Last Ransomware victims

Sponsored by Hudson RockUse Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business


Groups

0


Victims

0


Victims this month

0


Victims this year

0
This page lists the latest 100 ransom claims detected by Ransomware.live. We continously scrape ransomware group sites to detect new victims.
Ransomware.live has been tracking ransomware's victims since April 2022.


Ransomware.livedoes not exfiltrate, download, host, repost, or disclose any stolen data. Any legal concerns regarding the content should be directed at the attackers, notRansomware.live. This platform is dedicated to cybersecurity awareness, reporting on ransomware incidents to inform the public.Ransomware.liveoperates independently, with no affiliation or alignment with any ransomware groups, and does not host or distribute infringing content. All information is automatically gathered and redacted from publicly accessible sources, including ransomware leak sites on the dark web.




View summary page

AU flag

Thornton EngineeringAustralia Pty Ltd 

Company logo
Ransomware Group:

Discovery Date:

Thornton Engineering provides design and fabrication of structura l steel, pressure vessels, heat exchangers, plate and piling stee l products for major projects Australia wide. We are ready to upload more than 11 GB of essential corporate doc uments such as: contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports) , etc.

Victim:   |  Group: 
US flag

chfindustries.com 

Company logo
Ransomware Group:

Discovery Date:

<p>Household Goods.<br><br>“Family-run since 2002, CHF is, at its heart, a community of people with a shared passion for enhancing home life. The company weaves that perspective into every aspect of business, from encouraging work-life balance for employees to creating workplace initiatives and charitable giving programs to help foster responsible working conditions, fair compensation, respect for human rights, and environmental stewardship.”<br><br>Website: <a href="https://www.chfindustries.com/">https://www.chfindustries.com/</a><br><br>Revenue : $253.8M<br><br>Address: 1 Park Ave Fl 9, New York City, New York, 10016, United States<br><br>Phone Number: (212) 951-7800<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/CHFINDUSTRIES/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/CHFINDUSTRIES/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/CHFINDUSTRIES/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/CHFINDUSTRIES/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information, corporate confidential documents, contracts\agreements, production docs\drawings\designs, shipping data, employees personal documents, financial data, customer docs, corporate correspondence, etc.</p><p><img src="/uploads/passport_scan_89bc13afc8.png" alt="passport_scan.png"><img src="/uploads/Docs_DI_61000_Nishat_9756836dd9.png" alt="Docs_DI61000_Nishat.png"><img src="/uploads/CONFIDENTIAL_Ci_CLO_Certified_Manufacturing_Partners_08_2024_eff52d31fe.png" alt="CONFIDENTIAL CiCLO Certified Manufacturing Partners 08_2024.png"><img src="/uploads/CHF_Confidentiality_Agreement_f9bbdf919a.png" alt="CHF&nbsp;Confidentiality&nbsp;Agreement.png"><img src="/uploads/2025_Docusign_CHF_Industries_x_CRUSH_1_8_25_7ed81d48e8.png" alt="2025 Docusign_CHF_Industries_x_CRUSH 1.8.25.png"></p>

Victim:   |  Group: 
US flag

aiibeauty.com 

Company logo
Ransomware Group:

Discovery Date:

<p>Cosmetics, Beauty Supply &amp; Personal Care Products.<br><br>“Headquartered in Los Angeles, California, we are at the heart of beauty and fashion. Our continued access to the latest trends has given way to fresh and innovative products. Our corporate headquarters occupy approximately 250,000 square feet and are comprised of executive and administrative offices, warehousing and on-site manufacturing and distribution facilities.”<br><br>Website: <a href="https://www.aiibeauty.com/">https://www.aiibeauty.com/</a><br><br>Revenue : $274.8M<br><br>Address: 2220 Gaspar Ave, Los Angeles, California, 90040, United States<br><br>Phone Number: (323) 728-2999<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/AIIBEAUTY/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/AIIBEAUTY/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/AIIBEAUTY/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/AIIBEAUTY/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Corporate confidential docs, R&amp;D data, projects, financial documents, payroll, employees personal files, contracts\agreements, legal docs, corporate correspondence, etc.</p><p><img src="/uploads/C1013_All_step_sale_Dec_2024_8b1aa33e9e.png" alt="C1013 All-step sale Dec. 2024.png"><img src="/uploads/Leandro_W_9_b76f2b85dc.png" alt="Leandro W-9.png"><img src="/uploads/ORC_1902921_IFRA_and_EU_Allergen_statement_A_b83f29da49.png" alt="ORC1902921 - IFRA and EU Allergen statement (A).png"><img src="/uploads/Minimalist_Serum_18_334_01_C211_db960b3255.png" alt="Minimalist Serum 18.334.01 C211.png"><img src="/uploads/901_F_IFRA_Jeris_Type_901_F_56e3d99cca.png" alt="901F IFRA Jeris Type #901F.png"></p>

Victim:   |  Group: 
US flag

formanmills.com 

Company logo
Ransomware Group:

Discovery Date:

<p>Forman Mills, founded in 1977, began as a flea market, and has since grown to become a nationwide warehouse retailer, offering men's, women's, and children's off-price apparel.</p><p>Website: <a href="https://www.formanmills.com/">https://www.formanmills.com/</a></p><p>Revenue : $422.2M</p><p>Address: 1070 Thomas Busch Memorial Hwy, Pennsauken, New Jersey, 08110, United States</p><p>Phone Number: (856) 486-1447</p><p><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/FORMANMILLS/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/FORMANMILLS/PROOF/</a></p><p><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/FORMANMILLS/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/FORMANMILLS/PROOF/</a></p><p><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information, corporate confidential data, financials, employees\executives personal data, corporate correspondence, etc.</p><p><img src="/uploads/2_cb19493105.png" alt="2.png"><img src="/uploads/1_c576fa8bb9.png" alt="1.png"><img src="/uploads/3_d59b728eee.png" alt="3.png"><img src="/uploads/4_3bd07ff695.png" alt="4.png"><img src="/uploads/5_0df314f99d.png" alt="5.png"></p>

Victim:   |  Group: 
US flag

amalgamatedsugar.com 

Company logo
Ransomware Group:

Discovery Date:

<p>Founded in 1902, The Amalgamated Sugar Company produces sugar from sugar beets grown by members of our parent cooperative, Snake River Sugar Company.</p><p>Website: <a href="https://www.amalgamatedsugar.com/">https://www.amalgamatedsugar.com/</a></p><p>Revenue : $764.8 M</p><p>Address: 1951 S Saturn Way Ste 100, Boise, Idaho, 83709, United States</p><p>Phone Number: (208) 383-6500</p><p><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/AMALGAMATEDSUGAR/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/AMALGAMATEDSUGAR/PROOF/</a></p><p><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/AMALGAMATEDSUGAR/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/AMALGAMATEDSUGAR/PROOF/</a></p><p><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information, database backups (customer data, shipping, production, etc.), corporate confidential docs, agreements\cotracts\NDAs, financial\payroll data, HR dept docs, confidential engineering docs and drawings, customer information, employees\executives private data, corporate correspondence, etc.&nbsp;<br><img src="/uploads/1_2f04c75f3e.png" alt="1.png"><img src="/uploads/2_f455a07bdd.png" alt="2.png"><img src="/uploads/3_6e55dd6358.png" alt="3.png"><img src="/uploads/4_9710a9bdf3.png" alt="4.png"><img src="/uploads/5_f18f6b6040.png" alt="5.png"></p>

Victim:   |  Group: 
IT flag

everelgroup.com 

Company logo
Ransomware Group:

Discovery Date:

<p>Appliances.<br><br>“Everel is a leader in the production and supply of electromechanical parts for the most celebrated household electrical appliance manufacturers and for the principal automobile producers.”<br><br>Website: <a href="https://www.everelgroup.com/">https://www.everelgroup.com/</a><br><br>Revenue : $259M<br><br>Address: 9 Via Cavour, Valeggio sul Mincio, Veneto, 37067, Italy<br><br>Phone Number: +39 456313711<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/EVERELGROUP/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/EVERELGROUP/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/EVERELGROUP/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/EVERELGROUP/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal Identifiable information, database backups, corporate confidential documents, projects, contracts, engineering documents\drawings, operations data, financial documents\payroll, employees personal docs, corporate correspondence, etc.</p><p><img src="/uploads/8d_passaporto_Ioan_Gornic_Schrob_635a4e77f5.png" alt="8d_passaporto Ioan Gornic Schrob.png"><img src="/uploads/5_CI_Francesca_Castelletti_fc4c0e816d.png" alt="5_CI Francesca Castelletti.png"><img src="/uploads/ZORDST_20240131_143026_6e526679f7.png" alt="ZORDST_20240131_143026.png"><img src="/uploads/Budget_2025_DRAFT_vers_2_e00997ee44.png" alt="Budget 2025 - DRAFT_vers 2.png"><img src="/uploads/Contract_de_confidentialitate_153_10_04_2023_21a7d6db52.png" alt="Contract-de-confidentialitate-153-10.04.2023.png"></p>

Victim:   |  Group: 
CA flag

regulvar.com 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
<p>Commercial &amp; Residential Construction.<br><br>“Everel is a leader in the production and supply of electromechanical parts for the most celebrated household electrical appliance manufacturers and for the principal automobile producers.”<br><br>Website: <a href="https://www.regulvar.com/">https://www.regulvar.com/</a><br><br>Revenue : $253.5M<br><br>Address: 3985 Boul Industriel, Laval, Quebec, H7L 4S3, Canada<br><br>Phone Number: +33 147921130<br><br>Download link #1: <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/REG_NET/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/REG_NET/PROOF/</a><br><br>Mirror: <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/REG_NET/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/REG_NET/PROOF/</a><br><br>DATA DESCRIPTIONS: Personal identifiable information, database backups, corporate confidential documents, agreements, projects, engineering data, drawings, financial documents\payroll, corporate correspondence, etc.</p><p><img src="/uploads/Emailing_passeport_JCBM_1_f874aa9561.png" alt="Emailing passeport JCBM1.png"><img src="/uploads/Formulaire_330_23_signe_passeport_ac612d71ab.png" alt="Formulaire 330-23 signé + passeport.png"><img src="/uploads/Regulvar_inc_Rapport_financier_A_SIGNER_31_01_2024_c2c897a97f.png" alt="Régulvar inc. - Rapport financier À SIGNER 31-01-2024.png"><img src="/uploads/Regulvar_Canada_Inc_Confidentiality_Agreement_338bae0494.png" alt="Regulvar Canada Inc. Confidentiality Agreement.png"><img src="/uploads/9017_054_1001_14_sonde_niveau_chlore_Ref_BPA_d0124fe34b.png" alt="9017-054-1001# 14 sonde niveau chlore Ref.BPA.png"></p>

Victim:   |  Group: 
CA flag

Metro Supply Chain Group. 

Company logo
Ransomware Group:

Discovery Date:

We have balance sheets, billings, budgets and other financial data and employee personal data ... Data will be published on our blog in 5 days...

Victim:   |  Group: 
US flag

Geokon 

Company logo
Ransomware Group:

Discovery Date:

Geokon, Incorporated designs, manufactures and supplies geotechnical sensors and instrumentation for use in civil, mining, and structural engineering projects in the United States and internationally. The company offers extensometers, piezometers, strain gages, crack meters, joint meters, load cells, settlement sensors, pressure cells, inclinometers and data loggers, and many other custom items. It also provides semiconductor piezometers and pressure transducers; and thermistor probes and strings, temperature sensors, fiber optic temperature sensors, cables, vibration monitors, and water level meters, as well as Nold DeAerator, which provides a means of removing dissolved gasses from fluids. In addition, the company offers custom design services to produce custom instrumentation for special applications; instruments, readouts, and data loggers for rent on short and long-term basis; and installation and training services.

Victim:   |  Group: 
SG flag

Planet One 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
Planet One Pte Ltd is a company that operates in the Custom Software & IT Services industry. It employs 250to499 people and has 50Mto100M of revenue. The company is headquartered in Singapore, Central Singapore, Singapo.

Victim:   |  Group: 
FR flag

IDEA Expertises 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
Créé en 2014, IDEA est un réseau dexperts automobile national et dans les DOM TOM, en plein développement. Conscient que le service et la qualité dune agence est le fruit dun bon dirigeant, le réseau IDEA a pris la décision de mettre en uvre une franchise avec lensemble des agences. Nos équipes expertisent lensemble des véhicules terrestres et maritimes. Lévolution des technologies et des techniques de réparation nous poussent à former de manire constante notre personnel. Grce à cela, nous pouvons intervenir efficacement sur différents types de véhicules : engins agricoles, deux roues, poids lourd, la navigation de plaisance, caravanes. Nos experts et personnels spécialisés reoivent également des formations sur les nouveautés du marché comme les véhicules électriques, les responsabilités civiles professionnelles, les malfaons, vices cachés Fort de notre volonté de devenir un acteur majeur du service clients, nous développons des produits informatiques afin de faire évoluer le schém

Victim:   |  Group: 
DE flag

Stürmer Maschinen 

Company logo
Ransomware Group:

Discovery Date:

Stürmer Maschinen

Victim:   |  Group: 
US flag

electrocraft.com 

Company logo
Ransomware Group:

Discovery Date:

Sector: Technology
<p>Automotive Parts.<br><br>“ElectroCraft, Inc. is a global provider of dependable, application-engineered fractional-horsepower motor and motion products. Our products are found in thousands of different applications within industrial, commercial, and consumer product markets. While ElectroCraft provides a wide array of standard products with many configurable options, we have built our brand on custom OEM solutions that meet the precise performance, cost and quality our customers require.”<br><br>Website: <a href="https://www.electrocraft.com/">https://www.electrocraft.com/</a><br><br>Revenue : $190.1M<br><br>Address: 2 Marin Way Ste 3, Stratham, New Hampshire, 03885, United States<br><br>Phone Number: (844) 338-8114<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/ELECTROCRAFT/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/ELECTROCRAFT/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/ELECTROCRAFT/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/ELECTROCRAFT/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information, database backups, corporate confidential data, projects, contracts, engineering docs and drawings, HR dept data, financial\payroll docs, employees private data, corporate correspondence, etc.</p><p><img src="/uploads/Kaufman_Don_Drivers_License_317eb42d5f.png" alt="Kaufman, Don - Drivers License .png"><img src="/uploads/Eubanks_Rick_SIGNED_Confidential_Agreement_and_Release_4_3_24_46321c8168.png" alt="Eubanks, Rick SIGNED Confidential Agreement and Release 4.3.24.png"><img src="/uploads/Smart_Air_Valve_Actuator_Req_Spec_FINAL_1c1cca35ed.png" alt="Smart_Air_Valve_Actuator_Req_Spec_FINAL.png"><img src="/uploads/Dettwiller_Kimberly_application_5_15_12_f28ce1820e.png" alt="Dettwiller, Kimberly application 5.15.12.png"><img src="/uploads/E13399_A3_Top_Gear_Plate_Sub_Assembly_606df6c475.png" alt="E13399-A3TopGearPlateSub-Assembly.png"></p>

Victim:   |  Group: 
US flag

associatedasset.com 

Company logo
Ransomware Group:

Discovery Date:

<p>Business Services.<br><br>“Founded in 1990, AAM has become a trusted household name in community management. So, what sets AAM apart as the premier partner to over 1,000 community associations nationwide? It’s simple. We love what we do and are flexible, adaptable, and willing to work with our Boards to build a detailed support system.”<br><br>Website: <a href="https://www.associatedasset.com/">https://www.associatedasset.com/</a><br><br>Revenue : $288M<br><br>Address: 1600 W Broadway Rd Ste 200, Tempe, Arizona, 85282, United States<br><br>Phone Number: (602) 957-9191<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/ASSOCIATEDASSET/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/ASSOCIATEDASSET/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/ASSOCIATEDASSET/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/ASSOCIATEDASSET/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information, executives personal docs, corporate OneDrive, financial data, corp correspondence, agreements\NDAs\contracts, etc.</p><p><img src="/uploads/Amanda_Frances_Shaw_Passport_NMLS_2024_cdf461e93c.png" alt="Amanda Frances Shaw Passport NMLS 2024.png"><img src="/uploads/Amanda_F_Shaw_W9_05a6adab3e.png" alt="Amanda F. Shaw W9.png"><img src="/uploads/AAM_Indiana_LLC_IRS_Form_W9_11_24_2021_58be73f250.png" alt="AAM Indiana, LLC.IRS Form W9.11-24-2021.png"><img src="/uploads/Northampton_v_AAM_Confidential_Settlement_Agreement_and_Release_1_1_0696d757ca.png" alt="Northampton v. AAM - Confidential Settlement Agreement and Release (1) (1).png"><img src="/uploads/1_AAM_LLC_Financial_Package_12_2023_Rev_627104c998.png" alt="1-AAM, LLC Financial Package 12-2023 Rev.png"></p>

Victim:   |  Group: 
US flag

grede.com 

Company logo
Ransomware Group:

Discovery Date:

<p>Grede is an independent company that designs, engineers, validates and manufactures high-quality ductile, gray and specialty iron castings for automotive, commercial and industrial markets. Headquartered in Southfield, MI, Grede offers complete precision machining and finishing services, as well as the assembly of diverse components into complete systems. It has 9 facilities in the U.S. with approximately 2,700 employees.</p><p>Website: <a href="https://www.grede.com/">https://www.grede.com/</a></p><p>Revenue : $814.7M</p><p>Address: 20750 Civic Center Dr Ste 100, Southfield, Michigan, 48076, United States</p><p>Phone Number: (248) 440-9500</p><p><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/GREDE/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/GREDE/PROOF/</a></p><p><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/GREDE/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/GREDE/PROOF/</a></p><p><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information; Corporate confidential data; Engineering data, drawings; Customer information; Financial\payroll documents; HR department documents; Employees and executives personal data; Corporate correspondence; Database exports and backups.</p><p><img src="/uploads/3_09504c8722.png" alt="3.png"><img src="/uploads/4_ae06f9cc25.png" alt="4.png"><img src="/uploads/2_f483d7e701.png" alt="2.png"><img src="/uploads/1_a73f8e4e72.png" alt="1.png"><img src="/uploads/5_970319790e.png" alt="5.png"></p>

Victim:   |  Group: 
US flag

branchgroup.com 

Company logo
Ransomware Group:

Discovery Date:

Sector: Construction
<p>Commercial &amp; Residential Construction.<br><br>“Founded in 1963, The Branch Group is a company that owns and operates different companies that specialize in civil construction, residential and commercial building construction, electrical and pipe installation, and more. The company is based in Roanoke, Virginia.”<br><br>Website: <a href="https://www.branchgroup.com/">https://www.branchgroup.com/</a><br><br>Revenue : $333M<br><br>Address: 442 Rutherford Ave NE, Roanoke, Virginia, 24016, United States<br><br>Phone Number: (540) 982-1678<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/BRANCHGROUP/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/BRANCHGROUP/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/BRANCHGROUP/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/BRANCHGROUP/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information, Corporate confidential data, customer information, financial\payroll documents, Employees\executives personal data, IT department documents, corporate correspondence, etc.</p><p><img src="/uploads/Chris_Tucker_ID_22fbc5dcab.png" alt="Chris Tucker ID.png"><img src="/uploads/Branch_Sovos_NDA_07014a5eac.png" alt="Branch Sovos NDA.png"><img src="/uploads/Lori_Beth_Hoel_ID_5284d4273e.png" alt="Lori Beth Hoel ID.png"><img src="/uploads/Breeden_Heating_Air_LF_TPQ_2022_09_NDA_48b06d9916.png" alt="Breeden Heating Air - LF TPQ 2022.09 NDA.png"><img src="/uploads/Branch_interim_financial_statements_May_2023_c9b4b7e60d.png" alt="Branch interim financial statements May 2023.png"></p>

Victim:   |  Group: 
US flag

pace-usa.com 

Company logo
Ransomware Group:

Discovery Date:

<p>Originally founded as Integrity Dash, the company specialized in local express custom delivery. Its mission was to provide opportunities for urban youth to develop the skills necessary to make a successful transition to adult independence, stability, and employment. The corporation was immediately successful, but its structure limited its ability to expand. From that worthy foundation, Pace was formed in 1997 and has been delivering customized logistics solutions for its customers ever since. While Pace has grown and evolved, its close ties to local communities and its commitment to providing quality job opportunities have remained constant.</p><p>Website: <a href="https://www.pace-usa.com/">https://www.pace-usa.com/</a></p><p>Revenue : $134.4M</p><p>Address: 5951 Greenwood Pkwy, Bessemer, Alabama, 35022, United States</p><p>Phone Number: (866) 410-7222</p><p><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/PACE-USA/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/PACE-USA/PROOF/</a></p><p><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/PACE-USA/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/PACE-USA/PROOF/</a></p><p><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information, Corporate confidential data, Customer information, Financial documents, Employees\executives personal data, Corporate correspondence.<br><img src="/uploads/5_c4673678db.png" alt="5.png"><img src="/uploads/1_6f035a0736.png" alt="1.png"><img src="/uploads/3_eee426914e.png" alt="3.png"><img src="/uploads/4_a3ecc920a9.png" alt="4.png"><img src="/uploads/2_6468dc2c6b.png" alt="2.png"></p>

Victim:   |  Group: 
US flag

steelwarehouse.com 

Company logo
Ransomware Group:

Discovery Date:

<p>Steel Warehouse, founded in 1947 and headquartered in South Bend, Indiana, produces steel products. The Company offers panel flat, floor plate, hot rolled band, hot-rolled sheet, high strength low alloy, cold-rolled sheet, cold-rolled strip, and other steel products.</p><p>Website: <a href="https://www.steelwarehouse.com/">https://www.steelwarehouse.com/</a></p><p>Revenue : $570.3M</p><p>Address: 2722 Tucker Dr, South Bend, Indiana, 46619, United States</p><p>Phone Number: (800) 348-2529</p><p><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/STEELWAREHOUSE/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/STEELWAREHOUSE/PROOF/</a></p><p><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/STEELWAREHOUSE/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/STEELWAREHOUSE/PROOF/</a></p><p><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information, corporate confidential data, customer information, financials, employees\executives personal data, corporate correspondence, etc.<br><img src="/uploads/5_607d3554d8.png" alt="5.png"><img src="/uploads/4_f1c615f8e7.png" alt="4.png"><img src="/uploads/1_f29512f676.png" alt="1.png"><img src="/uploads/3_25b490b75d.png" alt="3.png"><img src="/uploads/2_ec6aea5c5f.png" alt="2.png"></p>

Victim:   |  Group: 
 flag

Johnson's Nursery 

Company logo
Ransomware Group:

Discovery Date:

Status: 30d 0h 5m 50s - Size Data: 20 GB

Victim:   |  Group: 
US flag

www.famcomachine.com 

Company logo
Ransomware Group:

Discovery Date:

[AI generated] Famco Machine Division is a company based in Kenosha, WI, specializing in the manufacture of machinery and tools. Their product catalog includes shear machines, press brakes, routers, and a range of punches, such as bench punches, deep throat punches, and arbor presses. In addition to manufacturing, Famco provides machine services such as maintenance and repair, ensuring their tools deliver optimal performance.

Victim:   |  Group: 
JP flag

Digital Technology Co., Ltd. 

Company logo
Ransomware Group:

Discovery Date:

Sector: Technology
Status: 29d 22h 29m 25s - Size Data: 150 GB

Victim:   |  Group: 
US flag

Goldstein Law Group, S.C. 

Company logo
Ransomware Group:

Discovery Date:

Status: 29d 22h 37m 9s - Size Data: 60 GB

Victim:   |  Group: 
US flag

Northern Management 

Company logo
Ransomware Group:

Discovery Date:

Status: 29d 22h 41m 38s - Size Data: 50 GB

Victim:   |  Group: 
US flag

The Northwestern Illinois Association 

Company logo
Ransomware Group:

Discovery Date:

Sector: Education
Status: 29d 22h 48m 30s - Size Data: 50 GB

Victim:   |  Group: 
EC flag

Bayteq 

Company logo
Ransomware Group:

Discovery Date:

Sector: Technology
Extract from Gitlabs: Naphix, WDNA, Bayteq - Bayteq is a technology partner specializing in software development, staff augmentation, robotic process automation, UX/UI design, and innovation consulting, delivering personalized digital solutions to businesses.

Victim:   |  Group: 
ES flag

WDNA 

Company logo
Ransomware Group:

Discovery Date:

Sector: Technology
Extract from Gitlabs: Naphix, WDNA, Bayteq - WDNA (Wireless Domestic Network Auditors) is a Spanish business group with an international presence, developing innovative technologies and specialized solutions in network monitoring and auditing, advanced meteorology, and IoT monitoring of critical infrastructures, integrated into their entro© platform.

Victim:   |  Group: 
AU flag

Naphix 

Company logo
Ransomware Group:

Discovery Date:

Sector: Technology
Extract from Gitlabs: Naphix, WDNA, Bayteq - gitlab

Victim:   |  Group: 
 flag

Gitlabs: Naphix, WDNA, Bayteq 

Company logo
Ransomware Group:

Discovery Date:

Sector:

Group: 
EG flag

Shaghalni 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
N/A

Victim:   |  Group: 
US flag

BluAgent Technologies, Inc 

Company logo
Ransomware Group:

Discovery Date:

Sector: Technology
N/A

Victim:   |  Group: 
US flag

Novi Community School District 

Company logo
Ransomware Group:

Discovery Date:

Sector: Education
N/A

Victim:   |  Group: 
GB flag

G&M Direct Hire 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
N/A

Victim:   |  Group: 
ES flag

ondaralogistica.com 

Company logo
Ransomware Group:

Discovery Date:

[AI generated] Ondara Logistica is a Spanish company specialized in offering complete logistics solutions. Their services range from transport, both national and international, to storage and distribution. They utilize advanced technology and a team of experts to ensure efficient operations. They aim to provide customizable and comprehensive logistics solutions for businesses of all sizes across various industries.

Victim:   |  Group: 
GB flag

Metropolitan Borough of Gateshead 

Company logo
Ransomware Group:

Discovery Date:

The Metropolitan Borough of Gateshead is a metropolitan borough in the metropolitan county of Tyne and Wear, England. It includes Gateshead, Rowlands Gill, Whickham, Blaydon, Ryton, Felling, Birtley, Pelaw, Dunston and Low Fell. The borough forms part of the Tyneside conurbation, centred on Newcastle upon Tyne. At the 2021 census, the borough had a population of 196154. Gateshead Council office is located in 12 Gladstone Ter, Gateshead, Tyne and Wear, NE8 4DY, United Kingdom and has 684 employees.

Metropolitan Borough of Gateshead has been previously claimed by Medusa for an attack estimated on 2025-01-14.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-02-22

Victim:   |  Group: 
US flag

Martin Energy Group Services 

Company logo
Ransomware Group:

Discovery Date:

Sector: Energy
Martin Energy Group Services are a complete solutions provider for generator packages, combined heat and power (CHP) systems, microgrids, and anaerobic digester design & construction. Martin Energy Group Services corporate office is located in 39415 Excelsior Dr, Latham, Missouri, 65050, United States and has 120 employees. The total amount of data leakage is 320.90 GB

Victim:   |  Group: 
US flag

G&S Electric LLC 

Company logo
Ransomware Group:

Discovery Date:

Sector: Construction
G&S Electric LLC is a trusted electrical contractor serving Shreveport, Benton, and Bossier City, LA, specializing in both commercial and residential projects. G&S Electric corporate office is located in 2127 Mcclellan St, Shreveport, Louisiana, 71103, United States and has 23 employees.

Victim:   |  Group: 
US flag

Benton Police Department 

Company logo
Ransomware Group:

Discovery Date:

Benton Police Department - city police department. Benton Police Department corporate office is located in 114 S East St Ste 100, Benton, Arkansas, 72015, United States and has 52 employees.

Victim:   |  Group: 
SA flag

Al Bawani 

Company logo
Ransomware Group:

Discovery Date:

Sector: Construction
Al Bawani, headquartered in Riyadh, Saudi Arabia, is a construction company specializing in housing complexes, industrial & commercial buildings, hospitals, educational institutions, and more

Victim:   |  Group: 
NZ flag

Tristram European 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
Tristram European is a group of privately-owned Volkswagen, SKODA and MG dealerships located on Auckland's North Shore and West Auckland. Our main goal is to provide the best possible service and help you find exactly what you're looking for. Whether you're after something fun or convenient we can help you out. The search starts right here on our website, which is why we have provided a number of tools to help you get started. Our services at Tristram will continue long after you have purchased one of our new or used vehicles. Our service department will take care of any and all of your maintenance and repair needs. They can also answer questions about parts and give honest estimates on cost and time. Whatever your automotive needs may be, we can help you out.

Victim:   |  Group: 
EG flag

SPEED Co 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
Exfiltraded data : yes - Encrypted data : no

Victim:   |  Group: 
ES flag

CCOO Servicios 

Company logo
Ransomware Group:

Discovery Date:

Exfiltraded data : yes - Encrypted data : yes

Victim:   |  Group: 
US flag

Peter Glenn Ski Sport 

Company logo
Ransomware Group:

Discovery Date:

Peter Glenn Ski Sport Peter Glenn Ski and Sport is a retailer of clothing and accessories for skiing, hiking, and water sports.

Victim:   |  Group: 
US flag

evergreenpnw.com 

Company logo
Ransomware Group:

Discovery Date:

Evergreen Christian Community is a company that operates in the Religious Organizations industry. It employs 100to249 people and has 10Mto25M of revenue. The company is headquartered in Olympia, Washington. Phone Number (360) 352-3410 IT Director (360) 528-7385 Total Files Listed: 63846 File(s) 32,565,343,182 bytes 16440 Dir(s) 7,329,921,945,600 bytes free

Victim:   |  Group: 
 flag

Excel Security 

Company logo
Ransomware Group:

Discovery Date:

Excel provides consulting, executive protection, guard, electronic systems installation, Command Center Monitoring, Biometric Facial Identification, and investigative services throughout the world. With a long history of dedicated service protecting people and property, Excel’s executive management team consists of highly effective individuals with accomplished backgrounds in all aspects of security. With unparalleled expertise and experience in risk mitigation, crisis management, and counterterrorism, Excel Security provides strategic security solutions for governments, corporations, institutions, and individuals around the world. Today, Excel employs more than 750 people and secures in excess of 30 million square feet of space in the Tri-State region. Excel’s distinct advantage resides in the fact that we are a full-service security provider combining both personnel services and technology. Our Command Center offers a unique advantage from which we can effectively monitor all of the people and facilities we are contracted to protect.

Excel Security has been previously claimed by Akira for an attack estimated on 2024-05-30.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-02-22

Victim:   |  Group: 
US flag

alleghenybradford.com 

Company logo
Ransomware Group:

Discovery Date:

[AI generated] Allegheny Bradford Corporation is a Pennsylvania-based manufacturing company that specializes in stainless steel fabrication. They work to provide high-quality custom pressure vessels, process systems, and heat exchangers for pharmaceutical, biotech and other ultra-pure industries. With extensive engineering capabilities, they create precision equipment based on unique design requirements.

Victim:   |  Group: 
US flag

teamsters175.org 

Company logo
Ransomware Group:

Discovery Date:

PROUDLY SERVING TEAMSTER MEMBERS AND THEIR FAMILIES IN WEST VIRGINIA, KENTUCKY, OHIO AND VIRGINIA SINCE 1940 Saturday, October 16th (next Saturday) at 10:00 a.m. at 267 Staunton Ave., South Charleston, WV 25309. Biscuits will be available. AHF members joined together for a Unity Rally for each shift to show their solidarity and support for a new better contract. Negotiations have been ongoing with a company that bought the plant sometime last year. They stand together stong and we stand with them. Teamsters Local 175 joins West Virginia AFL-CIO March 12, 2019 Facebook Twitter Email Google+ Share In an encouraging sign of unity within the West Virginia labor movement, the International Brotherhood of Teamsters Local 175 made a unanimous decision this past Saturday to affiliate with the West Virginia AFL-CIO.

Victim:   |  Group: 
CA flag

Vvf Ilinois Services 

Company logo
Ransomware Group:

Discovery Date:

VVF is a manufacturing and marketing company of personal care products and oleochemicals with a worldwide presence in operating centers spread over North America, Europe, Asia, the Middle East, and the Far East. VVF's manufacturing presence in North America was launched in 2002 in Ontario, Canada. The North American platform was built on over six decades of international success.

Victim:   |  Group: 
GB flag

www.electro-fusion.com 

Company logo
Ransomware Group:

Discovery Date:

[AI generated] Electro-fusion.com is a company with expertise in fusion splicing and heat shrink tubing solutions. Their offerings range from electrofusion machines, tool kits, and accessories. With their high-quality products, they cater to various industries including telecommunications, aviation, marine, and military. They pride themselves on their exceptional customer service and continuous innovation to provide reliable and efficient fusion splicing solutions.

Victim:   |  Group: 
US flag

www.midwestvascular.net 

Company logo
Ransomware Group:

Discovery Date:

Sector: Healthcare
[AI generated] Midwest Vascular & Varicose Vein Center is a premier healthcare company located in Holland, Ohio. The center specializes in comprehensive treatments for vascular conditions and varicose veins, offering a wide range of surgical and non-surgical procedures. The experienced team utilizes state-of-the-art technology to provide individualized care to patients. Their mission is to improve the vascular health of their community.

Victim:   |  Group: 
CA flag

www.witheyaddison.com 

Company logo
Ransomware Group:

Discovery Date:

[AI generated] Withey Addison LLP, often mentioned as www.witheyaddison.com, is a professional service accounting firm based in Ontario, Canada. It offers a variety of finance and accounting services including corporate taxation, business advisory services, financial planning and more. The firm is committed to providing superior service to clients in various industries.

Victim:   |  Group: 
US flag

www.nola-law.com 

Company logo
Ransomware Group:

Discovery Date:

[AI generated] NOLA Law is a professional law firm located in New Orleans, Louisiana. They provide personalized legal services in various areas, including personal injury, maritime law, oil rig injuries, trucking accidents, and car accidents. The firm is committed to ensuring their clients receive the maximum compensation they are entitled to. Their experienced team strives to create strong attorney-client relationships by prioritizing clear communication.

Victim:   |  Group: 
SG flag

planetone-asia.com 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
Planet One Pte Ltd is a company that operates in the Custom Software & IT Services industry. It employs 250to499 people and has 50Mto100M of revenue. The company is headquartered in Singapore, Central Singapore, Singapo.

Victim:   |  Group: 
US flag

Luminus Management 

Company logo
Ransomware Group:

Discovery Date:

Luminus Management is an investment management firm founded in 20 02 with offices in New York, NY and Houston, TX. The firm focuses on a low net, long/short, relative value oriented strategy that invests opportunistically across the capital structure of compani es. We are ready to upload a lot of essentials corporate documents su ch as: NDA’s, driver licenses, passports, financial data (audits, payment details, reports), employee medical documents, etc.

Victim:   |  Group: 
US flag

Siegel Group 

Company logo
Ransomware Group:

Discovery Date:

The Siegel Group, Inc. is a full service commercial real estate firm based in Las Vegas, Nevada and Studio City, California. It is a developer and operator of multi-family, extended stays, flexible stays, retail, hospitality, hotel-casinos, and land development. We present you more than 11TB of the company's data, here you will find the SQL databases, personal data of all employees and much more.

Victim:   |  Group: 
DE flag

Insyst GmbH 

Company logo
Ransomware Group:

Discovery Date:

Sector: Technology
InSyst GmbH is an owner-managed IT service company in Velbert/NRW . Across all sectors - from architectural offices to craft busine sses We are ready to upload a lot of essential corporate documents suc h as: NDA’s, contact numbers and e-mail addresses of employees an d customers, financial data (audits, payment details, reports), c onfidential licenses, agreements and contracts, etc.

Victim:   |  Group: 
FR flag

guadeloupeformation.com 

Company logo
Ransomware Group:

Discovery Date:

Sector: Education
[AI generated] "Guadeloupeformation.com" is a professional training institution based in Guadeloupe, a region of France in the Caribbean. They offer a wide range of courses in fields such as management, communication, sales, health and safety, computing and foreign languages. Their goal is to enhance the skills and knowledge of professionals through high quality, practical and personalized training sessions.

Victim:   |  Group: 
US flag

headcount.com 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
[AI generated] HeadCount.com is a technology platform that specializes in workforce planning and headcount management solutions. They offer tools that help companies to manage, plan, and analyze their staff headcounts more effectively. With its cloud-based system, HeadCount.com provides real-time data and analytics that streamline decision-making processes around hiring, workforce optimization, and budget planning. It services a range of industries including technology, health, finance and more.

Victim:   |  Group: 
IN flag

jindalgroup.com 

Company logo
Ransomware Group:

Discovery Date:

[AI generated] The Jindal Group is a prominent steel and power conglomerate in India. Founded by O.P. Jindal in 1952, the group has diversified interests spanning across steel, energy, industrial gases, port facilities, cement, and information technology. It's widely recognized for its deep commitment to social responsibility and sustainability. Major subsidiaries include Jindal Steel & Power and JSW Steel.

Victim:   |  Group: 
GE flag

statesideseattle.com 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
Stateside Entertainment started when the Georgia Entertainment Industry Investment Act was signed into law August of 2008. This act boosts state tax credits for qualified production and post-production expenditures to 30%. Stateside takes those credits, monetizes them and delivers the tax benefits to the investor- the client. What does that mean to you? The production companies spend money in our Georgia market, Stateside buys their tax credits, and sells them to the public to reduce their tax liabilities. Its a win-win proposition that takes the guess work out of the equations for the studios, taxpayers, and CPA's. Total Files Listed: 41097 File(s) 64,966,893,469 bytes 13528 Dir(s) 2,112,801,775,616 bytes free

Victim:   |  Group: 
NA flag

Paratus 

Company logo
Ransomware Group:

Discovery Date:

Paratus is Africa’s quality network. With an eye on the future, t he group is investing in infrastructure and establishing itself a s a key player in delivering integrated network services across A frica. We are ready to upload more than 84 GB of essentials corporate do cuments such as: NDA’s, driver licenses, passports, birth certifi cates, contact numbers and e-mail addresses of employees and cust omers, financial data (audits, payment details, reports), etc.

Group: 
US flag

Barhite & Holzinger Inc. 

Company logo
Ransomware Group:

Discovery Date:

Sector: Real Estate
Licensed Real Estate Brokers and Property Management in Westchest er County for over 85 years. We are ready to upload more than 65 GB of essential corporate doc uments such as: contact numbers and e-mail addresses of employees and customers, SSN’s, confidential licenses, agreements and cont racts, etc.

Victim:   |  Group: 
FR flag

l.warsemann.fr 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
All data of this company will be available for download on 3.03.2025. It is a family-owned group. It all started in 1952 when Maurice Warsemann, grandfather of Laurence Deletang-Warsemann, the group's current CEO, opened a garage in the cente ...

Victim:   |  Group: 
EC flag

www.elecgalapagos.com.ec 

Company logo
Ransomware Group:

Discovery Date:

Sector: Energy
[AI generated] Elecgalapagos is an Ecuadorian company dedicated to providing electricity services in the Galapagos Islands. It contributes to the archipelago's socio-economic progress by promoting sustainable and renewable energy, reducing the environmental impact traditionally associated with power generation. The company's offerings include energy production, distribution, and public lighting. Elecgalapagos is owned by Empresa Eléctrica Regional Centro Sur, a publicly owned electricity company in Ecuador.

Victim:   |  Group: 
 flag

www.fla-esq.com 

Company logo
Ransomware Group:

Discovery Date:

[AI generated] FLA-Esq is a law firm that specializes in estate planning, probate, trust administration, and related tax matters. They provide personalized and comprehensive legal solutions in Florida. Their team of experienced attorneys offers innovative and effective strategies to protect their clients' wealth and legacy. With their focus on strong client relationships, they are dedicated to understanding each client's unique needs and providing tailored legal services.

Victim:   |  Group: 
US flag

www.saracenproperties.com 

[AI generated] Saracen Properties is a Waltham, Massachusetts-based company that specializes in real estate development and investment. Since its founding in 1982, Saracen has been involved in the acquisition, development, and management of commercial and residential properties in the Greater Boston area, with a portfolio encompassing over 2 million square feet of space.

Victim:   |  Group: 
US flag

Crossroads Trading Company, Inc 

Company logo
Ransomware Group:

Discovery Date:

All data of this company will be available for download on 27.02.2025. One of the first companies to pioneer secondhand clothing as an alternative to traditional retail, Crossroads Trading has been buying, selling, and consigning name brand a ...

Victim:   |  Group: 
US flag

(kc2) geokon.com 

Company logo
Ransomware Group:

Discovery Date:

Sector: Technology
Geokon, Incorporated designs, manufactures and supplies geotechnical sensors and instrumentation for use in civil, mining, and structural engineering projects in the United States and internationally. The company offers extensometers, piezometers, strain gages, crack meters, joint meters, load cells, settlement sensors, pressure cells, inclinometers and data loggers, and many other custom items. It also provides semiconductor piezometers and pressure transducers; and thermistor probes and strings, temperature sensors, fiber optic temperature sensors, cables, vibration monitors, and water level meters, as well as Nold DeAerator, which provides a means of removing dissolved gasses from fluids. In addition, the company offers custom design services to produce custom instrumentation for special applications; instruments, readouts, and data loggers for rent on short and long-term basis; and installation and training services.

Victim:   |  Group: 
PW flag

palauhealth 

Company logo
Ransomware Group:

Discovery Date:

Sector: Healthcare
All data of this company will be available for download on 27.02.2025. MoH is a company that operates in the Government industry. It employs 250to499 people and has 5Mto10M of revenue. The company is headquartered in Koror, Koror, Palau.

Victim:   |  Group: 
MX flag

Medical File 

Company logo
Ransomware Group:

Discovery Date:

Sector: Healthcare
El expediente clínico más innovador del mercado

Victim:   |  Group: 
US flag

conduent.com 

Company logo
Ransomware Group:

Discovery Date:

[AI generated] Conduent is a global company specializing in business process services. They provide digital platforms and services for both businesses and governments. Conduent's expertise covers sectors like healthcare, transportation, and financial services among others. Their services aim to improve user experiences, boost operational efficiency and increase client satisfaction. They were formerly a part of Xerox.

Victim:   |  Group: 
US flag

eaglepost.com 

Company logo
Ransomware Group:

Discovery Date:

Sector: Technology
[AI generated] I'm sorry, but I couldn't find any detailed information or specifics about a company named "eaglepost.com". It seems there might be a mix-up with the company name, as search results don't yield any concrete businesses or services. Please make sure to provide the correct name so I can provide the most accurate description possible.

Victim:   |  Group: 
CO flag

gilcar.co 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
[AI generated] Gilcar.co is a property investment company based in the UK that primarily deals in the real estate market. They specialize in buying and managing properties, with a focus on building a sustainable portfolio. The company's business includes purchasing, development, leasing, and property management, aimed at generating steady revenue with potential for growth. Please note that services offered maybe subject to change.

Victim:   |  Group: 
 flag

www.okddsi.net 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
[AI generated] I'm sorry, but I can't provide the information you're looking for. www.okddsi.net does not appear to be a valid or active website, thus I cannot provide a detailed description about this company. It's always important to check the validity of a web address to ensure it is the correct location of the company you are inquiring about.

Victim:   |  Group: 
US flag

newhorizonsbaking.com 

Company logo
Ransomware Group:

Discovery Date:

<p>Food &amp; Beverage<br><br>“New Horizons Baking produces hamburger buns and english muffins for Iconic Brands. Our customer base is broad and our commitment is to produce gold standard quality bakery products that our customers love, and our employees are proud of making.”<br><br>Website: <a href="https://newhorizonsbaking.com/">https://newhorizonsbaking.com/</a><br><br>Revenue : $163M<br><br>Address: 211 Woodlawn Ave, Norwalk, Ohio, 44857, United States<br><br>Phone Number: &nbsp;(419) 663-6432<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> &nbsp;<a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/NHBCO/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/NHBCO/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/NHBCO/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/NHBCO/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal Identifiable information, database backups, corporate confidential docs, contracts, agreements, HR dept data, QA\engineering docs, financial data, payroll, employees\executives personal folders, corporate correspondence, etc.</p><p><img src="/uploads/Passport_63669d54a5.png" alt="Passport.png"><img src="/uploads/Confidentiality_Agreement_Grain_Craft_SIGNED_011619_2_d412b9e4a6.png" alt="ConfidentialityAgreement_GrainCraft_SIGNED 011619 (2).png"><img src="/uploads/Nicholas_Bryant_ID_Front_and_Back_1228c78a18.png" alt="Nicholas Bryant - ID (Front &amp; Back).png"><img src="/uploads/NHFS_P_and_L_and_Balance_6e6dcd3120.png" alt="NHFS P&amp;L and Balance.png"><img src="/uploads/Confidential_Letter_217217a3a0.png" alt="Confidential Letter.png"></p>

Victim:   |  Group: 
US flag

Andover Family Medicine 

Company logo
Ransomware Group:

Discovery Date:

Sector: Healthcare
Andover Family Medicine has been established since 2006. Our physicians are board certified in family medicine. We practice full spectrum family medicine including obstetrics, newborn care, well child exams, preventive care exams for adults, ...

Victim:   |  Group: 
US flag

Waggonereng.com 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
[AI generated] Waggoner Engineering, founded in 1976, is a professional services firm with a focus on engineering, geospatial and consulting services. Their team of multidisciplinary professionals serve clients within sectors like government agencies, industrial organizations, and private sector clients. The key industries they work in include energy, environment, infrastructure, and technology. Their headquarters are in Jackson, Mississippi.

Victim:   |  Group: 
 flag

op*********.eu 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found

Group: 
DE flag

wr********.de 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found

Group: 
DE flag

pen********.de 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found

Group: 
US flag

oa*************.us 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found

Group: 
US flag

Nebraska Irrigation 

Company logo
Ransomware Group:

Discovery Date:

Supplier and manufacturer of center pivot components to dealers d omestically and internationally. We are ready to upload a lot of essential corporative documents s uch as: NDA’s, driver licenses, financial data (audits, payment details, reports), contact number s and e-mail addresses of employees and customers, etc.

Group: 
BR flag

Mac Jee 

Company logo
Ransomware Group:

Discovery Date:

Sector: Technology
Mac Jee operates in the defense and aerospace segment. It current ly comprises Mac Jee Defense, which is responsible for the develo pment, production and marketing of defense systems; Mac Jee Tecno logia, which specializes in improving or creating energy products ; and Equipaer, which is responsible for creating products and se rvices for the aviation segment. We are ready to upload more than 16 GB of very essential corporat e documents such as: NDA’s, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment detai ls, reports) and as a dessert some rockets technical documentatio ns.

Group: 
IT flag

www.selt-sistemi.com 

Company logo
Ransomware Group:

Discovery Date:

Sector: Technology
The first part of leak http://t3uouzfvsaqurb2rzoe2mkpetp54d7lgtl45ply34v5lugsnzysmkhid.onion/...

Victim:   |  Group: 
US flag

californiaclingpeaches.com 

Company logo
Ransomware Group:

Discovery Date:

California Cling Peaches growers offer nutritious peaches packed in Cans, Jars, and Single Serve cups, available year-round. Through the U.S. Department of Agriculture's program, they promote their peaches in international markets, focusing on Canada and Mexico. Discover the blend of tradition and innovation in delivering high-quality peaches. Their efforts ensure a continuous source of exquisite flavor and nutritional goodness is available to food and nutrition professionals, as well as families seeking quick and easy recipes. Total Files Listed: 26793 File(s) 37,983,823,444 bytes 17315 Dir(s) 2,112,818,327,552 bytes free

Victim:   |  Group: 
US flag

Minaris Medical America 

Company logo
Ransomware Group:

Discovery Date:

Sector: Healthcare
Minaris Medical America, formally known as MAST Immunosystems Inc (1979-1996) and Hitachi Chemical Diagnostics (1996-2021) was the first company to introduce a multiplex in vitro diagnostic test for allergies and one of the first to introduce a chemiluminescen t assay system for the detection of lgE antibodies. We are ready to upload a lot of sensitive corporate documents suc h as: contact numbers and e-mail addresses of employees and custo mers, financial data (audits, payment details, reports), confiden tial licenses, agreements and contracts, etc.

Group: 
US flag

Access2Jobs 

Company logo
Ransomware Group:

Discovery Date:

For over 50 years, Access Inc. has been serving the most vulnerable and under-served populations in San Diego County by promoting self-sufficiency and economic independence. There are three main programs at Access: Youth, Immigration and Micr ...

Victim:   |  Group: 
US flag

Berg Engineering Consultants, Ltd. 

Company logo
Ransomware Group:

Discovery Date:

Berg Engineering Consultants, Ltd. is a consulting engineering co mpany that provides Heating, Ventilating, Air-Conditioning, Elect rical, Plumbing and Fire Protection engineering and design servic es for Hospitals, Schools, Offices and Industrial Buildings. We are ready to upload more than 30 GB of essential corporate doc uments such as: confidential licenses, agreements and contracts, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), etc.

Group: 
US flag

www.pransystems.com 

Company logo
Ransomware Group:

Discovery Date:

Sector: Technology
[AI generated] Pran Systems Inc is a global tech company based in California, USA. Well versed in electronic design, they provide services including wireless solutions, sensor-based applications, and IoT solutions. From consumer electronics to custom product development, they are committed to delivering high-quality, cost-effective technology solutions. They also offer design solutions for high-speed digital design, mixed-signal, and analog design.

Victim:   |  Group: 
US flag

www.phdental.com 

Company logo
Ransomware Group:

Discovery Date:

Sector: Healthcare
[AI generated] Professional Health Products (PHDental) is a leader in the dental supply industry with over 50 years of experience. They offer a wide range of dental products, including infection control items, anesthetics, handpieces, preventive care products, and more to dental professionals. PH Dental aims to provide high-quality products at competitive pricing to help dental practices succeed. They are committed to exceptional customer service and reliable delivery.

Victim:   |  Group: 
US flag

www.riverdale.edu 

Company logo
Ransomware Group:

Discovery Date:

Sector: Education
[AI generated] Riverdale Country School is a top-tier K-12 school based in New York City, USA. It offers prekindergarten through Grade 12, with two separate campus locations. Known for its commitment to academic excellence and individual growth, it emphasizes intellectual engagement, strength of character, and an innovative teaching approach.

Victim:   |  Group: 
US flag

M-1 TOOLWORKS 

Company logo
Ransomware Group:

Discovery Date:

🌐 m1toolworks.com💲 8000000📍 United States

Victim:   |  Group: 
 flag

Robinson Family Dentistry 

Company logo
Ransomware Group:

Discovery Date:

Sector: Healthcare
Robinson Family Dentistry - family dental clinic. Robinson Family Dentistry corporate office is located in 1281 Yeamans Hall Road, Hanahan, SC 29410, US.

Group: 
US flag

Crager LaBorde 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
Crager LaBorde company provides services small to medium sized businesses reach their potential and goals with services that include income taxes past and present, monthly write-up, live payrolls, LLC and corporation setup, business consulting and quarterly sales and payroll taxes. Crager LaBorde corporate office is located in 335 Southfield Rd Ste 200, Shreveport, Louisiana, 71105, United States and has 17 employees.

Group: 
GB flag

HCRG Care Group 

Company logo
Ransomware Group:

Discovery Date:

Sector: Healthcare
HCRG Care Group (founded in 2006) is a healthcare company that provides healthcare services such as physician clinics and specialty clinics. HCRG Care corporate office is located in The Heath Business and Technical Park, Runcorn, Cheshire, WA7 4QX, United Kingdom and has 5,000 employees. The total amount of data leakage is 2.275 Tb Direct file tree download link due to big file size: https://www.sendspace.com/file/8i7cca

Group: 
US flag

ehdd.com 

Company logo
Ransomware Group:

Discovery Date:

Sector: Technology
Founded in 1946, EHDD seeks to create built environments that enhance our culture, honor the natural environment, and respect and delight the people who use them. Headquartered in San Francisco, EHDD serves clients around the world in Aquariums, Museums and Science Centers, Education, Corporate Office, Mixed-Use Development, and Government. EHDD is a Top 10 AIA COTE honoree, and featured in " The Habits of High-Performance Firms, Lessons from frequent winners of the AIA COTE Top Ten Award.

Victim:   |  Group: 
GB flag

Ligentia 

Company logo
Ransomware Group:

Discovery Date:

Ligentia provides freight forwarding and supply chain management solutions. The company was founded in 1996 and is headquartered in Leeds, United Kingdom

Victim:   |  Group: 
AE flag

rossmanmedia.ae 

Company logo
Ransomware Group:

Discovery Date:

Sector: Technology
[AI generated] Rossman Media is a Dubai-based full-service digital marketing agency. They offer various services like social media management, SEO, content creation, website design & development, and PPC advertising. Their focus is on delivering top-notch strategies that strengthen online presence, convert leads, and engage audiences for businesses of all sizes. They aim to influence, educate, and form a deep connection between brands and their audiences. With a customer-centric approach, they emphasize creating compelling, creative digital experiences.

Victim:   |  Group: 
BG flag

Supreme Administrative Court of Bulgaria 

Company logo
Ransomware Group:

Discovery Date:

The Supreme Administrative Court provides for supreme judicial supervision over the precise and uniform application of laws in administrative justice. The Supreme Administrative Court hears complaints and protests against the actions of the Council of Ministers, the Prime Minister, Deputy Prime Ministers, Ministers, heads of other positions directly subordinate to the Council of Ministers, Acts of the Supreme Judicial Council, Acts of the Bulgarian Citizen Bank, Acts of Regional Regional Governing Acts, as well as other actions specified in the law; This is pronounced in disputes about the legality of taxes; It has reviewed the quality of judicial acts issued in administrative cases and is considering requests for annulment of compulsory courts' decisions in administrative cases.

Victim:   |  Group: 
ES flag

Ondunova 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
Grup Ondunova is one of the leading corrugated cardboard packagin g manufacturing groups in Catalonia and is formed by the companie s Ondunova and Wondu, with their respective production centers in Santa Margarida i Els Monjos, Barcelona. We are ready to upload more than 31 GB of essential corporate doc uments such as: NDA’s, financial data (audits, payment details, r eports), internal correspondence, contact numbers and e-mail addr esses of employees and customers, etc.

Group: 
DE flag

ziese.net 

Company logo
Ransomware Group:

Discovery Date:

Sector: Not Found
Ziese &amp; Sons Excavating, Inc. is your premier excavation company serving Crown Point and the surrounding areas. Contact us today for a free consultation.

Victim:   |  Group: 
Previous Next