SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

Neueste Einträge

Filter zurücksetzen
akiraMedienwerkstattDE

Beschreibung der Täter

Medienwerkstatt stands for digital and printed communication of the highest quality and disting uishes itself through an exceptional customer service. With more than 50 passionate talents for various offline and online disciplines, medienwerkstatt ag is one of the largest media service providers in the canton of Thurgau. We will upload 130gb of corporate data soon. Employee personal information (names, addresses, p hones, contacts and so on), customer information, contracts and agreements, and so on.

Herkunft

rhysidaDR.SCHNELL GmbH & Co. KGaADE

Beschreibung der Täter

DR.SCHNELL GmbH & Co. KGaA DR.SCHNELL GmbH & Co. KGaA � full network dump. 175,151 files / 2.52 TB.1.2+ TB of Navision/Business Central ERP backups - full commercial history (clients, pricing, procurement).Complete HR & payroll for Germany, Switzerland, Austria: home addresses, personal emails, payslips with social-security and tax IDs, long-term sick lists (GDPR Art. 9 data).Family-office accounting: signed annual statements of dozens of related entities, bank statements, a EUR 35M credit-line agreement.CEO's personal dossier: valid passport, ID card, tax ID, 11 years of signed tax returns.Access material: TLS private keys for *.dr-schnell.de, ~120 Elster tax certificates, O365 admin password, password lists. More

Herkunft

lamashtuHecker HolzsystembauDE

Beschreibung der Täter

German construction company specializing in custom timber houses, sustainable wood construction, and prefabricated buildings. It offers complete project planning, roofing, extensions, renovations, and turnkey solutions for residential, commercial.

Herkunft

lamashtuGräfliches Hofbrauhaus FreisingDE

Beschreibung der Täter

German brewery specializing in the production and distribution of traditional Bavarian beers. The company uses traditional brewing methods and supplies beer products to local and regional markets.

Herkunft

lamashtuVERGI MuensterDE
energie

Beschreibung der Täter

German tax advisory and business consulting firm providing tax return preparation, bookkeeping, annual financial statements, auditing, fiduciary services, and consulting for start-ups and established businesses.

Herkunft

lamashtuFuG-GruppeDE

Beschreibung der Täter

A German IT systems integrator and general contractor (Systemhaus) based in Halver, North Rhine-Westphalia (NRW), founded in 1950. The company specializes in IT/EDP integration and ERP solutions for industrial businesses, steel trading companies

Herkunft

lamashtuWEPOS ChemieDE

Beschreibung der Täter

WEPOS Chemie is a German company founded in 2007 that develops, manufactures, and sells specialized cleaning and care products for homes, gardens, floors, tiles, and hygiene, including mold removers. Its products are made in Germany.

Herkunft

everestLindauer DornierDE

Beschreibung der Täter

2 posts - 7h

Herkunft

payloadBW Office WorldDE

Beschreibung der Täter

BW Office World (bw-officeworld.de) is a German specialized online retailer providing comprehensive workspace and office supply solutions. Their catalog features office furniture, ergonomic chairs, presentation hardware, office technology, and everyday stationery from leading European brands. Serving both corporate B2B clients and individual consumers, the company emphasizes workplace ergonomics, dependable delivery across Germany, and expert support for office fit-outs.

Herkunft

payloadBrüninghoff GroupDE

Beschreibung der Täter

Brüninghoff Group (brueninghoff.de) is a German construction and manufacturing company headquartered in Heiden, founded in 1974. The company specializes in turnkey project development, engineering, and the prefabrication of hybrid timber, concrete, and steel building systems. With around 700 employees, it strongly emphasizes sustainable, energy-efficient building methods for commercial, residential, and public architecture.

Herkunft

incSeetelhotels.deDE

Beschreibung der Täter

Seetel Hotels (SEETEL Hotel GmbH & Co. Betriebs KG) has been notified that a substantial volume of confidential and internal corporate data has been compromised. The affected data includes, but is not limited to: Full guest identity records, government-issued passport and ID numbers, payment card details (credit card numbers, CVVs, and expiration dates), direct booking notes, special requests, dietary restrictions, documented allergies, and medical/health-related accommodation preferences. Invoices, payment transaction logs, accounts receivable and payable (Debitorenbuchhaltung / Kreditorenbuchhaltung) records, internal financial audits, and controlling documentation.

Herkunft

cloakdac********er.deDE
kein Firmenname im Eintrag

Beschreibung der Täter

Country: germany | Size: 2TB | Private | Views: 0

Herkunft

qilinPergandeDE

Beschreibung der Täter

Industrial Machinery & Equipment

Herkunft

settrapassavant-ee.comDE
healthcare

Beschreibung der Täter

German engineering company Passavant Energy & Environment GmbH, which builds wastewater treatment plants with German and Swiss taxpayer money (KfW, SECO), is in reality controlled by Dubai-based conglomerate Drake & Scull International PJSC and through it finances operations in Iraq. Internal debit notes from Drake & Scull Oil & Gas — Iraq Branch show that employees of the Iraqi division flew to Muscat (Oman) and stayed at hotels billed to Passavant Frankfurt, with the company's accounting department at Hahnstraße 31-35 approving those charges for payment. Employee Serikan Kire

Herkunft

bravoxMinkonDE

Beschreibung der Täter

Metallurgical Products and Engineering Solutions for Industry.

Herkunft

thegentlemenREGiO NordDE

Beschreibung der Täter

regio-nord.com REGiO-Nord mbH (HRB 1203, Amtsgericht Neuruppin) is a municipal regional-development company in Gransee, Brandenburg, founded 2008–2009 to run the shared "Mittelzentrum" of Gransee–Zehdenick–Fürstenberg/Havel. It is 100% publicly owned (Zehdenick 1/3, Fürstenberg 1/3, Gransee 1/6, Amt Gransee 1/6), led by sole managing director Olaf Bechert with a staff of ~5 plus two tourist info offices. Its real money flows through the Kooperationsfonds — ~€8.9M in projects since 2008, with €538K spent in 2025 and €563K budgeted for 2026, of which €312K funds the company's own coordination work. Four workstreams: education (teacher recruitment, apprenticeship exchange), economy (business services, doctor recruitment, arztidylle.de), tourism (two info stations, region portals, RegioApp), and regional marketing (REGiO-Card, library network). Finances are project-transparent (open budget reports) but the GmbH's own annual accounts are only public through 2022 — request 2023–2025.

Herkunft

wallstreetLambertinum SeniorenwohnanlageDE
healthcare

Beschreibung der Täter

A nonprofit senior-living facility in Hildesheim, Germany, providing residential nursing care, short-term care, respite care, and assisted living

Herkunft

incWolf & Sofsky GmbHDE

Beschreibung der Täter

Wolf & Sofsky GmbH is a construction company with a 75-year history, based in Zweibrücken, Germany. The company operates on highly complex projects and maintains a significant financial position. Critical Information We Possess Financial Data: Complete spectrum of financial information (reports, budgets, cost estimates), revealing project profitability, total revenue, cost structure, and financial stability of the company. Commercial Information: Contracts with clients, commercial offers, contract terms — these form the foundation of Wolf & Sofsky's competitive advantage. Personal Data: Information about employees and clients (names, contacts, job titles, possibly salaries), which falls under GDPR legislation. Technical Assets: Technical plans, project drawings, architectural solutions — the company's unique intellectual property. Strategic Plans: Business plans and strategic documents, revealing development directions, new markets, and future projects.

Herkunft

playDFK GroupDE

Beschreibung der Täter

Germany

Herkunft

auroraRechtsanwaltskanzlei Dr. BienDE

Beschreibung der Täter

[law] Rechtsanwaltskanzlei Dr. Bien — a specialist insolvency law firm in Hamm, NRW, appointed as insolvency administrator by 12 Amtsgerichte across Westfalen. The exposed material includes: 2,387 WinSolvenz case databases — each a Microsoft Access MDB containing the complete financial dossier of an insolvency debtor: creditor lists, claim amounts, distribution plans, asset inventories, court appointments, and bank account details. 492+ forced administration (Zwangsverwaltung) case files — property addresses, tenant data, rent records, utility accounts, insurance details, court-directed property management reports. <redacted> 80 GB MailStore email archive — the firm's complete email history in MailStoreContainer-v1 format: attorney-client communications, court correspondence, creditor negotiations, debtor disclosures. 1.7 GB beA backup (besonderes elektronisches Anwaltspostfach) — three MSSQL database backups containing every electronic communication between the firm and every German court. 35 employee records — 25 former + ~10 current staff: contracts, salary, overtime, vacation, pension, disability status, termination agreements. DATEV tax/accounting archives — 33 directories

Herkunft

n0nHPC Hamburg Port Consulting (port operations)DE
transport

Beschreibung der Täter

Port consulting / terminal operations · Germany | Operational EDI archives and cargo/bill-of-lading records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC]

Herkunft

majinahanashiSCHMITZ & NITTENWILMDE

Beschreibung der Täter

Schmitz & Nittenwilm is a traditional family-owned bakery chain based in Köln (Cologne), Germany. Founded in the early 1930s. Currently operates 38 branches in Köln and Hürth. Third-generation fami...

Herkunft

safepaydwi-bau.deDE

Beschreibung der Täter

The company specializes in building systems for metal roofs and facades, serving customers in the construction and building sectors. Its …

Herkunft

black xbayerDE
healthcare

Beschreibung der Täter

<p><span style="background-color:rgb(15,23,43);color:rgb(255,255,255);">Bayer is a global life science company with more than 160 years of innovation behind us. Operating at the intersection of health and nutrition, we are committed to addressing some of society's most pressing challenges and creating lasting value for people, communities, and the world around us.</span></p>

Herkunft

nightspireMäntelhaus Kaiser GmbH & Co. KGDE

Herkunft

panzerUniversity of RostockDE

Beschreibung der Täter

The University of Rostock, founded in 1419, is the oldest university in the Baltic Sea region, offering over 140 diverse study programs across various fields. It focuses on innovative research and interdisciplinary collaboration to address contemporary societal challenges. The university welcomes students and staff from around the world, promoting a family-friendly and inclusive environment. It also emphasizes democratic values and the importance of free academic exchange.

Herkunft

anubisLeadecDE

Beschreibung der Täter

Will they allow this leak to happen?

Herkunft

incarchitekt-vondanwitz.deDE

Beschreibung der Täter

Architektur in der Symbiose aus der erfahrenen und sicheren Anwendung der innovativen Bauteilevorfertigung, mit ökonomischer Umsetzung, ist seitüber 40 Jahren unsere Leidenschaft. Employees: 20 Revenue: $5 Million Phone Number: 06761/95900

Herkunft

lockbit5grunenwald.comDE

Beschreibung der Täter

GRUNENWALD Créateur français d&#039;afficheurs sportifs haute performance depuis 1960, vous propose...

Herkunft

safepaybwi-bau.deDE

Beschreibung der Täter

The organization was established in October 1964 as a subsidiary of the Construction Industry Association of North Rhine-Westphalia. It originally …

Herkunft

safepayt-systems.comDE

Beschreibung der Täter

Headquartered in Germany, the company operates internationally and has locations in 26 countries, employing more than 26,000 people. T-Systems specializes …

Herkunft

lamashtuBender TribunenbauDE

Beschreibung der Täter

Bender GmbH Tribunenbau is a German manufacturer of mobile and permanent grandstands, stages, podiums and temporary structures for events. It designs, rents, sells and services tribunes for stadiums, festivals and concerts.

Herkunft

qilinInova Semiconductors GmbHDE

Beschreibung der Täter

Manufacturing

Herkunft

safepaywolfusofsky.deDE

Beschreibung der Täter

The group provides a broad range of construction and infrastructure services to public and private clients in Rhineland-Palatinate, Saarland, neighboring …

Herkunft

playTitusDE

Herkunft

playOrth AutomobileDE
automotive

Herkunft

safepayecon-tec.comDE

Beschreibung der Täter

The company focuses on designing technical systems for industrial customers, combining engineering expertise with process optimization, automation and energy-efficient production …

Herkunft

lamashtuBecker LogistikDE
transport

Beschreibung der Täter

becker-logistik.de - German logistics and transportation company specializing in national and international freight transport, particularly bulk goods. The company operates its own fleet and provides reliable transport services across Germany and Europe.

Herkunft

lamashtuWilhelm KühneDE

Beschreibung der Täter

wilhelm-kuehne.de - Wilhelm Kühne is a German facility services company specializing in professional cleaning and building maintenance. Founded in 1950, it serves offices, schools, healthcare facilities, and commercial properties.

Herkunft

lamashtuPROJAHNDE

Beschreibung der Täter

projahn.de - German manufacturer and distributor of professional precision and hand tools (drill bits, masonry/wood/steel tools, thread tools, measuring tools, sockets, wrenches, screwdrivers, pliers, flashlights, workbenches).

Herkunft

lamashtuAltmannshofer Sicherheits-VideotechnikDE

Beschreibung der Täter

altmannshofer.de - Altmannshofer Sicherheits-Videotechnik OHG is a German installer of electronic security systems from Affing near Augsburg, Bavaria. Since 1999 it plans and installs CCTV, burglar alarms (EMA), access control, electronic locks, fingerprint scanners

Herkunft

rhysidaclicks digital GmbH InformationDE

Beschreibung der Täter

clicks digital GmbH Information With more than 40 employees, the agency manages national and international online projects of companies from a wide range of industries. Based in Berlin, Dresden, Munich and Cologne, has been a specialist in online marketing for more than twelve years. More

Herkunft

emperadorCar Service AbschleppDE
transport

Beschreibung der Täter

CSA Car Service Abschlepp- & Bergungsdienst GmbH Genslerstraße 72, 13055 Berlin Archived personal and corporate data of employees and customers Here are the most important documents Publication scheduled: 2026-10-07 09:14:06 UTC Size: 2.8 GB Sectors: Transportation

Herkunft

the gentlemenFTAPI SoftwareDE

Beschreibung der Täter

ftapi.com zoominfo.com/c/ftapi-software/346927067 FTAPI (founded 2010, Munich, Germany) is a software company offering a secure, GDPR-compliant platform for exchanging sensitive business data and automating workflows — encrypted email and file transfer, virtual data rooms, digital forms and no-code process automation. It serves 2,000+ organizations and over a million users, mainly in public administration, healthcare, insurance and industry, with all data hosted exclusively in Germany under strict certifications (ISO 27001, BSI C5, SOC 2) and optional zero-knowledge encryption. Its core selling point is European digital sovereignty — a compliant alternative to US cloud tools like Dropbox under GDPR, NIS-2 and DORA regulations. In 2025 it raised €65 million from PE investors Armira and Tikehau Capital, which took control to fund EU expansion and acquisitions. The company employs around 150 people and targets becoming a leading European player in secure data exchange by 2028–29.

Herkunft

panzerUniversitt HamburgDE

Beschreibung der Täter

Universität Hamburg is the largest research and educational institution in Northern Germany, with over 42,000 students. It offers a wide range of academic programs and is recognized for its excellence in research and teaching. The university serves diverse target groups including prospective students, current students, researchers, and alumni. It collaborates with various societal and economic partners to address contemporary challenges and contribute to future solutions.

Herkunft

qilinKMLSDE

Beschreibung der Täter

Construction

Herkunft

rhysidaKreishandwerkerschaft BorkenDE

Beschreibung der Täter

Kreishandwerkerschaft Borken The Kreishandwerkerschaft Borken is the official trade association and advocacy organization representing local craft enterprises (Handwerksbetriebe) in the Borken district of Germany.1,382,523 files, 1.31 TBhealth data (disability lists with ID numbers, GdB medical ruling with diagnosis)sick leave, absence records, pension ruling2026 payslip (tax ID, social-security no., IBAN) and staff rostersigned contracts/terminations, CV with religionmember and creditor IBANsSCHUFA credit checks, court enforcement order, debtor affidavitMail and databases in full (Exchange, PST, SQL backups) + access/infrastructure slide (2FA secrets, S-FIRM code) More

Herkunft

rhysidaMPA PharmaDE
healthcarefinanzenbehoerden

Beschreibung der Täter

MPA Pharma MPA Pharma GmbH is an internationally active, rapidly growing company specializing in the import and trade of high-quality pharmaceuticals, including both patented and generic products. 2,899,290 files, ~5.8 TBPharmaceutical companyCategories: accounting records and database backups, government audits (customs / corporate tax / social security / wage tax),corporate ownership (nominee structure, beneficial-ownership filings, related-party payments), narcotics/BtM records (opioids, cannabis, precursors),litigation files, executive and employee personal data, IT artifacts, pharmacovigilance correspondence.Credit cards with CVV of executives, Oltersdorf ID card valid until 2030, the Pfeiffer letter on the hidden Paranova Pack B.V., UBO passportsSQL backups (17.7 million general-ledger rows), commercial register extract (HRB), organizational chartCredentials (TIER 1) - a list of all password files (values not repeated here, stored in the MPA PASSWORDS report)Government audits - customs 17,011.77 EUR with a breakdown, corporate tax +202,203.18 EUR, social security (DRV) 23,134.96 EUR with a separate case against the managing director, wage-tax auditNarcotics (BtM) - permits (3

Herkunft

krybitwww.diakonie-apolda.deDE

Beschreibung der Täter

Diakoniewerk Apolda gGmbH is a German non-profit social welfare organization (gemeinnützige GmbH) founded in 2006, head...

Herkunft

qilinVigatecDE

Beschreibung der Täter

Business Services

Herkunft

safepayneumerkel-gmbh.deDE

Beschreibung der Täter

The business traces its origins to 1963 and has operated under the Neumerkel GmbH name since 1994. Its product portfolio …

Herkunft

safepaymeterex.comDE

Beschreibung der Täter

The company is headquartered in Langenfeld, North Rhine-Westphalia, and is legally registered as Karl Kuntze (GmbH & Co.), HRA 16336 …

Herkunft

the gentlemenMedSkin Solutions Dr. Suwelack AGDE

Beschreibung der Täter

medskin-suwelack.com rocketreach.co/medskin-solutions-dr-suwelack-ag-profile_b44a3a45fd136bbb MedSkin Solutions Dr. Suwelack AG MedSkin Solutions Dr Suwelack AG is a German biotechnology company. It was founded in 1997 and is based in Billerbeck near Münster. DATA Finance Accounting Core Quality Management System QMS Validation Manufacturing Production Operations Corporate Controlling Financial Planning Health, Safety Environmental Compliance AUM Corporate Identity Marketing Assets Supply Chain Vendor Management Legal Intercompany Contracts IT Infrastructure Data Repositories Human Resources Personnel Records US Subsidiaries International Taxation Construction Facility Projects Regulatory Affairs Medical Device Registration Executive Communications Email Archives Archived Confectioning Procedures

Herkunft

rhysidaAxdia InternationalDE

Beschreibung der Täter

Axdia International Axdia International is a German electronics company that brings together a wide range of modern small electronics and electric mobility products. More

Herkunft

inc ransomhttps://mediengruppethiel.de/DE

Herkunft

stormSprachakademie Rhein-RuhrDE

Beschreibung der Täter

Consulting | Duisburg, North Rhine-Westphalia, Germany | Sprachakademie Rhein-Ruhr has been providing German language courses since 1995, aimed at individuals looking to study and build a life in Germany. They offer a range of courses from A1 to C1 levels, including specialized programs for medical professionals and online options. As a certified telc examination center, they facilitate language proficiency tests in accordance with the Common European Framework of Reference for Languages. Their services are designed to support clients in obtaining university access and visa acquisition in Germany. The company headquarters is located in Hansastraße 79, 47058 Duisburg, Germany. 11-50 Employees | Deadline: 2026-09-29T09:39:47.000Z

Herkunft

stormITD Informations technologieDE

Beschreibung der Täter

SaaS | Damme, Lower Saxony, Germany | ITD Informations technologie GmbH & Co. KG is a German information technology company that provides comprehensive IT solutions and services for businesses. The company offers hardware, software, cloud computing, networking, telecommunications, security technology, and building automation solutions. Its portfolio includes servers, PCs, data storage, cybersecurity, CRM and document management software, virtualization, website development, network infrastructure, firewalls, telephone systems, video surveillance, and access-control systems. ITD supports organizations with the planning, implementation, and management of their IT infrastructure, helping customers integrate technology across different areas of their business. The company is headquartered in Damme, Germany. The company headquarters is located in Gartenstraße 17–19, 49401 Damme, Germany. 1-10 Employees | Deadline: 2026-09-26T09:31:50.000Z

Herkunft

stormOtto Sieve GmbHDE

Beschreibung der Täter

Construction | Lohne, Lower Saxony, Germany | Otto Sieve GmbH is a family-owned German company specializing in building services and modern home technology. Founded in 1967, the company provides heating, ventilation, sanitary, solar, and renewable energy solutions. Its services cover the planning, installation, maintenance, repair, and modernization of heating systems, bathrooms, heat pumps, solar technology, ventilation, and related building systems. Otto Sieve serves customers involved in new construction, renovation, and modernization projects and also provides maintenance and emergency repair services. The company emphasizes energy-efficient, sustainable solutions, technical expertise, personal consultation, and high-quality workmanship. Its headquarters is in Lohne, Lower Saxony, Germany. The company headquarters is located in Lindenstraße 102a, 49393 Lohne, Germany. 11-50 Employees | Deadline: 2026-09-23T09:36:43.000Z

Herkunft

everestKÖRBERDE

Beschreibung der Täter

2 posts - 1h

Herkunft

akiraStransky Heiz-Mess-Regeltechnik GmbHDE

Beschreibung der Täter

Discover Stransky—a leader in sustainable energy solutions. Trust in over 30 years of experience in heating technology and quality.We will upload 50gb of corporate data soon. Employee personal information, contacts and agreements, financials, projects, NDAs and so on.

Herkunft

auroraChip 1 ExchangeDE

Beschreibung der Täter

Chip 1 Exchange — a global independent electronics distributor headquartered in Neu-Isenburg, Germany, with primary US operations in Laguna Hills, California. The dataset spans 13 years (2013-2026) of corporate operations and encompasses: 40+ passport photographs, I-9 forms with SSNs, W-4 tax forms, payroll registers. <redacted> Complete 2026 financial intelligence — P&L through July, executive financial health assessment, AR/AP aging, chart of accounts revealing all bank account numbers. 15+ exclusive franchise manufacturer agreements with pricing terms, territory allocations, and per-customer gross profit margins. ITAR registration and defense customer sales orders to Jabil Defense, Curtis-Wright, GEN3 Defense, and Cobham Remec. 5.7 GB of Outlook PST email archives spanning years of C-suite and employee correspondence.

Herkunft

brain ciphercrmeyer.comDE

Beschreibung der Täter

We have about 275,000(275k) documents and files of your company, with a total size of over 330 GB. The data includes a customer database (~250 customers) — the largest ones are:...

Herkunft

zawoofes-sport.deDE

Beschreibung der Täter

country: German | fileSize: 49760098079 | PUBLISHED | FES Sport (fes-sport.de) is the Institut für Forschung und Entwicklung von Sportgeräten (FES), a German institute specializing in research, engineering, and development of high-performance sports equipment and technology. It is based in Berlin, Germany, with an additional facility in Oberhof.

Herkunft

akiraKFZ-MEISTERBETRIEB JOST GmbHDE
automotive

Beschreibung der Täter

KFZ-MEISTERBETRIEB JOST GmbH specializes in the repair and maintenance of all types of motor vehicles. The company offers comprehensive services in the maintenance, repair, and sale of motorvehicles.We will upload 6gb of corporate data soon. Employee personal information, clients information, financials and so on.

Herkunft

zawooCompany ID : htrfdrghbtnyrDE
kein Firmenname im Eintrag

Beschreibung der Täter

country: German | fileSize: 49760098079 | UNPUBLISHED

Herkunft

zawoovectorsoft.deDE

Beschreibung der Täter

country: German | fileSize: 17073414449 | PUBLISHED | vectorsoft is Vectorsoft AG, a German software-development company headquartered in Heusenstamm, Hesse, near Frankfurt am Main, Germany.

Herkunft

zawoowinterdienst-berlin.comDE

Beschreibung der Täter

country: Germany | fileSize: 35134085775 | PUBLISHED | The company is located at Boschweg 18–20, 12057 Berlin, and lists info@winterdienst-berlin.com and +49 30 684 083-6 as contact details. According to their company website, their services include:Snow and slush removal Clearing and gritting of sidewalks, roads, parking areas and public spaces Manual and machine-assisted winter maintenance Winter-service operations for businesses, private households and municipalities GPS-supported fleet and quality controls Environmentally conscious winter-service methods.Availability around the clock during winter conditions .The company says it combines around 30 years of experience with modern technology and environmentally friendly materials.

Herkunft

zawoohd-werkstaetten.deDE

Beschreibung der Täter

country: Germany | fileSize: 37740752817 | PUBLISHED | hd-werkstaetten.de belongs to Heidelberger Werkstätten der Lebenshilfe Heidelberg e. V., a German social enterprise / sheltered workshop organization supporting people with disabilities through employment, vocational training, and workplace inclusion. Its main site is in Heidelberg, Baden-Württemberg, Germany.

Herkunft

zawoong-engineering.deDE

Beschreibung der Täter

country: German | fileSize: 4674304337 | PUBLISHED | NG Engineering Gruppe is a German engineering and technical-services group headquartered in Rödental, Bavaria. The group has been operating for more than 20 years and has locations in Germany, Poland and the Czech Republic. It provides engineering services throughout the product-development process and also offers personnel/recruitment services.

Herkunft

zawooberghotel-oberhof.deDE

Beschreibung der Täter

country: Germany | fileSize: 4300776316 | PUBLISHED | Konsumhotel Berghotel Oberhof is a wellness and leisure hotel in Oberhof, Thuringia, Germany, located in the Thuringian Forest. It is operated by Berghotel Oberhof GmbH, with Markus Barth as managing director.

Herkunft

zawoorsk-immobilien.deDE

Beschreibung der Täter

country: German | fileSize: 34483870629 | PUBLISHED | RSK Immobilien GmbH is a German real-estate project developer and property company headquartered in Weißenfels, Saxony-Anhalt. Its core activities are the development, realization, renovation and marketing of residential and commercial properties, with a strong current focus on residential projects.

Herkunft

zawoomontronix.deDE

Beschreibung der Täter

country: German | fileSize: 14756317234 | PUBLISHED | MONTRONIX GmbH is a German industrial technology company specializing in machine-tool monitoring, process monitoring, machine protection, and condition monitoring. The company was founded in 1990 as a spin-off of Kennametal, Inc. and focuses primarily on monitoring solutions for metal-cutting and machining operations.

Herkunft

zawooBOTEC-CZDE

Beschreibung der Täter

country: German | fileSize: 29524637347 | PUBLISHED | boTec helps companies in process and production industries improve efficiency, manage data, and optimize business operations using software solutions, consulting, and integration services.

Herkunft

zawooCompany ID : adscynfdkjuihDE
kein Firmenname im Eintrag

Beschreibung der Täter

country: Germany | fileSize: 18677604120 | UNPUBLISHED

Herkunft

rhysidaBerlin, GermanyDE
finanzenbehoerden

Beschreibung der Täter

Berlin, Germany Total capacity 5.79 TBArchive scale: ~1.44 million files scanned; by category � Maps/Geo 124,823, Legal/complaints 77,939, Financial 55,553, Contracts 46,522, HR 27,299,Government supervisory 13,142, Confidential 11,777, Infrastructure 8,110, Passwords 5,941, Health 2,738, Contacts 2,287.PII leak: 16,389 e-mails, 11,963 phone numbers, 12,076 individuals, 148 IBANs.Credentials in plaintext: Geb�udeAtlas, the ePayment PAYONE payment database, personal 'password safes' (danz, kramell � Z_ADMIN database accounts, franssen), leadership credentials.Disciplinary proceedings: the ANDERSON case (432 files, 2025�2026, lawsuit at VG Berlin administrative court), the politically motivated misconduct case involving the LKA Staatsschutz (state security police), the forestry cases BLAUTH/M�LLER/FIELICKE.State secrets: Bundesrat committee protocols with declassification correspondence, Geheimschutz (classified-material handling) data.Passports/IDs (recent, from personnel files and GI-Vertraulich).KRITIS: vulnerability analyses of Berlin's water supply.Mass personal data: Personalakten (personnel files) >5,000, Convotis payroll, OWi (administrative-offence) files >5,000, Postbuch SQ

Herkunft

auroraSCA Logistik & Fulfillment GmbHDE
transportfinanzen

Beschreibung der Täter

SCA is a Bavarian logistics and e-commerce fulfillment provider. The exposed materials includes: Spans customer orders Shipments and returns Employee and applicant files Management, tax and banking records Warehouse automation Source code Customer contracts.

Herkunft

  • Pfad auf der Leak-Seite: /blog/sca-logistik-fulfillment-gmbh-7e254e19
  • Gruppe bei RansomLook
  • von SecBoard erfasst: 06.09.2026 · legalform
akiraPA-IDDE

Beschreibung der Täter

PA-ID GmbH specializes in mechanical construction and manufacturing, building series and customsystems, as well as electrical design and the development of tailored industrial software.We will upload 119gb of corporate data soon. Employee personal information (passports, ID's), client information, financials, NDAs and so on.

Herkunft

akiraWINTER IngenieureDE

Beschreibung der Täter

WINTER Ingenieure specializes in planning and monitoring the construction of technical buildingequipment across Germany, focusing on functionality, sustainability, and cost-effectiveness. With a team of over 140 employees located in Düsseldorf, Berlin, and Hamburg, they integrate technical components into buildings innovatively.We will upload 340gb of corporate data soon. Employee personal information (German passports, IDs, addresses, phones contacts), confidential files, projects, lots of specifications and so on.

Herkunft

space bearsholzmarkt chemnitzDE

Beschreibung der Täter

Holzmarkt Chemnitz is a specialized retail store for building materials and wood products, operating two branches in Chemnitz (Fichtestraße and Kalkstraße). They serve as a competent partner for both professional builders and private customers.-Personal information of employees and clients -Financial documents-SQL DB [Link entfernt]

Herkunft

the gentlemendlp motiveDE

Beschreibung der Täter

dlp-motive.de dlp motive is a German full-service event technology provider founded in 2007, successfully realizing around 600 projects annually. They offer comprehensive technical solutions including lighting, audio, video, kinetics, and rigging for corporate, e-sports, and public events. The company handles the entire event lifecycle, providing everything from initial concept and design to logistics, on-site production, and equipment rental.

Herkunft

krybitwww.hsi.infoDE

Beschreibung der Täter

hsi personaldienste hart & schenk GmbH is a German staffing and temporary employment services company founded in Februar...

Herkunft

qilinGSW Gemeinschaftsstadtwerke GmbHDE

Beschreibung der Täter

Electricity, Oil & Gas

Herkunft

xpl0itrsBMW GroupDE
automotive

Beschreibung der Täter

German multinational luxury vehicles

Herkunft

auroraPlanungsgruppe M+M AGDE

Beschreibung der Täter

Planungsgruppe M+M AG is a German Aktiengesellschaft headquartered in Böblingen, Baden-Württemberg, with approximately 432 employees across 10 offices (Böblingen, Stuttgart, München, Nürnberg, Regensburg, Ingolstadt, Augsburg, Esslingen, Mannheim, Frankfurt). Annual revenue: approximately €52 million. The firm provides architecture, urban planning, structural engineering, building physics, fire protection, BIM, landscape planning, and interior design services. Over 5,200 projects completed across decades of operation. The exfiltrated dataset spans two complete file servers (MMBB04, MMBB05), plus the DATEV financial processing archives, SFirm banking software databases, the ELO document management system, Outlook email archives (PSTs), and payroll/HR data — a total of 268 GB across approximately 124,000 files, covering 2006 to 2026.

Herkunft

  • Pfad auf der Leak-Seite: /blog/planungsgruppe-mm-ag-3eb2a03f
  • Gruppe bei RansomLook
  • von SecBoard erfasst: 06.09.2026 · Land aus dem Text abgeleitet
qilinmotorenmaier gmbhDE

Beschreibung der Täter

Business Services

Herkunft

lockbit5vgrn.deDE

Beschreibung der Täter

Verbandsgemeinde Rhein-Nahe is a company that operates in the Government industry.

Herkunft

payloadB&B HydraulikDE

Beschreibung der Täter

B&B Hydraulik is a German company based in Hattingen that specializes in the development and manufacturing of hydraulic systems, power units, and specialized equipment. In cooperation with partner organizations, the enterprise supplies control blocks, valves, and components for both industrial and mobile hydraulics. Its engineering solutions are widely used across construction and agricultural machinery, lifting equipment, and shipbuilding.

Herkunft

settraoligo.deDE

Beschreibung der Täter

Revenue: 12,500,000 Size: N/A | A group of companies whose luminaires illuminate Deutsche Bank, Burj Dubai, and Scout Motors' assembly lines failed to protect its own data. --- Prologue We hold an archive belonging to the OLIGO Lichttechnik GmbH and RSL Lichttechnik GmbH groups — two German lighting manufacturers based in Sankt Augustin, affiliated with TRILUX Group (Arnsberg). The archive spans more than 144 gigabytes of corporate documentation. Emails, spreadsheets, contracts, tax returns, technical drawings marked as trade secrets, passport data, employees' home addresses, their children's school documents, power of attorney records, credit insurance policies, dealer databases, and incoming quality control reports. The complete operational memory of two companies accumulated over 27 years of business. Inside: a contract with Scout Motors Inc. (USA) for $1,200,000 , signed on March 13, 2026 — two light tunnels for quality inspection on Scout Motors' American assembly line. Incoming inspection reports from April 2024 : one Turkish supplier managed to deliver a shipment in which 99.7% of glass items were rejected — 1,053 units out of 1,056. A database of home addresses for 20 emplo

Herkunft

direwolfStatista GmbHDE

Herkunft

ethicsBerlinerLuft. Technology GmbHDE

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.