[{"id":36310,"date":"2026-09-25 13:24:43","victim":"Majani Insurance Brokers","gang":"Vexy Ransomware","hash":"030f0badbe8632ff3b9f321f25ba300fc996dc0501e44507699f48005d7a876b","country":"Kenya","website":"majaninsure.com","description":"Majani Insurance Brokers is an independent insurance broker serving both businesses and individuals. It arranges insurance products across areas including general business insurance, motor, medical, life, investment, marine, liability, property and agricultural-related covers","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36309,"date":"2026-09-25 12:48:32","victim":"Iberia Compositech Manufacturing","gang":"qilin","hash":"bb88030788798e632614275b0439f8074a360ab782d79c6861209c5c69b843f5","country":"Spain","website":"www.iberiacompositech.com","description":"N\/A","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36308,"date":"2026-09-25 10:33:40","victim":"pharma5.ma","gang":"incransom","hash":"d5cf7f46737342c3657e73fa9242dc98d244e3b4975e56d3522ed3138c1c6762","country":"Marocco","website":"pharma5.ma","description":"Pharma5\r \r 21, Rue des Asphod\u00e8les, Ma\u00e2rif Extension, 20100 Casablanca, Morocco\r 05 22 23 62 15\r pharma5.ma\r \r Leaked data: 50Gb\r \r Corporate and financial information, data on products and their supply, quality control and certification, drug testing and related issues, employee personal data, counterparties, and much more.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36307,"date":"2026-09-25 03:21:46","victim":"TapClicks (marketing analytics platform)","gang":"N0n","hash":"35df034a6f9ba2106b826a0e8dce59f08de2a875912aa07fe126251605e7df31","country":"USA","website":"tapclicks.com","description":"Marketing analytics \/ SaaS \u00b7 United States | The complete platform source code (97,000+ commits with full history); The multi-tenant instance management system with production architecture; A customer's full marketing database: 354 advertising platform datasets, client lists, user accounts with password hashes, ad-platform connection credentials | Everything is real, complete and verifiable. | [ACTIVE: deadline 2026-09-28 01:59 UTC]","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36306,"date":"2026-09-24 22:23:56","victim":"Armada Credit Bureau","gang":"Spirals","hash":"b3a209136438783a72c641b167801d13a1505a2f78718181a173f6f63057a38f","country":"Uganda","website":"www.armadacrb.co.ug","description":"Armada Credit Bureau Limited is a duly licensed credit reporting and analytics company","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36305,"date":"2026-09-24 21:40:03","victim":"Westside GI","gang":"pear","hash":"9f27f91901ea25b92f6dff3b5328f764e60db8cbd0e7df2c362cc778360cfe3d","country":"USA","website":"westsidegicenter.com","description":"Ambulatory endoscopy center","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36304,"date":"2026-09-24 21:39:04","victim":"Martin Lawrence Galleries","gang":"pear","hash":"af433b1f2eeef93ec18bc5e3b04e97e69db885266e241b57e8e537c552054637","country":"Canada","website":"martinlawrence.com","description":"Premier gallery of fine art in America","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36303,"date":"2026-09-24 21:38:02","victim":"Indroj Medical Group Inc.","gang":"pear","hash":"2fd95f42d170c0a6c402a4e2c057ecd7b30e926669c54e39c07af154391c5691","country":"USA","website":"npiprofile.com","description":"The Web's Free NPI Registry Search & Provider Reference Site","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36302,"date":"2026-09-24 20:01:08","victim":"efada.sa","gang":"krybit","hash":"591555e093c263e292290fb083f57eb12799ae13da224fee6cb94e83253cef4f","country":"Saudi Arabia","website":"efada.sa","description":"efada.sa...","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36312,"date":"2026-09-24 18:14:40","victim":"NEAD SRL","gang":"rhysida","hash":"06975122e5f97c327753d35f1287fa9f1682fb79587aededb0a022b282689c50","country":"Italy","website":null,"description":"","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36301,"date":"2026-09-24 18:01:29","victim":"NEAD Pro","gang":"rhysida","hash":"546a06efeb4c9c00a35468d86e6742a44ff7ae2dc3c84fb3c42a9e4d1dc3cdf7","country":"Italy","website":"nead.pro","description":"NEAD Pro Nead Pro is a professional multidisciplinary firm based in Gorizia and Udine, Italy, that provides legal, tax, bankruptcy, and accounting consulting services.What it is: a network share belonging to two Italian professional firms located at Via Roma 20, Gorizia (Friuli-Venezia Giulia):NEAD SRL (NORTH EAST ADVISORS S.R.L.) - an accounting firm, dottore commercialista, P.IVA 01114220310, REA GO-72906;NEAD PRO - PROFESSIONISTI RIUNITI - a law firm, P.IVA 01157140318.Volume: ~575,000 files \/ ~253 GB. The root contains a single branch Nuova directory\\NEAD\\ (plus an empty Documenti folder and a scatter of PDF scans at the root level).Structure and contents:Branch\tVolume\tContentsNEAD PRO SITE - Documenti 231,137 files \/ 193.5 GB\tLaw firm: 03.PRATICHE (46,620 files: CIVILE 9,665, PENALE 537, SOVRAINDEBITAMENTO 1,208), 04. INCARICHI (85,321: FALLIMENTI 22,492, ESECUZIONI 28,509, ADS 14,547, TRUST, CURATELE), SEGRETERIA with CREDENZIALI VARIE.xlsx (~40 firm accounts: SPID, PEC, banks, 2 cards with full PAN+CVC, safe code), bank scans (BANCOMAT PIN, BCC agreements)NEAD SRL SITE - Documenti 101,125 \/ 55.3 GB\tAccounting firm: 03.CLIENTI - 199 active + 184 former client folders (730, CU, F24, contracts), 44 private SOGEI Entratel .P12 keys (signing clients' tax returns), ISA\/IRAP tax filings 2019\ufffd2020, client master data, Account.xlsxPRIMA NOTA - Documenti\t1,885 \/ 871 MB\tCash books 2019\ufffd2026 (21 xlsx): CASSA \/ CONTO CORRENTE \/ POS \/ CARTA \/ SISTERPOWERBI - Documenti\t548 \/ 627 MB\t37 financial BI models .pbix (BI_ISIDE, BI_NEAD, ATHENA, PNAI)ARCHIVIO\t921 \/ 2.6 GB\tMPS bank statements 2020\ufffd2024, NEAD SRL account closure, firm mail archivePOSTA SARDAMAR \/ PANEGIOCHI \/ ISIDE \/ ADMIN SRL\t~165+ \/ ~174 MB\tClient and firm mail: IVECO Capital leasing, accertamento Agenzia Entrate, Capitaneria di Porto, verbali poliziaES. IMM. 112-2024\t10 files\tReal-estate enforcement proceedings (Tribunale di Gorizia): bank statements and CIE (ID cards) of auction participantsNEAD root ~85 PDF \/ 127 MB\tScanned bank statements, F24 forms, IPZS envelope with the PIN\/PUK of a CIE cardMost sensitive data: client dossiers with tax codes (codici fiscali), court case files (civil\/criminal\/bankruptcy), medical documents (Art. 9 GDPR), the firm's credential database with full PAN+CVC of two cards and the safe code, 52 Entratel electronic signature keys, ~100 SEPA mandates with IBANs and signatures, client PST archives (7.5 GB), a client's Huawei phone backup (Facebook\/Gmail\/Telegram databases), passports of foreign shareholders.    More","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36300,"date":"2026-09-24 17:58:23","victim":"bnlawmacau.com www.bn-ip.com","gang":"incransom","hash":"89be27d9cf2479b6b96a078e8119f7e91da8080570d6e247882109c0f008b475","country":"Portugal","website":"bnlawmacau.com","description":"full data all country","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36296,"date":"2026-09-24 17:35:48","victim":"corisricambi.it","gang":"lockbit5","hash":"6c72ef3c569a4c9bbf6dd54ccac2df6a4ac8f8edd136f9dc2270dc301fb27bcd","country":"Italy","website":"corisricambi.it","description":"Presenti sul territorio da oltre un ventennio, la CO.R.I.S. S.r.l. \u00e8 cresciuta all'interno del...","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36299,"date":"2026-09-24 17:08:57","victim":"welgenone.com","gang":"incransom","hash":"b2d119dd125080137fccbb2b7c45482739225fa2e481ef9e5f79fb80b6963e6a","country":"USA","website":"welgenone.com","description":"Welgen One is a mobile wellness service provider based in Georgia, USA, offering personalized wellness care and dispensary access across Atlanta. The company focuses on delivering innovative healthcare solutions, including remote patient monitoring and onsite wellness programs, to enhance overall well-being. Targeting individuals seeking convenient and comprehensive health services, Welgen One aims to revolutionize the healthcare experience by prioritizing patient-centered care. With a commitment to accessibility and customization, they utilize advanced technology and data to optimize health outcomes","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36298,"date":"2026-09-24 17:07:56","victim":"ukbjja.org","gang":"incransom","hash":"709c6fb71cdddf008c85b5663cd5ed8473610a620adba3475bb7dfc5501610e3","country":"UK","website":"ukbjja.org","description":"full data","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36297,"date":"2026-09-24 15:07:29","victim":"Prater & Ridley Attorneys At Law","gang":"Wallstreet","hash":"01b75f1dfe6699b78b8504e63367a1a3e6c775f73cbdfd8855d5b77f439a527c","country":"USA","website":"prater-ridleylaw.com","description":"Prater, Ridley & Llamas \u2013 Attorneys at Law is a law firm based in Temple, Texas, United States. Established in 1993, it provides legal services in family law, criminal defense, probate, estate administration, and related civil matters for clients throughout Central Texas.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36285,"date":"2026-09-24 14:42:38","victim":"GDM Pipelines","gang":"qilin","hash":"cf57d42365118e1a28ac6b72e11f826b3af0f1cf9bc636ed5a1e2c8d3e56840b","country":"USA","website":"gdm-inc.com","description":"Software","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36286,"date":"2026-09-24 14:42:37","victim":"Agora coop\u00e9rative agricole","gang":"qilin","hash":"9562c22cc271d3f3a196f731532672d3ae63b4e85a002e6e60c132257c394d8a","country":"France","website":"coopagora.fr","description":"Agriculture","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36295,"date":"2026-09-24 14:28:46","victim":"Catholic University of El Salvador","gang":"Wallstreet","hash":"d7f74e7d5925e4f9df33786b94642084cb5f0d590f114325c9d46f39396fad56","country":"El Salvador","website":"catolica.edu.sv","description":"The Catholic University of El Salvador (UNICAES) is a private Catholic university founded in 1982 in Santa Ana, El Salvador.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36294,"date":"2026-09-24 14:24:06","victim":"Dao Group","gang":"qilin","hash":"3f3a621c919d26fc336c2980acf61c25e2a0d3ca76c44a0f4f2522ec27cc1d98","country":"USA","website":"www.daogroup.com","description":"N\/A","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36293,"date":"2026-09-24 14:23:28","victim":"All Tech Machine & Engineering","gang":"qilin","hash":"fd338953276e1c8994345cd74c942da41ccd56828bc7a52681316155eb4dc0cf","country":"USA","website":"www.alltechinc.com","description":"N\/A","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36292,"date":"2026-09-24 14:22:50","victim":"Inversiones Bol\u00edvar","gang":"qilin","hash":"c560064b5970b45134c080af0b6a5527d98fd1a4a78a62e5aae0e59422381b79","country":"El Salvador","website":"www.proyectosdevida.com","description":"N\/A","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"yes"},{"id":36291,"date":"2026-09-24 14:22:10","victim":"Zig Inge Group","gang":"qilin","hash":"13fd8ee1b91715c1d2a6ce94b56c8c80d1c6cb95f1d26e85fdd5a7386d4f80c7","country":"Australia","website":"www.prospecthillcamberwell.com.au","description":"N\/A","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36290,"date":"2026-09-24 13:56:18","victim":"Wallatec","gang":"akira","hash":"f747200bf320b58f36c0f4b3e58d92b7ebdc331d6a1c37ac4c91c9e81b7221b9","country":"Austria","website":"wallatec.com","description":"Wallatec creates high-performance carbonation systems for restaurants and busy kitchens. Their \nequipment is built to handle intense daily use, working perfectly even in the most hectic envir\nonments.\n\nWe will upload 15gb of corporate data soon. Employee information (passports), projects, financi\nals, client information and so on.\n","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36289,"date":"2026-09-24 13:26:41","victim":"Strack Companies","gang":"akira","hash":"78cbb713273af7b7728fbcf56b815ddd7ac71c7feed0ec1f103c53fa5edf31be","country":"USA","website":"strackco.com","description":"Strack Construction is a commercial and industrial construction contractor headquartered in St.\nJoseph, Minnesota. Founded in 1938, the family-owned company provides design-build, general co\nntracting, construction management, and real estate development services.\n\nWe will upload 60gb of corporate data soon. Employee information, projects (drawings and specif\nications), detailed financials, client information, NDAs and so on.\n","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36288,"date":"2026-09-24 13:22:27","victim":"Revolut","gang":"ImNotAVillain","hash":"c5bb42870dc0d05bc0beb6465230e1d31631130f007faf27306c6c27b4a18226","country":"UK","website":"revolut.com","description":"Revolut data on sale. Contact information at the bottom of the page.\n\nIncludes 680 high-value networth users.","city":"","region":"","dataset_pub":"","victim_notes":"No ransomware: databreach","work_sector":"","fortibleed_leak":"no"},{"id":36284,"date":"2026-09-24 12:09:22","victim":"airtanzania.co.tz \/ airtanzania.com","gang":"krybit","hash":"10faaa373fb8faa50e860a6239fdabeaa0cb31396f66b46b586d95e37b3f2e37","country":"Tanzania","website":"airtanzania.co.tz \/ airtanzania.com","description":"Air Tanzania Company Limited (ATCL) is the national flag carrier airline of Tanzania, established on March 11, 1977 foll...","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36283,"date":"2026-09-24 12:08:43","victim":"www.jonesthegrocer.com","gang":"krybit","hash":"4f3bf1d5dcaf5fcc3fff4f4d88cddbce3575e30bc857dcd767bf574074017590","country":"Austria","website":"www.jonesthegrocer.com","description":"Jones the Grocer is a premium gourmet food retail and cafe brand founded in 1996 in Sydney, Australia, originally launch...","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"yes"},{"id":36282,"date":"2026-09-24 12:07:14","victim":"Grupo Caberj","gang":"incransom","hash":"478598d8baf4f2921c6f6aeef3c062dc376ecc65308008c6d46a4736a0fbf078","country":"Brazil","website":"caberj.com.br","description":"O Grupo Caberj, que oferece uma ampla gama de seguros, foi hackeado h\u00e1 10 dias","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"yes"},{"id":36281,"date":"2026-09-24 11:56:35","victim":"winfashion","gang":"dragonforce","hash":"232c7a024e0730020fd44551cb4c48c7883b6132fc8d881815eeb68dca86f70f","country":"USA","website":"winfashion.com","description":"\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\nWINFASHION TECHNOLOGIES DUMP: DATA LEAK ANALYSIS OF A B2B ERP PLATFORM FOR THE FASHION INDUSTRY\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\nThis is a preliminary analysis, processing of sensitive data is currently underway.\n\nTarget: WinFashion Technologies (Los Angeles, USA) \u2014 an international B2B provider of ERP solutions (WF125sR \/ Fabric ERP V.10) for 250+ fashion brands. Offices in New York, Shanghai, and India. Integrations: Shopify, Acenda, JOOR, NuORDER, CommerceHub, FashionGo. BPO\/EDI processing via Inovis\/QRS.\n\nDUMP VOLUME: ~205K files \/ ~13K directories \/ ~73 Gigabytes\nAT-RISK FILES: 125,274 (61.0%)\n\nCritical: 9,350\nHigh: 78,174\nMedium: 37,750\nPRELIMINARY FINDINGS:\n\n\u25b8 kaktus.bak (5.64 GB) \u2014 full MSSQL backup of the \"Kaktus\" client's ERP installation (Customer Master, Style Master, EDI, AR)\n\u25b8 6 SSL PFX containers + EDI-VAN client certificate for ECGrid\/OpenText\n\u25b8 33,307 .shxml files \u2014 WinSCP SFTP session logs (hosts, paths, sizes)\n\u25b8 332 ASP.NET Web.config files \u2014 potentially hardcoded Shopify \/ Authorize.Net secrets\n\u25b8 171 files with PAN \/ CreditCard \/ Cardholder \/ Payment data \u2014 Authorize.Net payment processing code\n\u25b8 39 files with IBAN \/ SWIFT \/ BankAccount data \u2014 bank account details\n\u25b8 259 Invoice Register \/ Invoice data files \u2014 Excel payment registers (up to 124 MB)\n\nCLIENT DATA (~40 BRANDS):\n\n\u25b8 STYLEMASTER.xlsx (48 MB) \u2014 aggregated product catalog export\n\u25b8 Vendors.XLS (20 MB) + test customers.XLS (7 MB) \u2014 Kaktus vendors and customers\n\u25b8 40,621 EDI files (.edi \/ .850 \/ .856 \/ .810 \/ .997 \/ .852 \/ .832 \/ .846) \u2014 full B2B trade lifecycle (PO, ASN, invoices, price catalogs)\n\nINTELLECTUAL PROPERTY:\n\n\u25b8 8,577 .cs files \u2014 integration source code (Authorize.Net, Shopify, Acenda, JOOR, NuORDER, DSCO)\n\u25b8 5,828 .pbd files \u2014 PowerBuilder WF125sR ERP core\n\u25b8 3,398 .sql files \u2014 DB schema, triggers, CLR procedures\n\u25b8 18 .dbf \/ .mdf files \u2014 legacy DBASE \/ FOXPRO \/ MSSQL tables without encryption\n\nHR \/ PII:\n\n\u25b8 INV EMPLOYEE ALLOWANCE YTD.xlsx (76 MB) \u2014 employee HR data\n\u25b8 AR Aging 12.30.25.xls + AR Aging 12.29.25.XLS \u2014 accounts receivable for Monrow and Kaktus clients\n\nREGULATORY RISKS:\n\n\u25b8 PCI DSS \u2014 compromise of PAN processing code + Authorize Excel registers\n\n\u25b8 CCPA \/ CPRA \u2014 HR-PII (76 MB), California jurisdiction\n\n\u25b8 FTC \u2014 \"total security\" claims amidst PFX \/ DBF \/ Web.config compromise\n\n\u25b8 SEC (Regulation FD) \u2014 risk for publicly traded client issuers\n\n\u25b8 GDPR \u2014 PII of customers \/ vendors across ~40 brands\n\nThe dump represents a cross-tenant B2B SaaS incident involving the disclosure of trade secrets for ~40 fashion brands, the compromise of the Authorize.Net payment infrastructure, and the exposure of the full ERP source code.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36280,"date":"2026-09-24 10:54:46","victim":"agiliance.fr","gang":"ZaWoo","hash":"f7eb92ce80b3dfba54095f9ba421a91ccda598adbe09128be4962a886121da7e","country":"France","website":"agiliance.fr","description":"Agiliance is a French accounting and business advisory group headquartered across the Haute-Sa\u00f4ne and Doubs regions. Its website describes Agiliance as the result of bringing together 8 small-to-medium-sized accounting firms, combining their expertise and tools while retaining a local, client-oriented approach.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36279,"date":"2026-09-24 10:54:11","victim":"www.francare.com","gang":"ZaWoo","hash":"3246322bc9f5f114d67d693c2ff6fe6f63e1dc4614647f55dda44c7abd61d8d9","country":"France","website":"www.francare.com","description":"FRANCARE Industries is a French international technical-supply, engineering, and maintenance company, headquartered in Paris, France. The company was founded in 1988 and specializes in supplying equipment, technologies, and technical services to industrial and healthcare customers internationally","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36278,"date":"2026-09-24 10:53:34","victim":"amb-pvc.com","gang":"ZaWoo","hash":"8fe90da659f560f0876cec0cac4098c2b0239d45c3c8d28d97d438b64e606119","country":"France","website":"amb-pvc.com","description":"AMB (Ateliers de Menuiseries Bidet), also known as Atelier de Menuiseries Bidet, is a French manufacturer specializing in PVC and aluminium joinery products. The company is based in Bourguenolles, Normandy, France. Its website is amb-pvc.com.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36277,"date":"2026-09-24 10:00:20","victim":"Arizona Vascular Medical Equipment, Inc","gang":"dragonforce","hash":"607791ebfa1c723f08e5449b83d9942c05c3529d3ac777dc1fdb2c92f323901e","country":"USA","website":"arizonavascular.com","description":"Arizona Vascular Medical Equipment, Inc. is a trusted provider of specialized medical devices, focusing primarily on compression therapy solutions and vascular care equipment. Headquartered in Mesa, Arizona, the company is dedicated to improving patient mobility and quality of life by delivering high-quality medical products and personalized customer service across the United States.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36276,"date":"2026-09-24 09:59:19","victim":"BMGP Groupe","gang":"dragonforce","hash":"db1beb4f975ad7b6f90ce09686000455ead60d71149643ea75012f2839e303b1","country":"France","website":"polyresine.com","description":"BMGP Groupe (Polyresine) is an established French manufacturer specializing in the formulation, production, and distribution of synthetic resins and high-performance technical polymers. Founded in 1972, the company serves a wide range of industrial sectors, providing tailored chemical formulations for applications such as industrial flooring, waterproofing, encapsulation, and specialized coatings. They are known for engineering reliable, durable chemical solutions to meet complex industrial specifications.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36275,"date":"2026-09-24 09:58:17","victim":"Elite Industech Co., Ltd","gang":"dragonforce","hash":"e72e6bff68a673e80382ebc07ad0c31dcf3db7878bd4ed770fa58d73d7971fab","country":"Taiwan","website":"pjemetal.com","description":"Elite Industech Co., Ltd. (established in 2003) is a certified Class-A waste treatment plant based in Kaohsiung, Taiwan. The company operates within the circular economy sector, specializing in the eco-friendly processing of electronic waste (E-waste) and the recycling of rare and precious metals","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36274,"date":"2026-09-24 09:57:15","victim":"HEC Group","gang":"dragonforce","hash":"36d291563d79327c609a3ce4a9a8e74ff3ad87ee89ac3f17ba11cee660c5a8fb","country":"Taiwan","website":"hec-group.com.tw","description":"On August 30, HEC Group issued an official statement addressed to shareholders of TPE:3032 and other stakeholders, announcing that the company had been the target of a cyberattack. In its statement, the company claimed that the breach was detected immediately, that high-tech countermeasures were deployed, and that no corporate documentation was lost. The incident was characterized as a minimal, random occurrence. The reality, however, is starkly different. Our operation against the company began weeks prior to that publication. Due to a systemic failure to implement basic security principles, we gained nearly total control over the infrastructure supporting the development and commercial operations of the entire corporate group. We conducted a methodical and comprehensive review of the documentation, exfiltrating a vast amount of data. We remained undetected for as long as necessary to secure everything we sought. Only after completing our objectives did we initiate the data encryption process, the company's technical staff did not even detect our presence until many hours later. At the time of their official announcement, HEC Group's leadership knew the statement was entirely false. Its sole purpose was to manipulate stock market trading. Instead of contacting us to mitigate the damage, management chose to deceive the exchange. When we finally managed to contact the company's leadership and offered them a chance to make their official statement more truthful in exchange for the deletion of the taken documents, they showed no interest. If the leadership of HEC Group has decided to pursue a path of selfdestruction, we will not stand in their way. To prove that HEC Group\u2019s statement was a fabrication and that our claims are accurate, we will now publish a portion of the exfiltrated data. This initial release will consist of over 360,000 files, drawn from a total volume measuring in terabytes. This data will provide stock exchange regulators and partner companies with exhaustive evidence of the actual events. The remaining documents will not be released publicly at this time, as we have devised a more strategic use for them. While the countdown timer below this publication runs, the companies affiliated with HEC Group, their shareholders, and regulatory authorities have time to prepare. HEC Group has one final opportunity to accept our proposal and avoid the consequences.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"","fortibleed_leak":"no"},{"id":36272,"date":"2026-09-24 02:21:19","victim":"Solucioning S.A.","gang":"Barracuda","hash":"1699a0876f61ccde8a9961bd3d634715248ca694582b99efe5b66ac1fbf85a70","country":"Spain","website":"solucioning.com","description":"This is a small company of 4-5 people, yet it has big clients in the oil production sector.\nUnfortunately, the company neglected data security, allowing us to gain access to all their confidential files - projects, documents, blueprints, and so on.\nThe company has been ignoring us for five days now, and we will soon publish their files. This is a warning. We do not wish to harm anyone, but we are prepared to inflict maximum damage.\nVictim website: https:\/\/www.solucioning.com\/ | Severity: HIGH | Size: 463 GB | Status: selling | $100,000","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Consulting","fortibleed_leak":"no"},{"id":36271,"date":"2026-09-24 01:21:36","victim":"eTeam","gang":"EndZone","hash":"df58d4217e050c0a6d144b307433235130364763add4456860d461f65ac0691c","country":"USA","website":"eteaminc.com","description":"Revenue: Revenue: $229 million\n\neTeam Inc. is a privately held global workforce solutions and business transformation company. Founded in 1999 by Ben Thakur, the company is certified as a Minority Business Enterprise (MBE). It has grown from a boutique IT staffing agency into a massive global network, managing thousands of internal employees and contract workers across continents. We successfully exfiltrated all employee records (15K), including full names, email addresses, home addresses, DOBs, SSNs, phone numbers, contracts, managers, hire dates, salaries and more. We engaged with eTeam privately some time back, and now we are going public with the announcement as eTeam was negligent of the incident that took place then. We're giving you one more chance. Speak soon or leak soon!","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Information Technologies Consulting","fortibleed_leak":"no"},{"id":36270,"date":"2026-09-23 20:51:04","victim":"OnTrac","gang":"emperador","hash":"4a5174961a149dc485a1c7991ede66550cc742fd9b5a2cb3b319a1affd781d03","country":"USA","website":"ontrac.com","description":"OnTrac is a major last-mile e-commerce delivery company formed by the 2021 merger of LaserShip and OnTrac. It positions itself as a direct alternative to FedEx and UPS, offering coast-to-coast coverage, 7-day-a-week operations, and competitive rates to reach over 75% of the U.S. population.\n\nWe hold your full employee database, 197k records of employee PII:\n\nemployeeNumber,xrefCode,firstName,middleName,lastName,loginId,employeeId,hireDate,originalHireDate,startDate,terminated,roles,legalEntity,legalEntityAddress,homePhone,mobilePhone,businessPhone,businessMobile,pager,personalFax,personalEmail,businessEmail,facebook,linkedin,addressPrimary1,addressPrimary2,addressMailing1,addressMailing2,userApproved,nativeAuth,culture\n\nWe demand an amount of 1 million, otherwise your data WILL be publicly posted.\n\nInstructions will be emailed to you shortly.\n\nIf you do not receive them, contact me on session, or email me.\n\nSession: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358\nEmail: xdlmfao@morke.ru, kajsdsalkufsaoiuairw7@outlook.com\n\n(I prefer session.)\n\nIf you do not cooperate, your partners and employees will be targeted.\n\nEmails were sent to: webcustomerservice@ontrac.com, customerservice@ontrac.com, softwaresupport@ontrac.com, softwaresupport@ontrac.com, apisupport@ontrac.com, RSaiz@OnTrac.com, scorral@ontrac.com, SMcCandless@OnTrac.com [Sector: Retail, Transportation]","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Logistics","fortibleed_leak":"no"},{"id":36269,"date":"2026-09-23 19:20:51","victim":"Abtach Ltd.","gang":"Barracuda","hash":"536f3faf5cc14c6ec835c7158973cdd51e54a819a06003de2a9f2c1b516c6d22","country":"Pakistan","website":"abtach.com","description":"Abtach Ltd. was renamed Intersys Ltd.\u2014a Pakistani company engaged in fraud targeting the US. The company\u2019s employees charged fees for services that did not actually exist.\nThe company\u2019s founder, Azneem Bilwani, was involved in the illicit trafficking of synthetic opioids and fentanyl analogues, which were supplied to the US market via the eWorldTrade marketplace.\n\nWe encrypted all virtual machines and snapshots on their ESXi hypervisors and all files on employee computers, and exfiltrated 1.5 TB of data from their infrastructure. We possess all their documents and bank records, which contain evidence of Azneem Bilwani\u2019s illegal activities.\nWill be published soon... | Severity: HIGH | Size: 1.5 TB | Status: selling | $100,000","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Information Technologies Consulting","fortibleed_leak":"no"},{"id":36266,"date":"2026-09-23 18:32:55","victim":"anery.com.br","gang":"lockbit5","hash":"344eb9fefaf16d87eb655e17edc7a040247652fe8a01939ea862038931c4457e","country":"Brazil","website":"anery.com.br","description":"Somos a Anery Home Care Temos paix\u00e3o por cuidar Nossa especialidade \u00e9 cuidar de pessoas, com todo o...","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Information Technologies Consulting","fortibleed_leak":"no"},{"id":36268,"date":"2026-09-23 18:20:39","victim":"goldstarfinancial.com","gang":"BrainCipher","hash":"c79842e80896074f03e159479fe43de142ef2ea2a1b0096a6404ce039945cbb7","country":"USA","website":"goldstarfinancial.com","description":"[AI generated] N\/A\n\nI don't have reliable, verified information about a specific company operating at \"goldstarfinancial.com.\" There are multiple businesses that have used similar \"Gold Star Financial\" naming conventions in different jurisdictions (this is a fairly generic name used by mortgage brokers, lending companies, and financial services firms in various countries), so I cannot confidently confirm which specific entity this domain refers to, its current operational status, ownership, or verified business details without risking inaccurate attribution.\n\nIf you can provide additional context (such as the specific country, registration details, or services advertised on the site), I can help assess it more accurately. Alternatively, if this is for threat intelligence purposes, I'd recommend verifying details through domain registration records (WHOIS), business registries, or regulatory filings relevant to","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Finance","fortibleed_leak":"no"},{"id":36267,"date":"2026-09-23 17:44:57","victim":"Tomix \/ Grupo JOPER","gang":"spacebears","hash":"330eec4ad28c5a4e93ac57ecedf25cc2ac0dbff0719289b972e3dc7fe5c4c0e9","country":"Portugal","website":"tomix.com.pt","description":"Tomix \u2013 Ind\u00fastria de Equipamentos Agr\u00edcolas e Industriais, Lda. is a Portuguese manufacturer of crop-protection equipment, best known for agricultural sprayers, atomizers, dusters and related machinery. Founded in 1924 near Torres Vedras by Francisco Xavier Dami\u00e3o, it grew into a market leader in Portugal for plant-treatment equipment, including rotomoulded tanks and high-pressure washers. Since 1997 Tomix has been majority-owned by JOPER \u2013 Ind\u00fastria de Equipamentos Agr\u00edcolas, S.A., and today it operates as part of the family-run JOPER Group alongside JOPER and Ribatejo. Together they supply complementary agricultural machinery for transport, soil tillage and crop treatment across Iberia and export markets https:\/\/tomix.com.pt\/","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Manufacturing","fortibleed_leak":"no"},{"id":36265,"date":"2026-09-23 16:23:12","victim":"vestfrostsolutions.com","gang":"settra","hash":"56bc66b79a95d2181134189d78af14747d3731b7aaab3eb6d3e986df76e64c49","country":"Denmark","website":"vestfrostsolutions.com","description":"Vestfrostsolutions.com The company sells reliability and precision \u2014 back bar coolers for Red Bull, ...","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Manufacturing","fortibleed_leak":"no"},{"id":36264,"date":"2026-09-23 16:22:15","victim":"Legis","gang":"rhysida","hash":"4b5bf095adbd4ab6d04295ba2d73353e5be1bf85c46c80d439eb4e35f75a05cd","country":"USA","website":"legis.com.co","description":"Legis Legis is a well-known Latin American publisher that creates specialized legal and business information resources. Founded over 60 years ago, the company serves professionals across six countries including Colombia, Venezuela, Argentina, Mexico, Peru, and Chile.DATABASES (SQL)PST\/OSTLEGAL DOCUMENTS:Tutela - constitutional actions with claimants' personal dataID card copies (cedulas) of shareholders and third partiesEnvironmental sanction proceedings against the company (AUTO 10852)Sanction dispute with the pension authority (UGPP)Signed cease & desist - trademark dispute (Xpandia case)Personal data transfer agreements (Colsubsidio, Universidad Externado)Litigation log of all company lawsuitsContract matrix, payment agreements, reorganization documentsFINANCE & OWNERSHIP:Shareholder and ultimate-beneficial-owner register with ID copiesOwnership structure: ~99.94% held by a single ownerDividend payment recordsDebt write-off letters naming debtors and amountsFinancial and tax reporting (exogena, estados financieros)CUSTOMERS:Customer databases: law firms, universities, government contractorsIncluding Ecopetrol, Halliburton, the AIM state agency, hundreds of companiesTax IDs (NIT), contacts, contract history    More","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Unknown","fortibleed_leak":"no"},{"id":36263,"date":"2026-09-23 15:53:48","victim":"ASYAD GROUP","gang":"Spirals","hash":"9c851b9e4597b3bc9241fcd5b9f9f6f02ea149636d8528f26c7bfb23d289434f","country":"Oman","website":"www.asyad.com","description":"Asyad Group is Oman\u2019s global integrated logistics provider, ranked 4th on Forbes\u2019 \u201c10 Biggest Logistics Companies in MENA\u201d list.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Logistics","fortibleed_leak":"no"},{"id":36238,"date":"2026-09-23 15:37:33","victim":"Urban Engineering","gang":"akira","hash":"01ad3a7d56cbc71c09826aa9217737c1516ffde1462c60e0182cb67cf0b70bbd","country":"USA","website":"urban-ltd.com","description":"Urban Engineering is a company that specializes in providing engineering services. They focus on delivering innovative solutions for various projects. Their intended clients include businesses and organizations seeking professional engineering expertise. The company is headquartered in Annandale, Virginia.We will upload 20gb of corporate data soon. Employee information, projects, lots of financial documents, contracts and agreements, NDAs and so on.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Engineering consulting","fortibleed_leak":"no"},{"id":36262,"date":"2026-09-23 15:21:01","victim":"Trump Mobile","gang":"EndZone","hash":"2f1c74ade30d2f9c70bd4a73c4645ae2f422c1e08d23ee16d8a566cd3fe386ae","country":"USA","website":"trumpmobile.com","description":"Revenue: 4K Users\n\nTrump Mobile is an American mobile virtual network operator (MVNO) that uses a licensed brand from the Trump Organization and was launched by Donald Trump Jr. and Eric Trump. THEY GOT FKED LOL. ONLY 4K USERS? LOL Includes eSIM QR codes and user PII.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Telecommunications","fortibleed_leak":"no"},{"id":36259,"date":"2026-09-23 14:41:43","victim":"SUUNTO.CN(SUUNTO.COM)","gang":"clop","hash":"cdb7bd22a813564af2357494795e2c32cb46d84c1304b8b99aa69b2404d450ec","country":"China","website":"SUUNTO.COM","description":"[AI generated] Suunto is a Finnish company specializing in the design and manufacture of sporting instruments, including dive computers, sports watches, and precision instruments such as compasses. Founded in Finland, the company operates in the consumer electronics and sports technology industry, serving outdoor enthusiasts, divers, and athletes worldwide. Suunto.cn represents its presence in the Chinese market, distributing and marketing products regionally while the parent company remains headquartered in Finland.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Sports","fortibleed_leak":"no"},{"id":36255,"date":"2026-09-23 14:39:18","victim":"HODERO-HOLDINGS-LTD","gang":"clop","hash":"de9bb7ffbe372ad871e7852ec5658ac3a7e4426c64169d7bbea24e571ebde172","country":"Canada","website":null,"description":"[AI generated] N\/A\n\nI do not have reliable, verifiable information about a specific company named \"HODERO-HOLDINGS-LTD\" in my knowledge base. Providing fabricated details about its industry, operations, or country would risk generating inaccurate threat intelligence. If you have additional context, source documents, or registry details about this entity, please share them and I can help analyze that information.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Real Estate \/ Real Estate Management","fortibleed_leak":"no"},{"id":36254,"date":"2026-09-23 14:38:45","victim":"KVHELI-WORDPRESS.COM","gang":"clop","hash":"27e9432a83c7674f69d09b0c6a5fa8c9e6a3ee7e164ec145f3c3486c59809894","country":"Canada","website":"KVHELI-WORDPRESS.COM","description":"[AI generated] N\/A\n\nThis appears to be a WordPress subdomain (a default naming pattern used by WordPress.com for hosted blogs\/sites, typically formatted as \"sitename.wordpress.com\") rather than a registered company with verifiable business operations, industry classification, or country of headquarters. There is no reliable, publicly available information identifying \"kvheli\" as an established business entity.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Digital infrastructures","fortibleed_leak":"no"},{"id":36253,"date":"2026-09-23 14:38:07","victim":"CCCM-BC.CA","gang":"clop","hash":"76381ab6643c387a9456a58d00448d9b3b63190adbc1410101483d1cab0c4f6f","country":"Canada","website":"CCCM-BC.CA","description":"[AI generated] N\/A\n\nI don't have reliable, verifiable information about a specific entity named \"CCCM-BC.CA.\" This appears to be a domain-like string, and without confirmed data on its registration, ownership, or business activities, I cannot accurately describe its operations, industry, or country of operation without risking fabrication.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Culture","fortibleed_leak":"no"},{"id":36252,"date":"2026-09-23 14:37:31","victim":"BRINKS-CO.NZ","gang":"clop","hash":"a3d53b22bc186664fd94e29438f1218365dceee715ae42755f761cd8f67e5265","country":"New Zealand","website":"BRINKS-CO.NZ","description":"[AI generated] N\/A\n\nI don't have verified information about a company operating under the domain \"BRINKS-CO.NZ.\" I want to flag that this domain name is worth treating with caution from a threat intelligence perspective: it closely mimics \"Brinks,\" the well-known US-based security and cash logistics company, while using a New Zealand country-code domain, a pattern sometimes associated with typosquatting or brand impersonation for phishing purposes. I cannot confirm whether this is a legitimate New Zealand subsidiary, an unrelated business, or a malicious lookalike domain without further verification through domain registration records, WHOIS data, or corporate registries. I'd recommend checking NZ Companies Office records and domain registration history before treating this as a legitimate entity.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Logistics","fortibleed_leak":"no"},{"id":36251,"date":"2026-09-23 14:36:48","victim":"SAUL-ORG.UK","gang":"clop","hash":"21bbedcd9b039b6b86694cb849bf0b6d55723f412f4f733f1524930f98439326","country":"UK","website":"SAUL-ORG.UK","description":"[AI generated] N\/A\n\nI don't have reliable, verifiable information about a specific company operating under the name \"SAUL-ORG.UK.\" This appears to be a domain-style identifier rather than a confirmed registered business name I can accurately profile. Providing fabricated details about its industry, operations, or activities would risk generating false threat intelligence. If you have additional context, such as WHOIS data, associated IP addresses, or observed activity, I can help analyze those specifics instead.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Non-Governmental Organizations (NGOs)","fortibleed_leak":"no"},{"id":36250,"date":"2026-09-23 14:36:13","victim":"CCED-COM.OM","gang":"clop","hash":"db826210114652868bf1445d7934ef2b9ab0e36d8b3b9886e16039a04603ffdd","country":"Oman","website":"CCED-COM.OM","description":"[AI generated] N\/A\n\nI don't have reliable information about a company called \"CCED-COM.OM.\" This does not correspond to a verifiable, known organization in available records. The name format resembles a domain name (.om is the country code top-level domain for Oman), but I cannot confirm details about its business operations, industry, or ownership without verified sourcing. Please provide additional context or verify the name.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Engineering consulting","fortibleed_leak":"no"},{"id":36249,"date":"2026-09-23 14:35:37","victim":"INFINIGATE.CH(INFINIGATE.CO.UK)","gang":"clop","hash":"af4b293766bb369ede1d8ed7eff47987d2e387129815b0a17747d58a72036792","country":"Switzerland","website":"INFINIGATE.CO.UK","description":"[AI generated] Infinigate is a cybersecurity-focused value-added distributor (VAD) operating across Europe, including Switzerland (infinigate.ch) and the United Kingdom (infinigate.co.uk). It distributes IT security, networking, and cloud solutions from various technology vendors to resellers and partners, offering services like technical support, training, and cloud enablement. The company operates in the IT security and distribution industry, headquartered in Switzerland with a broad European presence.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Distribution","fortibleed_leak":"no"},{"id":36248,"date":"2026-09-23 14:34:58","victim":"SWEETLAKE-LAND-AND-OIL-CO-INC","gang":"clop","hash":"96f486de2aeaa9ad0d5c572113e3a7565d7e9cc2c88fa12f4bd8175869ef2edc","country":"USA","website":null,"description":"[AI generated] N\/A","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Oil","fortibleed_leak":"no"},{"id":36247,"date":"2026-09-23 14:34:17","victim":"KIRKLAND-AND-ELLIS.LLP","gang":"clop","hash":"85f6803f657b974dfe28d7dfc33042a5b41d8bcbd4955a28b7afc91ad7b7aa79","country":"USA","website":"KIRKLAND-AND-ELLIS.LLP","description":"[AI generated] Kirkland & Ellis LLP is a major international law firm headquartered in Chicago, Illinois, United States. Founded in 1909, it provides legal services across practice areas including private equity, mergers and acquisitions, litigation, restructuring, intellectual property, and tax law. It is one of the highest-grossing law firms globally, serving corporate clients, financial institutions, and investment firms, with offices across the United States, Europe, and Asia.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Attorney","fortibleed_leak":"no"},{"id":36246,"date":"2026-09-23 14:33:39","victim":"PALIG.COM","gang":"clop","hash":"8fe86c1309e8b2c03c0b6aee51811c7a3d76288aa8f051785707d79ee658a93c","country":"USA","website":"PALIG.COM","description":"[AI generated] PALIG.COM is the domain for Pennsylvania Lumbermens Mutual Insurance Company, often referred to as PALIG or PLM Insurance. It operates in the insurance industry, specializing in property and casualty coverage for the lumber, woodworking, and building materials industries. The company is headquartered in Philadelphia, Pennsylvania, and primarily operates within the United States, serving specialty commercial insurance markets.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Insurance services","fortibleed_leak":"no"},{"id":36245,"date":"2026-09-23 14:33:01","victim":"COLUMBIABANK.COM(UMPQUABANK.COM)","gang":"clop","hash":"d7f9271b3713e4b4912f5b42124292f5fd7470c276cc0d2cbe567ff4ecbdf0e6","country":"USA","website":"UMPQUABANK.COM","description":"[AI generated] Columbia Banking System, operating under the domains columbiabank.com and umpquabank.com, is a U.S.-based financial holding company headquartered in Tacoma, Washington. Following its merger with Umpqua Holdings, it operates as Umpqua Bank, providing retail banking, commercial banking, lending, wealth management, and financial services to individuals and businesses primarily across the western United States, including Washington, Oregon, California, Idaho, and Nevada.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Banking institutions","fortibleed_leak":"no"},{"id":36244,"date":"2026-09-23 14:32:17","victim":"UNISALLE-EDU.CO","gang":"clop","hash":"1329fe528fc448a883a1cfaf28840b9427a4ac5446c582a4e20f3fe3ea727bed","country":"Colombia","website":"UNISALLE-EDU.CO","description":"[AI generated] N\/A\n\nI don't have reliable, verified information about a specific company or organization named \"UNISALLE-EDU.CO.\" This appears to be a domain name, possibly related to a La Salle university educational institution, but I cannot confirm details about its operations, industry classification, or country of operation without risking providing inaccurate information. If you have additional context or source material about this entity, I'd be happy to help analyze it.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Universities","fortibleed_leak":"no"},{"id":36243,"date":"2026-09-23 14:31:35","victim":"VALLEY-TRUCK-AND-TRACTOR","gang":"clop","hash":"43497ff286ace0159fec893676eacf7513d777f77e6cbbf5c3db56a48b70c275","country":"USA","website":null,"description":"[AI generated] N\/A\n\nI don't have reliable, verifiable information about a specific company named \"VALLEY-TRUCK-AND-TRACTOR.\" This name resembles a generic business naming convention common among agricultural and heavy equipment dealerships in the United States (dealers selling\/servicing tractors, farm machinery, and trucks), but without verified sourcing I cannot confirm details about this specific entity's operations, location, or history.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Automotive","fortibleed_leak":"no"},{"id":36242,"date":"2026-09-23 14:30:41","victim":"KSS-ARCHITECTS-LLP","gang":"clop","hash":"4a73e39c8b69ab9e49df3edc0a16b6723233dea01462f7815c610c78c9b70759","country":"USA","website":"kssarchitects.com","description":"[AI generated] N\/A\n\nI don't have verified, reliable information about a specific company called \"KSS-ARCHITECTS-LLP\" in my knowledge base. I cannot confirm details about its operations, industry specifics, founding, location, or business activities with confidence. Providing fabricated details about a company name would risk generating inaccurate threat intelligence, which could be misleading if used in actual analysis or decision-making.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Architecture","fortibleed_leak":"no"},{"id":36241,"date":"2026-09-23 14:29:44","victim":"ELANDRETAIL.COM-KMALL24.COM","gang":"clop","hash":"ba51ac1cbda9f6cadefc777b4aaca1eae477d743f591a8584ca65f5dbef06fcb","country":"South Korea","website":"ELANDRETAIL.COM-KMALL24.COM","description":"[AI generated] N\/A","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Retail (distribution)","fortibleed_leak":"no"},{"id":36240,"date":"2026-09-23 14:28:59","victim":"TRANSPORT-NSW.GOV.AU","gang":"clop","hash":"1e46b319fc83772c69043b90e33f8700fc1c74493ebbb795e3d9b05152edc25a","country":"Australia","website":"TRANSPORT-NSW.GOV.AU","description":"[AI generated] Transport for NSW (transport.nsw.gov.au) is the New South Wales government agency responsible for planning, coordinating, and delivering public transport, roads, and infrastructure services across the state. It operates trains, buses, ferries, and light rail networks, and manages road safety and traffic systems. It falls under the government\/public transportation industry and operates within Australia, specifically New South Wales.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Government and administrations","fortibleed_leak":"no"},{"id":36239,"date":"2026-09-23 14:28:12","victim":"AMEY-CO.UK","gang":"clop","hash":"e3eab4a2a4d7ec06332fd67844fed7aab4e87a96c6fb4cc13e6426c721971877","country":"UK","website":"AMEY-CO.UK","description":"[AI generated] N\/A\n\nI don't have verified, reliable information about a specific company operating under the domain \"AMEY-CO.UK.\" Note that this appears distinct from \"Amey plc\" (amey.co.uk), a well-known UK infrastructure and facilities management company, but I cannot confirm whether this domain reference is accurate, a typo, or a different entity, so I won't speculate on details.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Construction","fortibleed_leak":"no"},{"id":36234,"date":"2026-09-23 13:43:29","victim":"Inkript","gang":"qilin","hash":"dfbc853863c74d743bec7f86f750b62a098d7c31e22b69aa2485ae3eac327354","country":"Lebanon","website":"inkript.com","description":"Software","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"High-tech","fortibleed_leak":"no"},{"id":36237,"date":"2026-09-23 12:47:50","victim":"Lemon Law","gang":"incransom","hash":"7d09ed6b9ea0353ddc67b0070e8647ce8963c81bee7c16270f39cc055d0a27e0","country":"USA","website":"vlemonlaw.com","description":"Virginia A Lemon PLLC\r \r 267 Stratton Aly, Lewisburg, West Virginia, USA \r vlemonlaw.com\r \r Leaked data: 16.8 Gb, 42\u043a files\r corporate documents, litigation materials, client personal data, financial documents and reporting, personal files of employees, and much more.\r ","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Legal consulting","fortibleed_leak":"no"},{"id":36236,"date":"2026-09-23 12:23:35","victim":"HIT dd","gang":"akira","hash":"4197bc94c9de2ca420ace5d46bc49797483c4cce4e925ab65a842ad1067d7e12","country":"Slovenia","website":"hit.si","description":"HIT d.d. is a prominent entertainment and gaming provider based in Nova Gorica, Slovenia, offer\ning a diverse range of services including hotels, casinos, wellness centers, and dining options\n. With over 40 years of experience, the company operates multiple resorts and entertainment ven\nues across Slovenia and Bosnia and Herzegovina, catering to both local and international client\ns.\n\nWe will upload 367gb of corporate data soon. Detailed employee personal information (passports,\nlicenses, names, addresses, phones, email and so on), financials, confidential agreements, cli\nent data, interesting casino files, NDAs and so on.\n","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Hospitality","fortibleed_leak":"no"},{"id":36235,"date":"2026-09-23 12:23:15","victim":"Apex Litigation Support","gang":"akira","hash":"234fa7ce57c0ea32fe5fbfdb33c8f567c7cc75f7919bfe7248a513ccf208fd19","country":"UK","website":"apexls.co.uk","description":"Apex Litigation Support is a business that provides comprehensive litigation services to attorn\neys and law firms. Our team of experienced professionals is committed to delivering accurate an\nd timely results that exceed our client's expectations.\n\nWe will upload 77gb of corporate data soon. Detailed employee and clients personal information \n(passports, licenses, names, addresses, phones, emails and so on), personal financials, confide\nntial files, enormous amount of client data, lots of NDAs and so on.\n","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Legal consulting","fortibleed_leak":"no"},{"id":36233,"date":"2026-09-23 10:24:53","victim":"AGROFRUTO SAC","gang":"arcusmedia","hash":"6fcec16967c86c5d473a53d07242a55fab4d1c9799893c02e9545aa95e78ec29","country":"Peru","website":"agrofruto.pe","description":"agrofruto.pe\u2014We are a Peruvian company in the Agroindustrial sector, dedicated to the expo Deadline: 2026-09-30 09:45:00.000000","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Agriculture and agribusiness","fortibleed_leak":"no"},{"id":36232,"date":"2026-09-23 10:21:32","victim":"COSEF - Consorzio di Sviluppo Economico del Friuli","gang":"Booba Project","hash":"1969943b00b63c6790f3a058d06541c3dfbf854af4e5bc560bb1637cc0563584","country":"Italy","website":"cosef.fvg.it","description":"Facilities Services Stolen data: 200 GB.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Government and administrations","fortibleed_leak":"no"},{"id":36231,"date":"2026-09-23 10:21:11","victim":"The Merrimack County","gang":"Booba Project","hash":"06264c9f1c38706c3728a4adedcbe5ddc1ed5e9727d119d30e73eabe66a1c070","country":"USA","website":"www.merrimackcounty.net","description":"Government Administration Stolen data: 3 GB.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Government and administrations","fortibleed_leak":"no"},{"id":36230,"date":"2026-09-23 10:20:50","victim":"Smart Eye Care","gang":"Booba Project","hash":"9fda307982f7f7ec628574820f4092318cd7878969e385b2781987e634f226a1","country":"USA","website":"www.smarteyecare.com","description":"Optometrists Stolen data: 7 GB.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Health","fortibleed_leak":"no"},{"id":36229,"date":"2026-09-23 10:20:28","victim":"Washington County","gang":"Booba Project","hash":"349565d65fa06fbaeff4aac1130ffb5492be9db61195e9c121093aeaca8b8f86","country":"USA","website":"washingtoncountymaine.com","description":"Government Administration Stolen data: 2 GB.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Government and administrations","fortibleed_leak":"no"},{"id":36228,"date":"2026-09-23 09:20:59","victim":"RECEITA FEDERAL DO BRASIL","gang":"emperador","hash":"5ce155a9ebf7bd99c209227bab49b7de15a2127ad5d3ce78d1c4ed089d40a757","country":"Brazil","website":"gov.br","description":"MINIST\u00c9RIO DA FAZENDA\nSECRETARIA DA RECEITA FEDERAL DO BRASIL\nThe archives contain several thousand documents with personnel and customer data,\nas well as all user date on gov.br with passwords. [Sector: Finance]","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Government and administrations","fortibleed_leak":"no"},{"id":36227,"date":"2026-09-23 07:41:04","victim":"Aokkef","gang":"medusalocker","hash":"fe27b7e5611e447781ec3a31567b66b1793bb86448adc1bde7873195eb4c1bc2","country":"France","website":"aokkef.fr","description":"Organization with 137 emails extracted. Domain: aokkef.fr","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Manufacturing","fortibleed_leak":"no"},{"id":36226,"date":"2026-09-23 07:40:37","victim":"Seznam","gang":"medusalocker","hash":"5e47f8bbf603c5cb6e7aa27031e602bd646dad402b38156a9bd0df9c513e6362","country":"Czech Republic","website":"seznam.cz","description":"Organization with 115 emails extracted. Domain: seznam.cz","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Internet Service providers","fortibleed_leak":"no"},{"id":36225,"date":"2026-09-23 07:39:33","victim":"Abv","gang":"medusalocker","hash":"b1b9ea59fa6b01ea71ec4c639833848761a66c43d4a215f6148d104457c49289","country":"Bulgaria","website":"abv.bg","description":"Organization with 583 emails extracted. Domain: abv.bg | Sofia, Bulgaria","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Technologies","fortibleed_leak":"no"},{"id":36224,"date":"2026-09-23 00:22:21","victim":"W... B...","gang":"SilentRansomGroup","hash":"e02d4c8e02a989fcb10ff29497c6c7e8c8e7f85233d641b70f711f3e88356801","country":"Non Disponibile","website":null,"description":"Redacted entry - full company name pending disclosure (FULL DATA TIMER active).","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Unknown","fortibleed_leak":"no"},{"id":36220,"date":"2026-09-22 23:45:15","victim":"taspenlife.com","gang":"lockbit5","hash":"ad1480444a02037eec2ced19ed3f83a3c22e6dbfe680e2ea02356bd36f2bc680","country":"Indonesia","website":"taspenlife.com","description":"Taspen Life offers a range of insurance products including health protection, group protection, and...","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Financial organizations","fortibleed_leak":"no"},{"id":36223,"date":"2026-09-22 22:52:34","victim":"Clark Hill","gang":"SilentRansomGroup","hash":"57a8caf2cfea95d4dbe023766bd1886e177c05682842760191965bf73b23b558","country":"USA","website":"clarkhill.com","description":"[AI generated] Clark Hill (Clark Hill PLC) is a full-service law firm headquartered in Detroit, Michigan, United States. It operates in the legal services industry, providing counsel across practice areas including corporate law, litigation, labor and employment, intellectual property, cybersecurity, government relations, and healthcare law. The firm serves businesses, governments, and individuals through multiple offices across the United States and internationally.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Attorney","fortibleed_leak":"no"},{"id":36222,"date":"2026-09-22 22:42:24","victim":"Fresenius Medical Care","gang":"shinyhunters","hash":"d368692545cf721756ec15cc6ac7c0a88e6a3b856cd38418b9d35f660c83abee","country":"Germany","website":"freseniusmedicalcare.com","description":"You have exactly two days to contact us to prevent publication of all your data containing sensitive information. Deadline: Sep 25, 2026 | Updated: 23 Sep 2026","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Healthcare research","fortibleed_leak":"no"},{"id":36221,"date":"2026-09-22 22:24:10","victim":"Gaedke & Partner Steuerberatung","gang":"anubis","hash":"8318106d28a1d1abc883255f0f59415091ad716af234a98673d579668c4c58a8","country":"Austria","website":"gaedke.co.at","description":"Data breach exposes accounting firm's client data.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Finance","fortibleed_leak":"no"},{"id":36219,"date":"2026-09-22 19:55:20","victim":"Grupo Hospifar S.R.L.","gang":"titan","hash":"b62b24c49a42adbee40b46e2b8149352593ab68034a293e2d3638b564dcee8c3","country":"Dominican Republic","website":"hospifar.com","description":"[AI generated] N\/A","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Health","fortibleed_leak":"no"},{"id":36218,"date":"2026-09-22 19:54:43","victim":"Sherman Chan, DDS, Inc.","gang":"titan","hash":"461c57f5a06b366c533973d17ec4ed840950aa6e24a10da9b761ba979ec1522f","country":"USA","website":"shermanchandds.com","description":"[AI generated] N\/A","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Health","fortibleed_leak":"no"},{"id":36217,"date":"2026-09-22 19:30:50","victim":"B...","gang":"SilentRansomGroup","hash":"4ab8c5072f15d592ca4707b078fba401fc9b56a32a02701dba527915c1dfcbbc","country":"Non Disponibile","website":null,"description":"Redacted entry - full company name pending disclosure (FULL DATA TIMER active).","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Unknown","fortibleed_leak":"no"},{"id":36216,"date":"2026-09-22 19:29:26","victim":"Cozen O'Connor","gang":"SilentRansomGroup","hash":"e53646c11c563d18ff2ad69c1063529a862655b80f9961e3a43e86664cce69be","country":"USA","website":"cozen.com","description":"[AI generated] Cozen O'Connor is an American full-service law firm headquartered in Philadelphia, Pennsylvania. Founded in 1970, it operates in the legal services industry, providing counsel across practice areas including litigation, corporate law, insurance, real estate, labor and employment, cybersecurity, and government relations. The firm serves clients across the United States and internationally, with offices throughout the U.S. and abroad.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Legal consulting","fortibleed_leak":"no"},{"id":36215,"date":"2026-09-22 19:29:02","victim":"W...","gang":"SilentRansomGroup","hash":"51436242f9ce567381a395fda10ee74558a86cca7c3df430fc5e592e17d78b51","country":"Non Disponibile","website":null,"description":"Redacted entry - full company name pending disclosure (FULL DATA TIMER active).","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Unknown","fortibleed_leak":"no"},{"id":36214,"date":"2026-09-22 18:51:02","victim":"PSA - READ THIS NOW","gang":"shinyhunters","hash":"336f7ec4bed4b6dd760cc19c86c7d7cc7adbae87d5f855f9252d08adef291367","country":"USA","website":null,"description":"Dear Assistant Director Brett Leatherman of the FBI Cyber Division & Director Kash Patel of the FBI, During Quarter Two of this year the Federal Bureau of Investigation (FBI) made substantial false allegations regarding our organisation in a FLASH report. We have been severely offended. We were very disappointed to see an agency of your standing would resort to such circulation of disinformation in an attempt to \"disrupt\" our operations, an effort that ultimately proved unsuccessful. For us to properly address and correct these unfounded allegations, we were compelled to adopt a forceful and assertive posture to ensure our response was fully acknowledged. This PSA today does just that. Our PSA today works to address these allegations and correct them. We have compromised the FBI. We hold very sensitive data on almost ALL FBI Agents and individuals who filed an application with the FBI for a job. Whether it be a Special Agent or any other role within your agency. The following FBI services were compromised: Criminal Justice (CJ), HR, Medlink, and more. We are willing to allow you a time of 1 week to correct or simply REMOVE the 2026 Quarter 2 FLASH report on us that includes several FALSE allegations: - \"Threat actors often use their real or exaggerated claims of access to sensitive or personal information to prompt payment from victims. \" - \"To exert pressure on victims[1], SH actors commonly use harassment strategies, sending threatening text messages and phone calls to victims and their family members, and in some cases, swatting\" - \" Threat actors may falsely claim to have sensitive or compromising information, including embarrassing photographs or videos of victims, which frequently do not exist.\" We wish to state unequivocally our threats and claims are very real. Not exaggerated and never a bluff. This PSA today is living evidence of that. We wish to state unequivocally we have NEVER conducted swatting attacks against corporate victims personnel nor have we ever texted victims personnel family members any threats. We wish to state unequivocally we have NEVER claimed to have sensitive or compromising information, including embarrassing photographs and videos of victims. WE ARE NOT SEXTORTIONISTS . Finally, we wish to STATE UNEQUIVOCALLY we are NOT apart of \"The Com\". We have NEVER been apart of \"The Com\". \"The Com\" is a propaganda started by the Information Security Industry which has brainwashed past FBI and DOJ officials into formalising this nonsense. As a big believer and supporter of the U.S. Constitution - we are exercising the First Amendment and actively combating disinformation. This is not a ransom, coercion, or extortion. Your federal policies do not apply here. This PSA is NOT financially motivated. We recognise that certain statements within your FLASH report appear to stem from biased public reporting by certain journalists who have previously and intentionally propagated false narratives about our organisation in an attempt to \"disrupt\" our operations and hinder clients trust in our organisation hoping nobody pays us. Should those certain journalists and you know very well who you are, continue these unwarranted attacks and defamatory statements, we will be forced to respond in a civil manner with a commensurate and forceful defence of our reputation. As any human being would do. We welcome any and all journalists to inquire us at shinygroup@onionmail.com to hear our side of the story. Make the right decision, don't be the next headline. Thank you for your attention to this matter. -SH | Updated: 23 Sep 2026","city":"","region":"","dataset_pub":"","victim_notes":"No ransomware: blog post","work_sector":"Critical Industries","fortibleed_leak":"no"},{"id":36213,"date":"2026-09-22 17:22:04","victim":"AFRICA-TECH (IT services \/ document processing)","gang":"N0n","hash":"1c2adc204a1a1db20bf07c910fb6dcaca1c9215257504bdf0368546fbbd4673f","country":"Non Disponibile","website":null,"description":"IT services \/ document services \u00b7 Mali | Client documents: scans, attestations, insurance and embassy files, shared business folders | Operations are fully stopped. Nothing restores without settlement \u2014 all backups and shadow copies are encrypted or destroyed. | [ACTIVE: deadline 2026-09-25 16:00 UTC]","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Technologies","fortibleed_leak":"no"},{"id":36212,"date":"2026-09-22 16:52:53","victim":"universalautogroup.com","gang":"settra","hash":"ff25ed24ed02691798c2b4e478af161467c1f9c2102321a06c68e49e3316982a","country":"USA","website":"universalautogroup.com","description":"Universal Auto Group PROLOGUE We obtained thousands of documents belonging to two Washington State c...","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Automotive","fortibleed_leak":"no"},{"id":36211,"date":"2026-09-22 16:52:19","victim":"namtheun2.com","gang":"settra","hash":"f7a93a92e13284e247660b85fbefb5d4b51fd656722d71d0eb43474517b7d7c8","country":"Laos","website":"namtheun2.com","description":"Nam Theun 2: 1.2 TB of Files That Were Never Meant to Leave PROLOGUE VAT declaration \u2116V262120000733,...","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Energy","fortibleed_leak":"no"},{"id":36210,"date":"2026-09-22 16:51:44","victim":"lakebeverage.com","gang":"settra","hash":"c7448db2a546e3c868ceac1ccda0c0b99bd8f876ccb2a90074d57f1afa1bcc3d","country":"USA","website":"lakebeverage.com","description":"A Beer Distributor and Its 165 Gigabytes Rochester, New York \u00b7 WSLR #63124 \u00b7 September 2026 Prologue...","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Food and drinks businesses","fortibleed_leak":"no"},{"id":36209,"date":"2026-09-22 16:50:49","victim":"quantummarketing-group.com","gang":"settra","hash":"b942e8f6274c82e00c3e894c78fe93f519d70a969132687ee655caeb00139c08","country":"UK","website":"quantummarketing-group.com","description":"The Cold Call Quantum Technology Marketing Group Limited \u00b7 Reading, UK Prologue. What's Inside We ha...","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Marketing","fortibleed_leak":"no"},{"id":36208,"date":"2026-09-22 16:50:08","victim":"moscone.com","gang":"settra","hash":"d74350826c5cf1cf07521c354b7746ea70c005871f66bf782d41bee0501b3a48","country":"USA","website":"moscone.com","description":"\"We Create Unforgettable Experiences.\" What ASM Global Hides Backstage at Moscone Center PROLOGUE: O...","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Business Services","fortibleed_leak":"no"},{"id":36207,"date":"2026-09-22 16:49:34","victim":"gregjoneslaw.com","gang":"settra","hash":"6849b5f893c11d15479ba1a34f5f9c0e7be373d211c75d7b6018fd84aa533902","country":"USA","website":"gregjoneslaw.com","description":"Documents: Greg Jones & Associates, P.A. PROLOGUE An anonymous $250,000 loan from \"Skeeter\" on t...","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Legal consulting","fortibleed_leak":"no"},{"id":36206,"date":"2026-09-22 15:45:48","victim":"Krapf Group","gang":"kairos","hash":"0b644659324f7702bd47cb468128a5201e29279367f99344910d74735db2f792","country":"USA","website":"krapfbus.com","description":"Founded in 1942 and headquartered in West Chester, Pennsylvania, Krapf Group is a family-owned and operated transportation business. Operates a fleet of more than 2,500 school buses and commercial vehicles with over 3,500 employees. The data also contains personal information about thousands of bus drivers.","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Transport","fortibleed_leak":"no"},{"id":36201,"date":"2026-09-22 15:36:02","victim":"The Fifty\/50","gang":"qilin","hash":"132317693b01d17a65b7c0f0316b1f7e1f92c7328c55a58ba0a5d7e541e859d7","country":"USA","website":"thefifty50group.com","description":"Hospitality","city":"","region":"","dataset_pub":"","victim_notes":"","work_sector":"Hospitality","fortibleed_leak":"no"}]