Last Ransomware victims

Sponsored by Hudson RockUse Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business


Groups

0


Victims

0


Victims this month

0


Victims this year

0
This page lists the latest 100 ransom claims detected by Ransomware.live. We continously scrape ransomware group sites to detect new victims.
Ransomware.live has been tracking ransomware's victims since April 2022.


Ransomware.livedoes not exfiltrate, download, host, repost, or disclose any stolen data. Any legal concerns regarding the content should be directed at the attackers, notRansomware.live. This platform is dedicated to cybersecurity awareness, reporting on ransomware incidents to inform the public.Ransomware.liveoperates independently, with no affiliation or alignment with any ransomware groups, and does not host or distribute infringing content. All information is automatically gathered and redacted from publicly accessible sources, including ransomware leak sites on the dark web.




View summary page

DE flag

wieso-cert 

Company logo
Ransomware Group:

Discovery Date: 2025-03-28 09:40

Sector: Not Found
Our services are primarily aimed at health and social care institutions in the broader sense. The main interest groups we address are hospitals, clinics, associations, university hospitals, medical practices, medical care centers, polyclinics ...

Victim:   |  Group: 
IN flag

Lupin Limited 

Company logo
Ransomware Group:

Discovery Date: 2025-03-28 07:25

Sector: Healthcare
N/A

Victim:   |  Group: 
 flag

W*******w.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-28 02:14

Sector: Not Found
To the management of W***** LLP We have breached the main servers, and took down W*******w.com, we have also taken […]

Victim:   |  Group: 
DE flag

www.allmilmoe.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-28 00:12
Estimated Attack Date: 2025-03-26

[AI generated] Allmilmoe is a German company specializing in the production of high-quality kitchens. They carefully select materials and pay attention to workmanship to provide timeless, functional, and stylish designs to customers. Their portfolio covers a variety of collections aiming to fuse functionality and aesthetics. They value sustainability, thus they ensure to use materials from renewable and controlled sources.

Victim:   |  Group: 
US flag

Wildeck Inc 

Company logo
Ransomware Group:

Discovery Date: 2025-03-28 00:09
Estimated Attack Date: 2025-03-27

Over 500 GB of files downloaded from their servers . Company has 48 hours to contact us before we publish the data . Wildeck, Inc. headquartered in Waukesha, WI, is a subsidiary of Holden Industries, a 100 percent employee-owned company. ...

Victim:   |  Group: 
BR flag

ihara.com.br 

Company logo
Ransomware Group:

Discovery Date: 2025-03-27 19:38

Sector: Not Found
​​​​​IHARA is a Brazilian company specializing in the development and manufacturing of agricultural chemical products aimed at crop protection. Established in 1965, IHARA offers ...

Victim:   |  Group: 
US flag

Manning Materials Corp. 

Company logo
Ransomware Group:

Discovery Date: 2025-03-27 17:12

As a single source supplier of Exterior Insulation Finish Systems (EIFS), Stucco, Stucco Components, and Insulated Concrete Forms (ICF) products, Manning Materials has earned a reputation for out standing quality building materials, along with concentrated expe rtise and exceptional service. We are ready to upload more than 25 GB of essential corporate doc uments such as: contact numbers and e-mail addresses of employees and customers, driver licenses, financial data (audits, payment details, reports), corporate licenses, agreements and contracts, etc.

Group: 
US flag

amatechinc.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-27 16:28
Estimated Attack Date: 2025-03-26

Sector: Technology
Engineering, Prod, Proto, Purchaising, Sales, Scan, Business Development

Victim:   |  Group: 
US flag

NAI Earle Furman 

Company logo
Ransomware Group:

Discovery Date: 2025-03-27 15:43

NAI Earle Furman, LLC specialize in the office, industrial, retai l, land, multifamily, and investment sectors and offer a wide ran ge of services including sales, leasing, development, site select ion, consulting, and property management. We are ready to upload more than 64 GB of essential corporate doc uments such as: corporate confidential licenses, NDA’s, agreement s and contracts, personal SSN’s, driver licenses, financial data (audits, payment details, reports), contact numbers and e-mail ad dresses of employees and customers, etc.

Group: 
 flag

brattenelectrictn.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-27 15:11
Estimated Attack Date: 2025-03-26

[AI generated] N/A

Victim:   |  Group: 
US flag

NEW JERSEY CPA 

Company logo
Ransomware Group:

Discovery Date: 2025-03-27 15:08
Estimated Attack Date: 2025-02-17

The New Jersey Society of Certified Public Accountants offers a range of services aimed at supporting accountants and accounting professionals. Their programs include membership benefits, continuing professional education (CPE), career development resources, and networking opportunities. They cater to a diverse membership base, including students, early career professionals, managers, and accounting educators. The organization also provides guidance on CPA licensing and maintains resources for legislative advocacy in the profession.

Victim:   |  Group: 
US flag

REIMERS FURNITURE MFG INC 

Company logo
Ransomware Group:

Discovery Date: 2025-03-27 14:14

RFM seating create chairs that are customizable, long lasting, an d available for all body types so that every customer finds a cha ir that truly fits them. We are ready to upload more than 58 GB of essential corporate doc uments such as: corporate licenses, agreements and contracts, cor porate NDA’s, resident cards, driver licenses, personal SSN’s, co ntact numbers and e-mail addresses of employees and customers, HR documents, family member informations, etc.

Victim:   |  Group: 
CA flag

City of Fort St. John (city.cityfsj.local) 

Company logo
Ransomware Group:

Discovery Date: 2025-03-27 12:56
Estimated Attack Date: 2025-02-25

With a population of 21,000 and growing with the city itself, Fort St. John is the largest city in Northeastern BC. Fort St. John is not only the largest city in the Northeast Region of BC; it is also the largest city in British Columbia situated along the world-famous Alaska Highway. If you are driving the highway, we invite you to stop in and explore all that Fort St. John has to offer. You wont be disappointed! Fort St. John is The Energetic City for good reason. The title reflects not only our large resource base of oil, natural gas, forestry and agriculture, but also the vitality of our residents who are, on average, 9 years younger than the average population in the rest of the province. Modern-day pioneers continue to bring a fresh spirit of exploration, innovation and connection to community within our city

Victim:   |  Group: 
 flag

Senior Support Services 

Company logo
Ransomware Group:

Discovery Date: 2025-03-27 12:09

Sector: Healthcare
Senior Support Services Senior Support Services (CPHC) first began serving the seniors of Brockville in 1913. By 1970, Senior Support Services (CPHC) had expanded throughout Lanark, Leeds and Grenville to serve communities such as Smiths Falls, Carleton Place, and Gananoque.

Group: 
PK flag

nadra.gov.pk - NADRA official Of Pakistan Army & (Andhra Pradesh) 

Company logo
Ransomware Group:

Discovery Date: 2025-03-27 07:51

nadra.gov.pk - NADRA official Of Pakistan Army & (Andhra Pradesh)

Victim:   |  Group: 
GB flag

Ebassi.com (E.B. Archbald and Associates) 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 23:49

Sector: Not Found
Over 700GB of data downloaded from their servers ( both local servers and CLOUD SERVERS ) . Company has 48 hours to contact us if not we will make the data available for download . SSI combines state of the art technology with professional ...

Victim:   |  Group: 
GB flag

heras.co.uk 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 22:58
Estimated Attack Date: 2024-05-29

heras.co.uk

heras.co.uk has been previously claimed by Lockbit3 for an attack estimated on 2024-05-29.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-03-26

Victim:   |  Group: 
US flag

alliedwoundcare.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 22:57
Estimated Attack Date: 2024-01-12

Sector: Healthcare
alliedwoundcare.com

alliedwoundcare.com has been previously claimed by Everest for an attack estimated on 2024-01-12.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-03-26

Victim:   |  Group: 
RU flag

crimsgroup.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 22:55

Sector: Not Found
crimsgroup.com

Victim:   |  Group: 
IQ flag

aman-iraq.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 22:54

Sector: Not Found
aman-iraq.com

Victim:   |  Group: 
LV flag

Hansa Solutions 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 22:47

Sector: Not Found
Hansa offers core end-to-end software solutions for the Insurance and Reinsurance markets. We are ready to upload a lot of essential corporate documents suc h as: passports and other employee and customer documents, contac t numbers and e-mail addresses of employees and customers, studen t transfer certificates and examination forms, etc.

Group: 
 flag

TOGA 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 22:47

Sector: Not Found
TOGA real estate development company that specializes in resident ial, commercial, hotel, and retail projects. We are ready to upload more than 530 GB of essential corporate do cuments such as: financial data (audits, payment details, reports ), contact numbers and e-mail addresses of employees and customer s, many database files, etc.

Group: 
BR flag

Helbor 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 22:47

Sector: Not Found
Helbor is one of the largest real estate developers in Brazil. It s activities are recognized through its strong presence in the me tropolitan region of São Paulo, home to more than 21 million peop le. We are ready to upload more than 54GB of essential corporate docu ments such as: corporate NDA’s, internal correspondence, financia l data (audits, payment details, reports), corporate licenses, ag reements and contracts, contact numbers and e-mail addresses of e mployees and customers, etc.

Group: 
CA flag

Monette Barakett 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 22:47

Sector: Not Found
Monette Barakett is a legal firm that provides services regarding labor law, civil law and public law. We are ready to upload a lot of essential corporate documents suc h as: passports and other employee and customer documents, contac t numbers and e-mail addresses of employees and customers, financ ial data (audits, payment details, reports), etc.

Group: 
AU flag

compumedics.com.au AND neuromedicalsupplies.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 22:42

Sector: Healthcare
A global leader in the development, manufacture and commercialisation of diagnostic technologies for the sleep, brain and ultrasonic blood-flow monitoring applications.Compumedics Limited (ASX: CMP) is a medical device company involved in the development, manufacture and commercialisation of diagnostics technology for the sleep, brain and ultrasonic blood-flow monitoring applications. The Company

Group: 
TH flag

www.hongthongrice.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 22:27
Estimated Attack Date: 2025-03-25

[AI generated] Hongthongrice.com is a renowned digital marketplace that operates in the agricultural business sector specializing in premium quality rice. Originating from Thailand, the company is a supplier and exporter of a diverse range of rices, including jasmine, white, glutinous, and brown rice varieties. This company is committed to maintaining a high standard of quality and meeting the demand of global customers.

Victim:   |  Group: 
DE flag

www.fkm-elemente.de 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 22:25

[AI generated] FKM Elemente is a Germany-based company that specializes in laboratory and technical equipment. They offer a vast range of products including workbenches, laboratory equipment, and cleanroom furniture. Their cleanroom products meet both national and international standards. With a focus on superior functionality, ergonomic design, and durability, FKM Elemente ensures their equipment can stand up to a variety of workplace conditions.

Victim:   |  Group: 
DE flag

conterra.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 16:28

Sector: Technology
[AI generated] Conterra.com is the official website of Conterra Inc., a company that specializes in intelligent mapping solutions and geospatial data management. Conterra serves various industries including transport, utilities, and public safety. They provide services such as FME consulting & services, system integration, and geospatial web applications. Their head office is based in Münster, Germany.

Victim:   |  Group: 
US flag

TriCity Family Services 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 13:22

TriCity Family Services (TCFS) is the leading provider of counseling and mental health services in Kane County, catering to clients of all ages and income levels. The organization offers a wide range of services including family-based treatment for eating disorders, emotional wellness programs, workshops, support groups, and employee assistance programs. With a mission to provide accessible and affordable mental health care, TCFS serves over 4,000 clients each year, accepting most major insurance plans and offering fee adjustments as needed. Established in 1967, TriCity Family Services is committed to supporting individuals and families in their journey toward emotional wellness.

Victim:   |  Group: 
IQ flag

mot.gov.iq - Iraqi Ministry of Commerce (Of Trade) 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 13:14

mot.gov.iq - Iraqi Ministry of Commerce (Of Trade)

Victim:   |  Group: 
IL flag

israel Infrastructure & Secret Documents intelligence information 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 13:13

Sector: Not Found
israel Infrastructure & Secret Documents intelligence information

Victim:   |  Group: 
US flag

Oregon Surveillance Network - OSN! 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 13:12

Sector: Not Found
[AI generated] "Oregon Surveillance Network - OSN!" is a company that specializes in providing cutting-edge surveillance systems and security solutions in Oregon, USA. They cater to a variety of sectors ranging from residential, commercial, to industrial clientele. Their services include installing CCTV systems, alarm systems, access control mechanisms, and offering security consultations.

Group: 
GB flag

R&K Drysdales 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 08:46

Part of the ESG group East of Scotland Growers are a farmer owned growing cooperative based in Cupar, Fife. Our main crops are Broccoli, Brussels sprouts & Cauliflower, along with a wider range of vegetable crops produced in the fertile Scottish soils over a 180 mile radius. Established in 1987 with the purpose of providing the individual grower the benefits of being part of a larger group, allowing all members to grow together for the future. ESG are recognised by the European Union as a Producer Organisation; a producer organisation being a group of growers that work collectively as an organisation for the benefit of the grower. ESG take great pride in this recognition.Geo: United Kingdom - Leak size: 80 GB Archive - Contains: Files, SQL

Group: 
 flag

www.DSelectrical.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 07:16
Estimated Attack Date: 2025-03-25

Sector: Construction
[AI generated] N/A

Victim:   |  Group: 
PK flag

Roshan Packages 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 07:14

Roshan Packages In 1959, Dr. Aijaz Hassan Qureshi began a journey of excellence after returning from Germany with a PhD. He launched Urdu Digest which served as the onset of an extraordinary journey forward. Urdu Digest became Pakistan’s most circulated publication due to its engaging content pertinent to attentive and thoughtful editorials and subject matters. Roshan Enterprises launched in 1989 to export Pakistan’s fruits to the world and was a pioneer and forerunner in recognizing the potential in Pakistan’s fruit crops. At this time, fruit was omitted in Pakistan’s export culture, and Roshan Enterprises invited the prospect through intellectual marketing techniques and advanced fruit processing units. The enterprise exceeded expectations and evolved into Pakistan’s largest fruit exporter. The corporation’s futuristic approach and high volume export demand prompted the setup of an in-house packaging unit. In 2002, Roshan Packages Limited was established to meet internal demand for Corrugated Packaging. After this momentous initiation, the company grew exponentially and established European Flexible Packaging and Co-extruded Film Solution Plants in 2011 and 2015, respectively. Presently, Roshan Packages Limited specialises in world-class Co-extruded films, Flexible Packaging, and Corrugated Packaging materials and solutions, all in tune with current industry trends. Consequently, Roshan Packages Limited has gained an outstanding pool of national and international customers: a credit to its remarkable progression.Geo: Pakistan - Leak size: 382 GB Archive - Contains: Files

Group: 
FR flag

Initiative Var 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 07:14

Sector: Not Found
Initiative Var Initiative Var is a company that operates in the Membership Organizations industry. It employs 5to9 people and has 500Kto1M of revenue. The company is headquartered in Toulon, Provence-Alpes-Cote d'Azur, FranceGeo: France - Leak size: 80 GB Archive - Contains: Files

Victim:   |  Group: 
CA flag

Benkin Sheet Metal 2008 Ltd 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 07:13

Benkin Sheet Metal 2008 Ltd Most general contractors and established engineering companies have known Benkin Sheet Metal 2008 Ltd to be a reliable subcontractor, supporting the roofing and window contractors with all their miscellaneous flashing and installation requirements. Our portfolio contains many new construction and rehabilitation projects every year. The head office and production shop located at 1963 Kingsway Avenue in Port Coquitlam, BC, supports a staff of 45 to 50 people on an annual basis.Geo: Canada - Leak size: 171 GB Archive - Contains: Files

Group: 
DE flag

Elmos 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 07:13

Sector: Not Found
Elmos Elmos is fascinated by IT and passionate about people. This is reflected in a five-star service for our employees and our customers. What drives us, who do we match with and who do we welcome to our Elmos family? Let's connect!Geo: Belgium - Leak size: 186 GB Archive - Contains: Files, SQL

Group: 
 flag

The PNST 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 07:13

Sector: Not Found
The PNST Pacheco Neto Sanden Teisseire Advogados (PNST) is a Full Service office with a national and international focus on customer service and foreign investors, through its diverse multicultural team, made up of highly qualified professionals in Cross Border experience and practical experience with the main industries in Europe (Germany, France and Scandinavia). PNST is the result of the merger of six partners and their respective teams of respected offices in the country, who worked for decades sharing the same philosophies of work, life, legal expertise and commercial objectives.Geo: Brazil - Leak size: 59 GB Arcive - Contains: Files

Group: 
CA flag

Austring Fairman & Fekete 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 07:13

Sector: Not Found
Austring Fairman & Fekete YUKON EXPERIENCE People to People Being unapologetic champions for the Yukon and its way of life, as showcased in the faces and spirit of our team and clients. Established since 1973 Austring, Fairman & Fekete was established in 1973. We pride ourselves on being a Yukon law firm. Most of the partners and associates are born and raised Yukoners who have chosen to remain in the Yukon to serve our clients. YUKON SOLUTIONS A Leading Firm We provide quality legal services to a diverse range of clients, inside and outside the Yukon Territory. We offer litigation, corporate/commercial, real estate, wills and estates, and criminal legal services. Our lawyers have a wide range of skills in these areas, but each has preferred areas of practice. An Integrated Approach Our clients are treated in a holistic fashion, with honesty rooted in integrity.Geo: Canada - Leak size: 150 GB Archive - Contains: Files

Group: 
AR flag

tomioingenieria.com.ar 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 07:10
Estimated Attack Date: 2025-03-22

Sector: Not Found
​​Tomio Ingeniería S.A. is an Argentine company specializing in engineering and industrial services. Founded in 1946, it offers a range of services including...

Victim:   |  Group: 
FR flag

ec-nantes.fr 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 07:09
Estimated Attack Date: 2025-03-25

Sector: Education
​​​The domain ec-nantes.fr is associated with École Centrale de Nantes, which is a prestigious engineering school located in Nantes, France. It is one of the prominent institutions in the French higher education system...

Victim:   |  Group: 
US flag

Direct Traffic Control 

Company logo
Ransomware Group:

Discovery Date: 2025-03-26 00:59
Estimated Attack Date: 2025-03-25

Direct Traffic Control, Inc., an Oklahoma owned and operated corporation, is an experienced team of traffic control specialists with know-how and integrity. Our expert traffic control team also includes superior striping teams with experience available to answer any questions you may incur along the way. Our combined abilities make a team that we are glad to say can support the Direct Traffic Control name.

Victim:   |  Group: 
FI flag

saiedu.fi 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 23:45
Estimated Attack Date: 2025-03-19

Sector: Education
[AI generated] Saiedu.fi, known as SAI Education and Development Finland, is a Finland-based company that aims to support education and development globally. This organization works to improve school systems, teachers' professional development, and curriculum design. SAI offers a range of services, from training courses and seminars to consultancy services in education and development.

Victim:   |  Group: 
TR flag

kalesavunma.com - KALE SAVUNMA. 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 22:54

kalesavunma.com - KALE SAVUNMA.

Victim:   |  Group: 
US flag

usCalibration 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 20:39

Sector: Not Found
United States

Victim:   |  Group: 
 flag

B&C Industries 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 20:38

Sector: Not Found
United States

Victim:   |  Group: 
US flag

gettys.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 19:13
Estimated Attack Date: 2025-03-21

Sector: Not Found
The Gettys Group is a family of hospitality-focused companies dedicated to creating the inspired moments that stay with guests and the defined details that enrich brand. For more than 30 years, they have guided developers, operators, and bran ...

Victim:   |  Group: 
US flag

Primary Flow Signal: Flow Meters | Flow Measurement 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 19:11

Primary Flow Signal has been producing flow meters for over 30 years, since its founding by Hungarian immigrant, Dezsoe (Dezi) Halmi, and has emerged as the preeminent industry player in North America, with a reputation for reliability, accur ...

Victim:   |  Group: 
CA flag

Kimco Steel 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 19:09

Canada

Victim:   |  Group: 
AG flag

Curtain Bluff 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 17:34

www.curtainbluff.com Curtain Bluff files Vacationer information (personal data), audit information (including past years), bank activity (statements with all transactions), internal organization documentation (even the menu) and other documents.There are also large amounts of account data (about 500 unique login/password pairs). Price – $120,000

Victim:   |  Group: 
CA flag

I.A.T.S.E. Local 667/669 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 16:55

Sector: Not Found
Status: 29d 22h 22m 31s - Size Data: 125 GB

Victim:   |  Group: 
BR flag

Plaza Brasília Hotéis 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 15:18

The Brasília Palace Hotel was the first building inaugurated in B rasília when it opened its doors in 1958. It was the first large hotel in the city, with 13,000 square meters and the capacity to accommodate up to 350 people. We are ready to upload more than 250 GB of essential corporate do cuments such as: personal passports and other employee and custom er documents, contact numbers and e-mail addresses of employees a nd customers, financial data (audits, payment details, reports), corporate licenses, agreements and contracts, etc.

Group: 
RO flag

AAYLEX ONE S.A. 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 15:18

At Cocorico, we aim to raise the most natural, healthiest and bes t tasting chicken. We are ready to upload more than 19 GB of essential corporate doc uments such as: corporate licenses, agreements and contracts (inc luding corporate NDA’s), contact numbers and e-mail addresses of employees and customers, employees medical documents, etc.

Group: 
US flag

www.carolinaac.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 15:03
Estimated Attack Date: 2025-03-12

[AI generated] Carolina Heating Service Inc. is a heating and cooling system company based in South Carolina. They offer a wide range of services that include installation and repair of air conditioning systems, heating systems, water heaters, generators, and more. They are known for their exceptional customer service.

Victim:   |  Group: 
US flag

www.garbinc.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 15:01
Estimated Attack Date: 2025-03-08

[AI generated] Garb Oil & Power Corporation (www.garbinc.com) is a company specialized in the recycling and clean energy sector. It focuses on the production of machines for waste processing and recycling. Catering to both individual and industrial clients, Garb offers comprehensive solutions in recycling processes. Notably, Garb leads a responsible approach to waste processing and environmental sustainability. The company is based in Salt Lake City, Utah, USA.

Victim:   |  Group: 
US flag

www.mododoc.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 14:58
Estimated Attack Date: 2025-03-08

[AI generated] Mododoc.com is an online retailer specializing in contemporary easy-to-wear men's and women's clothing. The company was launched in 1993 in Pasadena, CA. Mododoc's collection focuses on casual, comfortable apparel made with high quality and sustainable materials. Their designs offer effortless style, making their clothing suitable for various occasions and seasons. Products include shirts, jackets, pants, dresses, with sizes extending to plus and big & tall.

Victim:   |  Group: 
AR flag

www.argentosc.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 14:56
Estimated Attack Date: 2025-03-07

Sector: Not Found
[AI generated] N/A

Victim:   |  Group: 
US flag

www.ripplejunction.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 14:54
Estimated Attack Date: 2025-03-10

[AI generated] Ripple Junction is a company specializing in designing and selling pop culture merchandise. The products they offer include apparel, home goods, and accessories featuring graphics of popular TV shows, movies, bands, and video games. The company aims to unite disparate fan communities through their offerings.

Victim:   |  Group: 
 flag

www.creativelogisticservices.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 14:53
Estimated Attack Date: 2025-03-12

[AI generated] Creative Logistics Services is a company specializing in shipping solutions and warehouse management. They provide multi-carrier shipping software designed to streamline and automate the process of shipping and handling logistics. Their offerings include customized software development, consulting services and technical support, aiming to enhance operational efficiency, productivity, and customer satisfaction.

Victim:   |  Group: 
CA flag

www.afnigc.ca 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 14:51

[AI generated] N/A

Victim:   |  Group: 
DO flag

www.cormidom.com.do 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 14:49
Estimated Attack Date: 2025-03-18

[AI generated] Cormidom (Corporacion Minera Dominicana) is a mining company based in the Dominican Republic. They specialize in exploration, extraction, and exportation of ferronickel, a type of nickel-iron used in stainless steel production. Committed to maintaining environmental sustainability, they focus on ensuring that their operations pose the least negative impact to the local environment and communities.

Victim:   |  Group: 
DE flag

www.lions-online.org 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 14:47
Estimated Attack Date: 2025-03-08

Sector: Not Found
[AI generated] N/A

Victim:   |  Group: 
MX flag

ossc.com.mx 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 14:07

Sector: Not Found
Greetings! Today we are posting here the new company, "OSSC Mexico". Company Description: In 2008, OSSC was created with a base of experts who already had more than ten years of experience in developing GIRO payroll software. Headquarters:...

Victim:   |  Group: 
AR flag

fepasa.com.ar 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 14:05

Greetings! Today we are posting here the new company, "F.E.P.A.S.A.". Company Description: FEPASA — Argentine poultry company operating in the field of high-quality meat and by-products since 1964, with an integrated value chain, its own breedi...

Victim:   |  Group: 
IT flag

bioclimaservice.it 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 14:04

Sector: Not Found
Greetings! Today we are posting here the new company, "BIO - CLIMA SERVICE S.R.L". Company Description: Bio-Clima Service SRL is a company founded in 2002 and specialized in technical assistance, maintenance, parameter qualification and electri...

Victim:   |  Group: 
US flag

Primex Farms LLC 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 13:48

Primex Farms is a manufacturer of nuts and dried fruits. We are ready to upload more than 25 GB of essential corporate doc uments such as: corporate NDA’s, personal driver license scans, p assports and other employee and customer documents, financial dat a (audits, payment details, reports), corporate licenses, agreeme nts and contracts, etc.

Group: 
US flag

Wide Open West - WOW! 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 13:33
Estimated Attack Date: 2025-03-24

[AI generated] Wide Open West (WOW!) is the sixth largest cable operator in the United States. It provides telecommunications, broadband, and cable television services. Its portfolio includes high-speed internet, data, voice, cloud services, and cable television. Operating mainly in the Midwest and Southeast, WOW! is recognized for exceptional service and nationally ranked for customer satisfaction.

Victim:   |  Group: 
US flag

Okeene Elementary School 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 07:15

Sector: Education
Okeene Elementary School Okeene Elementary School is a public school located in Okeene, OK, which is in a remote rural setting. More

Victim:   |  Group: 
HK flag

6ixty8ight 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 06:35
Estimated Attack Date: 2025-03-18

6ixty8ight(HongKong)

Victim:   |  Group: 
IN flag

Sanyo Special Steel India Pvt. Ltd. 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 06:34
Estimated Attack Date: 2025-03-16

Sanyo Special Steel India Pvt. Ltd.(India)

Victim:   |  Group: 
KR flag

KHAZMODAN STUDIOS 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 06:34
Estimated Attack Date: 2025-03-22

Sector: Not Found
KHAZMODAN STUDIOS(Korea)

Victim:   |  Group: 
EG flag

MISR AL MAHABA HOSPITAL 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 06:34
Estimated Attack Date: 2025-03-24

Sector: Healthcare
MISR AL MAHABA HOSPITAL(Egypt)

Group: 
US flag

McMillan James Equipment Company (MJEC) 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 06:25
Estimated Attack Date: 2025-03-19

[AI generated] McMillan James Equipment Company (MJEC) specializes in providing end-to-end HVAC solutions for commercial and industrial applications. The company, headquartered in Texas, USA, offers a variety of services, including system design, equipment sales, installation, and maintenance. MJEC prides itself on implementing innovative technologies to improve indoor air quality and energy efficiency.

Victim:   |  Group: 
US flag

Montgomery Little & Soran, PC 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 06:24
Estimated Attack Date: 2025-03-21

[AI generated] Montgomery Little & Soran, PC is a full-service law firm based in Greenwood Village, Colorado, offering legal services for areas such as Family Law, Real Estate, Business & Commercial, and Professional Liability. Their vast experience allows them to provide comprehensive solutions to businesses, professional organizations, individuals, and families. They have more than 40 attorneys specializing in different fields of law.

Victim:   |  Group: 
ES flag

Grupo Santillana 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 00:29
Estimated Attack Date: 2025-03-24

Sector: Education
We hold sensitive files from Santillana, the largest business unit of Spain’s publicly traded Prisa media group. The company must act quickly to prevent the exposure of this data.

Victim:   |  Group: 
US flag

Omnitracs 

Company logo
Ransomware Group:

Discovery Date: 2025-03-25 00:28
Estimated Attack Date: 2025-03-24

Sector: Technology
We hold sensitive files from Omnitracs, a leading provider of fleet management and logistics solutions. The company must act swiftly to prevent the exposure of this data.

Victim:   |  Group: 
IT flag

www.solidworld.it 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 21:49

Sector: Technology
[AI generated] SolidWorld is an Italian company specializing in providing solutions for Product Development Processes. They offer services and products such as CAD/CAM/CAE and PDM solutions, 3D printing, and scanning solutions. Focused on innovation, they aim to help businesses improve in product development, manufacturing and managing information on a technological level.

Victim:   |  Group: 
 flag

www.s3s.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 21:47
Estimated Attack Date: 2025-02-17

Sector: Not Found
[AI generated] N/A

www.s3s.com has been previously claimed by Play for an attack estimated on 2025-02-17.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-03-24

Victim:   |  Group: 
BR flag

www.rivaldt.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 21:46

Sector: Technology
[AI generated] N/A

Victim:   |  Group: 
JP flag

OMLTD.CO.JP 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 21:45

Sector: Not Found
[AI generated] N/A

Victim:   |  Group: 
US flag

technicare.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 21:43

Sector: Technology
[AI generated] Technicare is a leading company that offers elite technology services primarily to the professional photography industry. It provides a wide range of top quality and professional products for photographers to choose from, including prints, wall art, boxed sets, and albums. The company also offers innovative software solutions for easier workflow and increased convenience for photography businesses.

Victim:   |  Group: 
US flag

cisd.org 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 21:42

Sector: Education
[AI generated] N/A

Victim:   |  Group: 
HU flag

mnm.hu 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 21:40

Sector: Technology
[AI generated] N/A

Victim:   |  Group: 
US flag

texascompressionservices.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 21:39

[AI generated] Texas Compression Services is a US-based company specializing in natural gas compression. They offer a wide range of services including system design, compressor leasing, sales, parts, and maintenance. Catering to diverse markets, they provide quality products & services to companies in energy, gas gathering and processing, and industrial sectors. With decades of combined experience, they aim to deliver reliable, safe, environmentally sound solutions.

Victim:   |  Group: 
SK flag

airexplore.aero 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 21:24

airexplore.aero

Victim:   |  Group: 
 flag

www.exemplar.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 20:46

Sector: Not Found
[AI generated] N/A

Victim:   |  Group: 
 flag

Wheels and Deals 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 20:43
Estimated Attack Date: 2025-03-07

Sector: Not Found
Wheels and Deals is a FREE 112 page automotive magazine located in Central Illinois. We are a local, family owned publishing group that’s been established since 1978. Wheels and Deals Magazine is published weekly and offered FREE at over 1, ...

Victim:   |  Group: 
US flag

TMT Clam Dredger 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 20:05

TMT Clam Dredger TMT Marine Terminal LLC South Jersey Surf Clam Address: manahawkin NJ 08050

Victim:   |  Group: 
US flag

allbiz.com 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 20:04

Sector: Technology
Sheermax LLC is located in New York City, and was founded in 2009. At this location, Sheermax LLC employs approximately 3 people. This business is working in the following industry: Other transport activities. Annual sales for Sheermax LLC are around USD 440,460.

Victim:   |  Group: 
ES flag

iberdrola.com (Spain energy) 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 19:55

Sector: Energy
iberdrola.com (Spain energy)

Victim:   |  Group: 
IT flag

studiocdlvallone.it 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 19:44

Sector: Not Found
We put commitment, curiosity, passion, optimism into our work every day, with a single important goal: to be satisfied, to learn something new every day with the challenges that our profession offers us. We love teamwork and each of us is called upon to make our qualities and skills available to the group. Excellence, as well as the limits of each of us, are enhanced and absorbed by the group, so

Victim:   |  Group: 
US flag

AmeriKen Die Supply, Inc 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 19:24
Estimated Attack Date: 2025-02-28

Packaging and Containers Manufacturing A leader and innovator in the die supply industry. Our team was successful in extracting the following documents: Personnel documents with information on employees Financial statements of the company Contact details of customers and employees The icing on the cake Non-disclosure agreements Driving licenses

Victim:   |  Group: 
US flag

Andrew Davidson & Co., Inc. 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 19:24
Estimated Attack Date: 2025-02-28

Financial Services Andrew Davidson & Co., Inc. is a leading provider of risk analytics and consulting to the mortgage-backed securities (MBS) and asset-backed securities (ABS) industry. Our team was successful in extracting the following documents: Contact details of customers and employees Financial statements of the company Insurance certificates

Victim:   |  Group: 
US flag

AeroWorx 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 19:24
Estimated Attack Date: 2025-02-28

Aviation and Aerospace Component Manufacturing AeroWorx has quickly grown to become a leading FAA repair station dedicated to the repair and overhaul of pneumatic, hydraulic, electromechanical and fuel systems & components. Our team was successful in extracting the following documents: Corporate internal documents and agreements Financial statements of the company The icing on the cake: Non-disclosure agreements Employee passports and other personal documents

Victim:   |  Group: 
US flag

Bunting Capital Management Inc 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 19:24
Estimated Attack Date: 2025-02-28

Finance Bunting Capital Management, located in Virginia Beach, is a team of financial advisors at Wealthway Financial Advisors who specialize in helping clients determine if they have enough resources and feel secure in their investment choices. Our team was successful in extracting the following documents: Corporate internal documents and agreements Employees medical documents Financial statements of the company Contact details of customers and employees

Group: 
US flag

California Gasket and Rubber Corporation 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 19:24
Estimated Attack Date: 2025-02-28

Aviation and Aerospace Component Manufacturing California Gasket and Rubber Corporation (CGR) was established in 1942 and is comprised of two manufacturing divisions (Gasket and Rubber) housed in a 50,000 square foot manufacturing facility. Our team was successful in extracting the following documents: Corporate internal documents and agreements HR documents Contact details of customers and employees Financial statements of the company Personnel documents with information on employees The icing on the cake: Passport scans

Victim:   |  Group: 
US flag

Community Management, Inc. 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 19:24
Estimated Attack Date: 2025-02-28

Business Consulting and Services CMI is an Oregon Corporation headquartered in Portland, Oregon. Kaye Youngren, its C.E.O. and Owner founded the company in 1972 under the name of Condominium Management, Inc. The name of the company was changed in 1993 to Community Management, Inc., to more accurately reflect the broad base of clients CMI serves. Our team was successful in extracting the following documents: Contact details of customers and employees Financial statements of the company Internal company correspondence Employee insurance documents HR documents The icing on the cake: Driver licenses

Victim:   |  Group: 
GB flag

Ellis Glass and Mirror Ltd 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 19:24
Estimated Attack Date: 2025-03-03

Sector: Construction
Construction Ellis Glass and Mirror Ltd has been supplying contractors, professionals, and homeowners with glass and mirror products for over 55 years. Our team was successful in extracting the following documents: Corporate inspection results Disciplinary action forms Financial statements of the company Contact information of clients and employees Credit card numbers with security codes

Victim:   |  Group: 
US flag

Texas Fifth Wall Roofing Systems 

Company logo
Ransomware Group:

Discovery Date: 2025-03-24 19:24
Estimated Attack Date: 2025-03-03

Sector: Construction
Construction Texas Fifth Wall Roofing Systems, founded in 1973, works with builders, tenants, owners, and their teams to protect assets and maximize capital investments by delivering the industry’s highest value through its roofing solutions. Our team was successful in extracting the following documents: Financial statements of the company Employee insurance certificates Human Resources documents Contact information of clients and employees

Victim:   |  Group: 
Next