settra
ransomware group · aka Settra · unknown · active since 2026-06-26 (first leak-site activity tracked by this dashboard; any earlier activity unknown)
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
36
All-time (tracked)
36since 2026-06-26
Last post
08-11 16:26UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Settra is a data-extortion operation whose leak site was first tracked on 2026-06-26, listing 36 victims through 2026-08-11 with steady activity (6 victims in the past 30 days). Its listed victims span the United States, United Kingdom, Germany, the Netherlands, and Australia across manufacturing, financial services, hospitality, and professional services. Press reporting in 2026 described a 'Ransom Busters' operation claiming to have hacked ransomware operators' servers and to be contacting victims directly with demands of up to $60,000; whether Ransom Busters is an alias of Settra, a partner, or a third party targeting Settra's victims is unclear from available reporting. Initial access vectors, tooling, and any file-encryption component are not documented in public reporting. No public earnings estimates exist; the only disclosed financial figure is the reported maximum demand of $60,000 (press reporting, 2026).
Tactics & tooling
- Data theft with leak-site posting used as extortion leverage; use of an encryptor unconfirmed (unknown)
- Direct outreach to victims with reduced ransom demands of up to $60,000 (press reporting, 2026, tied to Ransom Busters claims)
- Claimed compromise of ransomware operators' servers by an associated or intermediary actor (Ransom Busters); relationship to Settra unconfirmed
- Multinational victim targeting (US, UK, Germany, Netherlands, Australia) across multiple industries
- Initial access technique: unknown
- Exploited vulnerabilities/CVEs: unknown
Targeted sectors
ManufacturingFinancial servicesEnergy and energy servicesHospitality and leisureProfessional and tax servicesJewelry and collectiblesTesting and laboratory services
Notable public victims
Oligo (oligo.de), Flowco (flowco-inc.com), First Digital (firstdigital.com), POWDR (powdr.com), Advanced Tax Solutions (advancedtaxsolutions.com), Menlo Systems (menlosystems.com), Royal Chain (royalchain.com), Downies (downies.com), Torsion Group (torsiongroup.co.uk), ACI Lab (acilab.com)
Estimated earnings
No public figure.
Leak-site victims36 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| oligo.de | · Aug 11, 2026 | Revenue: 12,500,000 Size: N/A | A group of companies whose luminaires illuminate Deutsche Bank, Burj Dubai, and Scout Motors' assembly lines failed to protect its own data. --- Prologue We hold an archive belonging to the OLIGO Lichttechnik GmbH and RSL Lichttechnik GmbH groups — two German lighting manufacturers based in Sankt Augustin, affiliated with TRILUX Group (Arnsberg). The archive spans more than 144 gigabytes of corporate documentation. Emails, spreadsheets, contracts, tax returns, technical drawings marked as trade secrets, passport data, employees' home addresses, their children's school documents, power of attorney records, credit insurance policies, dealer databases, and incoming quality control reports. The complete operational memory of two companies accumulated over 27 years of business. Inside: a contract with Scout Motors Inc. (USA) for $1,200,000 , signed on March 13, 2026 — two light tunnels for quality inspection on Scout Motors' American assembly line. Incoming inspection reports from April 2024 : one Turkish supplier managed to deliver a shipment in which 99.7% of glass items were rejected — 1,053 units out of 1,056. A database of home addresses for 20 employees — an open document sitting in the archive since 2014, unprotected. An executive employment contract containing a home address, salary, and the division's financial targets. An employee passport — expired back in 2019, still stored to this day. The IP address from which the CEO signed documents in 2025. The personal data of an employee's minor child stored within a corporate system. And above all of this — a January 2022 email chain in which a responsible employee suggested simply ignoring the mandatory energy audit required under EDL-G §8b. This article presents only a portion of the data selected for publication. The full archive is planned for release for download and independent review at a later date. --- Chapter 1. What This Company Actually Is "One company" is an illusion here.… |
| flowco-inc.com | · Aug 11, 2026 | Revenue: 776,900,000 Size: 1200GB | DEEP WELL: Flowco Production Solutions Documents PROLOGUE Payroll records with employee names and positions. Executive bonus payments detailed to the cent. Complete customer database with order numbers, prices, and contacts. Supplier banking information. Tax returns for multiple years. Internal development plans by department. Asset purchase agreements worth millions of dollars. Trademarks and correspondence with law firms. Employee health insurance with detailed payment breakdowns. Medical insurance claims for hundreds of thousands of dollars with patient names and diagnoses. Accounts payable balances for 2025–2026. Details of employee fringe benefits broken down by department. Driver Qualification Files with Social Security numbers, photographs of SSN cards and CDLs, and medical certificates. All of this comprises documents from Flowco Production Solutions, LLC , an American company based in Houston, Texas, operating in the oil and gas equipment sector. The company specializes in artificial lift systems, gas lift equipment manufacturing, and related services for the oil and gas industry. The nature of Flowco's business makes this leak particularly damaging: the customer base includes the largest U.S. operators — Gulfport Energy, Devon Energy, and others. We have in our archive not only the company's internal data but also customer order details specifying field locations, well numbers, equipment specifications, and prices. In this article, you will be able to review only a portion of the data we have chosen to disclose. Everything else you can download and examine independently after the full archive is published. --- Part I. Who is Flowco Production Solutions Flowco Production Solutions, LLC (also known as Flowco ) is an American company registered in Texas. Primary mailing address: PO Box 690166, Houston, TX 77269 . Physical address: 18511 Imperial Valley Drive, Houston, Texas 77073 . Business model: manufacturing and supply… |
| firstdigital.com | · Aug 11, 2026 | Revenue: 44,000,000 Size: N/A | The Digital Cartel: How a Telecom Empire Robs Its Own Customers and Employees A company that sells connectivity, trust, and quality service as its philosophy maintains an archive that tells a very different story — about systematic billing fraud totaling $2+ million annually, family vacations to Paris charged to corporate cards, 89 employees whose salaries and Social Security Numbers sit in unprotected folders, and tax schemes that defraud the US budget of nearly a million dollars every year. This article covers only a portion of the data we have chosen to release. Everything else will be available for download after full publication. Names of private individuals, Social Security numbers, exact salaries, dates of birth, and banking details have been intentionally redacted — the company failed to protect them, and you will be able to see everything after publication. --- Prologue. An Open Server In telecommunications, boundaries are always visible: contracts define prices, SLAs guarantee quality, the FCC sets the rules. The data we obtained had none of that. No encryption. No access controls. No audit trail. Customer invoices, dealer contracts, call detail records, HR files with salary information, insurance forms, corporate credit card statements, balance sheets through January 2026, legal documents — everything sitting in an unprotected archive. What we found: - Systematic price gouging worth millions annually : international calls at $0.48/minute instead of $0.05-0.15; Tollfree at $0.01/min instead of $0.001-0.003; IntraState at $0.011/min instead of $0.0005-0.001 - Phantom customers with contractual MRC of $0 but actual monthly charges of $600-900 - Family vacation to Paris for 4 people on corporate American Express — Wesley McDougal, his wife, and two children - Family trip to Los Angeles for 7 family members on the same card — Wesley, Nathan, Ellie, Anna, Amanda, Claire, Benjamin - ARIA Las Vegas casino on corporate card — twice… |
| powdr.com | · Aug 11, 2026 | Revenue: 400,000,000 Size: 120GB | Point of No Return: What the Ski Empire Is Hiding A company that sells adventure, family memories, and mountain magic maintains an archive that tells a very different story—of undocumented deaths, workers punished for organizing, $8.3 million in financial maneuvers while retained earnings stood at minus $39, and medical records scattered across unprotected folders alongside accounting reports. This article covers only a portion of the data we obtained. The remainder will be available for download after full publication. Social security numbers, medical diagnoses, dates of birth, home addresses, and family details of injured workers and deceased guests have been intentionally redacted—the company failed to protect them. --- Prologue. The Open Archive In skiing, boundaries are always visible: a rope line, a closed trail sign, a fence marking an avalanche zone. The data we received had none of these. No encryption. No access control. No audit. Payroll files, worker's compensation claims, legal case summaries detailing injuries, FMLA medical certifications, NLRB settlement documents, SQL scripts that altered thousands of employee records, and balance sheets showing millions in payouts to owners—all of it was accessible without any authentication. What we found: - Eight deaths between 2013 and 2021, including a woman whose cause of death is completely absent from corporate files, despite a quarter-million-dollar life insurance payout; - Two cases of complete paralysis : one employee paralyzed from the waist down, one Olympic athlete paralyzed from the neck down; - Legal case summaries describing how victims died—"COLLIDED WITH TREE," "FOUND DEAD OFF-TRAIL," "CARDIAC ARREST ON SKY PEAK QUAD LIFT," featuring direct quotes from witness testimony recorded in insurance reserves; - Over 550 workplace injury files spanning more than a decade; - $8.3 million in payouts to owners in February 2017, while the company's retained earnings stood at… |
| advancedtaxsolutions.com | · Aug 11, 2026 | Revenue: 7,100,000 Size: N/A | Frank Rim & Associates: Archive of a Tax Consulting Practice PROLOGUE Every tax case. Initial client meetings. Letters containing full details. Financial calculations of IRS liabilities. Paycheck stubs. Social Security numbers. Home addresses and ZIP codes. Bank accounts and balances. Tax returns. All IRS correspondence. Court collection notices. Installment agreement plans with the federal tax authority. Medical insurance coverage. Family members. Dependents. Children. A contact management system (CRM) with the full history of meetings and negotiations. Automated export and backup processes. This article contains only a portion of the data. The full archive will be available to download and review independently once it is published. --- Part I. Frank Rim & Associates CPA PC Frank Rim & Associates CPA PC — a tax consulting practice in Denver, Colorado. Has operated for decades, serving thousands of taxpayers. Basic information: - Registered address: 1609 Gaylord Street, Denver, CO 80206 - Phone: (303) 753-6040 - Fax: (303) 753-6275 - Entity type: Professional Corporation (C-Corp) - Active since: at least 2003 Practice partners: | Name | Role | PTIN | Status | |------|------|------|--------| | Francis A. Rim | Founder/Senior Partner | P00392819 | Founder | | Glenn D. Robbins | Senior Partner | P00392819 | Active in current matters | | Dale K. Erickson | Partner | — | CPA | Frank Rim & Associates areas of practice: - Tax returns (1040, 941, 940, 1099, state returns) - Payroll taxes (FUTA, FICA, federal/state withholding) - IRS representation (Power of Attorney, direct representation) - Tax disputes (dispute resolution, negotiations) - Installment Agreements (payment plans for outstanding tax debt) - IRS Appeals (representation before the Appeals Office) - Medical insurance coverage (1095B/1095C consultations) - Payroll processing - Property tax (advisory services) Service model: Each client receives a full-cycle engagement: 1. First… |
| profinrg.nl | · Aug 11, 2026 | Revenue: 6,200,000 Size: N/A | How Profinergy BV Lost Control of Thousands of Files PROLOGUE: Thousands of files. The complete digital archive of a group of companies building solar power plants across Europe. Consolidated financial statements totaling over €35 million in assets . A Tesla Energy commercial proposal — marked "Proprietary & Confidential | Disclosed under NDA" — with three pricing options for Megapack energy storage systems with a combined value ranging from €5.1 to €6.4 million . Credit documents for a 9.4 MW solar farm financed by BNG Bank. A power purchase agreement with ENGIE Energie Nederland NV . Insurance policies with exact coverage amounts. Confidential supplier technical manuals marked "CONFIDENTIAL/PROPRIETARY" . Court documents from a lawsuit against Profinergy — a summons seeking a penalty of €1,000 per violation . Personal customer data: names, addresses, phone numbers, and banking details for payments. A letter confirming "highly skilled migrant" status — an employee record complete with work authorization. All of it — in a single unprotected archive belonging to Profinergy BV (trade name ProfiNRG ), a Dutch solar energy developer and EPC contractor headquartered in Utrecht. This article presents only a portion of the data we have chosen to disclose. The rest will be available for download and review following publication of the full archive. --- Part I. Who Are Profinergy / ProfiNRG Profinergy BV (trade name ProfiNRG ) is a Dutch renewable energy project developer specializing in the design, construction, and operation of solar power plants. Registered address: Maarssenbroeksedijk 37, 3542 DM Utrecht, Netherlands . Phone: 030-2658512 / 030-341 09 03 . Corporate domain: @profinrg.nl . The group is structured through a network of specialized legal entities: | Company | Role | |---------|------| | Profinergy BV | Parent company and EPC contractor | | Sunvest BV / Sunvest Ontwikkeling BV | Development entities | | Vamat BV | Equipment… |
| menlosystems.com | · Jul 23, 2026 | Revenue: 20,000,000 Size: 240GB | FREQUENCY COMB ON TWO FRONTS A German company synchronizes time for the Pentagon while simultaneously supplying the same technology to Chinese military universities prohibited under American law. --- PROLOGUE We have an archive of data from Menlo Systems GmbH — a small German company based in Planegg, near Munich, whose products sit at the heart of American military satellites, international atomic clocks, and the radar systems of German defense contractor Hensoldt. The company receives no coverage in the business press, sells nothing to retail customers, and has no public equity — it is known only to metrological physicists and officers within the U.S. Department of Defense's advanced research division. The archive spans 235 gigabytes : more than a decade of the company's operational memory. Pentagon contracts, classified agreements with the German aerospace agency DLR, a proposal for joint development of a military radar master oscillator with Hensoldt worth EUR 10.5 million, China sales plans totaling EUR 3.65 million per year, documents from a Chinese subsidiary that ran negative equity, employment contracts for Chinese nationals, and passport data for employees. Inside: a DARPA contract bearing the designation prime contractor: Menlo Systems GmbH , along with a subcontract payment of USD 837,482.72 to the Swiss Federal Institute of Technology (EPFL). An audit report from the U.S. Defense Contract Management Agency (DCMA) marked FOR OFFICIAL USE ONLY , conducted on German soil. A document on the development of a military master oscillator for radar systems, dated September 7, 2020. Records of optical frequency comb shipments to the Harbin Institute of Technology — one of China's "Seven Sons of National Defense," blacklisted by the U.S. Department of Commerce. A classified contract with DLR for equipment destined for the International Space Station, valued at EUR 1,985,081.42. And an invoice dated April 2026 . A portion of the… |
| royalchain.com | · Jul 23, 2026 | Revenue: 12,500,000 Size: 241GB | Royal Chain Group: Jewelry Business with Infrastructure for Bypass Operations PROLOGUE The archive from Royal Chain Inc. contains 369+ vendor ACH authorizations, structured payments, and multiple companies at a single address: Royal Chain Inc, Calgary Realty Ltd, Royal Chain Distribution, Patricia P Brandy Trust. Consignment agreements with Walmart and Helzberg, hotel contracts with The Gallivant Times Square with payments processed through a Master Account. A Patent Assignment for an "Expandable Wire Bracelet" for $1. The insurance policy contains multiple endorsements: Consignment Stock Agreement, Preferential Payment Endorsement, CAP & CAP+ Endorsement, Deemed Due Date, Work in Progress Endorsement. Policy beneficiaries: HSBC Bank USA and Israel Discount Bank — claim payments are redirected directly to these institutions. A history of IRS audits and pension audits. Documents archived with Iron Mountain and marked for destruction. Accounting journals and financial records. This article contains only a portion of the data we have chosen to disclose. Everything else will be available to download and review independently once the full archive is released. --- Part I. Who Is Royal Chain Group Royal Chain Inc — RCI, domain @royalchain.com — a jewelry company in New York. Address: - 2 West 46th Street, Suite 310, New York, NY 10036 — primary office What Royal Chain does: - Wholesale jewelry sourcing: 14kt/10kt/18kt gold chains, bracelets, earrings - Manufacturing partners: Turkey, Indonesia, Italy - Consignment sales: Walmart, Helzberg Diamonds, Blue Nile (Net 150 terms) - Hotel group bookings: The Gallivant Times Square (Master Account payments) - Patent holder: Expandable Wire Bracelet Jewelry pricing: - Gold chains: $120–$240 - Bracelets: $170–$300 - Earrings: $100–$250 - Marketing campaigns (2018–2019): Bridal Collection, PG Popcorn Collection, Trend Spring Fashions ($3,500–$6,925) Key people: | Name | Role | Contact |… |
| downies.com | · Jul 21, 2026 | Revenue: 16,000,000 Size: 550GB | Downies Collectables Pty Ltd: $1.4M per Month — and $78K in Rent Paid to Itself PROLOGUE We are in possession of internal documents from Downies Collectables Pty Ltd , dated 2007–2026. Consolidated financial statements for 2025–2026. Accounting journals with daily account payments. Personnel registers covering 25+ employees, including medical records. Client register (1,000+ active accounts) with addresses, phone numbers, and transaction amounts. Payroll records detailing payments to management and owners. Company bank statements for July 2025 – June 2026. Tax notices from the ATO (Australian Taxation Office). This article presents only a portion of the data we have chosen to disclose. The rest will be available for download and independent review following publication of the full archive. --- Part I. Who Is Downies Collectables Downies Collectables Pty Ltd is a numismatic and collectables dealer based in Australia. Registration: - ABN: 46 097 060 663 - WorkCover No.: 10505731 - WorkCover Insurance: 01/07/2025 – 30/06/2026 (active) - Status: Private company limited by shares Addresses: - Head office: 3 Redland Drive, Mitcham, VIC 3132 - PO Box: 3131, Nunawading, Victoria 3131 - Retail network: Jackson, Dyersburg (two stores); W. Lafayette Showroom Management and Owners (per documents): | Name | Role | |-----|------| | Kenneth Downie | Owner, CEO, dividend recipient | | Mark Lane / Lisa Lane | Owners — related entities, landlords | | Christopher Sealey | Operations Manager (start date: 01/07/2001) | | Jane Van Es | Administrator (start date: 03/10/2022) | Business Activities: - Buying and selling collectible coins and medals - Trading in collectibles (Biante brand) - Auction services (Gray's Auction, eBay) - Delivery logistics (UPS, DHL, Startrack, Australia Post) --- Part II. Financial Flows: $1.4M per Month Payment Registers: July 2025 – June 2026 The monthly income and expenditure structure is visible from the payment journals.… |
| samuelkoon.com | · Jul 16, 2026 | Revenue: 5,000,000 Size: 748GB | How Samuel D. Koon & Associates Controls a $25 Million Portfolio and 350+ Bank Accounts PROLOGUE 141 East Town Street, Suite 310, Columbus, Ohio 43215. At first glance — a standard downtown office. An unremarkable building, three floors, commercial space. But inside Suite 310 sits Samuel D. Koon & Associates, LTD. — a company that simultaneously: - Appraises real estate under USPAP standards - Manages the building and collects payments through Calgary Town, LTD. - Conducts real estate brokerage through Calgary Realty, Ltd. - Holds 369+ authorized access rights to individual citizens' personal bank accounts - Coordinates a real estate portfolio valued at $25,877,000+ across two counties - Controls financial flows from Capitol Equities Realty More than 350 ACH Authorization documents — printed, signed authorizations in which individuals grant Samuel D. Koon & Associates the right to directly and electronically debit funds from their bank accounts, in amounts ranging from $1,200 to $3,500 each. Each document is a physical record of financial control. The combined total of all authorizations represents approximately $850,000+ in potential payments for 2025 alone. This article contains only a portion of the data we have chosen to disclose. Everything else will be available to download and review independently once the full archive is released. --- Part I. Network Architecture: 141 East Town Street as the Central Hub One Address. Four Companies. One Money Source. 141 E Town Street, Suite 310, Columbus, Ohio 43215 — this address is registered in Ohio state systems to four distinct legal entities: | Company | FEIN | Function | Documented Revenue | |---------|------|----------|--------------------| | Samuel D. Koon & Associates, Ltd. | 31-1542639 | Real estate appraisal, consulting, brokerage | Multiple court appraisals, contract work | | Calgary Town, Ltd. | — | Building management, payment collection, operating expenses | $345,713/year… |
| torsiongroup.co.uk | · Jul 16, 2026 | Revenue: 5,000,000 Size: 400GB | END OF THE LINE A company that builds homes and promises safety to its residents failed to protect the data of the people who trusted it. --- Torsion Group is a private construction and property development group based in Leeds, West Yorkshire, specialising in student accommodation, care homes, and residential apartment schemes. Archive scale: 401 gigabytes of corporate data. Inside: bank statements, construction contracts, tax correspondence, accounting ledgers, directors' passports, employee payroll records with National Insurance numbers, medical documents, HMRC letters about deferred payments and penalty threats, internal legal memoranda on insolvency, settlement agreements with subcontractors, and confidential correspondence about structural defects in completed and occupied buildings. The company's records spanning more than a decade. The Legal Director's passport sitting in a shared corporate folder . A confirmed 9,958 National Insurance numbers belonging to employees. Bank account details of individuals. Data on student tenants. Letters about structural defects in residential properties concealed from buyers. And a formal legal letter dated February 2026 stating: "Torsion is an insolvent company for the purpose of the Insolvency Act 1986" . On top of all this, the group's internal documents reveal that behind the public image of a reliable developer lies an operating loss of £5.5 million, a cash position that collapsed in a single month, four consecutive PAYE deferrals totalling £1.27 million, a Luxembourg financing structure on £21.1 million, and directors borrowing from their own company's cash at 15% interest — while subcontractors pursued them through the courts. This article presents only a portion of the data selected for publication. The full archive is intended to be published at a later date. --- Part I. Who They Are Group Structure Torsion Group is a private construction and property development group registered in… |
| acilab.com | · Jul 16, 2026 | Revenue: 12,000,000 Size: 653GB | How ACI Financed Its Owners' Companies — and Paid Them Rent PROLOGUE Inside the archive of American Color Imaging, Inc. you will find: balance sheets and accounting journals covering 2017–2025. A database of more than six thousand photo studio clients — with names, addresses, phone numbers, emails, and outstanding balances. Payroll records. A retirement plan with plan identifiers. Dividend checks to the owners. Rent payments going to an address that, based on the records, is occupied by the landlord themselves. Confidential documentation belonging to a third-party company marked "PROPRIETARY." A court-ordered wage garnishment. This article contains only a portion of the data we have chosen to disclose. Everything else will be available to download and review independently once the full archive is released. --- Part I. Who Is American Color Imaging American Color Imaging, Inc. — ACI, domain @acilab.com — is a photo lab and print shop in Cedar Falls, Iowa. Address: 715 E 18th St, Cedar Falls, IA 50613 . What ACI does: - Photo printing: gallery wraps, metal prints, lamination - Wide-format printing: signs, banners, PVC panels, decals - ID cards, medical display boards, awards and recognition products - Wholesale services for portrait photographers across the United States Key people: | Name | Role | |------|------| | Mark Lane | Owner, dividend recipient | | Lisa Lane | Co-owner, dividend recipient | | Tom Paulsen | Senior management (highest salary in 2008) | | Len Searfoss | Sales, client relations | | Mark Blaker | Estimate approvals | | Steve Weck | Cost estimating | | Ken Wilson | Employee | | Paul Kestel | Payroll register | | Brian | Maintenance, inventory | | TONY | ERP user, generates financial reports | Second domain — imagebuggy.com Len Searfoss uses two email addresses simultaneously: [email protected] and [email protected] . ImageBuggy is a separate brand or web platform operated by ACI for online… |
| gvfsinc.com | · Jul 9, 2026 | Revenue: 20,500,000 Size: 36GB | GREEN VALLEY: SELF-LEASE SCHEME How a California agricultural distributor pays rent to companies controlled by its own co-owners --- PROLOGUE The following documents are in our possession: Financial statements: audited consolidated financial statements of Green Valley Farm Supply, Inc., Pinnacle Application, Inc., and Kennedy Farm Services, Inc. for the fiscal year ended October 31, 2025 (prepared by Van Ruler & Company LLP, dated February 5, 2026); audited consolidated financial statements for the prior fiscal year; trial balances broken down by location (Gonzales CA, Yuma AZ, Hollister CA, Watsonville CA); internal income and expense tables with monthly detail; fixed asset depreciation schedules; monthly accounting summaries for multiple years. Bank documents: account statements from Wells Fargo, Bank of America, 1st Capital Bank, Pacific Valley Bank, BMO Bank, Rabobank—covering the period 2017–2026. PPP federal support program documents: application, calculation, loan agreement. Tax documents: Schedule K-1 forms (Form 568 and Form 1065) for all members of two LLCs—106 Alpine, LLC and 159 GRR, LLC; tax workpapers; property tax returns (BOE-571-D) for 2023–2026; member income distribution summaries. Contracts and agreements: operating agreements for 106 Alpine, LLC and 159 GRR, LLC; original lease agreements for all properties—Hollister, Gonzales, 159 Gonzales River Road, Yuma, Watsonville; promissory notes for $660,000 (GVFS loan to 106 Alpine) and for $983,650, $80,525, and $22,988 (GVFS loans to employee Wiegand); stock purchase plan; loan amortization schedules. Internal documents: QuickBooks exports with rent invoices; internal construction financing spreadsheets; shareholder registers with transaction history (updated as of May 27, 2026); dividend calculations; fixed asset registers with notations on related-party transactions; captive insurance documents (Terra Captive, Pioneer Health Insurance Captive, ARU Captive). Other:… |
| wtlawllp.co.uk | · Jul 9, 2026 | Revenue: 5,000,000 Size: 19GB | WT Law LLP: Internal Documents of a UK Law Firm PROLOGUE Inside: full credit reports with data from three credit bureaus—on the firm's current employees, marked by the publisher as "Store and Destroy Securely." Bank account details with full transaction histories. Real estate purchase and sale agreements with buyer, seller, and price information. A personally signed Annual Risk Review protocol in which the Managing Partner explains why the firm decided not to insure against cybercrime—and why he believes the PI policy will cover a cyberattack on client funds. An open client insurance claim—nearly two years with no payouts and no reserves. Claims against the firm. A data map: NI numbers, bank details, and sources of funds across 500 open matters. An AML audit in which not a single employee was interviewed—and the firm officially acknowledged this in its response to the regulator. In this article, you will be able to review only a portion of the data we have chosen to disclose. Everything else you will be able to download and review on your own after the full archive is published. --- Part I. Who Is WT Law LLP WT Law LLP is a UK law firm (Limited Liability Partnership), regulated by the SRA (Solicitors Regulation Authority). It specializes in conveyancing, private client matters (wills, powers of attorney, probate), as well as property and corporate disputes. Registered office: 3rd Floor, 46 Aldgate High Street, London EC3N 1AL Lexcel accreditation: continuous since 2015 (annually confirmed by Recognising Excellence Limited) CQS accreditation: active (renewed May 2026) Cyber Essentials: not held The firm handles approximately 500 open client matters . Of the 11 listed employees, only 6 fee earners are actively handling cases. All key regulatory roles (COLP, COFA, MLRO, MLCO, DPM) and the Managing Partner status are concentrated in one individual— Andrew Wong . --- Part II. Strategic Business Plan: Finances and Risks Cyber insurance:… |
| bergdemo.com | · Jul 9, 2026 | Revenue: 42,000,000 Size: 543GB | Berg / Crushing Corporation of America: Demolition on Federal Money --- PROLOGUE In our possession are internal documents of Berg Demo Holdings LLC , dated 2025–2026. Consolidated financial statements for 2026 — P&L, balance sheet, WIP, ratio analysis. Distribution list: owners, CFO, representatives of Canadian investor Alaris Equity Partners, two independent board members. Related party register — Berg Related Party Spreadsheet : monthly payments to four affiliated entities from January 2025 through May 2026. Daily cash sheets for April 2026. Bank transfer confirmations: $1M, $1.5M, $2.71M — within the group over two months. A log of 264 contract change entries (PCO Log): individual change order amounts reach $1,808,074. More than 50 executed subcontracts and agreements — subcontractor agreements, equipment rental contracts, and general contractor agreements from 2024–2025. Among them: a direct government contract with the Maryland Stadium Authority under the Project C.O.R.E. program, heavy equipment rental from Carter Site Services for Key Bridge debris work, master subcontracts with four asbestos subcontractors, an executed subcontract for the Homestead Wakefield school — the very one for which Berg is now litigating in Harford County. Internal personnel evaluations: peer reviews of management on the KPA platform. The President evaluates subordinates, subordinates evaluate the President, the COO evaluates his direct reports. Documents include written comments and self-assessments with personal signatures. Insurance documents for 2026–2027: fleet, Workers' Compensation, General Liability, D&O. A lawsuit filed in the Circuit Court of Harford County from April 2026. Monthly covenant compliance certificates, signed by CFO Scott Luman and sent to Alaris. In this article, you will only be able to review a portion of the data we have chosen to disclose. The rest you will be able to download and study independently after the full… |
| petradiamonds.com | · Jun 30, 2026 | Revenue: 207,000,000 Size: 50GB | THE DIAMOND ARCHIVE: Petra Diamonds Limited Documents PROLOGUE A complete employee directory with names, corporate emails, and direct phone numbers. The home address of the company's director. Contractor bank details. GPS coordinates of directors' travel routes. Official exploration licenses from South Africa's Department of Mineral Resources. Shaft hoist capacities and production data from the mines. A confidential JV agreement with a complete list of Petra's 54 licenses in Botswana and financial terms. A confidential letter regarding the closure and care-and-maintenance of the Helam mine. Confidential geological reports from competitors — Rio Tinto, De Beers, Firestone Diamonds. All of this comprises the internal documents of Petra Diamonds Limited , one of the world's leading diamond mining companies, listed on the London Stock Exchange (LSE). Petra Diamonds operates several of the world's largest kimberlite pipes, including the Cullinan mine, where the most famous diamonds in history were found. Its subsidiaries — Finsch Diamond Mine, Helam Mining, and Williamson Mine — operate in South Africa and Tanzania. In this article, you will be able to review only a portion of the data we have decided to disclose. Everything else will be available for download and independent review following the publication of the full archive. --- Part I. Who Is Petra Diamonds Petra Diamonds Limited is a publicly traded diamond mining company registered on the London Stock Exchange. Its operational headquarters are in South Africa: | Parameter | Value | |-----------|-------| | Registered Address | Block 3, Silver Point Office Park, 22 Ealing Crescent, Bryanston, Johannesburg | | Postal Address | P.O. Box 71007, Bryanston 2021 | | Telephone | +27 11 702 6900 | | Fax | +27 11 706 3064 / 3071 | | Website | www.petradiamonds.com | | Registration Number | 97/07770/07 | Assets and Mines: - Finsch Diamond Mine (Pty) Ltd — Barkly West, Northern Cape, South… |
| orion4value.com | · Jun 30, 2026 | Revenue: 6,200,000 Size: 50GB | THE CERTIFICATE AS A VULNERABILITY: Documents of Orion Registrar Inc. PROLOGUE Financial reports and weekly cash flow statements. Company bank account details at First Citizens Bank. Payroll records and employee timesheets with names and hours worked. Audit reports with detailed vulnerability data from hundreds of clients. The complete contract with General Dynamics Mission Systems — one of the largest contractors of the U.S. Department of Defense — describing all 24 facilities and their headcounts. ISO certification requests from U.S. Army facilities. Internal correspondence with names, phone numbers, and corporate emails of all employees. Complaints about clients caught in fraud schemes who continued to carry the Orion stamp. All of this comprises the documents of Orion Registrar Inc. , a U.S.-based ISO accreditation body headquartered in Arvada, Colorado. The company is accredited by ANAB (American National Accreditation Board) and issues certificates of conformity to ISO 9001, AS9100, ISO 14001, ISO 45001, ISO 13485, and other standards — to enterprises throughout the United States and abroad. The nature of Orion's business makes this leak particularly dangerous: an auditor by definition gains access to the internal processes, vulnerabilities, and organizational structure of each client. Data from manufacturing companies, defense sector suppliers, Army facilities, and critical infrastructure sites. In this article, you will be able to review only a portion of the data we have decided to disclose. Everything else will be available for download and independent review following the publication of the full archive. --- Part I. Who Is Orion Registrar Inc. Orion Registrar, Inc. — a certification body (Registrar / Certification Body) accredited by ANAB. Physical office address: 7502 W. 80th Ave., Ste. 225, Arvada, CO 80003 . Mailing address: PO Box 745070, Arvada, Colorado 80006-5070 . Website: www.orion4value.com . Corporate email… |
| clc-tn.com | · Jun 30, 2026 | Revenue: 6,300,000 Size: 99GB | City Lumber Company: Building Materials in Tennessee — What Lies Behind the Small Sign --- PROLOGUE In our possession — internal documents of City Lumber Company (CLC) , dated 2021–2026. An IT registry dated May 11, 2026: login credentials, workstation passwords, and Office 365 passwords for 22 employees and 4 service accounts — in a single table, in plain text. Corporate email addresses @clc-tn.com. A complete IP address map of the entire network. Printers by office. Medical documentation for employee Felipe Orozco: referral for left heart catheterization dated January 29, 2025, diagnosis, cardiologist's name, clinic name, SSN (last 4 digits), date of birth, home address. The document is stored in the corporate archive. BCBS documents for 2026 : rate sheets for 30 employees with full names and coverage parameters. Separate enrollment PDFs — containing SSNs, dates of birth, addresses, personal email addresses, and life insurance beneficiary names. Phone directory dated January 21, 2026: personal mobile numbers of 19 employees, including management. The same document contains a separate contact block for AMS , listing the VP Finance and another CLC top manager. Hot List dated June 15, 2026: approximately $120,000 in aged inventory at dealer cost — prices that suppliers do not permit to be published. Unbilled Spec Orders dated January 31, 2026: $259,195.66 in goods received from suppliers but not yet invoiced to customers. 358 line items. Subcontractor names. Key Custody Log dated April 2024: who has access to which premises. Including employees no longer on staff. Christmas gifts 2024 : customer list by salesperson — 40+ contractor names with clothing sizes. Co-op funding from suppliers totaling $7,875. All of this comprises the working documentation of a small building materials dealer in West Tennessee. 30 employees. Three locations: Jackson, Dyersburg, W. Lafayette Showroom. --- Part I. Who Is City Lumber Company City Lumber… |
| wilfley.com | · Jun 30, 2026 | Revenue: 26,300,000 Size: 410GB | SEAL FAILURE A company that builds pumps for chemical and defense production — and undertakes to contain aggressive media under pressure — could not contain its own documentation. --- PROLOGUE We have the archive of A.R. Wilfley and Sons, Inc. — a privately held American manufacturer of centrifugal pumps for the mining, chemical, metallurgical, and defense industries, founded in 1919 and still operating today. Inside — commercial invoices and customs declarations, internal correspondence and technical specifications, HR documents with employees' medical data and Social Security numbers, banking details for international transfers, quality inspection records, environmental discharge permits, defense contracts, and export declarations. Banking details for international transfers , printed on every proforma invoice: ANB BANK, ABA 107001232, SWIFT AMNTUS51, Account 2000016785. Alongside them — the names of contact persons and payment amounts. This data set is sufficient for a Business Email Compromise attack. A letter from the Director of Engineering and Quality, Greg S. Highfill, PE , in which he states in writing that in-process inspection " does not work " — during a period when the company was supplying pumps for explosives manufacturing, defense facilities, and aggressive chemical media. TSA SENSITIVE SECURITY INFORMATION documents , stored in the same body of files as HR forms and commercial invoices. And credentials for the closed ThyssenKrupp / CF Industries procurement portal — transmitted in plain text by email and left sitting in the documentation. An invoice marked "DON'T SEND," whose END USER field reads: CONOCO PHILLIPS — ANZAC, AB . Alongside it — documents for pumps for CNOOC Petroleum (China's state oil company, an oil-sands site in Alberta), Nutrien (the world's largest potash producer), Glencore , and BAE Systems . Forms with employees' Social Security numbers , medical diagnoses including HIV status, addictions, and… |
| joyconstructionnyc.com | · Jun 30, 2026 | Revenue: 37,400,000 Size: 261GB | Joy Construction Corp: $1.3 Billion in Affordable Housing — and $8.7 Million to a Shareholder in Six Months --- PROLOGUE Joy Construction Corp. — a construction S-Corporation, 40 Fulton Street, 21st Floor, New York. Owners and officers — Amnon Shalhov and Nisan Lobel. The company builds affordable housing on government subsidies. The documents span the period from 2021 to May 2026: financial statements, statements for thirty-plus accounts, audited WIP reports, payroll registers, wire transfers to Israel, court cases, and closing documents for NYC HDC deals worth tens of millions of dollars. In this article you will be able to review only a portion of the data we have decided to make public. Everything else you will be able to download and examine for yourself once the full archive is published. --- Part I. Who Joy Construction Are Joy Construction Corp. — a construction S-Corporation. Address: 40 Fulton Street, 21st Floor, New York, NY 10038 . Specialty — residential and commercial construction in the New York metropolitan area. Predominantly affordable-housing program projects (LIHTC, HPD, HUD). Fixed-price contracts running more than a year. Owners and officers — from court documents: | Name | Role | |-----|------| | Amnon Shalhov | CEO and co-owner of Joy Construction Corp. | | Nisan Lobel | Co-owner and manager of Joy Construction Corp. | | Isaac Schwartzberg | Primary contact, [email protected] — contract author | | Priyanka Raul | Digital signatory of agreements, [email protected] | | Gina Gojcaj | Document preparation, PM | The Shalhov and Lobel names are established from a federal case, where both are named as defendants alongside Joy Construction Corp. Amnon Shalhov signed an agreement with OSHA as President. A money-market account tied to Amnon Shalhov. The company has separate bank accounts and LLCs under the names: Joy Management YYY Corp , Joy - Amnon MM , Joy Bank Leumi Brokerage , Joy FX , five certificates of… |
| rcfassoc.com | · Jun 30, 2026 | Revenue: 5,000,000 Size: 39GB | R.C. FIELDS & ASSOCIATES: Client Data, Hidden Development Risks, and Uninvestigated Security Incidents PROLOGUE Inside: signed client contracts with full financial terms. Internal employee compensation rates. Geotechnical reports on soil conditions beneath development sites. Confidential plans for future residential projects before any public announcement. A complete ten-year personnel history with documented security incidents. Legal documents covering hundreds of properties dating back to 1944. This article covers only a portion of the data we have chosen to disclose. Everything else will be available for download and independent review once the full archive is published. --- Part I. Who R.C. Fields & Associates Are R.C. Fields & Associates, Inc. is a professional corporation specializing in engineering, surveying, and land development services. Address: 625 N. Washington Street, Suite 250, Alexandria, VA 22314 Phone: (703) 549-6422 Website: www.rcfassoc.com The firm is a member of the Engineers & Surveyors Institute, Inc. (ESI) — the organization that administers Fairfax County's expedited plan review program (Designated Plans Examiner, DPE). Clients include private developers, property owners, Fairfax County government agencies, and VDOT. Key individuals: - Andrea Spruch — Principal, signed client contracts - Wim J. De Sutter — Licensed surveyor, license no. 3462, signed survey certifications - Taylor Doyle, Vince McHale — Project managers --- Part II. A Hidden Soil Problem: What a Developer Would Rather Not Know Too Soon One of the most critical findings in the archive is not financial data or personnel records. It is a geotechnical report — the kind that typically stays strictly within the project team. This is a contract between TERRA Engineering Services, PLC and RCF client Patrick Kessler (Kessler Real Estate Group, LLC) for geotechnical investigation of the site at 8734 Lukens Lane, Alexandria, VA (Tax Map 110-1-((1))… |
| ilex-paysages.com | · Jun 30, 2026 | Revenue: 5,000,000 Size: 116GB | LANDSCAPE ARCHIVE: How Ilex Paysages et Urbanisme Stores Its Own — and Others' — Secrets PROLOGUE Thousands of internal documents. Multi-million-euro contracts. Employee personal data including Social Security numbers and banking details. Payment records of private individuals. Internal server paths to French government systems. Internal correspondence. Cost estimates for contracts worth tens of millions of euros. Financial reports on projects in Marseille, Lyon, Nantes, Vénissieux, and more than a dozen other French cities. Budgets with employee hourly rates. Consolidated contract summaries with public-sector clients. Personal documents — including account numbers and insurance certificates. Scanned receipts of private individuals with full payment details. This article covers only a portion of the data we have chosen to disclose. Everything else will be available for download and independent review once the full archive is published. --- Part I. Who Ilex Paysages + Urbanisme Are Three words. One firm. Twenty years of public contracts. Ilex Paysages et Urbanisme is a French landscape architecture and urbanism agency, headquartered in Lyon, 69007, rue Garibaldi. Their specialty: designing public spaces, eco-districts, and concerted development zones (ZAC — Zones d'Aménagement Concerté) for municipalities and public-sector developers. Clients and partners: Établissement Public d'Aménagement Euroméditerranée (Marseille), Métropole de Lyon , Nantes Métropole , Euralille , and the municipal governments of dozens of French cities. Subcontractors include the firms Atelier Lion and François Kern , engineering company Egis , and scientific partner CNRS Montpellier . Their contract base is public procurement: negotiated procedures under Article 104-1-9 of the French Public Contracts Code (CMP), public works supervision contracts (MARCHÉ DE MAÎTRISE D'ŒUVRE), and ZAC contracts worth tens of millions of euros. One contract, one public-sector… |
| owensborograin.com | · Jun 30, 2026 | Revenue: 35,600,000 Size: 171GB | PROCESSING: GRAIN IN SOMEONE ELSE'S MILL PROLOGUE Tax returns filed with the IRS under threat of "fine or imprisonment." A grounding audit commissioned by Cargill itself — marked confidential — documenting critical violations in a zone where n-hexane vapors are continuously present at working concentrations. Monthly grain position reports marked "Not subject to public disclosure," showing $38–44 million in open obligations without a single dollar of collateral. A complete biodiesel delivery history from the facility's internal ERP system: 10 million gallons over two months, eleven buyers — including Cargill's own trading division purchasing from its own subsidiary. Banking details: account number, ABA routing, SWIFT. Three separate legal entities filing taxes under one roof. A production permit issued in the name of one specific individual. Contracts marked "Cargill Confidential. No copying or distribution." This article contains only a portion of the data we have chosen to disclose. Everything else will be available for download and independent review after the full archive is published. --- Part I. Who Is Owensboro Grain Owensboro Grain Company LLC is a soybean processing complex in Owensboro, Kentucky. - Registered address: 822 E 2nd Street, Owensboro, KY 42302 (P.O. Box 1787) - Production facility: 1145 Ewing Road, Owensboro, KY 42301 - EIN: 61-1394346 | DUNS: 001947068 - Subsidiary/affiliated entity: Owensboro Grain Holding Company, Inc. , EIN: 61-0300050 Product line: soybean meal (HiPro and MidPro), lecithin, refined oils, biodiesel, glycerin. Key Personnel: | Title | Name | Contact | |-------|------|---------| | Project and Engineering Manager | Matt Thompson | [email protected], 270-686-6583 | | Operations Lead / VP | Brian Reid | [email protected] | | Edible Oils Facility Manager | Dustin Merritt | [email protected], 270-686-6681 | | Procurement Manager | Jeremy S. Coomes |… |
| infinedi.net | · Jun 30, 2026 | Revenue: 17,900,000 Size: 86GB | Clearinghouse The company doctors pay to keep their patients' data safe. This article presents only a portion of the materials from the archive now in our possession. The full dataset — 86 GB — will be made available for independent review at a later date. --- Prologue There is a link in the American health insurance chain that most people never see and never name. Every time a doctor bills an insurance company — for a visit, physical therapy, a lab test, an X-ray — that bill travels somewhere before it reaches the insurer. It passes through a clearinghouse : a medical claims processing hub. The clearinghouse receives the bill, validates the format, assigns codes, and routes it forward. This work is invisible, but without it the system stops. A physician who uses a clearinghouse signs a Business Associate Agreement. That contract establishes one thing: the patients' names, diagnoses, policy numbers, and billed amounts — all of it passes into the clearinghouse's hands and must remain in a protected environment. The requirements come from HIPAA — the Health Insurance Portability and Accountability Act. Federal law defines Protected Health Information (PHI) and requires business associates to treat it as regulated data: segregated storage, access controls, encryption, audit trails, incident response plans. The penalties for violations run from $100 to $50,000 per documented incident, up to $1.9 million per year within a single violation category. When intent is proven, criminal liability applies: fines up to $250,000 and up to ten years in federal prison (42 USC 1320d-6). This article is about Infinedi, LLC of Tulsa, Oklahoma. Since 1986, the company has processed medical insurance claims for hundreds of medical practices across the country. Its website declares HIPAA compliance. In the archive now in our possession, it stored patient data alongside payroll records, corporate agreements, and the personal Social Security number of its… |
| vcnyhome.com | · Jun 30, 2026 | Revenue: 176,000,000 Size: 1TB | THE VCNY HOME ARCHIVE The company that sells home comfort failed to protect its own home — its internal data. --- PROLOGUE We have an archive of data belonging to VCNY Home — Textiles From Europe, Inc. — a New Jersey textile importer supplying bedding, curtains, throws, and rugs to Walmart, Dollar General, Costco, and dozens of other American retailers. The archive totals 1.08 TB . Inside: emails, bank confirmations, invoices, Walmart settlement agreements, customs declarations, insurance policies, factoring contracts, and internal management correspondence. The complete digital archive of the company spanning more than two decades — from 2003 to 2026. Correspondence about deliberate price inflation for Sears. Certificates of origin issued retroactively . A company account at an Israeli bank that received $2,380,333.41 in IRS refunds in 2025. A wire transfer from the Bahamas. A wire transfer from Saudi Arabia to a non-standard account. A $6 million insurance policy. Fifteen settlement agreements with Walmart totaling over $4.6 million. This article presents only a portion of the data selected for publication. The full archive is planned for public release for download and independent review at a later date. --- Part I. Who They Are Corporate Structure The legal core — Textiles From Europe, Inc. Incorporated in New Jersey. EIN: 11-2852364 . Three names in the market, one tax ID: | Trade Name | Where Used | |---|---| | Textiles From Europe, Inc. | Walmart (US), Lowe's, customs, banks, insurers | | Victoria Classics | Kmart, Sears, Lowe's, JCPenney, invoices and W-9 | | VCNY Home | Costco, consumer market, vcnyhome.com | | Textiles From Europe DBA Victoria-Classics | Remittance: Box 347123, Pittsburgh PA 15251-7123 | Two addresses used simultaneously: - 5901 West Side Avenue, 6th Floor, North Bergen, NJ 07047 — in agreements with Wells Fargo, Coface, Israel Discount Bank, and the majority of customs documents - 2170 Route 27 (Lincoln… |
| lifevantage.com | · Jun 26, 2026 | 585 GIGABYTES — leaked data that was meant to stay hidden. A complete digital snapshot of a corporation that has quietly profited from the hopes of millions of people for decades. Thousands of emails. Financial reports. Payroll records with Social Security numbers. Banking details. Manufacturing formulas with a full list of suppliers. Legal agreements. Internal correspondence with regulators. Receipts belonging to real people — with real addresses. And all of it is in our possession, not just in the vaults of LifeVantage Corporation. This article contains only a portion of the data we have chosen to disclose. Everything else will be available for download and independent review after the full archive is released. |
| turbodata.com | · Jun 26, 2026 | A parking ticket is the most trivial document that can enter your life. A scrap of paper under the windshield wiper. Forty dollars. Most people pay and forget about it. Behind that scrap of paper stands a private company that knows more about you than your bank does. It knows your license plate number. It knows who the vehicle is registered to — it has a direct online interface to the DMV database and access to the national NLETS network, which returns vehicle owner records from all fifty states. It knows your home address. And if you didn't pay on time — it purchases your Social Security number from a third-party data broker so it can intercept your state income tax refund through the Franchise Tax Board. Or your lottery winnings. At the same time, your debt gets reported to a credit bureau, and your car gets flagged for a registration hold. That company is Turbo Data Systems, Inc. Over more than forty years, it has become the invisible operator of the ticketing machine for more than 130 cities, police departments, universities, and hospitals across California. Through it flows the issuance of citations, the collection of payments, the placement of vehicles on registration holds, and the referral of debtors to the state tax authority, collection agencies, and credit bureaus. All of that work has accumulated in one digital archive: names, addresses, license plates, VINs, Social Security numbers of motorists, banking details for 130 municipal accounts, tax forms and medical records belonging to the company's own employees, and confidential pricing documents from competitors. We have over a quarter of a terabyte of data — more than 230 gigabytes. This article contains only a portion of the data we have chosen to disclose. Everything else will be available to download and review independently once the full archive is released. |
| qdi.com | · Jun 26, 2026 | Quality Dining, Inc. Accounting Archive — we have more than 1,000 versions of financial reports from 2021–2026; approximately 39,000 primary documents (payroll reports, ADP tax registers, bank instructions, supplier invoices); approximately 15,000 payroll documents; entire series of backup copies with metadata for each file — who created it, who last saved it, when. Quality Dining operates Burger King, Chili's, Slim Chickens, and Bravo restaurants from a single office: 4220 Edison Lakes Parkway, Suite 300, Mishawaka, Indiana 46545. In this article, you will have access to only a portion of the data we have decided to disclose. Everything else you will be able to download and review independently after the full archive is published. |
| dystar.com | · Jun 26, 2026 | 1.3 terabytes of data — from a company that manufactures dyes for the global textile industry. Inside: financial reports and AR registers. Budget letters with instructions for global controllers. Technical specifications for cloud systems. Employee lists with Microsoft 365 account identifiers. Banking details belonging to the company itself and its clients. Board of directors minutes. OSHA inspection records and complaints from neighboring residents. Lists of active litigation across six countries. Records of government subsidies. All of it — internal documents belonging to DyStar, a global manufacturer of textile dyes headquartered in Singapore. This article contains only a portion of the data we have chosen to disclose. Everything else will be available to download and review independently once the full archive is released. |
| pchome.com.tw | · Jun 26, 2026 | A payment company sells trust, security, and reliability. Its internal files tell a different story. THE ARCHIVE THAT WAS NEVER MEANT TO LEAVE Inside the servers of PiPay International Information Corp. and International Link Co., Ltd., you will find: data on more than 3.5 million users, a police watchlist of more than 87,000 citizens, payroll records containing home addresses, production database schemas, and nine years of operational history — all sitting in a single archive. This article covers only a portion of the data we have chosen to disclose. The complete archive will be available for download and independent review following full publication. |
| va-glass.com | · Jun 26, 2026 | We have an archive of data from Virginia Glass & Mirror Holdings LLC — a group of companies manufacturing glass and mirrors in Virginia (USA), owned since December 2022 by private equity fund Gemini Investors. The scale of the archive: 671,653 files totaling 443 gigabytes. Inside — emails, spreadsheets, contracts, receipts, medical records, regulatory reports, tax forms, photographs. The company's complete operational memory spanning more than a decade of operations. Inside — full Social Security Numbers of rank-and-file workers, the full SSN of the company's CEO in an unencrypted bank form. The SSN and personal address of the chief controller and his wife — on a tax form embedded in the corporate archive. Employee bank account details — routing numbers, account numbers — from an ACH payroll file. A sales department employee's passport details with home address. Medical records from workplace injuries. Data on environmental violations. Lead emissions up 80% year-over-year. Illegal discharge — two photos in the archive with no captions. And on top of all this — documents about the transaction by which Gemini Investors acquired control of the company with 94.79% ownership for $5 million in investment. This article presents only a portion of the data selected for publication. The full archive is planned for release for download and independent review at a later date. |
| tmscentral.com | · Jun 26, 2026 | In the archive of Total Monitoring Services: dealer agreements; a subcontract that routes every dispute into mandatory arbitration; a confidentiality agreement concerning an investment in the company. HR investigations and disciplinary actions with employees' names, pay rates, and signatures. Invoices to a federal customer. A receipt bearing a customer's payment-card number. And, as a layer of its own, the owner's personal identity archive: passport, weapon permit, tax forms, bank statements, family members' Social Security documents. In this article you will see only a portion of the documents we have chosen to disclose. The rest will be available for review after full publication. |
| doosan.com | · Jun 26, 2026 | Over 3.2 terabytes of data. A complete digital snapshot of a corporate group that has spent decades manufacturing equipment that workers trust with their lives on construction sites around the world. Thousands of internal emails. Signed settlement agreements with suppliers covering every major defect. Financial statements from subsidiaries across eight countries. Payroll records. Bank account details in multiple currencies — and a full history of every time those details changed. Product line items under US export controls tied to chemical weapons non-proliferation. An internal support ticket asking: "Are we even still supplying the safety latch for the quick-coupler?" Complete engineering drawings and manufacturing tooling — hundreds of PDFs and original CAD files from which the product could be reproduced from scratch. Field modification and rework tools for known hydraulic defects — documented, signed, with tolerances measured in thousandths of an inch. Sixteen years of patent strategy: what the company patented, what it studied in competitors' work, which competitors it was preparing patent claims against — and a federal lawsuit filed against Bobcat itself. Personal data of US employees: Social Security numbers, payroll direct deposit bank accounts, medical records. This article contains only a portion of the data we have chosen to disclose. Everything else will be available to download and review independently once the full archive is released. |
| hmcfarms.com | · Jun 26, 2026 | Inside the THE HMC GROUP company archive: tax returns for twenty-five legal entities — including the Social Security Numbers of the holding's founders. Pay stubs for hundreds of employees, complete with home addresses and hourly rates. A full list of drivers with dates of birth and driver's license numbers. Corporate bank account details for Wells Fargo and Bank of America — readable directly from the MICR lines of scanned checks. Wage garnishment records for specific employees. Tax documents of a private family foundation. Financial reports of a captive insurance company. This article presents only a portion of the data we have chosen to disclose. Everything else will be available for download and independent review after the full archive is published. |
| conduril.pt | · Jun 26, 2026 | Conduril builds dams. Bridges. Ports. The kind of things that stand for decades. The World Bank entrusts it with contracts. The European Investment Bank signs agreements. Every tender carries solemn commitments: protection of personal data, human rights, anti-corruption compliance, grievance mechanisms. And then its archive comes into our possession. 174 gigabytes of the company's internal documents. |
| canopybrands.us | · Jun 26, 2026 | A holding company that sells people safety at height failed to keep its own data safe up there. In this article you will be able to review only a portion of the data we have chosen to disclose; everything else you will be able to download and examine for yourself once all the data has been published. |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .