SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

Neueste Einträge

Filter zurücksetzen
n0nCompany #108CA
kein Firmenname im Eintrag

Beschreibung der Täter

media production (audio description and accessibility media) · Montreal, Quebec, Canada

Herkunft

inc ransombereskinparr.com smartbiggar.caCA

Herkunft

mimoriOpenTextCA

Beschreibung der Täter

OpenText Corporation is a Canadian company that develops and sells enterprise information management software. OpenText can help you tackle the most complex digital transformation programs with confidence. With the worlds most complete and integrated information management platform, we empower our customers to organize, integrate, and protect data and content as it flows through business processes inside and outside their organization. Sector: Technology - Files: 94306 - Publication planned: 2026-10-29T19:36:20Z

Herkunft

qilinGardaWorldCA

Beschreibung der Täter

N/A

Herkunft

playNew Tec Tool LimitedCA

Beschreibung der Täter

Canada

Herkunft

thegentlemenSkin CenterCA
healthcare

Beschreibung der Täter

skincenter.com Skin Center dermatology clinic in Fort Lauderdale, FL (6550 N Federal Hwy, Suite 320) with 40+ years of practice roots (formerly Dr. Roger Stewart's clinic, led by Dr. Barry Galitzer since the 2010s). Full spectrum: medical dermatology, Mohs surgery for skin cancer, cosmetic injectables/lasers (Botox, CoolSculpting, Ultherapy, Fraxel), an Acne Center, aesthetics, and massage. The hidden headline: since 2021 it's owned by Forefront Dermatology (125+ clinics, backed by Canadian pension fund OMERS Private Equity) — billing, records, and HR run through the network, not the local brand. Doctors rate excellent (Galitzer 4.7/5 on Healthgrades; Castle Connolly Top Doctor), but admin/office process is the weak spot — complaints cite long waits, forgotten patients, and a brusque bedside manner. Team: ~10 providers (Galitzer, Fien, Perrotto, Soro, White, Brown + PAs), plus a second office in Pompano Beach; 200+ patients/day, 10,000 sq ft.

Herkunft

thegentlemenCAS Paper MillCA

Beschreibung der Täter

caspapermill.com C.A.S. Paper Mill Co., Ltd. is a Thai paper manufacturer in Singburi (est. 1990, operating since 1994), part of the Charoen Aksorn Group — Thailand's largest paper distributor, backed by Bangkok Bank and Vacharaphol. It produces 130,000 MT/yr of newsprint, printing and kraft paper plus 30,000 MT/yr of tissue (Toscotec line, 2022), from 100% recycled US/Canadian waste paper. Zero-liquid-discharge since 1994, 10 MWp floating solar; ISO 9001/14001/45001, TIS 758, FSC C125297. Exports: Vietnam, Philippines, Pakistan. Revenue est. $80–150M (~300 staff), but fell ~10% in 2025 as newsprint demand declines. Main red flag: 2018 villagers' protest over alleged coal pollution affecting 10,000+ residents, and denial of a license for the coal expansion.

Herkunft

thegentlemenServiceMaster of OttawaCA

Beschreibung der Täter

svmottawa.ca ServiceMaster of Ottawa Canadian property restoration and commercial cleaning company (legal entity 1351120 Ontario Inc.), a ServiceMaster franchise since 1969 — owned since 2006 by John Cooke. HQ at 180 Wescar Lane, Ottawa (Carp/Richmond), ~140 staff, 24/7/365 emergency service across the National Capital Region. Core: water/fire/mold remediation, asbestos removal, reconstruction, odor control, janitorial — backed by IICRC techs, HCRA license B62544, Tarion, WSIB+liability, Restore 365/Xactimate. Record: 40,000+ customers served; Cooke won ServiceMaster's "Brand Ambassador of the Year" 2026, "Mid-Market Business of the Year" (Ottawa Chamber, 2008). Reputation mixed (3.8–4.3/5, 313+ reviews) — excellent on small jobs and named techs (Ryan Potestio, Jeff Jerome)

Herkunft

akiraShediac Lobster ShopCA

Beschreibung der Täter

Shediac Lobster Shop Ltd. specializes in supplying premium frozen Atlantic lobster to restaurants, food distributors, and global markets. With over 70 years of processing expertise, the company offers a diverse and customizable line of cold-water lobster products, ensuring high quality and reliability.We will upload 10gb of corporate data soon. Employee information (passports, SSN numbers, complete forms), client information, contracts and agreements, confidential files, financials, payment details, NDA, etc.

Herkunft

hyflockYYC AdvisorsCA
finanzen

Beschreibung der Täter

YYC Advisors (YYC Group) is a long-established local accounting and comprehensive business consulting group in Malaysia, focusing on a "one-stop" service for tax + audit + business advisory. It mainly serves SMEs and growing companies and also deals with cross-border expansion, M&A succession, and digital software. 1. Basic Overview Founded: 1974, by Yap Seong Fatt, starting from a single table in Pudu, Kuala Lumpur Headquarters: No.32 & 34, Lorong Thambi 2, off Jalan Brunei, 55100 Kuala Lumpur, Malaysia; Phone: +603‑9078‑2868 Size: According to the official site, 1,100+ employees, serving 20,000+ clients, conducted 7,000+ training sessions; offices cover major Malaysian cities like Kuala Lumpur, Selangor, Penang, Johor Bahru, as well as Singapore, and some sources mention Hong Kong Position: One of the top ten local accounting firms in Malaysia, with a focus on the SME market Capital background: In 2019, OCBC Bank invested in its non-audit business; later, it reached a strategic investment/growth partnership with Singapore's SeaTown Private Capital for professional services M&A expansion in Southeast Asia Website: yycadvisors.com 2. Core Services (by line) Tax: Corporate/personal

Herkunft

dragonforceCanadian Mennonite University (CMU)CA

Beschreibung der Täter

Canadian Mennonite University (CMU) is a Christian institution in Winnipeg, Manitoba, offering undergraduate degrees in various fields such as arts, business, music, and sciences, along with three graduate degree programs. The university focuses on a small community environment that fosters academic, social, and spiritual growth, welcoming students from diverse backgrounds and beliefs. CMU emphasizes preparing students as skilled problem solvers and leaders committed to positive change in their communities and beyond. It offers financial aid and supports approximately 50% of its students through scholarships and bursaries

Herkunft

emperadorSpelman LogisticsCA
transport

Beschreibung der Täter

Dear Spelman Logistics, We are now in possession of 1.2M contact records (emails and phone numbers), 245K carrier profiles complete with EIN and SSN, 57K bank accounts including routing numbers, 334K live document URLs, and 4.5M carrier registry entries pulled from your MVMNT TMS. Your exposure extends well beyond your own walls. We have also reached into the systems of your partners, including: ALG Canada Inc Line Transportation Inc Maverick Acquisition Ventures Inc Reliable Freight Solutions Rhode Sense and more. If you would rather not have us contact your partners and make life difficult for your employees, we suggest you pay the following: $500,000 in BTC or XMR. You will shortly receive an email explaining how to reach us. If that fails, contact us at: Email: emperadorlol@proton.me / xdlmfao@morke.ru Session: 05651c7323273b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Manufacturing, Transportation]

Herkunft

n0nCompany #14CA
kein Firmenname im Eintrag

Beschreibung der Täter

Financial services · Canada | [HONORED: settled 2026-10-07 17:00 UTC · before their deadline]

Herkunft

inchsc.mb.caCA
healthcare

Beschreibung der Täter

The Health Sciences Centre in Winnipeg, one of the largest medical institutions, was targeted by us that resulted in the largest data breach among healthcare institutions. Our group chose not to completely disrupt the facility’s operations, recognizing the potentially devastating consequences that such an action could have had on patients’ lives and health. Nevertheless, Health Sciences Centre management stated that no sensitive data had been affected, despite having been informed otherwise. The data included, but was not limited to, the following information: Patient medical records: Full name, date of birth, address and phone number Hospital medical record number Diagnoses, medical history, allergies and medications Laboratory results, imaging reports Appointment dates, treatment details and physician information. Employee and healthcare professional information: Names, contact details, dates of birth and employee numbers Employment, payroll and banking information Professional credentials, work schedules and departmental assignments. Financial and insurance information: Billing records and payment histories Insurance or benefits claim information. Confidential ho

Herkunft

arcus mediamblllpCA

Herkunft

cry0Anaergia | World-Leading Anaerobic Digestion SolutionsCA
energie

Beschreibung der Täter

Target: Anaergia Inc. — 809 Harrington Ct, Burlington, ON L7N 3N...

Herkunft

stormCooperative Des Techniciens Ambulanciers De La MonteCA
healthcare

Beschreibung der Täter

Healthcare | Longueuil, Quebec, Canada | CETAM is the largest employer in prehospital care in Montérégie, comprising over 400 ambulance technicians and paramedics. Founded in 1988, it operates on a cooperative model where all workers are members, allowing them to participate in decision-making and benefit from annual financial returns. The organization serves a wide territory, responding to nearly 20,000 calls annually across multiple municipalities. CETAM is dedicated to providing high-quality emergency medical services to the local population. The company headquarters is located in 310 Rue Lawrence, Greenfield Park, QC J4V 2Z6, Canada. 201-500 Employees | Deadline: 2026-10-15T14:13:06.864Z

Herkunft

the gentlemenNorthwestern PolytechnicCA

Beschreibung der Täter

nwpolytech.ca zoominfo.com/c/northwestern-polytechnic/1310919676 Northwestern Polytechnic (NWP) is a publicly funded polytechnic institution founded in 1966 in Grande Prairie, Alberta, serving 3,800+ students (2,227 full-load equivalents) with ~372–438 employees under President & CEO Dr. Vanessa Sheane (since 2023). Its annual budget is ~$79.5M CAD (2026-27), funded 62.5% by government grants and 21.9% by student tuition, with total net assets of $49.8M (CRA data). NWP operates across 4 schools (Applied Science & Technology, Business & Education, Health, Skilled Trades) offering apprenticeships, diplomas, and a new Bachelor of Education degree, plus unique research assets like the National Bee Diagnostic Centre — Canada's only bee diagnostics lab (NSERC Technology Access Centre) — and a 40,000 sq ft Health Education Centre inside the Grande Prairie hospital. The campus features iconic Douglas J. Cardinal architecture (winner of the Prix du XXe Siècle)

Herkunft

the gentlemenAsessippi Ski ResortCA

Beschreibung der Täter

asessippi.com zoominfo.com/c/asessippi-ski-resort/2900411 Asessippi Ski Area & Resort is a private, family-owned ski resort founded in 1998/99 in Inglis, Manitoba, Canada, owned by Daymon Guillas (Russell Inn Group) and managed by GM Richard Crosthwaite. It generates estimated revenue of $3.6–5M/year with ~30 year-round staff scaling to 150 in winter (300+ across the Russell Inn ecosystem), attracting 60,000–85,000 visitors per season including 15,000 school children. It is the largest ski resort in Manitoba and the Canadian Prairies — 26–27 trails across 200 acres with the biggest vertical drop on the prairies (121m), 3 chairlifts, night skiing with LED lights, and 100% snowmaking coverage. Built with $10M total investment ($7M private + $3M government), it offers year-round activities: skiing, tubing, snow biking, adaptive CADS-certified programs (11 instructors), summer weddings, conferences, spa, and ski-in/ski-out cottage real estate (Cottage Cove).

Herkunft

the gentlemenHusky LteeCA
telekommunikation

Beschreibung der Täter

huskyboutique.com zoominfo.com/c/husky-ltée/457918337 Husky (Chaussures HUSKY Ltée) is a Quebec family-owned workwear and safety footwear retailer founded in 1969 in Joliette by Jean-Louis Drainville, now run by the third generation (CEO François Drainville, President Hugo Drainville). It employs ~15–50 people from its Saint-Paul headquarters, with estimated revenue of $5–15M/year (private, self-funded). Core business: retail and B2B sales of work boots, safety apparel, and PPE (Carhartt, Ariat, Timberland, Helly Hansen, Big Bill), plus an in-house atelier producing 50,000+ custom embroideries, prints, and promotional products per year for corporate clients. Its signature service is the HUSKY Mobile Store (since 1985) — a fully equipped truck that travels to job sites and factories for on-site employee fittings. In 2026 the company completed a major digital transformation: Shopify Plus + B2B Protocol + ServiceCentre ERP, serving four buyer segments (consumers, school programs, company

Herkunft

the gentlemenSaskatoon Tribal CouncilCA

Beschreibung der Täter

sktc.sk.ca zoominfo.com/c/saskatoon-tribal-council-inc/215335121 Saskatoon Tribal Council (STC) is a non-profit tribal council founded in 1982 in Saskatoon, Saskatchewan (Treaty 6), uniting 7 First Nations with 14,000+ members. Led by Tribal Chief Mark Arcand (since 2017), STC employs 500–600+ people across 5 corporations (health, housing, urban services, investments, community development). Head-body revenue is $14–17M/year (federal ISC funding being the largest source), while the whole group is estimated at ~$45M. Its biggest asset is a stake in Dakota Dunes Casino & Resort ($70M facility, 620+ slots), with its development arm DDCDC generating a record $10.1M gaming revenue in 2023/24 (+33% YoY) and $75M reinvested into communities over 10 years (5,300+ projects). Key operations: 453+ housing units (1,068 waitlisted applications), an Emergency Wellness Centre (2,501 admissions), 17,460 health clients, and employment services placing 276 people in jobs. STC holds Accreditation Canada.

Herkunft

n0nCompany #2CA
kein Firmenname im Eintragfinanzen

Beschreibung der Täter

Financial services · Canada | [PENDING EXPOSURE: data publishes 2026-10-06 15:00 UTC]

Herkunft

n0nCompany #2CA
kein Firmenname im Eintragfinanzen

Beschreibung der Täter

Financial services · Canada | [PENDING EXPOSURE: data publishes 2026-10-06 15:00 UTC]

Herkunft

stormNipigon District Memorial HospitalCA
healthcare

Beschreibung der Täter

Nipigon District Memorial Hospital offers a range of healthcare services including diagnostic imaging, lab services, physiotherapy, and an assisted living program. The hospital aims to serve patients and residents in the Nipigon district, focusing on community health and well-being. They also provide specialized services such as Ontario Telemedicine Services and Meals on Wheels. The hospital is committed to strategic planning for future healthcare needs, as outlined in their CARE 2030 initiative. The company headquarters is located in 125 Hogan Road, Nipigon, ON P0T 2J0, Canada. 51-200 Employees

Herkunft

stormNipigon District Memorial HospitalCA
healthcare

Beschreibung der Täter

Healthcare | Nipissing District, Ontario, Canada | Nipigon District Memorial Hospital offers a range of healthcare services including diagnostic imaging, lab services, physiotherapy, and an assisted living program. The hospital aims to serve patients and residents in the Nipigon district, focusing on community health and well-being. They also provide specialized services such as Ontario Telemedicine Services and Meals on Wheels. The hospital is committed to strategic planning for future healthcare needs, as outlined in their CARE 2030 initiative. The company headquarters is located in 125 Hogan Road, Nipigon, ON P0T 2J0, Canada. 51-200 Employees | Deadline: 2026-10-09T13:28:28.227Z

Herkunft

thegentlemenRotamacCA

Beschreibung der Täter

rotamac.ca Rotamac Inc. is a privately held industrial equipment distributor founded in November 2019 and based in Rosemère/Montreal, Quebec, Canada (283 rue de Normandie, Rosemère, QC J7A 1T4). It is a micro company of 1–10 employees, essentially built around owner-founder Joey Desrosiers (HEC Montréal, 20+ years in compressed air and rotating equipment). Revenue is not publicly disclosed (small private company), but its e-commerce arm canadacompressorparts.com carries ~43,675 SKUs of non-OEM compressor parts (Atlas Copco, Ingersoll Rand, CompAir compatible) shipping across Canada. Core business: sales representation and distribution of pumps, air/gas compressors, vacuum pumps and nitrogen/oxygen generators, focused on lowering Total Cost of Ownership

Herkunft

booba teamSoni Medical CentreCA
healthcare

Beschreibung der Täter

IT Services and IT Consulting Website: www.lakewoodmedical.ca Stolen data: 5.5 GB.

Herkunft

the gentlemenRotamacCA

Beschreibung der Täter

rotamac.ca Rotamac Inc. is a privately held industrial equipment distributor founded in November 2019 and based in Rosemère/Montreal, Quebec, Canada (283 rue de Normandie, Rosemère, QC J7A 1T4). It is a micro company of 1–10 employees, essentially built around owner-founder Joey Desrosiers (HEC Montréal, 20+ years in compressed air and rotating equipment). Revenue is not publicly disclosed (small private company), but its e-commerce arm canadacompressorparts.com carries ~43,675 SKUs of non-OEM compressor parts (Atlas Copco, Ingersoll Rand, CompAir compatible) shipping across Canada. Core business: sales representation and distribution of pumps, air/gas compressors, vacuum pumps and nitrogen/oxygen generators, focused on lowering Total Cost of Ownership

Herkunft

n0nMCAP — MortgageHub commercial lending platformCA
finanzen

Beschreibung der Täter

Mortgage securitization and servicing (Canada) · Canada

Herkunft

m3rxcpacb.comCA

Beschreibung der Täter

+1 (214) 402 -3723. Our Mission is to provide clients with ‘One-Stop Solutions’ for all their Accounting, Bookkeeping and Consulting needs. The firm focuses on ‘Experience, Expertise, Accuracy and Efficiency’. We are the trusted partner of many businesses for years and are not only helping them to track income and expenses but also providing comprehensive services which help them to increase the profit, control the cost and expand their business. Our flexible package helps keeping our services cost-effective Stolen: 446 GB 814,334 Files

Herkunft

qilinIslandCA

Beschreibung der Täter

Business Services

Herkunft

killsec3🇨🇦CA
healthcare

Beschreibung der Täter

Scanbo, based in Canada, develops handheld AI-driven medical diagnostic devices to transform primary care by enabling rapid, lab-free screening and vital health monitoring. Targeting healthcare providers, patients in remote or underserved areas, and individuals seeking at-home testing, the company offers an ultra-portable platform that delivers test results in under 5 minutes for parameters like ECG readings and blood protein markers. Unique benefits include affordability, accessibility without appointments, integration of nanotechnology, machine learning, and microfluidics for precise point-of-care diagnostics, plus an upcoming device-free AI solution using test strips, positioning Scanbo at the forefront of convenient, innovative healthcare technology.

Herkunft

metaencryptorEllisDon CorporationCA

Beschreibung der Täter

EllisDon Corporation is a leading Canadian construction and infrastructure services company. Founded in 1951, the company provides construction management, engineering, project development, and facilities management services across a wide range of sectors, including healthcare, transportation, commercial, industrial, government, and defense infrastructure. EllisDon operates across Canada and internationally.

Herkunft

  • ellisdon.com
  • Pfad auf der Leak-Seite: /0AFC:6e962334b3f9bd3665d4ea496be26396562b8bb7cce3b91d49e2319de0ddec80/0AFC:e22540fcaa5b4e6dd05ad61225e4fd61d8f89e7d8920
  • Gruppe bei RansomLook
  • Gruppe bei ThreatCluster
  • von SecBoard erfasst: 26.09.2026 · Land aus dem Text abgeleitet
clopCCCM-BC.CACA

Herkunft

qilinTextile CityCA

Beschreibung der Täter

Home Improvement & Hardware Retail

Herkunft

the gentlemenMetalware CorporationCA

Beschreibung der Täter

metalware.ca zoominfo.com/c/metalware-corp/57640606 Metalware Corporation is a Canadian manufacturer of industrial steel shelving and storage systems, based in Montreal, Quebec, and in business since the early 1950s. The company is best known as the inventor of boltless ("No-Bolt") shelving, patented in 1954 by founders Irving and Ben Levitt — a design that became the industry standard for order-picking warehouses. Still family-owned and led by second/third-generation owners (President Mark Levitt), Metalware produces its flagship Interlok No-Bolt line, E-Series widespan shelving, multi-tier/high-bay systems, shelf-supported mezzanines, and modular drawer solutions at its Montreal plant, selling through a network of authorized distributors across North America. Its reference clients include the Government of Canada (Canada Revenue Agency, Department of National Defence), Porsche, and Walmart

Herkunft

stormManroc DevelopmentsCA

Beschreibung der Täter

Manufacturing | Manitouwadge, Ontario, Canada | Manroc Developments Inc. is a leading full-service mining contractor specializing in the Alimak Raise Mining process, with over 30 years of experience in the industry. The company serves the international mining community, having completed over 70 projects across four continents and driven more than 65,000 lateral development meters. Headquartered in Manitouwadge, Ontario, Manroc is committed to building long-term relationships with clients by delivering on promises and ensuring project success through experienced personnel. They also offer a comprehensive training program to support career development in the mining sector. The company headquarters is located in 7 Black Road, Manitouwadge, ON P0T 2C0, Canada. 201-500 Employees | Deadline: 2026-10-06T07:18:52.000Z

Herkunft

arcus mediaSchneider’s ComputingCA

Herkunft

brain cipherxpera.caCA

Beschreibung der Täter

We have 20 GB of data belonging to this company. The data contains information such as employees' SINs, bank account details, salaries, addresses, dates of birth, RRSP/TFSA informa...

Herkunft

qilinIn The Company of HuskiesCA

Beschreibung der Täter

Advertising & Marketing

Herkunft

akiraBee Maid HoneyCA

Beschreibung der Täter

Bee Maid Honey Limited is the marketing arm of the Alberta Honey Producers Cooperative Limited and the Manitoba Cooperative Honey Producers Limited. Honey produced by beekeepers in western Canada is processed and packaged at Bee Maid's Winnipeg, MB and Spruce Grove, AB plants.We will upload 46gb of corporate data soon. Employee personal information (passports numbers, DLs, death certs and other HR files), financials, confidential internal files, projects, contracts and agreements, NDA and so on.

Herkunft

stormCanadian Mental Health AssociationCA

Beschreibung der Täter

Healthcare | Toronto, Ontario, Canada | The Canadian Mental Health Association provides mental health services and support. The Association offers advocacy, education, research, and services to persons experiencing mental illness throughout Canada and is headquartered in Toronto, Ontario. The company headquarters is located in 595 Montreal Road, Suite 303, Ottawa, ON K1K 4L2 Canada and 250 Dundas Street West, Suite 401, Toronto, ON, M5T 2Z5 Canada. 5K - 10K Employees | Deadline: 2026-09-20T13:21:48.000Z

Herkunft

krybitwww.metalware.caCA

Beschreibung der Täter

Metalware Corporation Inc. is Canada's leading industrial shelving manufacturer, founded in 1954, headquartered in Montr...

Herkunft

the gentlemenAir CanadaCA

Beschreibung der Täter

aircanada.com zoominfo.com/c/air-canada/3937344 Air Canada We have taken 51409 critical files! Canada's flag carrier and largest airline — founded in 1937 as Trans-Canada Air Lines, HQ'd in Montréal, ~37,000 employees, 45.3M passengers in 2025, and a founding Star Alliance member. Record revenue: $22.37B CAD in 2025 ($6.27B in Q2 2026 alone, +11%), but a fuel shock (+50.8% per litre) and $388M one-off charges pushed Q2 2026 to a $178M net loss — guidance cut, though load factor (87.5%) and Aeroplan (10M+ members), Cargo (+29%) and Sixth Freedom traffic stay strong. Its moat: the most aggressive fleet renewal in its history — A321XLRs with Canada's first lie-flat seats on a narrowbody, 787-10s and A350-1000s — unlocking "thin" long-haul routes no widebody could fly (Oslo, Shannon, Basel, Dubrovnik, Guangzhou) ahead of Super Bowl 2027 and the LA 2028 Olympics.

Herkunft

black nevasCOMPUTER COUNTRY AND NETWORKSCA

Beschreibung der Täter

A local Canadian IT company based in Stratford, Ontario, operating since 1983. It provides services to small and medium-sized businesses as well as private clients in the Stratford–St. Marys–Mitchell region and surrounding areas. Core services:Computer and laptop repairNetwork setup and supportServer installation and maintenanceVirus removal and system optimizationPOS systems (point-of-sale equipment)On-site serviceA small local service company with over 40 years of experience.

Herkunft

  • Pfad auf der Leak-Seite: /80fc5086-bf81-4cb1-beb4-ddf5c5b598d9
  • Gruppe bei RansomLook
  • von SecBoard erfasst: 09.09.2026 · Land aus dem Text abgeleitet
black nevasWestbrook Greenhouse Systems www.westbrooksystems.com serviced by an IT company Computer CCA
kein Firmenname im Eintrag

Beschreibung der Täter

A Canadian family-owned company (part of the Westbrook Group of Companies) founded over 50 years ago. It specializes in the design, manufacturing, and installation of commercial greenhouses and related equipment (structures, heating and ventilation systems, benches, and handling materials).Its headquarters and manufacturing facilities are located in the Niagara region (Beamsville, Ontario). It serves clients across North America and operates its own factory spanning approximately 80,000 square feet.

Herkunft

  • www.westbrooksystems.com
  • Pfad auf der Leak-Seite: /fadee59c-ae05-4149-a569-e553a06c5ec5
  • Gruppe bei RansomLook
  • von SecBoard erfasst: 09.09.2026 · Land aus dem Text abgeleitet
black nevasJack Rutherford Customs Brokers Ltd / The Rutherford Group www.therg.ca serviced by an ITCA
kein Firmenname im Eintrag

Beschreibung der Täter

Jack Rutherford Customs Brokers Ltd. is a Canadian customs brokerage company currently operating under the brand name The Rutherford Group. The company provides comprehensive logistics services, primarily: customs brokerage (import and export clearance, clearance through Canadian and US customs, compliance consulting, CARM, surety bonds, etc.). They have PIP (Partners in Protection) status.Transportation: shipping within Canada, the US, and internationally.Warehousing: bonded warehouses (including CBSA sufferance), pick & pack, storage, including FDA-certified warehouses in Port Huron, Michigan.The company was founded in 1974 by Jack Rutherford in Stratford, Ontario. Now a family-owned business (second generation – John Rutherford), it positions itself as a one-stop shop for cross-border logistics.

Herkunft

  • www.therg.ca
  • Pfad auf der Leak-Seite: /e3eb3b89-131b-4e57-83fd-3fcb58ac35c9
  • Gruppe bei RansomLook
  • von SecBoard erfasst: 09.09.2026 · Land aus der Domain abgeleitet
black nevasPortable Intelligence Inc www.portable-intelligence.com serviced by an IT company ComputerCA
kein Firmenname im Eintrag

Beschreibung der Täter

A Canadian IT company based in Markham, Ontario, founded in 2015. It develops software for warehouse management and automation (Warehouse Management Systems).Key products:RF Plus — a barcode scanning and inventory tracking system for ERPs (specifically Infor VISUAL)TED — a warehouse task management and tracking platformSolutions for forklift tracking, RTLS (Real-Time Locating Systems), and machine visionIt works primarily with manufacturers in North America.

Herkunft

  • www.portable-intelligence.com
  • Pfad auf der Leak-Seite: /334ea365-5531-4a9e-902e-8936568e0e87
  • Gruppe bei RansomLook
  • von SecBoard erfasst: 09.09.2026 · Land aus dem Text abgeleitet
stormFlexmasterCA

Beschreibung der Täter

Manufacturing | Richmond Hill, Ontario, Canada | Flexmaster, part of the Novaflex Group, specializes in a wide range of flexible ducting solutions including aluminum, stainless steel, and fabric ducting. Their product offerings also include innovative systems like the Platinum Flow gasketed duct and fume vent solutions. The company caters to various clients in the HVAC industry, providing essential accessories and insulation products. Flexmaster is committed to delivering high-quality, reliable ducting systems for diverse applications. The company headquarters is located in 20 East Pearce Street, Richmond Hill, ON L4B 1B7, Canada. 201-500 Employees | Deadline: 2026-09-22T20:50:10.000Z

Herkunft

stormMelitronCA

Beschreibung der Täter

Manufacturing | Guelph, Ontario, Canada | Melitron Corporation is a Canadian manufacturing company headquartered in Guelph, Ontario, specializing in contract manufacturing, precision metal fabrication, and electro-mechanical assembly. Founded in 1995, the company designs and manufactures durable metal enclosures, precision components, frames, racks, cable assemblies, and integrated enclosure systems for global OEMs. Melitron also develops and installs indoor and outdoor digital signage, self-service kiosks, menu boards, and customizable Level 2 EV charging stations. Its customers operate across communications, energy, healthcare, industrial, retail, restaurant, security, entertainment, and transportation markets. The company provides end-to-end services including engineering, prototyping, fabrication, finishing, assembly, supply-chain management, and logistics. The company headquarters is located in 404 Silvercreek Parkway North, Guelph, ON N1H 1E8, Canada. 51-200 Employees | Deadline: 2026-09-17T20:37:58.000Z

Herkunft

stormTapper Cuddy LLPCA

Beschreibung der Täter

Other | Winnipeg, Manitoba, Canada | Tapper Cuddy LLP is a full-service law firm based in Manitoba, specializing in civil litigation, family law, and commercial law. With over 40 years of experience, the firm is dedicated to providing personalized legal representation in a clear and understandable manner. They prioritize client relationships, viewing clients as people rather than cases, and aim to serve a diverse range of legal needs across more than 20 specialized practice areas. Tapper Cuddy LLP is committed to reconciliation and collaboration with Indigenous communities, reflecting their respect for the traditional territories they operate on. The company headquarters is located in 1000–330 St. Mary Avenue, Winnipeg, MB R3C 3Z5, Canada. 51-200 Employees | Deadline: 2026-09-18T13:14:56.300Z

Herkunft

stormPetrocare ConstructionCA

Beschreibung der Täter

Construction | Saskatoon, Saskatchewan, Canada | Petrocare Construction is a company founded on old fashioned principals - yet implementing cutting edge technology and state-of-the-art building methods, and we are proud of this. We have and continue to make a difference by "Teaming in Partnership" with our clients. Important to us is - what is important to you, namely: accurate job costing, timely progress reports, effective construction management, qualified staff, subcontractors and more. Because our team is in partnership with you, we will always work hard to maintain a solid, long-term relationship with you - that is our way of doing business. We understand the challenges of modern construction. We are pro-active in our response to the complex needs of environmental, technological and time sensitive issues. It is our clear focus to meet and exceed the needs of our clients. We are specialists in commercial, industrial, wholesale and retail petroleum facilities. Whether it be design/build construction, environmental remediation ordecommissioning we will serve your needs all over Western Canada. We are a company of people, equipment and technology that will provide the catalyst to

Herkunft

stormIntegra CastingsCA

Beschreibung der Täter

Manufacturing | Winkler, Manitoba, Canada | Integra Castings is an ISO 9001:2015 certified gray and ductile iron foundry that specializes in melting, molding, and core-making a variety of materials. As a division of The CTD Group, they focus on producing customized solutions for clients while adhering to strict quality assurance guidelines. Their capabilities include high production No-Bake lines for castings weighing up to 4,500 lbs and advanced quality control processes. Integra Castings serves industries requiring high-quality iron castings, including those needing specific material grades for structural and high tensile strength applications. The company headquarters is located in 200 Pacific Street, Winkler, MB R6W 0K2, Canada. 51-200 Employees | Deadline: 2026-09-15T12:31:03.000Z

Herkunft

safepaymcnishsteel.comCA

Beschreibung der Täter

The company is headquartered in Edmonton, Alberta, and was founded in 1978 by William and Wallace McNish. It has developed …

Herkunft

auroraBenshaw, Inc.CA

Beschreibung der Täter

Benshaw, Inc. (Pittsburgh) and affiliated UTG entities (Unico, Benshaw Canada, AuCom, Excel, Noble Victoria). ~100+ corporate Visa/PCard records with full PAN + SSN + DOB + home address 637 former employees with full SSN/DOB/address on one spreadsheet 88 active employee folders plus multi-year Canada payroll <redacted> <redacted> Global bank account numbers (PNC, BMO, BNZ, St George, Commerzbank, JPM London, BBVA, GNB…) ACH NACHA files with vendor routing/account numbers UEdit source with hardcoded XOR key 4148865678 and date-based CalcBackDoor() Oil & gas customer job packs (Chevron, Petrobras, EOG, Santos AU, KOC…)

Herkunft

kazuCanada Yocale: Appointment Management SystemCA

Beschreibung der Täter

Yocale is a cloud-based business management platform that helps appointment-based businesses streamline their daily operations. Founded in Canada, the platform is used by healthcare providers, beauty salons, wellness centers, and other service businesses to manage appointments, client records, payments, and communications in one centralized system. Price: $5 000 | Size: 51.02 GB | Records: 6 055 490 appointments data | Dump date: 2026

Herkunft

qilinCommission de la construction du Quebec (CCQ)CA

Beschreibung der Täter

Government

Herkunft

inc ransomMultiver LtéeCA

Herkunft

krybitwww.alphaplantes.comCA

Beschreibung der Täter

Alphaplantes (Service d'Entretien des Plantes Alpha Inc.) is a Canadian family-owned company founded in 1970, headquarte...

Herkunft

qilinCommission de la construction du QuebecCA

Beschreibung der Täter

Government

Herkunft

zawooacqbuilt.comCA

Beschreibung der Täter

country: Canada | fileSize: 34895272422 | PUBLISHED | company based in Edmonton, Alberta, Canada. It specializes in using factory-based construction methods to build residential homes faster, with more precision, and with reduced waste compared with traditional on-site building.

Herkunft

the gentlemenCanopy Support ServicesCA

Beschreibung der Täter

canopysupport.ca zoominfo.com/c/canopy-support-services/347650822 Canopy Support Services is a community-based organization in Peterborough, Ontario, dedicated to supporting individuals with intellectual and developmental disabilities. They provide a safe, welcoming environment for people, including those with Autism Spectrum Disorder, to learn new skills and achieve their personal goals. The organization empowers its clients to overcome everyday barriers, build self-confidence, and lead more independent lives

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.