Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
203
Leak-site victims · 30d
1K
Active groups · 30d
8011 new
Most active · 7d
the gentlemen
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲8 | 151 | 400 | 400 | active | no public figure | |
| 2 | qilin | 29 | ▲16 | 110 | 364 | 364 | active | no public figure | |
| 3 | storm | 9 | ▼31 | 49 | 61 | 61 | active | no public figure | |
| 4 | krybit | 15 | ▲15 | 44 | 95 | 95 | active | no public figure | |
| 5 | akira | 10 | ▲3 | 43 | 87 | 87 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 2 | ▼9 | 37 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 35 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 10 | ▲6 | 34 | 113 | 113 | active | no public figure | |
| 9 | lockbit5 | 5 | = | 27 | 54 | 54 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 11 | ▲2 | 25 | 27 | 27 | active | no public figure | |
| 11 | safepay | 9 | ▼2 | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | emperador | 5 | = | 19 | 23 | 23 | active | no public figure | |
| 15 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 4 | ▼3 | 16 | 16 | 16 | active | no public figure | |
| 18 | shinyhunters | 2 | = | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲6 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | play | 3 | ▼1 | 13 | 47 | 47 | active | no public figure | |
| 22 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 23 | rhysida | 2 | ▼2 | 13 | 15 | 15 | active | no public figure | |
| 24 | pear | 0 | ▼1 | 12 | 23 | 23 | active | no public figure | |
| 25 | cyberleek | 0 | = | 12 | 12 | 12 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Leak-site victims2,818 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
gitmea.com tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | German Imaging Technologies (GIT) Dubai LLC is a German-founded company established in 1999, headquartered in Dubai, UAE... |
TRANSPORTES Y LOGISTICA BRAS, S.A tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | Transportes y Logistica Bras, S.A. is a Guatemalan company specializing in heavy land transport and logistics services, ... |
aai.com.tw tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | AeroVision Avionics, Inc. (AAI) (利翔航太電子股份有限公司) is a Taiwanese high-tech company incorporated in ... |
www.northern-access.com tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | Northern Access Transportation, Inc. is a locally owned American company founded in Duluth, Minnesota, USA, dedicated to... |
moscati.org tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | Hôpital Catholique Saint Joseph Moscati (moscati.org) is a Catholic hospital operating under the motto "Foi et charité... |
Refinery Hotel tracker page ↗ | akirafilter this group | · Jul 1, 2026 | Refinery Hotel is a luxury hotel located near Bryant Park in New York City, offering a modern reinterpretation of a historic hat factory. The hotel features 197 stylish rooms with industrialaccents and modern amenities, alongside dining options such as the Parker & Quinn restaurant and the Refinery Rooftop bar.We will upload 15gb of corporate data soon. Employee personal information (passports, DLs, SSNs, w9 forms), guests information, financials, contracts and agreements, lots of NDAs, etc. |
Dennis Waters Rental Properties tracker page ↗ | qilinfilter this group | · Jul 1, 2026 | Business Services |
Mattatuck Industrial Scrap Metal tracker page ↗ | qilinfilter this group | · Jul 1, 2026 | Energy, Utilities & Waste |
Laughlin Nunnally Hood & Crum tracker page ↗ | qilinfilter this group | · Jul 1, 2026 | Law Firms & Legal Services |
Rossum Integration tracker page ↗ | qilinfilter this group | · Jul 1, 2026 | Industrial Machinery & Equipment |
Dynamic Laser Solutions Ltd. tracker page ↗ | qilinfilter this group | · Jul 1, 2026 | Industrial Machinery & Equipment |
Dixie Beverage tracker page ↗ | qilinfilter this group | · Jul 1, 2026 | Electricity, Oil & Gas |
Western Construction tracker page ↗ | playfilter this group | · Jun 30, 2026 | No details on the leak post beyond the victim name. |
Welldyne tracker page ↗ | payoutskingfilter this group | · Jun 30, 2026 | No details on the leak post beyond the victim name. |
universalplant.com tracker page ↗ | chaosfilter this group | · Jun 30, 2026 | FINAL NOTICE: UNIVERSAL PLANT SERVICES (UPS) We are in possession of 315 GB of your corporate, financial, and operational data. Our analysis confirms that this archive contains highly sensitive information, including: Financial & Accounting: Full audits, tax filings (ADP), payroll, bank transa… |
Primed Halberstadt Medizintechnik tracker page ↗ | aurorafilter this group | · Jun 30, 2026 | Primed Halberstadt Medizintechnik GmbH — a German manufacturer of medical devices founded in 1946 and now part of the PE-backed PP Medtech group (Wiesmann & Co. KG). The exfiltration captured four entire server volumes: Daten (883 GB) — File server: 289 employee home directories (547 GB), Czech subsidiary data (66 GB), production processes (162 GB), machine configurations (81 GB) EE (807 GB) — Enterprise system: Apollo ERP, VBANK banking (8 accounts), complete database backup (100.6 GB, dated June 3), product images WINDVSW1 (344 GB) — Windows server: DATEV accounting (115+ data directories including LODAS payroll), bank transfers, DMS exports dmsscan (12 GB) — Scanned documents from 51+ employee DMS mailboxes A database backup (spiel.zip.001–010, 100.6 GB) was created on 2026-06-03 |
SDEZ tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | sdez.fr SDEZ is a historic French family-owned company founded in 1816, specializing in the rental and maintenance of professional linen, workwear, and hygiene equipment.Operating a national network of industrial laundries across France and Belgium, it has become one of the leading textile service providers in the region.The company serves thousands of business clients and employs over 700 people to deliver comprehensive laundry and hygiene solution |
Brooklyn Defender Services tracker page ↗ | genesisfilter this group | · Jun 30, 2026 | A legal organization dedicated to safeguard the rights of its clients |
paipharma.com tracker page ↗ | brain cipherfilter this group | · Jun 30, 2026 | Large volume data breach. Total size 1,4 Terabytes. Coming soon. |
Pou Sheng International tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | pousheng.com zoominfo.com/c/pou-sheng-international/352458448 They serve as a key distributor and exclusive agent for major global sportswear brands like Nike, adidas, PUMA, and Under Armour. The company operates a comprehensive online and offline sales network across the country to provide a full sports and lifestyle experience. |
MakoLab tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | makolab.com zoominfo.com/c/makolab-sa/31278202 MakoLab, a prominent Polish IT consulting and software development company acting as a digital project house.The firm specializes in digital transformation, artificial intelligence, custom software engineering, and human-centric design.They provide comprehensive business and technology consulting, product design, and global 24/7 operations support to enterprise clients worldwide |
EMAS Group tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | emas.cz zoominfo.com/c/janča--emas-group-sro/532190785 JANCA & EMAS group s.r.o., one of the largest wholesale distributors of electrical equipment and materials in the Czech Republic. The company supplies a comprehensive range of electrical components, including switches, sockets, and smart home automation systems, primarily serving professional electricians and businesses. They operate an extensive network of physical branches across the country and offer a dedicated mobile app for quick ordering and inventory management. |
The City of Boyne City tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | cityofboynecity.com zoominfo.com/c/the-city-of-boyne-city/368244116 City of Boyne City, a community located in Charlevoix County, Michigan. It serves as a central hub for residents, providing essential information on local government, city departments, utility services, and community events. The portal also highlights the city's parks, recreation programs, and local initiatives, reflecting its vibrant lakeside lifestyle on Lake Charlevoix |
Oron Law Firm tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | zoominfo.com/c/eilon-oron-attorneys/1341420873 Oron Law Firm, a legal practice specializing in traffic law, traffic accidents, and torts. Founded by Adv. Ilon Oron,The team provides comprehensive legal representation for licensing issues, accident claims, and traffic violations, offering 24/7 customer support to assist their clients. |
Wacha Justen tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | nwohlaw.com zoominfo.com/c/wacha--justen-llc/357327144 Wacha & Justen, LLC, a dedicated law firm based in Napoleon, Ohio. The firm provides comprehensive legal services, including estate planning, personal injury, car accident claims, and general civil litigation. With a strong local presence, their experienced attorneys offer reliable representation to individuals and businesses throughout the region |
Melcor Developments Ltd tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | melcor.ca zoominfo.com/c/melcor-developments-ltd/65095259 Melcor Developments Ltd., a prominent Canadian real estate development and construction company founded in 1923 and headquartered in Edmonton, Alberta. The firm specializes in the full lifecycle of property development, creating residential communities, commercial spaces, and industrial parks across Western Canada. With nearly a century of experience, Melcor is recognized for building sustainable, high-quality neighborhoods and long-term investment properties |
FAC Logistique tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | fac-logistique.com FAC Logistique, a French company founded in 1996 that specializes in the outsourcing of purchasing and logistics. Operating as a central purchasing office, the firm helps businesses optimize their supplier base, manage inventory, and significantly reduce operational costs. Headquartered in Grand-Couronne with additional agencies across France, the company leverages expert buyers to simplify supply chain processes and act as a dedicated "center of savings" for its clients |
Comp Trading Co tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | ctc.co.th Comp Trading Co., Ltd. (CTC), a premier Thai IT solutions and services provider founded in 1985 by former IBM engineers. The company specializes in enterprise IT infrastructure, data center solutions, cybersecurity, and comprehensive system maintenance. Today, CTC serves as a strategic technology partner for businesses, delivering disaster recovery, network support, and IT consulting services |
Mondottica tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | mondottica.com zoominfo.com/c/mondottica-ltd/346397915 Mondottica, a leading global eyewear company specializing in the design, production, and worldwide distribution of premium sunglasses and optical frames. Headquartered in London, the firm is renowned for managing an extensive portfolio of prestigious international fashion and lifestyle brand licenses. They combine innovative design with high-quality craftsmanship to deliver luxury eyewear collections to global markets |
OSP HOLDING FRANCE tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | ospholding.com pappers.fr/entreprise/osp-holding-france-838877108 838877108 OSP HOLDING (FRANCE) is an active French company founded in 2018 and managed by APInvest France, with a substantial share capital of over €14.4 million. It specializes in the design and assembly of industrial process control equipment, as well as the development and maintenance of software for parking management systems. The company employs between 50 and 99 people and is headquartered in Boulogne-Billancourt |
NATURGHIACCIO tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | naturghiaccio.it dnb.com/business-directory/company-profiles.naturghiaccio_srl.eae47436d39ec78b7abc7007a3637507.html Naturghiaccio, an Italian company founded in 2013 that specializes in the production and distribution of high-quality, certified food-grade ice. Operating with a fully automated plant, they supply premium packaged ice to the Ho.Re.Ca. sector, supermarkets, and event organizers across Italy. The company is an official member of the European Packaged Ice Association (EPIA), ensuring strict quality and safety standards for their products |
Indra Group tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | indracompany.com zoominfo.com/c/indra-sistemas-sa/136495916 Indra, a leading Spanish multinational technology and consulting company. It specializes in innovative solutions for defense, aerospace, air traffic management, smart mobility, and digital transformation (via its Minsait brand). The company serves as a strategic technological partner for governments and major corporations worldwide, driving modernization and security across critical sectors |
Climax Technology tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | climax.com.tw zoominfo.com/c/climax-technology-co-ltd/440165694 Climax Technology Co., Ltd., a Taipei-based company founded in 1985 that specializes in smart security systems and telecare solutions. For over three decades, the firm has leveraged its telecommunications expertise to develop innovative hybrid security panels, emergency pendants, and long-term care alert technologies. Their comprehensive product line is designed to provide reliable safety, monitoring, and rapid emergency response for residential and healthcare environments globally |
Centre Ophtalmologique dErmont tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | ophtalmologie-ermont.com Centre Ophtalmologique d'Ermont, a specialized medical clinic in France dedicated to comprehensive eye care. The facility provides a full spectrum of ophthalmology services, including routine consultations, advanced diagnostics, and surgical treatments for various ocular conditions. The portal serves as a convenient hub where patients can access health information, manage their appointments, and connect with a team of expert specialists |
Immling tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | immling.de is the official website for the Immling Festival, a renowned classical music and opera event held annually at Gut Immling in Halfing, Germany. Running primarily from June to August since 1997, it features high-quality opera productions and symphony concerts in a picturesque setting. In 2026, the festival celebrates its 30th anniversary, remaining a major cultural highlight in the Chiemgau region |
DHC Corporation tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | dhc.co.jp zoominfo.com/c/dhc-corp/372590440 DHC Corporation, a major Japanese health and beauty company renowned for its dietary supplements, skincare, and cosmetics. The brand is especially famous for its olive oil-based beauty products and high-quality, affordable nutritional supplements. The site serves as a primary hub for consumers to purchase their popular health, wellness, and beauty essentials |
Steegaa Interior tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | steegaa.com zoominfo.com/c/steegaa/408684474 Steegaa Interior, a Dutch company based in Helmond specializing in high-end custom interior design and construction.Established in 2000, the firm focuses on designing, manufacturing, and installing bespoke interiors for both private and commercial clients.They are highly regarded for their exceptional craftsmanship, attention to detail, and ability to deliver complete, turnkey interior solutions.Additionally, the company operates as a recognized training center, offering apprenticeships to foster the next generation of skilled interior builders |
https://sza.it/ tracker page ↗ | inc ransomfilter this group | · Jun 30, 2026 | No details on the leak post beyond the victim name. |
Forces tracker page ↗ | bavacaifilter this group | · Jun 30, 2026 | Organization with 28 emails extracted. Domain: forces.gc.ca |
Spector and Lenz, PC tracker page ↗ | pearfilter this group | · Jun 30, 2026 | Firm provides legal representation to clients facing disability, injury, or serious illness |
ORA Group Information tracker page ↗ | pearfilter this group | · Jun 30, 2026 | Specializing in retail and the point-of-sale experience |
Sociedad Latina tracker page ↗ | pearfilter this group | · Jun 30, 2026 | Support in education, civic engagement, workforce development, and arts and culture, specifically tailored for multilingual learners |
Penticton and District Society for Community Living tracker page ↗ | bavacaifilter this group | · Jun 30, 2026 | Canadian charity providing disability-related services. CRA Registration: 119090686RR0001 |
Advanced Business Systems tracker page ↗ | akirafilter this group | · Jun 30, 2026 | Advanced Business Systems, Inc. is a locally owned business serving the Quad Cities area, specializing in a wide range of office products and solutions including copiers, printers, IT services, phone systems, and furniture.We will upload 31gb of corporate data soon. Employee personal information (88 SSNs, passports and other docs), NDA, projects, contracts and agreements, customer information and so on. |
About Todd Hamaker & Johnson tracker page ↗ | akirafilter this group | · Jun 30, 2026 | Todd, Hamaker & Johnson, LLP is a professional tax and accounting firm based in Lufkin, Texas, dedicated to providing personalized services to both individuals and businesses. The firm offers a comprehensive range of services including tax, accounting, audit, and financial guidance.We will upload 40gb of corporate data soon. Lots of client and employee personal information (passports, SSNs, DLs and other information), detailed financials, client financials and other confidential client docs, contracts and agreements, etc. |
petradiamonds.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 207,000,000 Size: 50GB | THE DIAMOND ARCHIVE: Petra Diamonds Limited Documents PROLOGUE A complete employee directory with names, corporate emails, and direct phone numbers. The home address of the company's director. Contractor bank details. GPS coordinates of directors' travel routes. Official exploration licenses from South Africa's Department of Mineral Resources. Shaft hoist capacities and production data from the mines. A confidential JV agreement with a complete list of Petra's 54 licenses in Botswana and financial terms. A confidential letter regarding the closure and care-and-maintenance of the Helam mine. Confidential geological reports from competitors — Rio Tinto, De Beers, Firestone Diamonds. All of this comprises the internal documents of Petra Diamonds Limited , one of the world's leading diamond mining companies, listed on the London Stock Exchange (LSE). Petra Diamonds operates several of the world's largest kimberlite pipes, including the Cullinan mine, where the most famous diamonds in history were found. Its subsidiaries — Finsch Diamond Mine, Helam Mining, and Williamson Mine — operate in South Africa and Tanzania. In this article, you will be able to review only a portion of the data we have decided to disclose. Everything else will be available for download and independent review following the publication of the full archive. --- Part I. Who Is Petra Diamonds Petra Diamonds Limited is a publicly traded diamond mining company registered on the London Stock Exchange. Its operational headquarters are in South Africa: | Parameter | Value | |-----------|-------| | Registered Address | Block 3, Silver Point Office Park, 22 Ealing Crescent, Bryanston, Johannesburg | | Postal Address | P.O. Box 71007, Bryanston 2021 | | Telephone | +27 11 702 6900 | | Fax | +27 11 706 3064 / 3071 | | Website | www.petradiamonds.com | | Registration Number | 97/07770/07 | Assets and Mines: - Finsch Diamond Mine (Pty) Ltd — Barkly West, Northern Cape, South… |
orion4value.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 6,200,000 Size: 50GB | THE CERTIFICATE AS A VULNERABILITY: Documents of Orion Registrar Inc. PROLOGUE Financial reports and weekly cash flow statements. Company bank account details at First Citizens Bank. Payroll records and employee timesheets with names and hours worked. Audit reports with detailed vulnerability data from hundreds of clients. The complete contract with General Dynamics Mission Systems — one of the largest contractors of the U.S. Department of Defense — describing all 24 facilities and their headcounts. ISO certification requests from U.S. Army facilities. Internal correspondence with names, phone numbers, and corporate emails of all employees. Complaints about clients caught in fraud schemes who continued to carry the Orion stamp. All of this comprises the documents of Orion Registrar Inc. , a U.S.-based ISO accreditation body headquartered in Arvada, Colorado. The company is accredited by ANAB (American National Accreditation Board) and issues certificates of conformity to ISO 9001, AS9100, ISO 14001, ISO 45001, ISO 13485, and other standards — to enterprises throughout the United States and abroad. The nature of Orion's business makes this leak particularly dangerous: an auditor by definition gains access to the internal processes, vulnerabilities, and organizational structure of each client. Data from manufacturing companies, defense sector suppliers, Army facilities, and critical infrastructure sites. In this article, you will be able to review only a portion of the data we have decided to disclose. Everything else will be available for download and independent review following the publication of the full archive. --- Part I. Who Is Orion Registrar Inc. Orion Registrar, Inc. — a certification body (Registrar / Certification Body) accredited by ANAB. Physical office address: 7502 W. 80th Ave., Ste. 225, Arvada, CO 80003 . Mailing address: PO Box 745070, Arvada, Colorado 80006-5070 . Website: www.orion4value.com . Corporate email… |
clc-tn.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 6,300,000 Size: 99GB | City Lumber Company: Building Materials in Tennessee — What Lies Behind the Small Sign --- PROLOGUE In our possession — internal documents of City Lumber Company (CLC) , dated 2021–2026. An IT registry dated May 11, 2026: login credentials, workstation passwords, and Office 365 passwords for 22 employees and 4 service accounts — in a single table, in plain text. Corporate email addresses @clc-tn.com. A complete IP address map of the entire network. Printers by office. Medical documentation for employee Felipe Orozco: referral for left heart catheterization dated January 29, 2025, diagnosis, cardiologist's name, clinic name, SSN (last 4 digits), date of birth, home address. The document is stored in the corporate archive. BCBS documents for 2026 : rate sheets for 30 employees with full names and coverage parameters. Separate enrollment PDFs — containing SSNs, dates of birth, addresses, personal email addresses, and life insurance beneficiary names. Phone directory dated January 21, 2026: personal mobile numbers of 19 employees, including management. The same document contains a separate contact block for AMS , listing the VP Finance and another CLC top manager. Hot List dated June 15, 2026: approximately $120,000 in aged inventory at dealer cost — prices that suppliers do not permit to be published. Unbilled Spec Orders dated January 31, 2026: $259,195.66 in goods received from suppliers but not yet invoiced to customers. 358 line items. Subcontractor names. Key Custody Log dated April 2024: who has access to which premises. Including employees no longer on staff. Christmas gifts 2024 : customer list by salesperson — 40+ contractor names with clothing sizes. Co-op funding from suppliers totaling $7,875. All of this comprises the working documentation of a small building materials dealer in West Tennessee. 30 employees. Three locations: Jackson, Dyersburg, W. Lafayette Showroom. --- Part I. Who Is City Lumber Company City Lumber… |
wilfley.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 26,300,000 Size: 410GB | SEAL FAILURE A company that builds pumps for chemical and defense production — and undertakes to contain aggressive media under pressure — could not contain its own documentation. --- PROLOGUE We have the archive of A.R. Wilfley and Sons, Inc. — a privately held American manufacturer of centrifugal pumps for the mining, chemical, metallurgical, and defense industries, founded in 1919 and still operating today. Inside — commercial invoices and customs declarations, internal correspondence and technical specifications, HR documents with employees' medical data and Social Security numbers, banking details for international transfers, quality inspection records, environmental discharge permits, defense contracts, and export declarations. Banking details for international transfers , printed on every proforma invoice: ANB BANK, ABA 107001232, SWIFT AMNTUS51, Account 2000016785. Alongside them — the names of contact persons and payment amounts. This data set is sufficient for a Business Email Compromise attack. A letter from the Director of Engineering and Quality, Greg S. Highfill, PE , in which he states in writing that in-process inspection " does not work " — during a period when the company was supplying pumps for explosives manufacturing, defense facilities, and aggressive chemical media. TSA SENSITIVE SECURITY INFORMATION documents , stored in the same body of files as HR forms and commercial invoices. And credentials for the closed ThyssenKrupp / CF Industries procurement portal — transmitted in plain text by email and left sitting in the documentation. An invoice marked "DON'T SEND," whose END USER field reads: CONOCO PHILLIPS — ANZAC, AB . Alongside it — documents for pumps for CNOOC Petroleum (China's state oil company, an oil-sands site in Alberta), Nutrien (the world's largest potash producer), Glencore , and BAE Systems . Forms with employees' Social Security numbers , medical diagnoses including HIV status, addictions, and… |
Chamco tracker page ↗ | qilinfilter this group | · Jun 30, 2026 | Manufacturing |
Hemmersbach GmbH & Co. KG tracker page ↗ | qilinfilter this group | · Jun 30, 2026 | Software |
Medlink Georgia tracker page ↗ | cmd organizationfilter this group | · Jun 30, 2026 | We have proudly been serving northeast Georgia since 1976. As a federally qualified health center, we are able to offer uninsured and underinsured patients a sliding fee scale. No one is denied services due to lack of income or insurance status. At MedLink Georgia, we strive to provide comprehensive, coordinated, and continuous care to all our patients. We offer a broad array of primary and preventive care services for patients of all ages, including screening, diagnosis, and management of chronic illnesses. |
joyconstructionnyc.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 37,400,000 Size: 261GB | Joy Construction Corp: $1.3 Billion in Affordable Housing — and $8.7 Million to a Shareholder in Six Months --- PROLOGUE Joy Construction Corp. — a construction S-Corporation, 40 Fulton Street, 21st Floor, New York. Owners and officers — Amnon Shalhov and Nisan Lobel. The company builds affordable housing on government subsidies. The documents span the period from 2021 to May 2026: financial statements, statements for thirty-plus accounts, audited WIP reports, payroll registers, wire transfers to Israel, court cases, and closing documents for NYC HDC deals worth tens of millions of dollars. In this article you will be able to review only a portion of the data we have decided to make public. Everything else you will be able to download and examine for yourself once the full archive is published. --- Part I. Who Joy Construction Are Joy Construction Corp. — a construction S-Corporation. Address: 40 Fulton Street, 21st Floor, New York, NY 10038 . Specialty — residential and commercial construction in the New York metropolitan area. Predominantly affordable-housing program projects (LIHTC, HPD, HUD). Fixed-price contracts running more than a year. Owners and officers — from court documents: | Name | Role | |-----|------| | Amnon Shalhov | CEO and co-owner of Joy Construction Corp. | | Nisan Lobel | Co-owner and manager of Joy Construction Corp. | | Isaac Schwartzberg | Primary contact, [email protected] — contract author | | Priyanka Raul | Digital signatory of agreements, [email protected] | | Gina Gojcaj | Document preparation, PM | The Shalhov and Lobel names are established from a federal case, where both are named as defendants alongside Joy Construction Corp. Amnon Shalhov signed an agreement with OSHA as President. A money-market account tied to Amnon Shalhov. The company has separate bank accounts and LLCs under the names: Joy Management YYY Corp , Joy - Amnon MM , Joy Bank Leumi Brokerage , Joy FX , five certificates of… |
rcfassoc.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 5,000,000 Size: 39GB | R.C. FIELDS & ASSOCIATES: Client Data, Hidden Development Risks, and Uninvestigated Security Incidents PROLOGUE Inside: signed client contracts with full financial terms. Internal employee compensation rates. Geotechnical reports on soil conditions beneath development sites. Confidential plans for future residential projects before any public announcement. A complete ten-year personnel history with documented security incidents. Legal documents covering hundreds of properties dating back to 1944. This article covers only a portion of the data we have chosen to disclose. Everything else will be available for download and independent review once the full archive is published. --- Part I. Who R.C. Fields & Associates Are R.C. Fields & Associates, Inc. is a professional corporation specializing in engineering, surveying, and land development services. Address: 625 N. Washington Street, Suite 250, Alexandria, VA 22314 Phone: (703) 549-6422 Website: www.rcfassoc.com The firm is a member of the Engineers & Surveyors Institute, Inc. (ESI) — the organization that administers Fairfax County's expedited plan review program (Designated Plans Examiner, DPE). Clients include private developers, property owners, Fairfax County government agencies, and VDOT. Key individuals: - Andrea Spruch — Principal, signed client contracts - Wim J. De Sutter — Licensed surveyor, license no. 3462, signed survey certifications - Taylor Doyle, Vince McHale — Project managers --- Part II. A Hidden Soil Problem: What a Developer Would Rather Not Know Too Soon One of the most critical findings in the archive is not financial data or personnel records. It is a geotechnical report — the kind that typically stays strictly within the project team. This is a contract between TERRA Engineering Services, PLC and RCF client Patrick Kessler (Kessler Real Estate Group, LLC) for geotechnical investigation of the site at 8734 Lukens Lane, Alexandria, VA (Tax Map 110-1-((1))… |
ilex-paysages.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 5,000,000 Size: 116GB | LANDSCAPE ARCHIVE: How Ilex Paysages et Urbanisme Stores Its Own — and Others' — Secrets PROLOGUE Thousands of internal documents. Multi-million-euro contracts. Employee personal data including Social Security numbers and banking details. Payment records of private individuals. Internal server paths to French government systems. Internal correspondence. Cost estimates for contracts worth tens of millions of euros. Financial reports on projects in Marseille, Lyon, Nantes, Vénissieux, and more than a dozen other French cities. Budgets with employee hourly rates. Consolidated contract summaries with public-sector clients. Personal documents — including account numbers and insurance certificates. Scanned receipts of private individuals with full payment details. This article covers only a portion of the data we have chosen to disclose. Everything else will be available for download and independent review once the full archive is published. --- Part I. Who Ilex Paysages + Urbanisme Are Three words. One firm. Twenty years of public contracts. Ilex Paysages et Urbanisme is a French landscape architecture and urbanism agency, headquartered in Lyon, 69007, rue Garibaldi. Their specialty: designing public spaces, eco-districts, and concerted development zones (ZAC — Zones d'Aménagement Concerté) for municipalities and public-sector developers. Clients and partners: Établissement Public d'Aménagement Euroméditerranée (Marseille), Métropole de Lyon , Nantes Métropole , Euralille , and the municipal governments of dozens of French cities. Subcontractors include the firms Atelier Lion and François Kern , engineering company Egis , and scientific partner CNRS Montpellier . Their contract base is public procurement: negotiated procedures under Article 104-1-9 of the French Public Contracts Code (CMP), public works supervision contracts (MARCHÉ DE MAÎTRISE D'ŒUVRE), and ZAC contracts worth tens of millions of euros. One contract, one public-sector… |
owensborograin.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 35,600,000 Size: 171GB | PROCESSING: GRAIN IN SOMEONE ELSE'S MILL PROLOGUE Tax returns filed with the IRS under threat of "fine or imprisonment." A grounding audit commissioned by Cargill itself — marked confidential — documenting critical violations in a zone where n-hexane vapors are continuously present at working concentrations. Monthly grain position reports marked "Not subject to public disclosure," showing $38–44 million in open obligations without a single dollar of collateral. A complete biodiesel delivery history from the facility's internal ERP system: 10 million gallons over two months, eleven buyers — including Cargill's own trading division purchasing from its own subsidiary. Banking details: account number, ABA routing, SWIFT. Three separate legal entities filing taxes under one roof. A production permit issued in the name of one specific individual. Contracts marked "Cargill Confidential. No copying or distribution." This article contains only a portion of the data we have chosen to disclose. Everything else will be available for download and independent review after the full archive is published. --- Part I. Who Is Owensboro Grain Owensboro Grain Company LLC is a soybean processing complex in Owensboro, Kentucky. - Registered address: 822 E 2nd Street, Owensboro, KY 42302 (P.O. Box 1787) - Production facility: 1145 Ewing Road, Owensboro, KY 42301 - EIN: 61-1394346 | DUNS: 001947068 - Subsidiary/affiliated entity: Owensboro Grain Holding Company, Inc. , EIN: 61-0300050 Product line: soybean meal (HiPro and MidPro), lecithin, refined oils, biodiesel, glycerin. Key Personnel: | Title | Name | Contact | |-------|------|---------| | Project and Engineering Manager | Matt Thompson | [email protected], 270-686-6583 | | Operations Lead / VP | Brian Reid | [email protected] | | Edible Oils Facility Manager | Dustin Merritt | [email protected], 270-686-6681 | | Procurement Manager | Jeremy S. Coomes |… |
infinedi.net tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 17,900,000 Size: 86GB | Clearinghouse The company doctors pay to keep their patients' data safe. This article presents only a portion of the materials from the archive now in our possession. The full dataset — 86 GB — will be made available for independent review at a later date. --- Prologue There is a link in the American health insurance chain that most people never see and never name. Every time a doctor bills an insurance company — for a visit, physical therapy, a lab test, an X-ray — that bill travels somewhere before it reaches the insurer. It passes through a clearinghouse : a medical claims processing hub. The clearinghouse receives the bill, validates the format, assigns codes, and routes it forward. This work is invisible, but without it the system stops. A physician who uses a clearinghouse signs a Business Associate Agreement. That contract establishes one thing: the patients' names, diagnoses, policy numbers, and billed amounts — all of it passes into the clearinghouse's hands and must remain in a protected environment. The requirements come from HIPAA — the Health Insurance Portability and Accountability Act. Federal law defines Protected Health Information (PHI) and requires business associates to treat it as regulated data: segregated storage, access controls, encryption, audit trails, incident response plans. The penalties for violations run from $100 to $50,000 per documented incident, up to $1.9 million per year within a single violation category. When intent is proven, criminal liability applies: fines up to $250,000 and up to ten years in federal prison (42 USC 1320d-6). This article is about Infinedi, LLC of Tulsa, Oklahoma. Since 1986, the company has processed medical insurance claims for hundreds of medical practices across the country. Its website declares HIPAA compliance. In the archive now in our possession, it stored patient data alongside payroll records, corporate agreements, and the personal Social Security number of its… |
vcnyhome.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 176,000,000 Size: 1TB | THE VCNY HOME ARCHIVE The company that sells home comfort failed to protect its own home — its internal data. --- PROLOGUE We have an archive of data belonging to VCNY Home — Textiles From Europe, Inc. — a New Jersey textile importer supplying bedding, curtains, throws, and rugs to Walmart, Dollar General, Costco, and dozens of other American retailers. The archive totals 1.08 TB . Inside: emails, bank confirmations, invoices, Walmart settlement agreements, customs declarations, insurance policies, factoring contracts, and internal management correspondence. The complete digital archive of the company spanning more than two decades — from 2003 to 2026. Correspondence about deliberate price inflation for Sears. Certificates of origin issued retroactively . A company account at an Israeli bank that received $2,380,333.41 in IRS refunds in 2025. A wire transfer from the Bahamas. A wire transfer from Saudi Arabia to a non-standard account. A $6 million insurance policy. Fifteen settlement agreements with Walmart totaling over $4.6 million. This article presents only a portion of the data selected for publication. The full archive is planned for public release for download and independent review at a later date. --- Part I. Who They Are Corporate Structure The legal core — Textiles From Europe, Inc. Incorporated in New Jersey. EIN: 11-2852364 . Three names in the market, one tax ID: | Trade Name | Where Used | |---|---| | Textiles From Europe, Inc. | Walmart (US), Lowe's, customs, banks, insurers | | Victoria Classics | Kmart, Sears, Lowe's, JCPenney, invoices and W-9 | | VCNY Home | Costco, consumer market, vcnyhome.com | | Textiles From Europe DBA Victoria-Classics | Remittance: Box 347123, Pittsburgh PA 15251-7123 | Two addresses used simultaneously: - 5901 West Side Avenue, 6th Floor, North Bergen, NJ 07047 — in agreements with Wells Fargo, Coface, Israel Discount Bank, and the majority of customs documents - 2170 Route 27 (Lincoln… |
Port Angeles Composite tracker page ↗ | cmd organizationfilter this group | · Jun 30, 2026 | Port Angeles Composite LLC (PAC) is a leading supplier of advanced structural composite assemblies and components, serving the global commercial and business aerospace markets. Originally founded in 1996 as Angeles Composite Technologies, PAC was acquired by Honda Aircraft Company in October 2025. The company operates from a state-of-the-art manufacturing facility on Washington State’s Olympic Peninsula, supporting customers such as Boeing, Bombardier, and Honda Aircraft with high-quality composite structures for new aircraft systems. PAC's advanced manufacturing processes and technology ensure the highest quality composite products, offering tailored solutions to meet the unique requirements of each aerospace customer. |
www.maytrucking.com tracker page ↗ | embargofilter this group | · Jun 30, 2026 | May Trucking Company is a family-owned interstate transport carrier founded in 1945, headquartered in Brooks, Oregon. They provide dry freight and temperature-c... |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.