Last Ransomware victims

Sponsored by Hudson RockUse Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business


Groups

0


Victims

0


Victims this month

0


Victims this year

0
This page lists the latest 100 ransom claims detected by Ransomware.live. We continously scrape ransomware group sites to detect new victims.
Ransomware.live has been tracking ransomware's victims since April 2022.


Ransomware.livedoes not exfiltrate, download, host, repost, or disclose any stolen data. Any legal concerns regarding the content should be directed at the attackers, notRansomware.live. This platform is dedicated to cybersecurity awareness, reporting on ransomware incidents to inform the public.Ransomware.liveoperates independently, with no affiliation or alignment with any ransomware groups, and does not host or distribute infringing content. All information is automatically gathered and redacted from publicly accessible sources, including ransomware leak sites on the dark web.




View summary page

BR flag

Sinalisa Segurança Viária Ltda 

Company logo
Ransomware Group:

Discovery Date: 2025-04-21 12:42

Sector: Not Found
Sinalisa Segurança Viária Ltda Sinalisa's history began about four decades ago when the company was founded by the Ypiranga S/A group in 1971 in Rio de Janeiro. In 1982, it was acquired by the ERITRAM group and its headquarters were transferred to the capital of São Paulo. In November 2000, it moved to its current address in the Mooca neighborhood. A pioneer in the Brazilian road marking market, Sinalisa is a forerunner in lane marking painting with solvent-based acrylic paints, water-emulsified acrylic paints, high-thickness emulsified acrylic paints, conventional and high-relief thermoplastics, smooth, structured and embossed two-component methyl methacrylates. With outstanding performance throughout the national territory in the implementation of horizontal and vertical signage and Intelligent Transportation Systems (ITS), the company has modern equipment for the application of all painting systems. Its scope of work is to prioritize services that aim to improve the safety of road users, through quality and good production performance. Sinalisa performs painting services on highways, urban roads, cycle paths and airports.Geo: Brazil - Leak size: 43 GB Archive - Contains: Files

Group: 
BE flag

Pharma Force 

Company logo
Ransomware Group:

Discovery Date: 2025-04-21 11:37

Sector: Healthcare
Exfiltraded data : yes - Encrypted data : no

Victim:   |  Group: 
IT flag

tuttoperlufficio.eu 

Company logo
Ransomware Group:

Discovery Date: 2025-04-21 11:11

Sector: Not Found
E' definito molto più di un registratore di cassa. Nettun@ 3000 Touch Olivetti effettivamente concede agli esercenti una serie di opportunità che altri prodotti, ugualmente moderni e originali, non offrono. Il suo design innovativo, le dimensioni com...

Victim:   |  Group: 
FR flag

Accueil - Site Offciel de la commune d'Ardon 

Company logo
Ransomware Group:

Discovery Date: 2025-04-21 02:42
Estimated Attack Date: 2025-04-15

Accueil - Site Offciel de la commune d'Ardon

Victim:   |  Group: 
US flag

The Michelson Organization 

Company logo
Ransomware Group:

Discovery Date: 2025-04-21 01:49
Estimated Attack Date: 2025-04-19

Sector: Not Found
Michelson Commercial Realty and Development L.L.C. and Knapp Development have managed the development of Sumner Park since its inception. The development team has extensive experience in developing real estate on a national basis. Since 1927, ...

Victim:   |  Group: 
ZA flag

Premier Meats South Africa 

Company logo
Ransomware Group:

Discovery Date: 2025-04-20 16:51

(90k USD)

Group: 
 flag

Feel Four 

Company logo
Ransomware Group:

Discovery Date: 2025-04-20 16:50

Sector: Not Found
60k USD

Group: 
SG flag

Singapour Victim 

Company logo
Ransomware Group:

Discovery Date: 2025-04-20 15:19

Sector: Not Found
(To be discoled)

Group: 
 flag

Honk Kong Victim 

Company logo
Ransomware Group:

Discovery Date: 2025-04-20 15:19

Sector: Not Found
(To be discoled)

Group: 
CN flag

China Harbour Engeneiring Company 

Company logo
Ransomware Group:

Discovery Date: 2025-04-20 15:19

Sector: Construction
450k USD

Group: 
US flag

Iris ID 

Company logo
Ransomware Group:

Discovery Date: 2025-04-20 07:26
Estimated Attack Date: 2025-04-16

Sector: Technology
Iris ID Systems develops, markets, sells, and distributes iris recognition technology products worldwide. The company also offers access control, time and attendance, public safety and justice, transportation and immigration, and national identity solutions. Iris ID Systems was founded in 1997 and is based in Cranbury, New Jersey.

Victim:   |  Group: 
 flag

City of Grove 

Company logo
Ransomware Group:

Discovery Date: 2025-04-20 07:24
Estimated Attack Date: 2025-04-16

City of Grove is a company that operates in the Government industry. It employs 10to19 people and has 500Kto1M of revenue. The company is headquartered in Grove, Oklahoma.

Victim:   |  Group: 
US flag

Lithium Americas Nevada 

Company logo
Ransomware Group:

Discovery Date: 2025-04-20 07:21
Estimated Attack Date: 2025-04-16

Sector: Energy
Lithium Americas Corp. engages in the exploration and development of lithium properties in the United States and Canada. Lithium Americas corporate office is located in 3260-666 Burrard St, Vancouver, British Columbia, V6C 2X8, Canada and has 500 employees.

Victim:   |  Group: 
CA flag

MRC de Maskinongé - district 

Company logo
Ransomware Group:

Discovery Date: 2025-04-20 07:20
Estimated Attack Date: 2025-04-19

MRC de Maskinongé - district, unites 17 municipalities with an area of ​​more than 2,600 square kilometers. MRC de Maskinongé district office is located at 760 Saint Laurent Blvd E, Louiseville, Quebec, J5V 1H9, Canada and has 83 employees. The total amount of data leakage is 713.20 GB

Victim:   |  Group: 
DE flag

FAKO-M Getränke 

Company logo
Ransomware Group:

Discovery Date: 2025-04-20 05:47

Sector: Not Found
FAKO-M Getränke We, the Fako-M Group, see ourselves as a partner to the hospitality industry, retail, and end consumers. In our delivery area of ​​North Rhine-Westphalia, we supply you with a comprehensive product range of over 7,000 items from the beverage, wine, spirits, coffee, and hygiene product categories. Our comprehensive offering is rounded out by services such as vending machine operation (cold and hot beverage, snack, and confectionery vending machines), event equipment, dispensing technology, financing advice, and leasing.Geo: Germany - Leak size: 446 GB Archive - Contains: Files, SQL

Group: 
TW flag

ChangShen Hospital, Taiwan 

Company logo
Ransomware Group:

Discovery Date: 2025-04-19 15:36
Estimated Attack Date: 2025-04-13

Sector: Healthcare
ChangShen Hospital (長慎醫院), Taiwan

Victim:   |  Group: 
BR flag

​​​​bettininformatica - suporteon company 

Company logo
Ransomware Group:

Discovery Date: 2025-04-19 04:46
Estimated Attack Date: 2025-04-16

Sector: Technology
​​​​​​​​BThe website bettininformatica.com.br belongs to Bettin Soluções em Informática, a technology company based in Marília, São Paulo, Brazil. They offer services such as computer maintenance...

Victim:   |  Group: 
 flag

Z****a.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-19 02:03

Sector: Not Found
To the Leadership Of S*****r We have gained access to your main system, Z*****a.com and took backup of all data. […]

Victim:   |  Group: 
US flag

April, 18, 2025: Independent Title Agency, LLC ("ITA") (USA hacked. 932.4 GiB is for selli... 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 16:50

[AI generated] N/A

Victim:   |  Group: 
US flag

Independent Title Agency, LLC ("ITA") (USA) 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 16:49

[AI generated] ITA (Independent Title Agency, LLC) is a US-based company specialized in providing comprehensive title insurance services. They ensure a property title is legitimate, protecting potential homebuyers and mortgage lenders from financial loss due to title defects such as fraud or errors. The agency may also facilitate closing of real estate transactions.

Victim:   |  Group: 
 flag

Agencia Browne y Espinoza 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 16:15

Sector: Not Found
Agencia Browne y Espinoza is an accounting company based out of 8 12 Huérfanos, Santiago, Chile. We are ready to upload more than 37 GB of essential corporate doc uments such as: a lot of clients financial data (audits, payment details, reports), corporate NDA’s, confidential personal details , etc.

Group: 
DE flag

Heinz Hammer Vertragswerkstatt (Mercedes-Benz car dealer) 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 16:15

Heinz Hammer Vertragswerkstatt offers customized mobility and ser vice packages and have access to a nationwide pool of new, used M ercedes-Benz vehicles. We are ready to upload more than 40 GB of essential corporate doc uments such as: contact numbers and e-mail addresses of customers , employee files, financial data (payment details, reports, lots of invoices), contracts containing personal data, etc.

Group: 
 flag

dhsmithco.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 15:32
Estimated Attack Date: 2025-04-15

Sector: Not Found
dhsmithco.com is a company that operates in the Commercial & Residential Construction industry. It employs 50to99 people and has 1Mto5M of revenue.

Victim:   |  Group: 
ES flag

[EVIDENCE PACK 2] Telecontrol 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 14:44
Estimated Attack Date: 2025-04-01

Sector: Technology
One of Telecontrol’s main objectives is to fully meet the client’s needs by delivering services with the utmost care and professionalism, with a view to continuous quality improvement, while respecting the environment and the Health and Safety of its staff.

Victim:   |  Group: 
CH flag

Bosshard-farben.ch 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 14:25

[AI generated] "Bosshard-farben.ch" is a Swiss company specializing in the sale of floor and wall paints. In addition to interior and exterior paints, they offer lacquers, glazes, plasters, and other painting supplies. They also provide additional products for floor, wall and ceiling design. Renowned for their comprehensive selection, they cater to both professional painters and DIY enthusiasts.

Victim:   |  Group: 
 flag

Pe*************.lk 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 14:25

Sector: Not Found

Group: 
 flag

Orl***********.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 14:25

Sector: Not Found

Group: 
 flag

pea**********.uk 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 14:25

Sector: Not Found

Group: 
 flag

Pc***********.org 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 14:25

Sector: Not Found

Group: 
US flag

Hubbard, McIlwain, &Brakefield, P.C. 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 14:16

Sector: Not Found
Hubbard, McIlwain, & Brakefield, P.C. is one of the most well-res pected and successful firms in Alabama. We are ready to upload more than 4 GB of data. Not much but inter esting: trial documents, a lot of client data such as financials, personal docs, etc.

Group: 
 flag

farma 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 13:43

Sector: Healthcare
Farmacias Del Pueblo is a company that operates in the Drug Stores & Pharmacies industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in Neuquen, Neuquen Province, Argentina.

Victim:   |  Group: 
IE flag

www.monaghan.eu 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 13:41

Monaghan Group is a company that operates in the Grocery Retail industry. It employs 250to499 people and has 100MMto250M of revenue. The company is headquartered in Monaghan, Ulster, Ireland.At Monaghan, we're driven by a passion for sharing ...

Victim:   |  Group: 
DE flag

Tänzer GmbH 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 13:15

Sector: Not Found
Tänzer GmbH offers their customers an ever-growing range of repai r services since 1990. We are ready to upload more than 13 GB of corporate documents suc h as: information about employees and customers, a bit of persona l files, financial data, projects data,etc.

Group: 
JP flag

Toppan Next 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 13:15

Sector: Technology
TOPPAN NEXT empowers businesses with the confidence to safeguard high-risk digital and physical information & products. But fails ... We are ready to upload more than 12GB of essential corporate docu ments such as: personal information of employees, customers data, financial data (audits, payment details, reports, credit cards d etails), contracts and agreements, corporate NDA’s, etc.

Group: 
PT flag

Global Media Group 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 12:46

Sector: Not Found
Global Media Group (Global Media) is a Portuguese media holding company, owning a portfolio of print and online media outlets, including newspapers and radio stations.

Victim:   |  Group: 
US flag

Hayward Quartz Technology 

Company logo
Ransomware Group:

Discovery Date: 2025-04-18 11:47

Hayward Quartz Technology started in Hayward California with a si mple goal of supporting quartz fabricators with high quality mach ined quartz products. We are ready to upload more than 50 GB of corporate documents suc h as: employee details, financial data, corporate NDA, etc.

Group: 
US flag

Wilmington Personal Injury Lawyer - DPLAW 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 23:42
Estimated Attack Date: 2025-04-14

Wilmington Personal Injury Lawyer - DPLAW(US)

Victim:   |  Group: 
US flag

Compliance Consulting Group 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 23:42
Estimated Attack Date: 2025-04-11

Compliance Consulting Group (US)

Victim:   |  Group: 
US flag

Mid-America POOL RENOVATION, Inc 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 23:41
Estimated Attack Date: 2025-04-04

Mid-America POOL RENOVATION, Inc (US)

Victim:   |  Group: 
US flag

1sthealthinc.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 22:11

Sector: Healthcare
1st Health Inc provides world-class care to individuals involved in automobile accidents. We provide prompt, professional medical care, from X-Rays and massage to therapeutic modalities. To make your life easier after an accident, we'll even ...

Victim:   |  Group: 
 flag

Sally B Gold 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 21:59

Sector: Not Found
Law Offices of Sally B. Gold, LLC is a law firm based in downtown Baltimore, Maryland, founded in 1992. The firm focuses primarily on family law, including prenuptial agreements, divorce, alimony, child custody, separation agreements, and domestic violence cases.

Victim:   |  Group: 
US flag

accesssmt.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 18:12

Sector: Technology
Founded in 1964, AccessSMT Holdings is a leading supplier, installer, and project management company that offers hardware, doors, frames, and building materials for the commercial, residential sectors. AccessSMT Holdings is located in Canada. ...

Victim:   |  Group: 
CZ flag

HOPI 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 17:04

Sector: Not Found
Exfiltraded data : yes - Encrypted data : no

Victim:   |  Group: 
CN flag

Enflame Technology 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 14:18

Sector: Technology
N/A

Victim:   |  Group: 
US flag

yankeetrails.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 10:49

In 1957, Yankee Trails opened its doors with the goal of providing safe, affordable motor coach transportation to patrons in and around Upstate New York. Shuttle service between Albany and Vermont put the company on the map and continues to o ...

Victim:   |  Group: 
US flag

universalwindow.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 10:47

Universal Window and Door, LLC engages in the design, manufacture, and supply of custom window solutions for historic restoration and new commercial construction projects. The company offers steel replica, historic, projected/casement, double ...

Victim:   |  Group: 
US flag

bertie.k12.nc.us 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 09:18
Estimated Attack Date: 2025-04-09

Sector: Education
Bertie County Public Schools is committed to ensuring that every child in our community receives the best possible education. We are dedicated to nurturing and supporting our students from Pre-K to 12th grade, providing them with the resource ...

Victim:   |  Group: 
US flag

Kaye Lifestyle Homes 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 08:32

Sector: Construction
Kaye Lifestyle Homes Since its establishment in 1985, Kaye Lifestyle Homes has built a vast number of homes for families, bringing happiness and satisfaction to thousands of homeowners. With more than 4,000 unique homes under our belt, we take pride in being the leading family-owned home builder in Southwest Florida. Our homes are tailored to fit the lifestyle of each family, and we are delighted to hear how our clients’ homes have exceeded their expectations.Geo: USA - Leak size: 521 GB Archive - Contains: Files, SQL, Exchange

Group: 
IT flag

TRALFO Srl Trasporti e Spedizioni 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 08:32

TRALFO Srl Trasporti e Spedizioni The company was founded in Abruzzo in 1970 thanks to the dedication of the Fonzi family . In 1992 the Fonzi brothers created TRALFO , an acronym for TRA sporti & L ogistica FO nzi Thanks to a deep knowledge of the sector, as well as the passion and entrepreneurial foresight of the owners, after thirty years, Tralfo has established itself as a solid reality in the world of logistics and road transport, guaranteeing professionalism, experience and cutting-edge services offered. Today Tralfo can count on a collective of approximately 250 employees (coming from different nations such as: Albania, Ukraine, Pakistan, Morocco, Colombia, France, Germany, Switzerland, Cape Verde, Sri Lanka, Canada, Bulgaria, Poland, Belgium, Turkey ), divided between administrative managers, logistics operators and drivers, as well as a total of 40,000 m2 of warehouses.Geo: Italy - Leak size: 34 GB Archive - Contains: Files

Group: 
 flag

Schultz Industries Inc. 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 08:32

Sector: Not Found
Schultz Industries Inc. Schultz Industries, Inc. is lacally owned and operated complete landscape maintenance and installation company. Our focus is commercial properties such as retail centers, apartment complexes, office parks, municipalities and homeowner associations. Our employees are professionally certified in arboriculture, chamical application, irrigation audits, and many other specialties. They are also trained on new topics every week, and of coarse they are reminded every day of our company's mission statement: "Every employee committed to exceeding the client expecations"Geo: USA - Leak size: 61 GB Archive - Contains: Files

Group: 
GB flag

Manchester Credit Union 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 08:32

Manchester Credit Union Manchester Credit Union offers ethical and affordable financial services, including personal loans and savings opportunities, catering primarily to local residents. The organization emphasizes community involvement, providing members with a share in ownership and earning dividends on their savings. They also offer a mobile app for convenient money management, and various educational initiatives aimed at promoting financial literacy. With over 30,000 members, the credit union is committed to supporting individuals and communities while keeping financial services accessible.Geo: United Kingdom - Leak size: 6 GB Archive - Contains: Files,SQL

Group: 
TW flag

Ju Percussion Group 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 08:32

Sector: Not Found
Ju Percussion Group To date, the group has played in 33 different countries around the world, and cultivated more than 130,000 percussion learners by means of its instruction system. The growth of the Ju Percussion Group is a reflection of the development of contemporary percussion on the island of Taiwan. In 1986, the Ju Percussion Group met at a hot pot restaurant in Taipei and announced to the world that Taiwan's very first professional percussion band had been born. When the Ju Percussion Group was first established, most people in Taiwan were unfamiliar with its percussion music genre. Thanks to the group's activities, however, the Ju Percussion Group soon became a household name throughout the island. In 1991, the Ju Percussion Group introduced its instruction system, which swept the country with its absorbing and authentic teaching format. At present, there are 30 existing percussion music schools around the worldGeo: Taiwan - Leak size: 1.6 TB Archive - Contains: Files

Group: 
ES flag

VIÑUELAS ABOGADOS 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 07:10
Estimated Attack Date: 2025-04-12

In times when transversality and multifunctionality are seen as assets that seemingly reinforce the quality of the professional services offered, at VIÑUELAS ABOGADOS, since our inception in 1987, we have presented ourselves as what we are and what we want to continue to be: A LAW FIRM.Our objective is none other than to defend our clients' interests in the legal field, avoiding actions that transcend and exceed the scope of our knowledge and experience.- Legal information of clients- Database- Financial documents- Personal information of employees and clients https://www.xn--viuelasabogados-zqb.es/

Victim:   |  Group: 
TW flag

EVERTECH INSTRUMENTAL CO., LTD 

Company logo
Ransomware Group:

Discovery Date: 2025-04-17 07:09
Estimated Attack Date: 2025-04-15

Sector: Technology
Ever Tech Instrumental(ETI) has been a professional technologies agent in FPD industry over two decades. We are dedicated to importing SEMI/FPD related materials and equipments , New advanced materials, Optical and Analytical instruments from Japan and Korea.- Database- Financial documents- Personal information of employees and clients https://en.evertech.com.tw/

Victim:   |  Group: 
DE flag

itec-gmbh.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 23:32

Sector: Technology
[AI generated] ITEC GmbH is a German-based company specializing in civil engineering and construction. They offer expertise in project management, planning, supervision and construction services for both private and public sectors. Their scope of service includes roads, bridges, infrastructure and environmental development. The team’s professionals ensure compliance with safety, budgetary, and performance standards.

Victim:   |  Group: 
DE flag

heinrich-steinhardt.de 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 23:30

Sector: Not Found
[AI generated] N/A

Victim:   |  Group: 
DE flag

hurst-schroeder.de 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 23:28

Sector: Not Found
[AI generated] N/A

Victim:   |  Group: 
UK flag

helixtools.co.uk 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 23:27

[AI generated] Helix Tools provides high-quality tooling solutions for the engineering industry. Located in the UK, the company specializes in offering a wide range of tools including, but not limited to, drill bits, end mills, threading tools, and milling tools. They pride themselves on their comprehensive selection, exceptional customer service, and competitive pricing.

Victim:   |  Group: 
DE flag

heilbronn.de 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 23:27

[AI generated] N/A

Victim:   |  Group: 
DE flag

getriebetech.de 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 23:26

[AI generated] "Getriebetech.de" is based in Germany and functions as a provider of exceptional transmission technology services. Their offer ranges from automatic, manual, CVT to DSG transmissions. Their team of expert engineers conduct comprehensive repairs and maintenance on these transmissions. They pride themselves on delivering quality workmanship, using cutting-edge equipment for diagnostics and resolution of complex transmission issues. They serve both private car owners and partners in the automotive industry.

Victim:   |  Group: 
DE flag

kirkel.de 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 23:25
Estimated Attack Date: 2025-03-16

Sector: Not Found
[AI generated] N/A

Victim:   |  Group: 
AU flag

extremefire.com.au 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 23:24

Sector: Not Found
[AI generated] Extreme Fire Solutions is an Australian company that specializes in fire protection services. They are experts in designing, installing, and maintaining fire safety systems. They provide a wide range of services including fire sprinkler systems, fire extinguisher supply and maintenance, fire detection and alarm systems, and fire safety training.

Victim:   |  Group: 
DE flag

foerster-schwanau.de 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 23:23

Sector: Not Found
[AI generated] N/A

Victim:   |  Group: 
DE flag

eichele-bau.de 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 23:22

Sector: Construction
[AI generated] N/A

Victim:   |  Group: 
DE flag

frapack.de 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 23:22

[AI generated] Frapack.de is a German company specialized in the distribution and production of packaging materials. Their product range includes plastic and paper packaging, bags, industrial packaging materials, and packaging for food & beverages. They cater to both large-scale industrial needs and smaller commercial requirements. They're dedicated to providing sustainable, high-quality, custom packaging solutions for various industries.

Victim:   |  Group: 
CN flag

aqhch.com.cn 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 21:38

Sector: Not Found
Heng Chang Machinery Co., Ltd (HCH), founded in 1988, is a leading world-class professional manufacturer of complete production lines for disposable hygiene products.

Victim:   |  Group: 
NL flag

Koninklijke Ahold Delhaize N.V. 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 21:34

The family of Ahold Delhaize serve 72 million customers every week in the United States, Europe and Indonesia. Each brand shares a passion for delivering great food, value and innovations, and for creating inclusive workplaces that provide rewarding professional opportunities. Ahold Delhaize become a victim of the largest data breach. 6TB sensitive data will be published soon in our blog.

Victim:   |  Group: 
DE flag

niemann.de 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 19:26
Estimated Attack Date: 2025-04-07

Sector: Not Found
[AI generated] Niemann.de is a German company known as Niemann Möbelteile, which translates to Niemann Furniture Parts. Niemann.de manufactures high-quality surfaces and board materials, mainly distributing its products for interior and furniture design practices. It provides a variety of design options including high gloss and super matte finishes amongst others.

Victim:   |  Group: 
 flag

www.nelson.edu 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 19:16

Sector: Education
Data from Nelson University contains thousands of personal employee and students records. All data will be published fully on 24 April 2024. If management of University will not pay ransom .Nelson is a publisher of educational products. They ...

Victim:   |  Group: 
IT flag

​​​​Bio-Clima Service 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 18:38

​​​​​​​​Bio-Clima Service Srl, an Italian company based in Bernareggio, Lombardy, specializing in the technical assistance, maintenance, and...

Victim:   |  Group: 
US flag

Red Chamber 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 18:36

Sector: Not Found
United States

Victim:   |  Group: 
DK flag

d-line-it.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 18:35

Sector: Technology
UK - d-line

Victim:   |  Group: 
US flag

jackpotjunction.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 18:08
Estimated Attack Date: 2025-03-31

Cash in on big wins this tax season! Every hour from 5 - 9 pm, one lucky winner will snag $1,040 in CASH or Free Play! Earn just 25 points, print your voucher at a kiosk, and drop it in the drawing barrel for your shot at a hefty payout!

jackpotjunction.com has been previously claimed by Ransomhub for an attack estimated on 2025-03-31.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-04-16

Victim:   |  Group: 
IT flag

Lamberti Group 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 17:44

The Lamberti Group produces chemical specialties for a broad rang e of applications. We are ready to upload essential corporate documents such as: det ailed financial information, employee personal information, proje cts, customers data, corporate NDA’s, etc.

Group: 
 flag

Feldman & Lopez 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 17:05

Sector: Not Found
Feldman & Lopez, P.A. is a boutique law firm located in the heart of South Florida. Feldman & Lopez, P.A. was established in 2015 by a young female team of insurance experts, eager to provide Floridians with high quality civil and insurance litigation services. This boutique firm offers state-wide professional services to all residents of Florida and their assignees, personalized to meet every one of their clients' needs. Feldman & Lopez has a wide range of expertise in handling all post loss claims for their clients who have the appropriate coverages under their homeowner insurance policy. In addition, the firm handles all aspects of water and/or mold remediation claims and the invoices that go along with them based off validly executed assignment of benefits. In an age where the insurance industry rules our pocket books, rest assured that Feldman & Lopez will protect your rights and benefits when your insurance company tries to wrongfully deny or underpay your property damage claims.

Victim:   |  Group: 
US flag

Hyalogic 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 17:04

Sector: Healthcare
Hyalogic, the leader in premium high molecular weight hyaluronic acid, offers joint care supplements for humans and animals, as well as a full line of skin care and personal care products made with premium hyaluronic acid (HA). Also known as hyaluronan or hyaluronate, HA supports healthy joints and has numerous skin, hair, nail, and eye moisturizing benefits. Our product line includes liquid oral supplements, lozenge supplements, and topical skin care products under the well known names: Synthovial Seven and Episilk, Hyalun for your horse and HyaFlex for your dog or cat.

Victim:   |  Group: 
BR flag

aeamg.org.br 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 16:57

Sector: Not Found
Greetings! Today we are posting here the new company, "AEA-MG". Company Description: AEA-MG (Association of Electricians and Employees of CEMIG and its Subsidiaries) was founded on 29 January 1983 by a group of electricians who recognized the n...

Victim:   |  Group: 
BO flag

ende.bo 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 16:56

Sector: Not Found
Greetings! Today we are posting here the new company, "Empresa Nacional de Electricidad". Company Description: The National Electricity Company (ENDE) is a corporation of the Plurinational State, whose main objective and strategic role is to pa...

Victim:   |  Group: 
US flag

Dale Partners Architects 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 16:13

Sector: Construction
Dale | Bailey, an Association is a joint venture of Bailey Archit ecture Education, P.A.and Dale Partners Architects P.A. The assoc iation was formed in August 2008 to create a firm with unsurpasse d experience in educational facility planning, design and constru ction. We are ready to upload over 148 GB of essential corporate documen ts such as: contact numbers and e-mail addresses of employees and partners, employee personal files, detailed financial data (audi ts, payment details, reports), corporate NDA’s, etc.

Group: 
GR flag

Anfarm Hellas 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 16:13

Sector: Not Found
ANFARM is a manufacturer of generic pharmaceutical formulations f or human use. The company sells its products to 31 countries and acts as third party manufacturer to 45 clients. We are ready to upload more than 35 GB of essential corporate doc uments such as: contact numbers and e-mail addresses of governmen ts(!) of a few countries like Portugal, Spain and a few others (i f somebody is interested), detailed financial data (audits, payme nt details, reports), corporate NDA’s, employee personal informat ion, clients data, etc.

Group: 
BR flag

D'Granel 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 14:14

D'Granel is a transportation company that offers logistics, fleet management, and cargo transportation services. We are ready to upload more than 40 GB of essential corporate doc uments such as: financial data (audits, payment details, reports) , lots of confidential documents, corporate NDA’s, contact number s and e-mail addresses of employees and customers etc.

Group: 
CA flag

Afa Systems Ltd. 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 12:55
Estimated Attack Date: 2025-02-13

Sector: Technology
Revenue: $37.2 million Type: Industry Size: 1,1 TBytes

Victim:   |  Group: 
TW flag

shengyusteel.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 12:53
Estimated Attack Date: 2025-04-08

Revenue: $431.6 million Type: Manufacturing Size: 353,9 GBytes

Victim:   |  Group: 
CA flag

semex.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 12:52
Estimated Attack Date: 2025-04-15

Revenue: $170 million Type: Research Size: 214,2 GBytes

Victim:   |  Group: 
 flag

McElwee Firm 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 10:05
Estimated Attack Date: 2025-04-15

Sector: Not Found
McElwee Firm PLLC is a company that operates in the Law Firms & Legal Services industry. It employs 5to9 people and has 1Mto5M of revenue. The company is headquartered in North Wilkesboro, North Carolina.

Victim:   |  Group: 
IT flag

govonisabbiatrici 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 09:38

Sector: Not Found
Company designs and manufactures machines and systems of sandblasting, as well as dust extraction systems, Sorting and conveying devices for metal abrasives and silica sands, partial and total recovery devices for large cabins and soundproofi ...

Victim:   |  Group: 
 flag

KraftKisarna 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 08:27
Estimated Attack Date: 2025-04-14

Sector: Not Found
We at KraftKisarna mainly carry out electrical control and fire alarm installations, and maintain railways and train stations around Sweden. We also carry out complete electrical installations in infrastructure, lighting and power in track and track-related environments, associated peripheral areas such as walking – cycle paths and welcoming green areas. Also bridge, tunnel and platform work. Our staff has good experience and is specially trained to work safely on track and track environments. Despite our young age as a company, we have been able to carry out a large number of projects in the field of railways throughout Sweden. Our primary end customers are the Swedish Transport Administration, municipalities and industries.

Victim:   |  Group: 
US flag

Pryor Morrow 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 08:25
Estimated Attack Date: 2025-04-14

Sector: Construction
Pryor Morrow is a firm specializing in architecture, engineering, and interior design, focused on serving schools, governments, and recreational facilities. With a commitment to building strong relationships, the company prioritizes client needs and aims to create impactful community spaces that enhance people's lives. Their experienced team, boasting over 200 years of combined experience, strives to deliver exceptional results while mentoring the next generation of designers. By designing innovative structures, they aim to leave a lasting legacy for future generations.

Victim:   |  Group: 
CA flag

Pratt Homes 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 08:24
Estimated Attack Date: 2025-04-14

Sector: Construction
Check out the videos below to learn more about our home selection, design, and building processes. Our company has always been a family affair ever since Uncle Doug moved into the first official Pratt Home in Scandia in 1973. Each newly married and with student loans to pay off, brothers Len and Lowell banded together, determined to create a legacy. They hired relatives and school friends as their business grew through the first start-up years. Now, nearly 1,000 families have chosen to make their dream homes with us, and we feel a deep sense of pride knowing that each home was built to our high standards and with our philosophy of quality construction and customer satisfaction. In 1976, the Pratts began the development side of their business with five homes in Forest Lake. Three years later, they commenced with their first large-scale project: Birch Lake Woods, building over 60 single family homes and 128 multiple condo units in White Bear Lake.

Victim:   |  Group: 
US flag

Setpoint Systems 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 08:22
Estimated Attack Date: 2025-04-15

Sector: Technology
Setpoint Systems is a lean automation integration firm providing engineering, design, build, and controls experts for turn key custom automated solutions using the Toyota Production System (TPS) methodology. Since 1992 Setpoint has designed, manufactured, and marketed automated manufacturing equipment to increase productivity and quality for companies in a variety of industries. Setpoint has developed a methodology and system that mitigates customers risk and maximizes the customers return on investment.

Victim:   |  Group: 
US flag

Pawnee Heights Unified School District 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 08:21
Estimated Attack Date: 2025-04-14

Sector: Education
Pawnee Heights Unified School District ( founded 1949 ) a school district located in Rozel, Kansas. It provides academic services from elementary and secondary level. Pawnee Heights Unified School District corporate office is located in 100 Grand, Rozel, Kansas, 67574, United States and has 129 employees. The total amount of data leakage is 498.10 GB

Victim:   |  Group: 
DE flag

iblinfo.de 

Company logo
Ransomware Group:

Discovery Date: 2025-04-16 03:25

Sector: Technology
ibL – Ingenieurbüro für Landentwicklung GmbH – based in Halle (Saale) is a consulting and planning engineering firm that operates primarily in rural areas. Our work focuses on planning services for land development using geodata. In selected regions, we act as a suitable agency for determining and reorganizing the ownership of land and buildings based on Section 99 (2) of the Land Consolidation Act and Section 53 of the Agricultural Adjustment Act. ===> Phone Number: 0345 233 410 Revenue: $5 Million Industry: Engineering Employees: 25 Data: 56gb

Victim:   |  Group: 
US flag

a-1freeman 

Company logo
Ransomware Group:

Discovery Date: 2025-04-15 22:17

A company is only as strong as its roots, and A-1 Freeman Moving Group's roots are firmly planted in a culture of honesty, integrity, and hard work. In 1974, Jim Freeman founded A-1 Freeman Moving Group in Oklahoma City, OK on a belief that h ...

Victim:   |  Group: 
US flag

Astra Products 

Company logo
Ransomware Group:

Discovery Date: 2025-04-15 20:39

Sector: Not Found
Astra Products of Ohio is a supplier to the window covering industry. We do not fabricate or install window coverings. We offer products that allow for our customers to fabricate window coverings that meet the ANSI/WCMA A100.1-2022 standards. We are committed to continue our search for new, child safe products to offer our customers.

Victim:   |  Group: 
US flag

Lake HVAC 

Company logo
Ransomware Group:

Discovery Date: 2025-04-15 20:38

Sector: Construction
Lake HVAC was founded in 1975. For more than 40 years, Lake HVAC has built and maintained quality HVAC systems for industrial, commercial, institutional and high tech/biotech clients in Massachusetts and New Hampshire. We work with general contractors, developers, facilities departments and engineering firms to ensure that our clients receive efficient, reliable, and cost-effective solutions for their HVAC systems. Our professional experience in HVAC installation, service and design ensures your project will maintain long-term functionality, efficiency and return on facility investment.

Victim:   |  Group: 
NO flag

ARRCO LSM 

Company logo
Ransomware Group:

Discovery Date: 2025-04-15 19:17

Sector: Not Found
ARRCO – Lights Sound Magic is a professional event technology company based in Hamar, Norway. They specialize in providing comprehensive solutions for events, including sound,...

Victim:   |  Group: 
US flag

www.clubcar.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-15 19:15
Estimated Attack Date: 2024-12-22

Club Car boasts a 60+ year history of industry-leading innovation and design, initially focused on golf cars and then expanding to commercial utility vehicles and personal-use transportation. Every detail of design, fabrication and assembl ...

Victim:   |  Group: 
DE flag

toolsign.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-15 17:40
Estimated Attack Date: 2025-03-15

Sector: Not Found
toolsign GmbH is a company that operates in the Consumer Services industry. It employs 10to19 people and has 1Mto5M of revenue. The company is headquartered in Neusorg, Bavaria, Germany.

Victim:   |  Group: 
US flag

spscompanies.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-15 17:38

Founded in 1951 and headquartered in St Louis Park, Minnesota, SPS Companies is a wholesale distributor of products and services for use by both residential and commercial contractors. The company focuses on plumbing, mechanical and industrial piping, heating, ventilation, and more.

Victim:   |  Group: 
US flag

nevadareadymix.com 

Company logo
Ransomware Group:

Discovery Date: 2025-04-15 17:37

Sector: Construction
Nevada Ready Mix was founded in 1960. The company offers concrete for residential foundations, public works, golf courses, and heavy highway projects. It is headquartered in Nevada, United States.

Victim:   |  Group: 
Next