) with 40+ years of practice roots (formerly Dr. Roger Stewart's clinic, led by Dr. Barry Galitzer since the 2010s). Full spectrum: medical dermatology, Mohs surgery for skin cancer, cosmetic injectables/lasers (Botox, CoolSculpting, Ultherapy, Fraxel), an Acne Center, aesthetics, and massage. The hidden headline: since 2021 it's owned by Forefront Dermatology (125+ clinics, backed by Canadian pension fund OMERS Private Equity) — billing, records, and HR run through the network, not the local brand. Doctors rate excellent (Galitzer 4.7/5 on Healthgrades; Castle Connolly Top Doctor), but admin/office process is the weak spot — complaints cite long waits, forgotten patients, and a brusque bedside manner. Team: ~10 providers (Galitzer, Fien, Perrotto, Soro, White, Brown + PAs), plus a second office in Pompano Beach; 200+ patients/day, 10,000 sq ft. |
||||||
| Ransomware | Thai Ha PCL KASET id34541 View details | Thailand | Retail / E-commerce | — | pending | |
|
kasetbrand.co.th Thai Ha PCL (SET: KASET) is a Thai public company founded 1993, listed since 2005, exporting jasmine rice, mung bean noodles, and snacks (brands KASET, SMART CHEF, IMPERIAL TASTE) to 80+ countries — the US is its largest market (902+ shipments, active as of Oct 2026). Core assets: a rice mill in Nakhon Pathom (100K tons/yr capacity) and a noodle factory in Nakhon Sawan; certified BRC Grade A+, US FDA, Halal, KOSHER, SMETA. The family Tangpiroonthum controls ~42% via Cheer Group Holdings, CEO Somroek Tangpiroonthum in place since 2004. But financially it's been bleeding: revenue fell from ฿611M (2020) to ฿302M (2025), six consecutive years of losses totaling ~฿330M, negative operating cash flow, debt/equity ~143%. A turnaround plan launched in 2024 — including halving par value (฿1.00→฿0.50) to wipe ~฿139M accumulated deficit — is narrowing losses (Q2 2026 −66% YoY) but the company is still unprofitable. |
||||||
| Ransomware | Inovar Packaging Group id34542 View details | Australia | Manufacturing / Engineering | — | pending | |
|
inovarpackaging.com Inovar Packaging Group (Irving, TX) is a PE-backed buy-and-build platform producing pressure-sensitive labels, shrink sleeves, flexible packaging, and RFID — 14 US plants, 12+ acquisitions since 2016 (latest: Kiliper Corp, Feb 2026). Owned by Kelso & Company since May 2022 (previously AEA Investors); CEO/Chairman Jeff Brezek leads, with deal advisors Milbank and Mesirow confirming real M&A scale. Revenue is private and undisclosed — realistic estimates put it at $100–250M, with ~500–750 employees (Form 5500 filings show plan participants growing 121→743 in 2020–2024). Certifications are strong: ISO 9001/14001, first US printer with GMI Platinum (both digital + flexo; serves CVS, Target, Walgreens, Home Depot), FDA 21 CFR 11 / EU Annex 11, EcoVadis Gold; won the 2024 TLMI Eugene Singer Award. Clients: food & beverage, healthcare, ag-chem, supplements, personal care — with built-in redundancy across plants for continuity. |
||||||
| Ransomware | Engineers Ireland id34543 View details | Ireland | Manufacturing / Engineering | — | pending | |
|
engineersireland.ie Engineers Ireland Ireland's national professional body for engineers, founded 1835 with a Royal Charter (1877) and statutory authority under a 1969 Act to award the "Chartered Engineer" (CEng) title. HQ at 22 Clyde Road, Ballsbridge, Dublin 4; ~30,000 members (21,052 paying) across 35 regional/divisional sectors. Revenue ~€7.6M (2024) with ~€0.7M surplus and a ~€5M investment portfolio; ~49 staff, over 500 volunteers. Core functions: CEng accreditation, education program recognition (194 accredited university programs, Washington Accord member), mandatory CPD (35 hrs/yr), annual Salary Survey, and policy advocacy. President 2025–26 is John Jordan; new Director General Áine Myler started August 2026 (previously led Society of Chartered Surveyors Ireland). Membership fees run €80–€495/year by grade; the profession it represents is ~98,000 engineers contributing €12.65B to the economy, but the country faces a shortfall of ~6,000 engineers/year through 2030. |
||||||
| Ransomware | North Bridge Venture Partners id34544 View details | United States | IT | — | leaked | |
|
northbridge.com North Bridge Venture Partners one of Boston's most storied venture capital firms, founded in 1994 by Bill Geary, Doug Kingsley, Ed Anderson, Mike Pehl, and Richard D'Amore — ~$3.5B under management across 8 funds, ~200+ investments, 100+ exits, and 14 unicorns. Legendary portfolio: Demandware (sold to Salesforce for $2.8B), Starent Networks ($2.9B to Cisco), Proto Labs (IPO), Couchbase ($1.5B to Haveli, 2025), Quora, Salsify, Acquia ($1B to Vista), Actifio (to Google), Paydiant (to PayPal). Its growth-equity arm split off in 2018 as Guidepost Growth Equity ($1.1B+ AUM). Today the fund is in harvest mode — no new deals since 2021–2022, small remaining team, minimal website. May 2026: ransomware group DragonForce claimed to have stolen 22.9GB of internal files (unconfirmed by the firm). For startups seeking capital it's not an active option; for portfolio/LP diligence or the breach, it remains relevant. |
||||||
| Ransomware | SONGWOOI id34545 View details | Korea, Republic of | Retail / E-commerce | — | pending | |
|
songwooi.co.kr SONGWOOI (Song Woo Industrial Co., Ltd.,) South Korean manufacturer of automotive and industrial rubber hoses — intercooler/TCI, heater, fuel, CPF/DPF, and power steering lines — founded 1998 in Busan, HQ and plant in Yangsan since 2002. Founder-Chairman Park Su-kon localizated TCI hoses that were 100% imported from Japan, claiming 90% Korean market share; customers include Hyundai, Kia, Renault Samsung, Hyundai Heavy Industries, and Volvo CE. Certifications: IATF 16949, ISO 14001, ISO 9001; Plus Inno-Biz/Main-Biz status and national awards (Bronze Tower Medal 2015 to Park). Revenue ₩69.9B ($50M) in 2025, down from ₩104.8B peak (2013) — declining four years straight as the industry shifts to EVs — but profitability improved (5.2% operating margin, ROE 23%). Financials are unusually strong: zero debt, 80% equity ratio, ₩52.9B total assets; ~163–197 employees. Watch-outs: some databases list a different CEO (Park Eun-chul) |
||||||
| Ransomware | Petroleum Telcom Communications id34546 View details | Pakistan | Telecommunications | — | pending | |
|
ptelcom.com Petroleum Telcom, Inc. (dba Telcom, Inc. / Telcom Communications) Southern California communications integrator founded in 1978 in Oxnard, CA — specializing in two-way radio for police/fire, microwave links, fiber optics, cell towers, and FCC licensing. Owned and led by Frank R. Hines (president since 1986), now a lean ~6-person shop (peak 35 in 1999), dealer for Motorola, Kenwood, and Bendix-King, with ~200 owned repeaters across CA/NV/AZ/UT. CA contractor license #620689 (B + C7) active since 1991, zero complaints, bonded and insured. Government track record is real and documented: Ventura County since 1982, Stanislaus County $1.2M, Port of LA police radio system $1.19M (2017–19), City of Oxnard up to $900K (2023–27), USGS, and 5 DoD contracts. Revenue not disclosed (est. $1–5M). |
||||||
| Ransomware | Axle Logistics id34547 View details | United States | Transportation / Travel / Logistics | — | pending | |
|
axlelogistics.com Axle Logistics non-asset freight brokerage founded in 2012 in Knoxville, Tennessee, by Drew Johnson and Jon Clay — two University of Tennessee grads who started with two people and one trucking software license. It organizes truckload, LTL, intermodal, and port drayage shipments across the US, Canada, and Mexico by matching loads with third-party carriers, focusing on Fortune 500 shippers and mid-market brands. Revenue exploded from $80M (2018) to over $1.2B gross / $159M net (2025), and headcount grew from 2 to roughly 700 — making it one of the fastest-scaling brokers in the country. It's landed on the Inc. 5000 list over a decade straight, ranked #52 among Transport Topics' top 50 logistics companies, and won Knoxville Top Workplaces seven years running. The company invested $38M in a gleaming new 84,000 sq ft HQ with state support and pays employees an average of ~$117K/year. It's a brokerage, not a carrier — so shipment quality depends on the carriers. |
||||||
| Ransomware | CAS Paper Mill id34549 View details | Canada | Manufacturing / Engineering | — | pending | |
|
caspapermill.com C.A.S. Paper Mill Co., Ltd. is a Thai paper manufacturer in Singburi (est. 1990, operating since 1994), part of the Charoen Aksorn Group — Thailand's largest paper distributor, backed by Bangkok Bank and Vacharaphol. It produces 130,000 MT/yr of newsprint, printing and kraft paper plus 30,000 MT/yr of tissue (Toscotec line, 2022), from 100% recycled US/Canadian waste paper. Zero-liquid-discharge since 1994, 10 MWp floating solar; ISO 9001/14001/45001, TIS 758, FSC C125297. Exports: Vietnam, Philippines, Pakistan. Revenue est. $80–150M (~300 staff), but fell ~10% in 2025 as newsprint demand declines. Main red flag: 2018 villagers' protest over alleged coal pollution affecting 10,000+ residents, and denial of a license for the coal expansion. |
||||||
| Ransomware | St Peters Anglican Primary School id34551 View details | Australia | Education | — | pending | |
|
stpeters.sa.edu.au St Peter's Anglican Grammar independent Anglican co-ed school in Campbelltown, NSW (est. 1983, revived parish school), teaching Pre-K to Year 6 (~428 students, ICSEA 1118 — 89th percentile nationally). It's part of the Campbelltown Anglican Schools Council (CASC) alongside Broughton Anglican College (P–12) and St Peter's Heart (special needs). Academics are solid: NAPLAN scores run ~33 points above the national average, SchoolRank rates it 69.3/100 ("Good", 129th in NSW), and it's one of only two IB PYP World Schools in the Macarthur region. Fees are modest — $9,400/yr (K–2) and $9,920/yr (Y3–6) — with generous sibling discounts up to 100%. Led by Principal Michelle McDonnell (2023–) under CEO Andrew Middleton; 39 teachers, 14.9:1 ratio, strong specialist programs (German, French, STEAM from K). The one major controversy: in July 2022 the council abruptly closed a just-launched high school (Years 7–12) |
||||||
| Ransomware | Pantanal Agricola id34552 View details | Brazil | Agriculture / Food | — | pending | |
|
pantanalagricola.com.br Pantanal Agrícola S.A. is a Brazilian agri-input distributor (crop protection, fertilizers, seeds) founded in 2001 in São Gabriel do Oeste, Mato Grosso do Sul — 19 legal units, 15-16 stores across MS/MT/GO, ~300 employees, serving 64+ municipalities and 5 million hectares of farmland. Partners include BASF, Corteva, FMC, Sumitomo, ICL, and Brevant; the business model centers on barter (inputs repaid with grain) plus agronomic advisory. The headline event: Bunge signed an MOU in Nov 2021 to acquire a minority stake, adding grain-storage and trading muscle. It finances heavily through agri-receivables certificates (8 CRA/CDCA deals since 2019, ~R$217M+, incl. R$145M in 2025 via Ecoagro and a tokenized CDCA with Banco BV). Corporate governance is professionalizing — SA fechada since 2019, board expanded with independents in 2025-26, new CFO Flávio Sales (2025); founder-CEO Jonis Assmann still leads, with second generation (Bruno Franciosi) in management. |
||||||
| Ransomware | Sladek Partners id34554 View details | Czechia | IT | — | leaked | |
|
ak-sladek_cz Sladek & Partners Prague law firm operating as Mgr. Ivana Sládková, advokát (IČO 66252946), with 24 years of practice since 2002 — specializing in real estate transactions, divorce/family law, and attorney escrow (advokátní úschova). The firm's flagship claim: 500M CZK ($23M) held in escrow annually across 100+ segregated accounts, backed by 500M CZK insurance and 2–5 day payout guarantees. Led by Ivana Sládková (ČAK ev. č. 09496, Charles University, licensed for escrow since 2002, speaks English/German/Russian), with a tiny 3–5 person team (accountant + secretary). Listed in EPRAVO.CZ's notable law firm yearbooks (2013, 2016); pricing is quote-only (hourly/fixed/contingency), no published rates. |
||||||
| Ransomware | JJS Justice id34555 View details | United Kingdom | Finance / Legal / Insurance | — | pending | |
|
jjsjustice.com JJS Justice (Janet, Janet & Suggs, LLC) is a national plaintiff-side firm based in Baltimore/Pikesville, MD, founded 1996 (practice since 1978) — specializing in birth injuries/CP, medical malpractice, sexual abuse (clergy, USC/Johns Hopkins), mass torts, and whistleblower cases. Record: $3B+ in verdicts and settlements over 40 years, including the largest US sexual-abuse settlement ($852M vs. USC/Dr. Tyndall, 2021), $190M vs. Johns Hopkins, $225M NJ v. ExxonMobil, and multiple record birth-injury verdicts. Led since Sept 2025 by Andrew S. Janet after founder Howard A. Janet died at 70; core team includes Kenneth M. Suggs (ex-ATLA president) and Dr. Giles Manley (OBGYN turned lawyer). Chambers USA Band 2 (MD plaintiffs), Best Lawyers "Lawyer of the Year" 2025, Super Lawyers, Lawdragon 500, AV Preeminent, ABOTA. Contingency model (no fee unless they win), 10+ states + DC, ~17 lawyers, ~60 staff. |
||||||
| Ransomware | ServiceMaster of Ottawa id34557 View details | Canada | Services | — | pending | |
|
svmottawa.ca ServiceMaster of Ottawa Canadian property restoration and commercial cleaning company (legal entity 1351120 Ontario Inc.), a ServiceMaster franchise since 1969 — owned since 2006 by John Cooke. HQ at 180 Wescar Lane, Ottawa (Carp/Richmond), ~140 staff, 24/7/365 emergency service across the National Capital Region. Core: water/fire/mold remediation, asbestos removal, reconstruction, odor control, janitorial — backed by IICRC techs, HCRA license B62544, Tarion, WSIB+liability, Restore 365/Xactimate. Record: 40,000+ customers served; Cooke won ServiceMaster's "Brand Ambassador of the Year" 2026, "Mid-Market Business of the Year" (Ottawa Chamber, 2008). Reputation mixed (3.8–4.3/5, 313+ reviews) — excellent on small jobs and named techs (Ryan Potestio, Jeff Jerome) |
||||||
| Ransomware | Entry Systems Garage Doors Gates id34559 View details | United States | IT | — | pending | |
|
entrysystems.com Entry Systems Garage Doors & Gates 3rd-generation family business in Laguna Hills, CA (with a second design center in Tustin, opened 2024) — servicing garage doors and automated gates across South Orange County since 1972. Legal entity: Laguna Niguel Garage Door Service, Inc.; CA contractor license #916334 (class D28, active through 2028, clear record), bonded and insured. Services: garage door repair/installation (CHI, Amarr, Clopay), openers (Genie, Liftmaster, smart home), swing/slide gates (DoorKing, Elite, Eagle, solar), telephone entry systems, welding, and maintenance — same-day emergency service typical. |
||||||
| Ransomware | Europ Assistance South Africa id34560 View details | South Africa | Services | — | pending | |
|
europassistance.co.za Europ Assistance South Africa South African emergency-assistance and insurance-administration company founded 1984 in Roodepoort, Gauteng — ~500 staff, FSCA licensed (FSP 5001), Level 1 B-BBEE, handling 1.3M calls/yr through 8,000+ providers. Key structural change: it completed a management buyout from French parent Europ Assistance (Generali Group) in late 2023 and rebranded to AZOZA in Oct 2025 — no longer part of the global Europ Assistance network (which itself merged into Generali's Redion platform in 2026). Services: roadside assistance, home emergency callouts, travel/motor claims administration, funeral cover, and white-label BPO for underwriters (Regent, Old Mutual, ABSA, Santam, Profmed, BMW, Eqstra). Led by CEO Lynette Mutsekwa (since 2023), CCO Nelson Soares. Reputation is split: B2B clients and 8,000 supplier-partners rate them well (12–20-year relationships) |
||||||
| Ransomware | Taiwan Otsuka Pharmaceutical id34562 View details | Taiwan, Province of China | Manufacturing / Engineering | — | leaked | |
|
otsuka.com.tw Revenue $278.3 Million Otsuka Pharmaceutical (Taiwan) Co., Ltd. Taiwanese arm of Japan's Otsuka Holdings (TSE: 4578), operating since 1974 — first as a JV, wholly owned since 1995. HQ in Taipei's Daan District with plants in Guandu and Kaohsiung, ~500–1,000 staff, capital NT$531M, president Ryoichi Fukumoto. Core business: prescription drugs (Abilify, Mucosta, nephrology/oncology lines), consumer brands (Pocari Sweat, Nature Made, CalorieMate, SOYJOY), medical devices, and a new insurance services arm. The group posted record 2025 pharma results (+22% revenue, +43% operating profit) across 84+ countries. Taiwan-specific financials aren't published (subsidiary of a listed parent), but the entity has 52 years on the market, TFDA-registered products, and a solid employer brand with active hiring since 2024. |
||||||
| Ransomware | CLIMEDI id34563 View details | Brazil | Healthcare / Pharma | — | pending | |
|
climedi.com.br CLIMEDI private multidisciplinary medical clinic and diagnostic center in Aracaju, Sergipe, Brazil — founded 5 Oct 1977 by Dr. João Antônio Macedo Santana (endocrinologist & nuclear medicine physician, UFS professor, SUNY Upstate NY–trained). Family-run (Santana-Macedo dynasty: João, son Gustavo, daughter Sara), with 76–121 staff, 50+ physicians across 3 units. Its unique regional edge: full nuclear medicine — PET-CT, scintigraphy, and I-131 thyroid cancer therapy with 5 CNEN-compliant isolation suites — plus 20+ specialties (endocrinology, cardiology, gastro, mastology, orthopedics, ENT, neuro) and complete diagnostics (MRI, CT, mammography, endoscopy, bone densitometry, 54+ tests). Quality credentials: PNCQ "Excelente" (highest tier), SBAC, DICQ; registered in CNES, works with SUS, private insurers, and union health plans (APCEF+). Government payments total R$ 11M+ (Portal da Transparência); private revenue undisclosed (est. R$ 20–50M/yr). |
||||||
| Ransomware | Universidade de Passo Fundo id34565 View details | Brazil | Finance / Legal / Insurance | — | pending | |
|
upf.br Universidade de Passo Fundo private community philanthropic university in Passo Fundo, Rio Grande do Sul, Brazil — founded 1968 (Decree 62.835), run by the FUPF foundation, with 7 campuses, ~10,000 students, 486 professors (48% PhD), and 100,000+ alumni. It holds the maximum MEC institutional rating (5), ranks 6th among Brazil's best private universities and 5th in research nationally (RUF 2025), and is in the THE World 2026 ranking and top-300 globally for sustainability (GreenMetric). Flagships: Medicine (MEC concept 5, expanding from 750 to 2,000 students with R$ 60M invested), Pharmacy (MEC 5), Veterinary (Hospital Veterinário + 170-ha Cepagro), Engineering (chemical #5 nationally), and Law (70 years old). Financially healthy — R$ 60M annual surplus, independent audits published, board with civil-society oversight; ~70% of students get aid (ProUni, Bolsa Filantropia, FIES, CrediUPF). New rector for 2026–2030: Edison Alencar Casagranda (93% of votes, took office July 2026). |
||||||
| Ransomware | Campbell Rhea id34566 View details | United States | Agriculture / Food | — | pending | |
|
campbellrhea.com Campbell Rhea US manufacturer of laboratory and educational casework — legal entity Institutional Casework, Inc. (ICI) — with roots to 1951 in Paris, TN. The brand survived a 2005 tornado that destroyed its former parent Mohon International, was relaunched by local investors in 2006 (CEO Jim Arthurs ever since), and acquired Jamestown Metal Products (NY) plus a steel plant in Union City, TN — 650,000 sq ft of manufacturing total. Products: wood/steel/stainless lab casework, ISOLATOR fume hoods, countertops, athletic lockers (Olympian), Patriot tables — certified SEFA-8, FSC, AIA CES. Revenue $32.1M (2025) per FDMC 300, down from a $63.5M COVID-era peak (2022); ~250 employees, 35+ US dealers, projects at Penn State, UC Davis, Vanderbilt, Case Western, U of Missouri. |
||||||
| Ransomware | Newport Beach Dentistry id34567 View details | United States | Healthcare / Pharma | — | pending | |
|
dentistryofnewportbeach.com Newport Beach Dentistry family dental practice in Newport Beach, CA (1401 Avocado Ave, Ste 209), founded 30+ years ago and currently run by brothers Dr. F. Frank Foroutan (USC DDS 1998) and Dr. F. Ryan Foroutan (USC DDS 1996) — a practice that changed ownership from Dr. Rasch → Kantor/Appelsies → Foroutan over the decades. Services: implants, crowns, veneers, Invisalign, root canals, periodontics, extractions, sedation, whitening, emergency care (same-day); accepts Delta Dental Premier/PPO and most major insurance, CareCredit financing; $99 new-patient special (exam + X-rays + cleaning). Team ~10 (Nancy — office manager, Monica — front desk, Erica — hygienist); languages: English, Farsi, Spanish. Related entities: Foroutan Dental Inc. (Buena Park), OC Elite Dental (Buena Park + Anaheim Hills); also connected to F. Foroutan DDS Inc. (Corona). No revenue disclosed (private practice, est. $2–5M/yr for 3 doctors in this location). |
||||||
| Ransomware | Tulsat id34568 View details | Kazakhstan | IT | — | pending | |
|
tulsat.com TULSAT leading US distributor and repair center for cable TV (CATV) equipment — headend gear, fiber nodes, amplifiers, taps, power supplies — founded 1985 by brothers David and Ken Chymiak in Broken Arrow, OK (100,000+ sq ft). From a bankruptcy buyout it became exclusive Master Distributor and authorized service center for Scientific-Atlanta (now Cisco), plus Motorola/Arris, CommScope, ATX, Quintech. It merged into public ADDvantage Technologies (NASDAQ: AEY) in 1999 (peak revenue $50.3M in 2005), then the cable segment was bought back by David Chymiak's Leveling 8 Inc. for $10.3M in 2019 — private again. Today: ~25 staff, est. ~$10M revenue; group includes NCS Industries (PA), ComTech Services (MO), Tulsat-Atlanta (GA), Nave Communications (MD), Triton Datacom (FL). Core value: largest legacy/obsolete CATV parts inventory + factory-authorized repair, a lifeline for aging networks as cord-cutting shrinks the industry. |
||||||
| Ransomware | Shared Medical Technology id34569 View details | United States | Healthcare / Pharma | — | pending | |
|
sharedmedtech.com Shared Medical Technology, Inc. US medical equipment rental and service company founded in 2004, HQ in Schenectady, NY — 7 offices (NY, MA, VA), ~40–50 staff, no external funding raised. Core business: urgent rental of patient monitors, ventilators, CPAP, ultrasound, portable X-ray, infusion pumps, and bariatric/XL beds and chairs — plus a niche no competitor claims to cover: State Regulatory Compliance certification for transporting XL/bariatric patients across 10+ states (vehicle inspections, certified safe transport). Real clients include Albany Medical Center, OrthoNY, Saratoga Surgery Center, Community Care Physicians, and Brooklyn Surgery Center. Self-developed logistics platform. |
||||||
| Ransomware | Santa Barbara Endodontics id34570 View details | United States | Manufacturing / Engineering | — | pending | |
|
sbendo.com Santa Barbara Endodontics solo specialty practice of Dr. Terrell F. Pannkuk, DDS, MScD — one of the most credentialed endodontists in the US — at 9 E Pedregosa St, Santa Barbara, CA, operating since 1987 (39 years). Pannkuk is a Diplomate of the American Board of Endodontics (since 1988), volunteer clinical professor at UCSF, peer reviewer for the Journal of Endodontics, founding president of the Schilder Institute, founder of Pure Dental Learning, and author of a chapter in Ingle's Endodontics (7th ed.) — peers call him "the endodontist's endodontist." Services: root canals, retreatment, apicoectomy, implants, CBCT 3D diagnostics (Carestream 9600), microscope-assisted microsurgery, same-day emergency care. Team of 5 staff. |
||||||
| Ransomware | Ecuadors National Police id34571 View details | Ecuador | Public Sector | — | pending | |
|
policia.gob.ec Ecuador's National Police country's main law enforcement agency — 180 years old (institutionalized 1846, professionalized 1938), under the Ministry of Interior, commanded by GraS. Pablo Vinicio Dávila Maldonado (since July 2025). Scale: 58,000+ officers, 14 police schools, 317 per 100K population. 2025 was its most active year ever: 712,642 operations, 71,399 arrests, 227 tons of drugs seized, $9.6B in damage to criminal organizations, 21 high-value targets neutralized — but also Ecuador's deadliest year (8,847 homicides). 2026 shows improvement: −27.7% homicides, −43–56% robberies; new Dinae anti-kidnapping unit achieves 90%+ effectiveness. Budget: ~$1–1.2B/yr from state funds. |
||||||
| Ransomware | Placer AI id33721 View details | United States | — | — | pending | |
|
placer.ai Revenue $136.5 Million private US company valued at $1.5 billion that sells foot traffic analytics for physical locations, estimating visits to stores, malls and offices from anonymized data on tens of millions of mobile phones with 92%+ claimed accuracy. It hit $100 million annual recurring revenue in 2024 after growing 80% in a year and serves 4,000+ customers including Sony, Wegmans, BJ's Wholesale, SeaWorld and Bloomberg, which puts Placer data into its Terminal so investors can track company performance before earnings. Money comes from SaaS subscriptions starting around $12,000 a year, API data feeds and add-on datasets, and it has raised $268 million in total funding. Around 630 employees work at Placer.ai after 150 layoffs in January 2025 aimed at reaching profitability, and it owns no factories or stores because its product is pure software and data. |
||||||
| Ransomware | BigID id33722 View details | United States | — | pending | ||
|
bigid.com Revenue $100 Million BigID is the enterprise data security platform that finds and classifies sensitive data across cloud apps, databases and files, showing where private data lives and who can access it. It now focuses on AI, spotting shadow AI tools and checking what data Copilots and agents reach, and in September 2026 launched AgentIQ letting AI assistants trigger data cleanup and access reviews from Claude, Copilot or ChatGPT. It serves hundreds of enterprise clients like Telenor and Fiserv, one of which deleted 27,000 sensitive records from 2.5 petabytes of storage. Money comes from enterprise subscriptions priced per data source, with $175K as one AWS Marketplace benchmark. Around 600 employees work there after cutting 150 roles in May 2026 to go AI-first. It raised $320M at a $1B+ valuation and owns no factories or stores. |
||||||
| Ransomware | Confluent id33723 View details | United States | — | pending | ||
|
confluent.io Revenue $1.16 Billion Confluent is the enterprise data streaming platform built on Apache Kafka that lets companies process live events like payments, orders and sensor data in real time, and it is now owned by IBM which bought it for about $11 billion in March 2026. It ended 2025 with 6,690 customers including roughly 40% of the Fortune 500 and grew revenue 21% with its cloud segment alone growing 27%. Customers include BMW, L'Oreal, Michelin and Ticketmaster and the platform runs across 60+ cloud regions on AWS, Azure and Google Cloud. Money comes from cloud usage and software subscriptions, about 96% of revenue, paid for compute and data transfer rather than per-seat fees. Around 3,241 employees worked at Confluent across 27 countries before the IBM deal and it owns no factories or stores because its product is pure software and cloud. Confluent was still unprofitable with a $295 million loss in 2025 though it earned positive operating income excluding stock pay. |
||||||
| Ransomware | MoneyGram id33724 View details | United States | — | pending | ||
|
moneygram.com Revenue $2.1 Billion MoneyGram global money transfer network moving nearly $200 billion a year through almost 500,000 retail agent locations in 200+ countries and serving 60 million+ active customers, with over 70% of transactions now digital. It earns mainly from transfer fees plus currency exchange spreads, not from owning stores, since almost all locations are partner agents like post offices and grocery chains. In 2025 it cut 449 jobs to speed up digital growth and in 2026 launched its own MGUSD dollar stablecoin and a Visa card that spends digital dollars anywhere Visa works. MoneyGram owns no factories or stores, it is a licensed money transmitter with 75+ regulatory approvals, around 2,000 employees in 36 countries, and was taken private in 2023 for $1.8 billion. |
||||||
| Ransomware | KFC id33725 View details | United States | — | pending | ||
|
kfc.com Revenue $36.4 Billion KFC runs 34,747 restaurants across 150+ countries and about 99% are franchised, run by local partners, serving roughly 1 billion chickens every year. Its restaurants sold $36.4 billion of food in 2025 with $1.5 billion in operating profit, earned mainly from 4-6% sales royalties paid by franchisees, not from selling chicken. 2025 was a record year with nearly 3,000 new restaurants opened across 105 countries, roughly one new KFC every 3 hours and 10,000 stores added in the last 5 years. KFC owns zero chicken farms or factories and buys from suppliers like Tyson Foods and Pilgrim's Pride with fresh deliveries up to 3 times a week. Around 30,000 corporate employees work for KFC worldwide while over 1 million people work across its franchise restaurants and supply network. A new U.S. KFC does about $1.5 million in average annual sales per restaurant and KFC is the world's #1 chicken chain by locations and sales. |
||||||
| Ransomware | Royal Thai Air Force id33694 View details | Thailand | — | — | pending | |
|
rtaf.mi.th is the official portal of the Royal Thai Air Force, one of Asia's oldest air forces (founded November 2, 1913; independent since 1937), with ~46,000 personnel and 11 combat wings, now running a modern Odoo-based portal publishing financial reports, procurement plans, and White Papers on its "Unbeatable Air Force" roadmap to 2037. Its fleet spans 46 F-16s, 11 Gripen C/D, 13 F-5TH Super Tigris, Saab 340 Erieye AEW&C, C-130s, and a VIP fleet including an ex-Thai Airways A340-500. In July 2025 the RTAF fought its first combat since 1988 in the Thai-Cambodian border conflict, with its Gripens achieving the type's first-ever combat weapons launch. The centerpiece modernization is the Gripen E/F program: Thailand signed the $550M "Peace Burapha 1" contract in August 2025 — first in APAC — with deliveries from 2029 and 8 more jets sought toward a 12-aircraft squadron by 2037. Air Chief Marshal Seksan Kantha, the 31st commander since October 2025 |
||||||
| Ransomware | DW McMillan Memorial Hospital id33615 View details | United States | — | — | pending | |
|
dwmmh.org zoominfo.com/c/dw-mcmillan-memorial-hospital/77170917 D.W. McMillan Memorial Hospital is a small rural hospital in Brewton, Alabama, operating since 1954. It provides a 24/7 emergency room, ICU, surgery, obstetrics, outpatient chemotherapy, lab, imaging, and rehabilitation — serving as the main acute-care provider for the county. It has about 39–49 beds and employs roughly 85 staff, generating approximately $15 million in annual revenue. The hospital is part of a small county healthcare system that also runs clinics, EMS, and home health services. It has faced serious financial pressure — a $6 million deficit — but survived after county voters approved a tax increase in December 2025 expected to bring ~$1.8 million per year starting 2027. |
||||||
| Ransomware | Saskatoon Tribal Council id33616 View details | Canada | — | — | pending | |
|
sktc.sk.ca zoominfo.com/c/saskatoon-tribal-council-inc/215335121 Saskatoon Tribal Council (STC) is a non-profit tribal council founded in 1982 in Saskatoon, Saskatchewan (Treaty 6), uniting 7 First Nations with 14,000+ members. Led by Tribal Chief Mark Arcand (since 2017), STC employs 500–600+ people across 5 corporations (health, housing, urban services, investments, community development). Head-body revenue is $14–17M/year (federal ISC funding being the largest source), while the whole group is estimated at ~$45M. Its biggest asset is a stake in Dakota Dunes Casino & Resort ($70M facility, 620+ slots), with its development arm DDCDC generating a record $10.1M gaming revenue in 2023/24 (+33% YoY) and $75M reinvested into communities over 10 years (5,300+ projects). Key operations: 453+ housing units (1,068 waitlisted applications), an Emergency Wellness Centre (2,501 admissions), 17,460 health clients, and employment services placing 276 people in jobs. STC holds Accreditation Canada. |
||||||
| Ransomware | Aquatech id33617 View details | United States | — | — | pending | |
|
aquatech.com zoominfo.com/c/aquatech-international-llc/2523742 Aquatech International Corporation is a private water treatment technology company founded in 1981 and headquartered in Canonsburg, Pennsylvania, with operations in 26 countries and 1,000+ projects across 60+ countries. It generates estimated annual revenue of $105–165M and employs 900–1,368 people globally (growing +31% per year). Aquatech is the world's leading Zero Liquid Discharge (ZLD) provider (160+ installations) and a major desalination player — its Corpus Christi, Texas plant (30 MGD) will be the third-largest SWRO facility in the Americas. The company won the prestigious "Water Technology Company of the Year 2025" (Global Water Awards) and acquired three companies in 2025 (Century Water, Koch Li-Pro DLE, FTS H2O) to dominate lithium extraction (PEARL™ platform) and ultrapure water for semiconductors. Led by CEO Devesh Sharma and President/CTO Ravi Chidambaran, with a private equity investor entering in 2025. |
||||||
| Ransomware | AnyTech365 id33618 View details | United Kingdom | — | — | pending | |
|
anytech365.com zoominfo.com/c/anytech365/368510725 AnyTech365 (Anteco Systems, S.L.) is a Spanish IT security and remote tech support company founded in 2014 by Danish entrepreneur Janus R. Nielsen, headquartered in Marbella, Spain, operating in 25+ countries with 250–400 employees. The company generates estimated annual revenue of $17–21M (2024) and was valued at $200–220M in a 2023 SPAC merger deal with Zalatoris Acquisition Corp. (NYSE: TCOA) involving $172.5M in financing. Its flagship products include IntelliGuard (AI-powered protection), AntiScam, and SystemCleaner, sold via subscription to consumers and small businesses. It ranked 27th in the FT 1000 fastest-growing European companies (2019) |
||||||
| Ransomware | Greenbrook Engineering id33619 View details | United Kingdom | — | — | pending | |
|
greenbrookengineering.com zoominfo.com/c/greenbrook-engineering/346757767 Greenbrook Engineering Services is a private, MBE-certified steel detailing and engineering firm founded in 2000, headquartered in Middlesex, New Jersey, with 5 offices in India (Bengaluru, Chennai, Nashik, Mysuru). It employs 350–756 people (mostly offshore in India) and generates estimated group revenue of $20–30M/year, with the India entity alone growing +22% YoY (₹25.3 crore FY2025). Over 25 years it has completed 3,000+ projects (Hollywood Burbank Airport, semiconductor fabs, Fiat Chrysler, military bases) with capacity of 50,000+ engineering hours per month. Core services: steel detailing, PE-stamped connection design, BIM coordination, and HVAC using Tekla/SDS2. It is the only steel detailing firm in the world with Great Place to Work certification and won Trimble's "Feature Company of the Month" (2025) and the NISD Detailing Edge Award (2026). Led by Chairman Mukul Mehta (Wharton PhD) and MD Vasan H.R.K. |
||||||
| Ransomware | TGN id33620 View details | Argentina | — | — | pending | |
|
tgn.com.ar zoominfo.com/c/transportadora-de-gas-del-norte/372392284 Transportadora de Gas del Norte (TGN) is Argentina's largest natural gas transporter, publicly traded on BYMA (TGNO4), founded in 1992 and operating 11,317 km of pipelines and 22 compressor stations across 17 provinces. It moves 40% of all natural gas in Argentina's pipeline system (~20% of the national energy matrix) and is the only operator connecting Argentina to Chile, Brazil, Bolivia, and Uruguay. FY2025 revenue was ~$483M (AR$600.6B, +20%), EBITDA ~$260M (55% margin), and net income surged +351% to ~$176M, driven by tariff reforms and Vaca Muerta export growth. The company has virtually zero debt (Debt/EBITDA 0.2x), $250M cash, and pays record dividends of AR$577/share (~10% yield), with a AA-(arg) credit rating (Fitch, positive outlook). It employs 600–1,153 people, is controlled by Gasinvest (56%) — a Techint/Tecpetrol + CGC/Eurnekian joint venture — and was named a Great Place to Work Top-25 in Argentina 2025 |
||||||