Ransomware Group intelligence
Thegentlemen
ActiveTrack Thegentlemen with 1056 published victims and 2 known leak locations in a single intelligence view.
DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Thegentlemen is tracked by Dark Eye as a ransomware group with 1056 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Leak Status Distribution
1056
- Leaked 15 1.4%
- Pending 1041 98.6%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 3h ago | tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion |
| Leak location 2 | Onion service | Down checked 3h ago | i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion |
Top Activity Sectors (21)
- IT 160
- Manufacturing / Engineering 124
- Communication / Marketing 89
- Healthcare / Pharma 85
- Services 78
- Retail / E-commerce 72
- Finance / Legal / Insurance 58
- Construction / Real Estate 50
- Transportation / Travel / Logistics 33
- Not identified 33
- Agriculture / Food 30
- Education 29
- Public Sector 21
- Energy 19
- Hospitality / Food & Beverage / Tourism 14
- NGOs / Associations 13
- Telecommunications 8
- null 3
- Media / Entertainment 1
- Law Enforcement / Public Sector 1
- Research 1
Typical Attacks (17)
▼How Thegentlemen typically operates, as attributed by MITRE ATT&CK v20.0. Attributed via The Gentlemen.
-
T1583.001 Domains Resource Development
What they do: The Gentlemen has maintained a TOR Data Leak Site (DLS) to post stolen victim data.
What that means: Adversaries may acquire domains that can be used during targeting.
-
T1585 Establish Accounts Resource Development
What they do: The Gentlemen and its affiliates have leveraged Tox to communicate with victims.
What that means: Adversaries may create and cultivate accounts with services that can be used during targeting.
-
T1585.001 Social Media Accounts Resource Development
What they do: The Gentlemen has established social media accounts on X.
What that means: Adversaries may create and cultivate social media accounts that can be used during targeting.
-
T1588.002 Tool Resource Development
What they do: The Gentlemen has provided a custom EDR killing tool called GentleKiller and other like software that abuse vulnerable drivers via the Bring Your Own Vulnerable Driver (BYOVD) technique to their affiliates that attempts to disable EDR solutions.
What that means: Adversaries may buy, steal, or download software tools that can be used during targeting.
-
T1683.001 Written Content Resource Development
What they do: The Gentlemen has utilized branded code and ransom notes.
What that means: Adversaries may create or tailor written materials to support targeting and malicious operations.
-
T1683.002 Audio-Visual Content Resource Development
What they do: The Gentlemen has leveraged a branded graphic that is placed on the systems desktop wallpaper that symbolizes the association of malicious activity to the group.
What that means: Adversaries may create or manipulate audio, image, and video content to support targeting and malicious operations.
-
What they do: The Gentlemen has leveraged compromised user credentials to gain access to victim hosts.
What that means: Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
T1190 Exploit Public-Facing Application Initial Access
What they do: The Gentlemen has exploited vulnerable public-facing devices and services to gain access to victim environments.
What that means: Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
-
T1068 Exploitation for Privilege Escalation Privilege Escalation
What they do: The Gentlemen has assisted affiliates with gaining privilege escalation through the use of BYOVD.
What that means: Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
-
T1027.002 Software Packing Stealth
What they do: The Gentlemen has packed The Gentlemen Ransomware binaries utilizing either Themida or Enigma to obfuscate the malicious payloads.
What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
-
T1036 Masquerading Stealth
What they do: The Gentlemen has fabricated the version information of payload files to evade detection.
What that means: Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools.
-
T1036.001 Invalid Code Signature Stealth
What they do: The Gentlemen has copied digital signatures from legitimate executables in attempts to circumvent detection.
What that means: Adversaries may attempt to mimic features of valid code signatures to increase the chance of deceiving a user, analyst, or tool.
-
T1036.005 Match Legitimate Resource Name or Location Stealth
What they do: The Gentlemen has named The Gentlemen Ransomware payload files to resemble well-known software vendors to include security vendors.
What that means: Adversaries may match or approximate the name or location of legitimate files, Registry keys, or other resources when naming/placing them.
-
T1018 Remote System Discovery Discovery
What they do: The Gentlemen has utilized internal network scanning tools to enumerate additional hosts in the victim environment to include Advanced IP Scanner.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1219.002 Remote Desktop Software Command and Control
What they do: The Gentlemen has relied on remote access tools, such as AnyDesk, as a means of maintaining access to victim environment.
What that means: An adversary may use legitimate desktop support software to establish an interactive command and control channel to target systems within networks.
-
T1486 Data Encrypted for Impact Impact
What they do: The Gentlemen has used The Gentlemen Ransomware to encrypt victim’s data.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1657 Financial Theft Impact
What they do: The Gentlemen has used double-extortion tactics to sway victims to pay a ransom to include exfiltrating sensitive data, encrypting files, and threatening public release if a payment is not received.
What that means: Adversaries may steal monetary resources from targets through extortion, social engineering, technical theft, or other methods aimed at their own financial gain at the expense of the availability of these resources for victims.
Tools Observed (64)
▼Software Thegentlemen has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
DumpBrowserSecrets
KslKatz
Mimikatz
Defense evasion
EDRStartupHinder
KslDump
PowerRun
RedSun
ThrottleStop driver (BYOVD)
Discovery
Advanced IP Scanner
API-C99-NL
Censys
CertiHound
Gogo
MANSPIDER
Nmap
PrivHound
RelayKing-Depth
Shodan
SoftPerfect NetScan
TaskHound
Discovery & enumeration
Advanced IP Scanner
API-C99-NL
Censys
CertiHound
Gogo
Nmap
MANSPIDER
PrivHound
RelayKing-Depth
Shodan
TaskHound
Exfiltration
RClone
WinSCP
LOLBAS (living-off-the-land binaries)
PsExec
Networking & tunnelling
Amnezia VPN
Chisel
Cloudflared
OpenVPN
Proxychains
PuTTY
Wireguard VPN
OpenSSH
OffSec
Impacket
NetExec
PowerZure
RegPwn
Responder
Titanis
Velociraptor
ZeroPulse
Offensive security tooling
Impacket
NetExec
PowerZure
RegPwn
Responder
Titanis
Velociraptor
ZeroPulse
RMM Tools
AnyDesk
FreeRDP
MeshAgent
Remote monitoring & management
AnyDesk
FreeRDP
MeshAgent
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Dark Eye.
Ransom Notes (3)
▼The note this group leaves on a compromised machine. Click a filename to read it.
README-GENTLEMEN_3.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 13343E50C1B3466F0EA35B5B3E55A044CB7132FD28A8665EFEA0E5848E276D548C21B79F15C2 Download Tox messenger: https://tox.chat/download.html Contact us (add via SimpleX): https://smp14.simplex.im/a#4mlOiePV8NBXOv2QrZ9CaPeRPm1mBUgxn4SdpFnm978 Download SimpleX https://simplex.chat/downloads/ СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/TheGentlemen26 Clearnet blog link: https://thegentlemen.cc/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats. We have stolen more than 100 GB of your corporate information from your servers, including critically important data. Your company is facing a massive information security breach. A total data leak has occurred. This greatly increases the risk of colossal financial and reputational losses.
README-GENTLEMEN_2.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 98C132E2B20B531BE6604397D97040C1E9EB42FCE12EDF119BCE8B4031CA5C70DAF5E65FA3C3 Download Tox messenger: https://tox.chat/download.html Contact us (add via Session ID): 05809b2da1d5b1a302f48b5767fd1843d54f3c516f9ab0eb26b544ffa73340292e Download Session https://getsession.org СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats.
README-GENTLEMEN.txt
[snip] = YOUR ID Gentlemen, your network is under our full control. All your files are now encrypted and inaccessible. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): F8E24C7F5B12CD69C44C73F438F65E9BF560ADF35EBBDF92CF9A9B84079F8F04060FF98D098E Download Tox messenger: https://tox.chat/download.html COOPERATE TO PREVENT DATA LEAK (239 HOURS LEFT) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (1056)
Search, filter and paginate the victim timeline for Thegentlemen. Showing 301–400 of 1056.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Gravity Coffee id31677 View details | United States | — | — | pending | |
|
gravitycoffee.com zoominfo.com/c/gravity-coffee-company-llc/373342412 Gravity Coffee is a premium coffee brand known for serving high-quality beverages in its physical cafes and through retail products. Their signature medium roast blends feature a bold, smooth flavor profile with popular notes of hazelnut and chocolate. The company operates multiple locations and focuses on providing an exceptional coffee experience for its customers |
||||||
| Ransomware | Ollies Place Kidswear id31679 View details | Australia | — | — | pending | |
|
olliesplace.com.au zoominfo.com/c/ollies-place-kidswear/359503050 Ollie's Place is an Australian retail brand specializing in high-quality, trendy, and comfortable clothing for babies and children. The company offers a unique shopping experience both online and through physical stores across Australia, featuring vibrant prints and stylish designs. They focus on providing fashionable, value-for-money pieces for kids' everyday wear and special milestones. |
||||||
| Ransomware | The Coffee Bean id31680 View details | Malaysia | — | — | pending | |
|
coffeebean.com.my zoominfo.com/c/the-coffee-bean/425047768 The Coffee Bean & Tea Leaf Malaysia is the official digital portal for the popular cafe chain, which currently operates over 150 locations across the country. The website allows customers to easily explore the full menu, access exclusive promotions, and manage their MyCBTL loyalty app rewards. It serves as a convenient central platform for ordering premium beverages, redeeming digital vouchers, and staying updated on seasonal cafe offerings. |
||||||
| Ransomware | KFC Kosova id31681 View details | — | — | — | pending | |
|
kfckosova.com zoominfo.com/c/kfc-kosova/401225793 KFC Kosova is the official regional branch of the global fast-food chain, operating multiple restaurants across Kosovo, including a prominent location at the Albi Mall in Pristina. Their website serves as a central hub for customers to find nearby branches, check out menu options, and access delivery services. Additionally, the platform acts as a primary career portal for local job seekers to apply for various corporate and restaurant positions. |
||||||
| Ransomware | First Coast Heart Vascular Center id31682 View details | United States | — | — | pending | |
|
firstcoastheart.com zoominfo.com/c/first-coast-heart--vascular-center/356606344 First Coast Heart & Vascular Center is a premier cardiovascular care provider serving patients across Northeast Florida. Their website highlights a comprehensive range of services, including expert cardiology, electrophysiology, advanced imaging, and vascular surgery. The medical center focuses on delivering innovative, evidence-based treatments and minimally invasive procedures to ensure the highest standard of heart health. |
||||||
| Ransomware | Cityside Homes id31683 View details | United Kingdom | — | — | pending | |
|
citysidehomes.com zoominfo.com/c/cityside-homes-llc/355153806 Cityside Homes is a new construction home builder based in Houston, Texas, specializing in developing homeowner-focused residential communities. Since 2011, the company has built over 100 distinct neighborhoods, offering modern living spaces tailored to local buyers. Their website serves as a primary resource for exploring floor plans, browsing model homes, and discovering available properties across the greater Houston area. |
||||||
| Ransomware | Retail Business Management Systems id31684 View details | United Kingdom | — | — | pending | |
|
rbms.com zoominfo.com/c/retail-business-management-systems-inc/101712744 Retail Business Management Systems (RBMS) is a specialized technology provider that has delivered Point of Sale and retail management solutions for over 25 years. Focusing heavily on NCR Counterpoint software and hardware integrations, the company supports retail businesses of all sizes primarily across the New York and New Jersey regions. Their platform serves as a central hub for merchants seeking comprehensive tools to optimize store operations, inventory tracking, and overall customer experience. |
||||||
| Ransomware | TOA id31685 View details | Japan | — | — | pending | |
|
toa-const.co.jp zoominfo.com/c/toa-corp/425840057 TOA Corporation is a prominent Japanese general contractor specializing in marine civil engineering, land reclamation, and port infrastructure development. The company focuses on delivering high-quality, economically viable construction projects while prioritizing environmental sustainability and technological innovation. Through its corporate portal, stakeholders can access detailed information on their advanced engineering services, corporate philosophy, and investor relations. |
||||||
| Ransomware | Tempel id31686 View details | Germany | — | — | pending | |
|
tempel.com zoominfo.com/c/tempel/87867666 Tempel Steel Company, a division of Worthington Steel, is a leading global manufacturer of high-precision electrical steel laminations. Established in 1945, the company provides essential components for motors, generators, and transformers used across the automotive, eMobility, and energy sectors. Their platform showcases advanced precision metal stamping and overmolding services designed to improve product performance and efficiency. |
||||||
| Ransomware | Plaza Auto Mall id31687 View details | Mexico | — | — | pending | |
|
plazaautomall.com zoominfo.com/c/plaza-auto-mall/194512238 Plaza Auto Mall is a family-owned dealership group based in Brooklyn, New York, that has been serving local drivers since 1975. They offer an extensive inventory of over 1,000 new, used, and certified pre-owned vehicles across multiple automotive brands all in one location. The platform also provides comprehensive automotive services, including financing options, vehicle maintenance, parts sales, and a dedicated body shop. |
||||||
| Ransomware | Avanta Maroc Ex Adecco id31688 View details | Morocco | — | — | pending | |
|
avanta.ma rocketreach.co/avanta-maroc-ex-adecco-profile_b7352c87c4297b95 Avanta Maroc, formerly known as Adecco Maroc, is a prominent human resources and recruitment agency based in Casablanca, Morocco. The company specializes in connecting job seekers with top employers by offering tailored workforce solutions and staffing services. Their platform serves as a vital hub for career opportunities, professional development, and corporate HR management across various industries in the region. |
||||||
| Ransomware | EKEPIS id31689 View details | Greece | — | — | pending | |
|
ekepis.gr rocketreach.co/ekepis-ethniko-kentro-pistopoiisis-domon-profile_b6d46b6ac7408ffe EKEPIS was Greece's National Centre for the Accreditation of Continuing Vocational Training, responsible for certifying adult educators and lifelong learning providers. The organization no longer exists, as its accreditation and certification duties were absorbed by EOPPEP (ΕΟΠΠΕΠ), the National Organisation for the Certification of Qualifications and Vocational Guidance. Today, anyone looking for their services must go through EOPPEP or the official Greek government portal, since the old ekepis.gr domain is no longer an official resource. |
||||||
| Ransomware | Megalaser Industria Metalurgica LTDA id31690 View details | Brazil | — | — | pending | |
|
megalaser.com.br zoominfo.com/c/megalaser-industria-metalúrgica-ltda/1315472404 Megalaser is a Brazilian metallurgical company based in São Paulo, specializing in advanced metalworking services like laser cutting, CNC bending, and robotic welding. Founded in 2006, the manufacturer provides high-quality machined components and assemblies for diverse industries, including renewable energy, mining, automotive, and oil and gas. Their platform highlights a strong commitment to precision engineering, integrated manufacturing solutions, and sustainable industrial practices. |
||||||
| Ransomware | Community Connections id31691 View details | United States | — | — | pending | |
|
comconnections.org zoominfo.com/c/community-connections-inc/350834294 Community Connections is a non-profit organization based in Ketchikan, Alaska, dedicated to providing individualized support for children, seniors, and individuals with disabilities. Founded over 40 years ago, their core mission focuses on encouraging independence, community belonging, and improving the overall quality of life for those they serve. The organization offers a wide range of specialized programs, including early childhood learning, mental health support, and comprehensive disability services. |
||||||
| Ransomware | Acli id31692 View details | Italy | — | — | pending | |
|
acli.it zoominfo.com/c/acli/372618594 ACLI (Christian Associations of Italian Workers) is a major Italian Catholic social promotion organization founded in 1944 to advocate for labor rights and human dignity. Operating a vast network of local clubs, the association provides essential community services, including tax assistance, employment support, and vocational training. Today, it continues to champion social solidarity, democratic participation, and active citizenship across Italy and internationally. |
||||||
| Ransomware | Vector Two Technology id31693 View details | Brazil | IT | — | pending | |
|
vtt.com.br zoominfo.com/c/vtt/372441609 VTT is a pioneering Brazilian technology company founded in 1996 that specializes in Digital Signage and Retail Media solutions. As a leading provider in Latin America, the company delivers innovative digital displays, menu boards, and interactive customer experience tools for the retail sector. Their platform also supports a robust channel partner program, helping businesses across the region modernize their visual communication and in-store marketing strategies. |
||||||
| Ransomware | Safeware id31658 View details | United States | IT | — | pending | |
|
safewareinc.com Safeware Inc. is a national leader providing safety and security solutions for first responders, schools, and government agencies. For over 40 years, they have supplied advanced protective equipment and public preparedness training across the United States. The company simplifies government purchasing by offering specialized gear through competitive cooperative contract pricing. |
||||||
| Ransomware | PharmaEssentia id31506 View details | Taiwan, Province of China | Healthcare / Pharma | — | pending | |
|
pharmaessentia.com zoominfo.com/c/pharmaessentia-corp/145441146 PharmaEssentia is a global biopharmaceutical innovator founded in 2003 and headquartered in Taiwan. It specializes in developing best-in-class therapies and biologics for blood disorders, hematologic cancers, and other serious diseases. The company is fully integrated and operates internationally with a strong commercial and clinical presence in the U.S., Europe, and Japan. |
||||||
| Ransomware | CONTAC Ingenieros id31507 View details | Chile | IT | — | pending | |
|
contac.cl zoominfo.com/c/contac-ingenieros-division-sistemas/372522727 Contac is a technology company based in Santiago, Chile, specializing in operations and asset management technologies. They provide comprehensive automation services and real-time information systems to help industrial clients maximize their operational performance. The company focuses on delivering custom solutions to optimize asset management, reduce costs, and improve overall system reliability. |
||||||
| Ransomware | RAK Construction id31508 View details | India | Construction / Real Estate | — | pending | |
|
rakconstruction.in zoominfo.com/c/rak-construction/1266108608 RAK Construction is a premier construction company based in Bangalore, India, with over 20 years of industry experience. They specialize in delivering high-quality residential and commercial building projects as a leading civil contractor. The company employs a dedicated team of professionals focused on providing reliable construction and contracting services. |
||||||
| Ransomware | Lancesoft India id31509 View details | India | IT | — | pending | |
|
lancesoft.in zoominfo.com/c/lancesoft-india/547301190 LanceSoft India is a key division of a global workforce solutions and IT services company founded in 2000. Based in Bengaluru, it employs thousands of professionals to deliver comprehensive staffing solutions, including temporary and permanent placements. The company connects businesses worldwide with top-tier talent across diverse industries such as IT, engineering, and healthcare. |
||||||
| Ransomware | AIMS Group id31510 View details | United Kingdom | IT | — | pending | |
|
aimsgroup.com AIMS Group LLC is a major conglomerate based in Ajman, UAE, established in 2003 with a workforce of thousands. It operates primarily in the environmental services and construction sectors, specializing in infrastructure and road development. The company provides comprehensive industrial solutions, including asphalt production, building materials supply, and fleet management |
||||||
| Ransomware | AnMed id31511 View details | United States | Healthcare / Pharma | — | leaked | |
|
anmed.org zoominfo.com/c/anmed/1238269198 AnMed is an independent, not-for-profit health system founded in 1908, serving Upstate South Carolina and northeast Georgia. Its anchor facility, AnMed Medical Center, is a 461-bed acute care hospital located in Anderson, South Carolina. The network provides comprehensive medical services, including emergency care, cardiovascular surgery, advanced imaging, and specialized outpatient clinics. |
||||||
| Ransomware | NTU Alumni Club id31512 View details | Singapore | NGOs / Associations | — | pending | |
|
ntualumni.org.sg zoominfo.com/c/ntu-alumni-club/447180090 The NTU Alumni Club is an independent association for graduates of Nanyang Technological University in Singapore. It serves as a dedicated platform for alumni to connect, network, and maintain a lifelong relationship with their alma mater. Members enjoy exclusive perks, career opportunities, and access to physical facilities like lounges and co-working spaces at their clubhouse. |
||||||
| Ransomware | Canopy Support Services id31513 View details | Canada | Healthcare / Pharma | — | pending | |
|
canopysupport.ca zoominfo.com/c/canopy-support-services/347650822 Canopy Support Services is a community-based organization in Peterborough, Ontario, dedicated to supporting individuals with intellectual and developmental disabilities. They provide a safe, welcoming environment for people, including those with Autism Spectrum Disorder, to learn new skills and achieve their personal goals. The organization empowers its clients to overcome everyday barriers, build self-confidence, and lead more independent lives |
||||||
| Ransomware | Mikel Coffee id31514 View details | Greece | Retail / E-commerce | — | pending | |
|
mikelcoffee.com zoominfo.com/c/mikel-coffee/456172290 Mikel Coffee Company is a prominent Greek coffeehouse chain that began its journey in 2008 in the city of Larissa. It has rapidly expanded into a global brand, operating a network of over 410 coffee shops across 19 different countries. The company offers a comprehensive menu of premium coffee blends, beverages, snacks, and retail products, focusing on delivering a unique and welcoming coffee experience. |
||||||
| Ransomware | Hong Kong Baptist University id31515 View details | Hong Kong | Education | — | pending | |
|
hkbu.edu.hk zoominfo.com/c/hong-kong-baptist-university/429650952 Hong Kong Baptist University (HKBU) is a leading public research university established in 1956 in Hong Kong. It is highly regarded for its academic excellence, particularly in liberal arts, business, communication, and traditional Chinese medicine. As one of the region's eight statutory publicly funded universities, it is dedicated to fostering global citizenship and innovative research. |
||||||
| Ransomware | Eva Care id31516 View details | United Kingdom | Healthcare / Pharma | — | pending | |
|
evacare.com rocketreach.co/eva-care-profile_b7a227f8c53b4785 Eva Care Group is a healthcare provider specializing in the post-acute care industry, headquartered in Los Angeles, California. With over 50 years of combined experience, the company operates and manages a network of nursing homes and rehabilitation facilities. They deliver comprehensive solutions encompassing clinical, financial, operational, and environmental management to ensure high-quality patient care. |
||||||
| Ransomware | Premier Pigs id31517 View details | United Kingdom | Agriculture / Food | — | pending | |
|
premierpigs.com zoominfo.com/c/premier-pigs/458500816 Grupo Premier Pigs is a family-owned agricultural company based in Spain, founded in 1992 and specializing in the swine farming industry. Operating as a major pig farming integrator, the business manages its own breeding and fattening farms alongside a dedicated feed production mill. The organization is committed to sustainable livestock practices and comprehensive agricultural management, which also includes cereal farming. |
||||||
| Ransomware | Zion Contracting id31518 View details | United States | Construction / Real Estate | — | pending | |
|
zioncontracting.com Zion Contracting LLC is a trusted general contractor based in New York, specializing in complex infrastructure and transportation projects. As a certified MBE, DBE, and SBE firm, they partner with government agencies to help fulfill minority and diversity contracting goals. Their main focus is delivering essential public works projects that strengthen communities across the state |
||||||
| Ransomware | Hartfiel Automation id31464 View details | Germany | Other | — | pending | |
|
hartfiel.com zoominfo.com/c/hartfiel-automation-inc/27608695 Hartfiel Automation is an industrial automation company providing comprehensive manufacturing solutions like pneumatics, robotics, motion control, and hydraulics. For over 60 years, they have been a specialized high-tech provider supporting the American manufacturing sector. Headquartered in Minnesota, the company employs hundreds of professionals dedicated to engineering and optimizing production processes |
||||||
| Ransomware | DHC id31435 View details | Japan | — | — | pending | |
|
dhc.co.jp zoominfo.com/c/dhc-corp/372590440 DHC Corporation is a prominent Japanese brand renowned for its high-quality cosmetics, dietary supplements, and health foods. Originally founded as a translation company, it achieved global success by focusing on pure, natural ingredients—most notably its signature olive oil skincare. Today, DHC is trusted worldwide for combining rigorous scientific research with effective, affordable wellness products. |
||||||
| Ransomware | INKA Group GmbH Co id31436 View details | Germany | — | — | pending | |
|
INKA Group GmbH & Co. KG is a German real estate holding company headquartered in Munich, registered in the Munich Commercial Register under HRA 99442. It specializes in leasing and renting own or leased land, buildings, and apartments, as well as managing commercial real estate on a fee or contract basis. The company operates as a closed investment and management vehicle with no public website or brand. It should not be confused with the Turkish İnka Group holding or other similarly named companies. |
||||||
| Ransomware | Vitex Pharmaceuticals id31437 View details | — | — | — | pending | |
|
vitexpharma.com zoominfo.com/c/vitex-pharmaceuticals-pty-ltd/90505264 Vitex Pharmaceuticals is a leading Australian contract manufacturer specializing in vitamins, minerals, and nutritional complementary medicines. Founded in 1989, this wholly Australian-owned company operates one of the country's largest and most state-of-the-art pharmaceutical manufacturing facilities. Recently, the company significantly expanded its capacity by opening a massive $250 million facility in Western Sydney to supply both domestic and global markets |
||||||
| Ransomware | Mdj Management id31438 View details | — | — | — | pending | |
|
appliedbizinvest.com zoominfo.com/c/mdj-management-llc/410565499 Applied Business Investments, Inc. (operating alongside MDJ Management LLC) is a private US-based management and finance consulting firm registered in Florida. Founded in the late 2000s, the company focuses on business investments, corporate management strategies, and financial advisory services. It operates as a boutique entity providing specialized support and investment structuring for various commercial projects |
||||||
| Ransomware | Hst id31439 View details | United States | — | — | pending | |
|
hstechnology.com zoominfo.com/c/hst/352516154 digital platform for Healthcare Solutions Team (HST), a US-based healthcare cost-containment company now operating as Claritev. The company specializes in value-driven health plans, reference-based pricing solutions, and patient advocacy to reduce medical expenses. Through its HST Care Connect portal, it helps employers and individuals seamlessly find quality healthcare providers and optimize their medical benefits |
||||||
| Ransomware | Groupe BPCE id31440 View details | Viet Nam | — | pending | ||
|
bpce-vietnam.com zoominfo.com/c/groupe-bpce/457963650 BPCE International (formerly Natixis), the Ho Chi Minh City branch of France’s second-largest banking group, Groupe BPCE. Operating in Vietnam since 1988, it is one of the country's longest-established foreign bank branches, holding a full banking license. The institution specializes in corporate and investment banking, offering specialized finance, trade solutions, and transaction processing to businesses across the region. |
||||||
| Ransomware | Axson Teknik id31441 View details | Sweden | — | — | pending | |
|
axson.se zoominfo.com/c/axson-teknik-ab/456419010 Axson Teknik AB is a Swedish industrial supplier based in Askim, specializing in high-quality manual and robotic welding and cutting equipment. Founded in 1984, the company provides comprehensive technical services, maintenance, and specialized training for various industrial applications. They represent leading global brands such as Fronius, Thermal Dynamics, and Orbitalum, serving as a reliable partner for the manufacturing sector |
||||||
| Ransomware | Ponti id31442 View details | Poland | — | — | pending | |
|
ponti.pl Ponti is a specialized automotive company based in Gdańsk, Poland, focused on the direct import, sales, and professional servicing of American vehicles. Operating as a leading expert in the US car market, the company handles everything from modern everyday models to the restoration of classic muscle cars and vintage vehicles. They provide a comprehensive range of services, including sourcing, repairing post-accident imports, and dedicated mechanical maintenance for automotive enthusiasts |
||||||
| Ransomware | Godollo id31443 View details | Hungary | — | — | pending | |
|
godolloi.hu zoominfo.com/c/gödöll/1295448671 Gödöllő Ingatlanközpont is a leading real estate agency based in Gödöllő, Hungary, specializing in property sales, rentals, and construction in Eastern Pest County. The company offers a vast portfolio of residential and commercial properties, including apartments, family houses, land plots, and industrial spaces across Gödöllő and its surrounding towns. Established as a trusted local expert, the agency provides comprehensive real estate brokerage services to help clients navigate the regional property market |
||||||
| Ransomware | Hoang Chiropractic Center id31444 View details | United States | — | — | pending | |
|
hoangchiro.com zoominfo.com/c/hoang-chiropractic-center/357138190 Hoang Chiropractic Center is a specialized healthcare clinic located in Metairie, Louisiana, led by Dr. Kim Hoang. The practice focuses on non-surgical pain relief and holistic wellness, offering services like AccuSpina spinal decompression, chiropractic adjustments, and custom orthotics. They are dedicated to helping patients relieve back pain and restore the body's natural ability to heal itself through personalized care |
||||||
| Ransomware | aZaaS id31445 View details | Singapore | — | — | pending | |
|
azaas.com zoominfo.com/c/azaas-pte-ltd/353475433 aZaaS is a dynamic, Singapore-based IT services company specializing in IT as a Service (ITaaS) and hybrid cloud architecture solutions. They build and operate mission-grade, secure digital services for government and enterprise clients, strictly aligned with local compliance standards like GCC and IM8. The company provides comprehensive solutions including Business Process Management (BPM), Data as a Service (DaaS), and enterprise mobility to help organizations optimize their IT infrastructure |
||||||
| Ransomware | HIWIN id31446 View details | Italy | — | — | pending | |
|
hiwin.it zoominfo.com/c/hiwin-srl/446225948 HIWIN Italia is the Italian subsidiary of the global Taiwanese corporation HIWIN Technologies, a world leader in motion control and system technology. Founded in 2013 and based in the Milan area, the company specializes in manufacturing high-precision components such as ball screws, linear guideways, industrial robots, bearings, and drive systems. They serve a wide range of high-tech industries, including semiconductor, automation, and medical equipment sectors across Southern Europe. |
||||||
| Ransomware | National Furniture Outlet id31447 View details | United States | — | — | pending | |
|
nationalfurnitureoutlet.com National Furniture Outlet is a family-owned retail store in Westwego, Louisiana, serving the Greater New Orleans area for over three decades. They specialize in selling affordable living room, bedroom, and dining room furniture, as well as mattresses and appliances at highly competitive, discounted prices. The business is well-known locally for its frequent overstock sales and flexible financing options to support the community |
||||||
| Ransomware | TESI id31448 View details | Italy | — | — | pending | |
|
tesiimpianti.it TESI S.r.l. is an Italian industrial company founded in 1997 as a spin-off from the Falck Group, specializing in machinery for coil and sheet metal processing. The company handles the buying, selling, installation, and maintenance of complete production lines for the metallurgical sector. A core part of their business is the deep refurbishment and technological upgrading of used industrial equipment with modern electrical and hydraulic systems. |
||||||
| Ransomware | Intranet Gov Brasil id31449 View details | Brazil | — | — | pending | |
|
English: intranet.gov.br "Intranet Gov Brasil" refers to the secure internal corporate network and digital portal infrastructure used by the Brazilian Federal Government (gov.br) for its civil servants and ministries. It provides restricted access to internal administrative systems, official communications, and digital public services that are hidden from the general public. The underlying IT infrastructure and cybersecurity of these portals are primarily developed and maintained by state-owned technology companies like Serpro and Dataprev. |
||||||
| Ransomware | Feraboli Zootech id31450 View details | Italy | — | — | pending | |
|
feraboli.it Feraboli Zootech is a historic Italian company operating in the livestock sector since 1880, with a heritage spanning over six generations. Based in Sospiro (Cremona), it specializes in designing and building advanced cattle barns, metal structures, and tailor-made equipment for dairy and fattening farms. The company combines traditional craftsmanship with modern automation and animal welfare solutions for professional breeders. |
||||||
| Ransomware | Nobema id31451 View details | Germany | Media / Entertainment | — | pending | |
|
nobema.com zoominfo.com/c/nobema-srl/371446900 Nobema S.r.l. is an Italian family-run manufacturing company based near Turin, specializing in plastic molding and integrated industrial services since 1986. They provide end-to-end solutions ranging from custom mold design and pre-series sampling to advanced gas injection technology and mass production. The company serves diverse sectors with high-quality plastic components, uniquely combining industrial parts with niche consumer products like drumsticks |
||||||
| Ransomware | Vemec id31452 View details | Argentina | — | — | pending | |
|
vemecsrl.com zoominfo.com/c/vemec-srl/397907621 Vemec S.r.l. is a leading Italian manufacturing company founded in 1983, specializing in the design and production of mechanical components and assemblies for heavy machinery. Operating across multiple production facilities covering over 23,000 square meters in Northern Italy, the firm provides advanced metal machining, laser cutting, and structural fabrication services. With more than 40 years of experience, Vemec delivers high-precision engineering solutions to diverse industrial sectors, including mechanotextiles and heavy equipment manufacturing |
||||||
| Ransomware | LensAss Architecten id31453 View details | Belgium | — | — | pending | |
|
lensass.be LensAss Architecten is a Belgian architecture studio based in Hasselt, founded in 1995 by Bart Lens. The firm centers its work on the relationship between space, light, and context, specializing in both renovation and new construction. Its portfolio spans private homes, galleries, and adaptive reuse of heritage buildings across Belgium. |
||||||
| Ransomware | Phase Technologies id31454 View details | United States | — | — | pending | |
|
phasetechnologies.com zoominfo.com/c/phase-technologies-llc/92275872 Phase Technologies is a leading American manufacturer of advanced power electronics, specializing in digital phase converters, variable frequency drives (VFDs), and motor protection. Founded in 1999 and headquartered in Rapid City, South Dakota, the company engineers and assembles its products entirely in the USA. Their innovative solutions generate high-quality three-phase power from single-phase sources, maximizing energy efficiency and system reliability for industrial and agricultural applications |
||||||
| Ransomware | Holborn European Marketing id31455 View details | Cyprus | — | — | pending | |
|
holborn.com.cy zoominfo.com/c/holborn-european-marketing-company-ltd/462273998 Holborn European Marketing Company Limited is a Cyprus-based energy trading firm established in 1987, operating from its headquarters in Larnaca. The company specializes in purchasing crude oil and feedstocks, selling refined petroleum products, and active oil trading. It serves as a major energy supplier that fulfills local market needs in Cyprus while also maintaining a significant operational presence as a key oil products supplier in Northern Germany. |
||||||
| Ransomware | ZS Salovnova id31456 View details | Czechia | — | — | pending | |
|
zssalounova.cz ZŠ Šalounova is a primary school located in the Vítkovice district of Ostrava, Czech Republic, operating across two buildings on Šalounova and Halasova streets. The institution provides comprehensive standard education alongside specialized programs, a wide range of extracurricular clubs, and a full school counseling facility. It actively supports student success through dedicated staff, including school psychologists, special educators, and career counselors, as well as various educational and sports projects. |
||||||
| Ransomware | Halliday Watkins Mann id31457 View details | United States | — | — | pending | |
|
hwmlawfirm.com zoominfo.com/c/halliday--watkins--mann-pc/42929145 Halliday, Watkins & Mann, P.C. (HWM) is a Salt Lake City-based law firm founded in 1935, now operating as a fourth-generation family practice. The firm exclusively serves the mortgage banking industry, specializing in creditor remedies such as foreclosures, bankruptcies, replevins, evictions, and REO closings. With a team of 51–200 employees, HWM provides full-service legal support and title curative work to financial institutions across multiple states |
||||||
| Ransomware | YY Business Solutions id31489 View details | United States | IT | pending | ||
|
Y&Y Business Solutions (YYB Business Solutions Inc.) is a Bronx-based company located at 169 Lincoln Avenue, Suite 208, Bronx, NY 10454, reachable at (347) 270-1283. Founded and led by Valerie and Yerlin, the firm specializes in income taxes, immigration services, business license & registration, DMV & TLC services, and document translation. The company primarily serves Spanish-speaking immigrants and small business owners, helping them navigate U.S. immigration processes and tax requirements. They are most active on Instagram (@yybsolutions) and Facebook, where they share updates and client guidance. |
||||||
| Ransomware | TopMark Funding id31236 View details | United States | Finance / Legal / Insurance | — | pending | |
|
topmarkfunding.com zoominfo.com/c/topmark-funding-llc/368696312 TopMark Funding is a nationwide commercial financing company specializing in fast funding solutions for semi-trucks, trailers, and heavy construction equipment. Headquartered in California, they help trucking and construction businesses acquire machinery ranging from $25,000 to $500,000. The company is recognized for providing quick approvals, flexible terms, and risk-free quotes without impacting the client's credit score |
||||||
| Ransomware | Control Concepts Technology id31237 View details | United States | Manufacturing / Engineering | — | pending | |
|
controlconceptstexas.com zoominfo.com/c/control-concepts--technology/356919279 Control Concepts is a Texas-based industrial automation and electronics repair company established in 1984. They specialize in servicing, repairing, and installing AC/DC motor drives, PLCs, and industrial motor controls. Operating as a certified UL508a Panel Shop, the company also provides 24-hour emergency service, system upgrades, and custom automation solutions |
||||||
| Ransomware | Philippine Savings Bank id31151 View details | Philippines | Finance / Legal / Insurance | — | pending | |
|
psbank.com.ph zoominfo.com/c/philippine-savings-bank/83461899 SBank is widely recognized across the Philippines for its highly accessible Auto and Home Loan programs that make vehicle and property ownership easier for everyday consumers. One of its most unique financial products is the Flexi Personal Loan, a revolving credit line that allows clients to withdraw, repay, and reuse funds flexibly |
||||||
| Ransomware | Las Cenizas id31084 View details | Chile | Other | — | pending | |
|
cenizas.cl zoominfo.com/c/cenizas/430439098 Grupo Minero Las Cenizas, a prominent medium-scale mining company in Chile with over four decades of industry experience. The company specializes in the production of copper fines and cathodes. Its main mining operations and facilities are strategically located in Cabildo, Taltal, and Franke, Chile |
||||||
| Ransomware | Kenaitze Indian Tribe id31085 View details | United States | NGOs / Associations | — | pending | |
|
kenaitze.org The Kenaitze Indian Tribe is a federally recognized sovereign nation of the Kahtnuht'ana Dena'ina people located on Alaska's Kenai Peninsula. Its core mission is "to assure Kahtnuht'ana Dena'ina thrive forever" through holistic, culturally grounded support. The Tribe operates the Dena'ina Wellness Center, providing comprehensive medical, dental, and behavioral health services, alongside education, elder care, and tribal fisheries to preserve their heritage and promote community well-being |
||||||
| Ransomware | Additive Manufacturing id31086 View details | United States | Manufacturing / Engineering | — | pending | |
|
additivemanufacturingllc.com zoominfo.com/c/additive-manufacturing-llc/369228736 Additive Manufacturing LLC is a U.S.-based company headquartered in Las Vegas, Nevada, specializing in 3D printing, rapid prototyping, and short- to mid-run production of metal and plastic parts. Backed by over a century of combined industry experience, the company bridges digital fabrication and traditional manufacturing, offering services like CNC machining, production tooling, and assembly. By leveraging a global network of partners and on-demand digital factories, they ensure scalable, high-quality, and cost-effective solutions with reliable lead times |
||||||
| Ransomware | Salem Saleh Babgi id31087 View details | Saudi Arabia | Manufacturing / Engineering | — | pending | |
|
babgi.com.sa zoominfo.com/c/salem-saleh-babgi-co-ltd/372739058 Babgi Group, founded in 1978 by Sheikh Salem Saleh Babgi, is a major Saudi Arabian conglomerate with over 1,900 employees and revenues exceeding $7.4 billion. The group operates primarily in the automotive sector (as an exclusive dealer for brands like Toyota, Lexus, and MG), trading, and contracting. Guided by a vision of sustainable economic growth, it focuses on delivering high-quality standards, advanced management practices, and community-driven services across the Kingdom |
||||||
| Ransomware | Salama Medicals Distributors Private id31088 View details | Tanzania, United Republic of | Healthcare / Pharma | — | pending | |
|
salamapharma.co.tz zoominfo.com/c/salama-medicals-distributors-private-ltd/356160819 Salama Pharmaceuticals Limited is Tanzania’s leading importer and distributor of pharmaceuticals, medical devices, and surgical equipment. Headquartered in Dar es Salaam, the company operates a large multi-warehouse distribution network to serve healthcare facilities across the country. Dedicated to enhancing healthcare outcomes, Salama Pharma focuses on supplying quality medical products and supporting the modernization of healthcare operations in the East African region |
||||||
| Ransomware | Krafman id31089 View details | Sweden | Other | — | pending | |
|
krafman.se Krafman (operated by Krafguard AB) is a Swedish credit reporting and debt collection service provider licensed and supervised by the Swedish Authority for Privacy Protection (IMY). The platform offers fast, on-demand credit checks for both businesses and private individuals without registering the number of inquiries made. It also provides free basic company searches, active credit monitoring with automatic updates, and transparent pricing with no hidden subscription fees |
||||||
| Ransomware | Kosh Innovations id31090 View details | — | IT | — | pending | |
|
koshinnovations.com zoominfo.com/c/kosh-innovations/369426368 Kosh Innovations, established in 2008 in Pondicherry, India, is a leading manufacturing solutions provider specializing in precision engineering, plastic moulding, sheet metal components, and electronic manufacturing services (EMS). Certified with IATF 16949 and multiple ISO standards, the company serves diverse sectors including automotive, consumer durables, green-tech, and healthcare. With a strategic presence across six locations in India, Kosh Innovations is committed to delivering customized, sustainable, and high-quality products through a customer-centric and innovative approach |
||||||
| Ransomware | Saturn Industries id31091 View details | United States | Manufacturing / Engineering | — | pending | |
|
saturnind.com zoominfo.com/c/saturn-industries-ltd/348367401 Saturn Industries, based in Winnipeg, Manitoba, is a specialized manufacturer of custom-engineered trailers and overhead lifting products. Operating as a division of BROCK LEMKO Inc., the company serves demanding sectors such as construction, marine, powerline, mining, and aerospace. Since 1996, they have built a strong reputation for designing and fabricating tailored solutions, including dump trailers, lifting beams, and personnel baskets. Their focus remains on durability, safety, and delivering highly customized industrial equipment to meet specific client applications |
||||||
| Ransomware | Acosta Sons id31092 View details | United States | Construction / Real Estate | — | pending | |
|
acostaandsons.com zoominfo.com/c/acosta--sons-inc/398811105 Acosta and Sons is a family-owned appliance sales and repair company based in The Bronx, New York, with additional locations serving the broader New York area. They specialize in providing a wide range of home appliances at discounted prices, catering to both individual customers and property management or landlord accounts. The company is known for its reliable customer service, offering comprehensive solutions from appliance sales to professional repair and maintenance. |
||||||
| Ransomware | CFS id31093 View details | United States | Manufacturing / Engineering | — | pending | |
|
cfsinc.com zoominfo.com/c/cfs-inc/12944410 CFS Inc. is a Massachusetts-based marketing support services company with over 30 years of experience in print management, direct mail, kitting, promotional items, and fulfillment. Acting as a single-source solution, they handle projects from initial design to final execution, helping businesses streamline their marketing and logistical operations. The company is known for its flexible, customer-centric approach and a strong commitment to delivering high-quality, reliable results for clients of all sizes |
||||||
| Ransomware | OHK Energy id31094 View details | Ireland | Energy | — | pending | |
|
ohkenergy.com rocketreach.co/ohk-energy-profile_b6d2700bc7449e3f OHK Energy is Ireland’s largest and most trusted renewable energy provider and retrofit specialist, registered with the Sustainable Energy Authority of Ireland (SEAI). The company specializes in designing and installing solar PV, heat pumps, battery storage, and EV chargers for homeowners, businesses, farms, and communities. With a service-driven and future-focused approach, OHK Energy is dedicated to building a cleaner, more sustainable island by delivering tailored, high-quality energy solutions |
||||||
| Ransomware | Hutch Paving id31095 View details | United States | Construction / Real Estate | — | pending | |
|
hutchpaving.com zoominfo.com/c/hutch-paving-inc/38258180 Hutch Paving is a highly respected asphalt and concrete paving contractor based in Southeast Michigan, serving the region since 1993. The company specializes in comprehensive pavement solutions, including resurfacing, maintenance, sealcoating, and new construction for commercial, municipal, industrial, and residential clients. Known for its safety-first approach, modern equipment, and attention to detail, Hutch Paving is committed to delivering durable, high-quality infrastructure with exceptional customer service |
||||||
| Ransomware | CRB group id31096 View details | Brazil | Manufacturing / Engineering | — | pending | |
|
crbgroup.com zoominfo.com/c/crb-group-gmbh/23317692 CRB is a leading global provider of sustainable engineering, architecture, construction, and consulting solutions, primarily serving the life sciences and food & beverage industries. Headquartered in Kansas City, Missouri, the company specializes in designing and building advanced facilities, such as cell and gene therapy laboratories and high-quality food manufacturing plants. With a strong international presence, CRB is dedicated to delivering innovative, safe, and efficient infrastructure that improves patient outcomes and advances scientific breakthroughs worldwide |
||||||
| Ransomware | Partition Specialties id31097 View details | United States | IT | — | pending | |
|
psi3g.com zoominfo.com/c/partition-specialties-inc/90587733 Partition Specialties, Inc. (PSI), founded in 1958, is a leading commercial interior contractor based in California, serving clients across California and Northern Nevada. The company specializes in tailored architectural space management solutions, including high-quality movable partitions, demountable wall systems, and acoustic dividers. With decades of expertise, PSI helps corporate, hospitality, and industrial clients optimize their interior layouts with flexible, functional, and aesthetically pleasing design products |
||||||
| Ransomware | Preferred id31098 View details | United States | Retail / E-commerce | — | pending | |
|
preferredtool.com Preferred Tool & Die is a precision manufacturing company based in Shelton, Connecticut, specializing in custom metal and plastic injection molds as well as complex stamped components. The company serves demanding sectors, including the medical, electrical, consumer products, and automotive industries. Holding ISO and FDA registrations, they are committed to delivering high-quality, reliable, and innovative manufacturing solutions tailored to exact client specifications |
||||||
| Ransomware | Premier Fiduciary id31099 View details | United Kingdom | Finance / Legal / Insurance | — | pending | |
|
premierfiduciary.com zoominfo.com/c/premier-fiduciary/346765473 Premier Fiduciary is a global corporate and fiduciary services provider specializing in tailored solutions for private wealth clients, family offices, and investment managers. The company offers comprehensive services, including fund administration, trustee services, corporate setup, and regulatory compliance, with a strong presence in key financial hubs like Singapore and Hong Kong. Their mission is to build long-term relationships based on trust, delivering high-quality, holistic financial and administrative support to protect and grow client legacies |
||||||
| Ransomware | Bater id31100 View details | Poland | Retail / E-commerce | — | pending | |
|
bater.pl zoominfo.com/c/bater-ltd/429692403 Bater is a leading Polish manufacturer of traction and stationary batteries, founded in 1990 with production facilities in Warsaw and Gliwice. The company specializes in producing high-quality battery systems for electric forklifts, reserve power, and renewable energy applications, along with recombination plugs and protective battery racks. Holding ISO 9001 and ISO 14001 certifications, Bater also provides comprehensive nationwide services, including battery assembly, maintenance, room renovation, and recycling |
||||||
| Ransomware | Precision Concrete Pumping id31101 View details | United States | Construction / Real Estate | — | pending | |
|
precisionconcretepump.com zoominfo.com/c/precision-concrete-pumping-inc/356699459 Precision Concrete Pumping, Inc. is an MBE-certified concrete pumping company established in 1988, with branches across New York and New Jersey. The company specializes in providing high-quality concrete pumping services, including boom pumps, line pumps, and telebelts, utilizing a modern fleet of Putzmeister and Schwing equipment. With over 25 years of experience, they serve commercial, industrial, and municipal projects throughout the Northeast, ensuring reliable performance and exceptional customer service |
||||||
| Ransomware | Clear Vision Signs id31102 View details | United Kingdom | Manufacturing / Engineering | — | pending | |
|
clearvisionsigns.net zoominfo.com/c/clear-vision-signs/365480092 Clear Vision Signs is a full-service architectural signage and graphics company based in Dade City, Florida, serving clients nationwide. They specialize in turnkey solutions, including wayfinding systems, ADA-compliant signage, environmental graphics, and comprehensive project management. By acting as a single trusted partner for developers and property managers, they ensure efficient, safe, and visually impactful signage programs from initial concept to final installation |
||||||
| Ransomware | Orsima id31103 View details | — | IT | — | pending | |
|
orsima.com zoominfo.com/c/orsima/347930414 ORSIMA is a leading Algerian IT services company with over 30 years of expertise in digital transformation, data center modernization, and cybersecurity. As a strategic partner of major technology providers like Dell Technologies and Microsoft, it offers comprehensive solutions including managed services, software licensing optimization, and professional training. The company is dedicated to helping enterprises and institutions in Algeria optimize their IT infrastructure and ensure high availability and business continuity |
||||||
| Ransomware | The Municipal Chamber of Serra id31104 View details | Brazil | Public Sector | — | pending | |
|
camaraserra.es.gov.br The Municipal Chamber of Serra (Câmara Municipal da Serra) is the legislative body of the city of Serra, located in the state of Espírito Santo, Brazil. As the largest legislative house in the state, it is composed of elected councilors responsible for creating local laws, overseeing the executive branch, and representing the citizens' interests. The institution is committed to transparency, active public participation, and the sustainable development of the municipality through its plenary sessions and specialized committees. |
||||||
| Ransomware | Efrata College of Education id31105 View details | Israel | Healthcare / Pharma | — | pending | |
|
emef.ac.il zoominfo.com/c/efrata-college-of-education/1337375131 Emuna-Efrata Academic College is a higher education institution located formed by the merger of Efrata College of Education and Emuna College of Arts. The college offers unique bachelor's and master's degree programs focusing on education (early childhood, elementary, special, and secondary) and the arts (visual communication, theater, and fine arts). With over 40 years of experience, it is dedicated to training leading female educators and creators, providing a supportive, values-driven academic environment. |
||||||
| Ransomware | Amicell id31106 View details | Israel | IT | — | pending | |
|
amicell.co.il zoominfo.com/c/amicell/426539109 Amicell (Amit Industries Ltd.) is a leading Israeli manufacturer founded in 1989, specializing in custom-designed battery packs, chargers, and Battery Management Systems (BMS). Headquartered in Ashdod, the company provides advanced energy solutions for demanding sectors, including defense, medical, UAVs, robotics, and industrial applications. With over 35 years of experience, Amicell is recognized for delivering reliable, high-tech power systems tailored to complex operational requirements |
||||||
| Ransomware | Paula Fish id31107 View details | Poland | Retail / E-commerce | — | pending | |
|
paulafish.pl zoominfo.com/c/paula-fish/448451882 Paula Fish is a market leader in fish processing in Central Europe, headquartered in Słupsk, Poland. Founded in 1998, the company specializes in the catching, production, freezing, and storage of Baltic fish and Atlantic salmon. With a workforce of over 500 employees, it operates globally, emphasizing high-quality products, innovation, and strict environmental responsibility throughout its supply chain |
||||||
| Ransomware | Known id31108 View details | Iceland | IT | — | pending | |
|
known.is zoominfo.com/c/known/480652891 Known is an award-winning, data-driven marketing, creative, and media agency headquartered in New York. The company uniquely combines PhD data scientists with world-class creatives to deliver measurable performance and breakthrough brand strategies for major clients like Microsoft, TikTok, and Grubhub. Recognized by Ad Age and Adweek as a top-tier agency, Known is dedicated to setting a new standard for modern marketing through science-led innovation and rigorous analytics |
||||||
| Ransomware | Peachtree Group id31109 View details | United States | Finance / Legal / Insurance | — | leaked | |
|
peachtreegroup.com zoominfo.com/c/peachtree-group/5000000011 Peachtree Group is a vertically integrated investment management firm headquartered in Atlanta, Georgia, with a history dating back to 1979. The company specializes in identifying mispriced risk and capitalizing on dislocated market opportunities across private credit, real estate, and equity investments. Managing billions in assets, Peachtree Group provides comprehensive financing solutions—including permanent loans, bridge financing, and mezzanine capital—while offering dedicated services to protect and grow its investments |
||||||
| Ransomware | Municipalidad de San Luis id31110 View details | Peru | Public Sector | — | pending | |
|
munisanluis.gob.pe zoominfo.com/c/municipalidad-de-san-luis/1322909314 The District Municipality of San Luis is the local government body for the San Luis district in Lima, Peru, dedicated to promoting the integral development and well-being of its residents. Its core mission is to lead, regulate, and provide essential public services while fostering community engagement through cultural, sports, and safety programs. The municipality actively modernizes its operations, offering digital platforms for online procedures and payments to ensure efficient, accessible, and transparent governance |
||||||
| Ransomware | World Wide Fittings id31111 View details | United Kingdom | Manufacturing / Engineering | — | pending | |
|
worldwidefittings.com zoominfo.com/c/world-wide-fittings-inc/42729844 World Wide Fittings, Inc. is a global manufacturer of precision-engineered steel and stainless steel hydraulic tube and pipe fittings, founded in 1950 and headquartered in Vernon Hills, Illinois. Operating from nine facilities across three continents, the company supplies over 150 million components annually to OEMs and distributors in industries like automation, manufacturing, and fluid power. With a strong focus on in-house manufacturing, strict quality control, and vast in-stock inventory, they ensure reliable, on-time delivery of specialized fittings worldwide |
||||||
| Ransomware | Chemco Systems id31112 View details | United States | IT | — | pending | |
|
chemcosystems.net zoominfo.com/c/chemco-systems-lp/39588004 Chemco Systems is a world leader in the design and manufacturing of bulk chemical storage, handling, and feed systems for air and water pollution treatment, operating since 1980. The company provides tailored engineering, fabrication, and installation services, delivering innovative and cost-effective solutions without compromising safety or quality. With decades of industry experience, Chemco Systems is committed to superior product reliability, efficient customer service, and the continuous professional growth of its team |
||||||
| Ransomware | Total Auto Business Solutions id31113 View details | United States | IT | — | pending | |
|
autorepairsoftware.com Total Auto Business Solutions, Inc. (TABS) is a leading provider of comprehensive shop management software, best known for its flagship product, AutoFluent. Founded in 2001 and based in Northern California, the company serves auto repair shops, tire dealers, and fleet operators across the US and Canada. Their all-in-one platform streamlines daily operations by seamlessly integrating scheduling, inventory management, accounting, and customer relationship tools into a single, user-friendly system |
||||||
| Ransomware | Okovolt Solartechnik id31114 View details | Germany | Energy | — | pending | |
|
oekovolt.com Ökovolt Solartechnik GmbH is an Austrian company specializing in the planning, installation, and maintenance of photovoltaic systems for private, commercial, and industrial clients. Based in Upper Austria with over 15 years of experience, the firm provides comprehensive, customized solar energy solutions to promote sustainability and energy independence. They focus on high-quality components, expert consulting, and reliable service to maximize the efficiency and lifespan of every solar project |
||||||
| Ransomware | Pertamina id31115 View details | Indonesia | Energy | — | leaked | |
|
pertamina.com REV - $23.2 Billion zoominfo.com/c/pt-pertamina/191250883 Pertamina is an energy company primarily in the oil and gas sector. The company provides services for new and renewable energy, and other activities related to or supporting business activities. We have taken NDA files, HR DATA, user data, employee data, technical drawings, models, bank accounting tax legal statements, SCADA documents, confidential files, photographs of work, screenshots and much more the total data volume is more than 1.2TB+ 1200 GB+ . Pertamina is Indonesia’s state-owned integrated energy corporation, operating across upstream, downstream, gas, and renewable energy sectors. With over six decades of operation, it is a primary driver of national energy sovereignty and consistently ranks among the Fortune Global 500 companies. |
||||||
| Ransomware | Promatrix id31032 View details | United States | IT | — | pending | |
|
promatrixcorp.com zoominfo.com/c/promatrix-corp/347777611 Promatrix Corp is a rapidly growing IT consulting and outsourcing company based in New Jersey, USA. They deliver comprehensive global technology solutions, including web application development, managed IT services, and staff augmentation. The company also specializes in enterprise resource planning (SAP) support and HR outsourcing to help businesses optimize their operations and scale efficiently |
||||||
| Ransomware | Malaysian Nuclear Agency id31033 View details | Malaysia | Public Sector | — | pending | |
|
nuclearmalaysia.gov.my zoominfo.com/c/malaysian-nuclear-agency/459120141 The Malaysian Nuclear Agency (Nuklear Malaysia) is the leading government research and development organization in nuclear science and technology. It focuses on the peaceful application of nuclear innovations to support national development, including medical radiopharmaceuticals, food security, and industrial safety. Additionally, the agency plays a key role in radiation safety, human resource development, and the responsible management of radioactive waste in the country |
||||||
| Ransomware | Delkart Industries Pvt id31034 View details | India | Manufacturing / Engineering | — | pending | |
|
delkartindustries.com zoominfo.com/c/delkart-industries-pvt-ltd/471455561 Delkart Industries is an Indian manufacturing company established in 2017, specializing in custom felts, automobile carpets, and noise and thermal insulation parts. The company serves the automotive, home appliance, robotics, and industrial sectors with high-quality, customized solutions. With multiple manufacturing plants across India and IATF 16949 / ISO 9001 certifications, it ensures reliability, innovation, and trusted partnerships with leading global brands |
||||||
| Ransomware | ETA Technology Pvt id31035 View details | India | IT | — | pending | |
|
etatechnology.in zoominfo.com/c/eta-technology-pvt-ltd/432054929 ETA Technology is a Bangalore-based manufacturing company founded in 1991, specializing in the design and production of advanced welding and forging equipment. They build rotary friction welders, friction stir welding systems, electrical upsetters, and custom test rigs for critical industries like automotive, aerospace, and e-mobility. With over 1,300 machines delivered to more than 20 countries, the company is known for its engineering precision, minimal rejection rates, and reliable global support |
||||||
| Ransomware | Kontact Consortium India Pvt id31036 View details | India | IT | — | pending | |
|
kontact.in zoominfo.com/c/kontact-consortium-india-pvt-ltd/437934184 Kontact is an Indian engineering company with over 50 years of experience, specializing in electrical and mechanical solutions for the railway, infrastructure, and industrial sectors. They provide end-to-end services, including railway rolling stock supplies, LV/MV power distribution panels, and electrical contracting, backed by a 40,000+ sq. ft. manufacturing facility. The company is recognized for its reliability and quality, holding key international certifications such as ISO 9001, IRIS, and EN 15085-2 |
||||||
| Ransomware | Upanal CNC Solutions id31037 View details | Peru | Manufacturing / Engineering | — | pending | |
|
upanalcnc.com zoominfo.com/c/upanal-cnc-solutions/370526030 Upanal CNC Solutions is an Indian company specializing in advanced metal cutting and metal forming technologies, particularly CNC machinery. Beyond supplying equipment, they provide comprehensive services including machine modernization, 24/7 technical support, and structured training programs for operators and engineers. Headquartered in Bangalore with a technical center in Chennai and an international office in Bahrain, the company serves a trusted network of over 500 clients across various manufacturing industries |
||||||
| Ransomware | Indus Protech Solutions id31038 View details | India | Manufacturing / Engineering | — | pending | |
|
indusprotech.com zoominfo.com/c/indus-protech-solutions-ltd/1323287130 Indus Protech Solutions is a Chennai-based company specializing in comprehensive bulk MRO (Maintenance, Repair, and Operations) and supply chain services for global trade. Acting as a one-stop sourcing partner, they provide access to over 1.5 million products across 50+ categories, serving diverse sectors like defense, energy, agriculture, and pharmaceuticals. The company connects businesses with global manufacturers, ensuring assured quality, competitive pricing, and streamlined procurement for Fortune 500 companies and large corporate networks |
||||||
| Ransomware | Angel Hotel id31039 View details | United Kingdom | Other | — | pending | |
|
angelpershore.co.uk zoominfo.com/c/angel-hotel/1153643926 The Angel, Pershore is a historic Tudor-origin hotel and restaurant located in the heart of the market town of Pershore, Worcestershire, near the River Avon. It serves as a premier venue offering farm-to-table dining with locally sourced produce, comfortable accommodation, and a charming atmosphere. Beyond hospitality, the establishment is a vibrant community hub, regularly hosting live music, festivals, and popular annual events like Bonfire Night fireworks. |
||||||
| Ransomware | The Garfield County Sheriff Office id31040 View details | United States | Law Enforcement / Public Sector | — | pending | |
|
garcosheriff.com The Garfield County Sheriff's Office is the primary law enforcement agency serving Garfield County, Colorado. Its mission is to deliver exceptional service and problem-solving solutions to the community through professional, ethical, and compassionate conduct. The office provides comprehensive public safety services, including patrol, detentions, criminal investigations, and community outreach programs like "Shop with a Cop" and emergency mass notifications |
||||||
| Ransomware | Buck Knives id31019 View details | United States | Manufacturing / Engineering | — | pending | |
|
buckknives.com zoominfo.com/c/buck-knives-inc/16223110 Buck Knives is a historic American knife manufacturer founded in 1947 by Hoyt Buck, originating from a family blacksmith business dedicated to superior steel tempering. The brand revolutionized the knife industry in 1964 with the introduction of the iconic Model 110 Folding Hunter. Now headquartered in Post Falls, Idaho, this four-generation family company is renowned for its rugged durability, traditional American craftsmanship, and a lifetime "Forever Warranty" |
||||||