SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

Neueste Einträge

Filter zurücksetzen
qilinUnited Restaurant SupplyUS

Beschreibung der Täter

N/A

Herkunft

silent ransomKirkland & Ellis LLPUS

Beschreibung der Täter

[AI generated] Kirkland & Ellis LLP is a global law firm headquartered in Chicago, Illinois, United States. It operates in the legal services industry, providing counsel in private equity, mergers and acquisitions, restructuring, litigation, intellectual property, and tax law. One of the world's largest law firms by revenue, it serves corporate clients, investment funds, and financial institutions through offices across the United States, Europe, and Asia.

Herkunft

akiraAnnapathUS

Beschreibung der Täter

Annapath, Inc. is a privately owned surgical and cytopathology laboratory that primarily focuse s on dermatopathology, serving clients in Maryland, Delaware, Pennsylvania, Washington D.C., Vi rginia, and West Virginia. The company offers a full range of anatomic and clinical pathology s ervices, emphasizing prompt and accurate diagnoses with a commitment to exceptional customer se rvice. We will upload 110gb of corporate data soon. Employee personal information (passports and other s personal files), customer information, contracts and agreements, and so on.

Herkunft

bravoxBarrow & Grimm 🇺🇸US

Beschreibung der Täter

Legal Services, Business Litigation and Corporate Law.

Herkunft

n0nCompany #109US
kein Firmenname im Eintrag

Beschreibung der Täter

plumbing and kitchen products distribution · Cincinnati, Ohio, United States

Herkunft

n0nCompany #106US
kein Firmenname im Eintrag

Beschreibung der Täter

Financial Advisory & Restructuring (US) · Chicago, Illinois, USA

Herkunft

n0nCompany #105US
kein Firmenname im Eintrag

Beschreibung der Täter

diamond and lab grown diamond trading · New York, New York, United States

Herkunft

n0nCompany #104US
kein Firmenname im Eintrag

Beschreibung der Täter

Legal Services - Family Law (US) · California, USA

Herkunft

n0nPerformance Ford IncUS

Beschreibung der Täter

automotive retail · United States

Herkunft

space bearsSGLA (Schwartz, Giannini, Lantsberger & Adamson)US

Beschreibung der Täter

Schwartz, Giannini, Lantsberger & Adamson (SGLA) Accountancy Corporation is a full-service certified public accounting firm based in Stockton, California, founded in 1988. The firm provides tax planning and compliance, audits, reviews and compilations, bookkeeping, payroll, outsourced CFO support, and business consulting for individuals and companies. It has particular experience with real estate, healthcare, nonprofits, affordable housing, common-interest realty associations, and local government clients. SGLA positions itself as a hands-on local CPA practice that combines traditional accounting work with practical advice to help clients stay compliant and grow.*After the timer expires, you will be able to freely download several fragments of the full archive for review. To purchase the complete archive, please contact our manager. [Link entfernt]

Herkunft

everestLinebarger Goggan Blair & SampsonUS
behoerden

Beschreibung der Täter

[AI generated] Linebarger Goggan Blair & Sampson LLP is a United States law firm specializing in government receivables, particularly delinquent tax collection and debt recovery for municipalities, counties, school districts, and other public entities. Headquartered in Texas, it operates across multiple states, representing public sector clients in collection litigation and related legal services. It is a prominent player in the government collections legal industry.

Herkunft

n0nHeritage Senior LivingUS
healthcare

Beschreibung der Täter

healthcare support services · United States | Network security configuration of a healthcare support provider; Internal network segmentation maps; Remote access account structures | [NOT PAID — EXPOSED]

Herkunft

silent ransomPorter Hedges LLPUS

Beschreibung der Täter

[AI generated] Porter Hedges LLP is a full-service business law firm based in Houston, Texas, United States. It operates in the legal services industry, providing counsel in areas such as energy, corporate transactions, finance, litigation, bankruptcy, real estate, and labor and employment law. The firm primarily serves corporate clients, including businesses in the oil and gas sector, and operates within the United States.

Herkunft

helixWestrock CoffeeUS

Herkunft

helixWestrock CoffeeUS

Beschreibung der Täter

Westrock Coffee records. Yearly revenue ~$1.2 billion yearly. GoFile links and passwords unlock in 24 hours.

Herkunft

interlockCoastal Alabama Community CollegeUS
finanzen

Beschreibung der Täter

[Link entfernt] Coastal Alabama Community College demonstrates an extreme disregard for its own security and the security of its students and makes no attempt to address these deficiencies. Therefore, we are publishing their sensitive information, such as student education records, protected health information, financial aid and loan information, employee personnel files, Social Security numbers, and payment card data. They are also known for their incidents, and we are making this information publicly available to you. As a result, they violate laws such as HIPAA, FERPA, GLBA, and PCI DSS.

Herkunft

brain ciphersodali.comUS

Beschreibung der Täter

13,000 documents include: Annual Shareholders' Meetings—Swiss and German Clients. A complete list of issuer clients, their corporate documents, voting schedules, and voting result...

Herkunft

brain ciphersrsnodgrass.comUS
finanzen

Beschreibung der Täter

Total size - 100GB, 45,000 documents. Contents: Financial statements and pre-audit working papers; lists of bank employees; insider information on the financial condition of approx...

Herkunft

brain cipherprosomnus.comUS
healthcare

Beschreibung der Täter

Total size - 100GB, 78,000 files. Contents: Patients' PHI; Kaiser Permanente Patient-Partner Tracking Sheet; Non-public FDA regulatory files; .bak; .pst.; If you think you are here...

Herkunft

brain cipherolyortho.comUS
healthcare

Beschreibung der Täter

Total size - 105GB, 146,000 files. Contents: Patients' medical information (PHI under HIPAA); employee HR data; legally privileged materials; email; operational/technical documents...

Herkunft

akiraCascade Flooring AmericaUS

Beschreibung der Täter

Cascade Flooring America is a flooring store located in Vancouver, WA, offering a wide range of products including flooring, furniture, window coverings, and kitchen and bath services. The c ompany caters to homeowners looking for premium flooring solutions, with options such as carpet , hardwood, luxury vinyl, laminate, and tile. We will upload 50gb of corporate data soon. Employee personal information (passports and other personal information), client information, financials, confidential files, NDA, and so on.

Herkunft

helixHyperthermUS

Herkunft

helixHyperthermUS

Beschreibung der Täter

Hypertherm records. Yearly revenue ~$650.7 million yearly. GoFile links and passwords unlock in 24 hours.

Herkunft

pearAdobe Insurance Brokers, LLCUS
finanzen

Beschreibung der Täter

Independent insurance agency located in Morgan Hill, California

Herkunft

the gentlemenWeld Re 8 School DistrictUS

Beschreibung der Täter

weld8.org Weld Re-8 School District public school district founded in 1914 in Fort Lupton, Colorado, serving about 2500 students across 7 schools with a 43.5 million dollar budget. The student body is 76 percent minority with over half on free lunch, and academics are weak, math proficiency 16 to 19 percent, reading 22 to 26 percent, far below state averages. The core problem is teacher pay, starting salaries 47500 dollars versus 53000 to 64500 nearby, driving 23 percent yearly turnover. Voters rejected four tax requests since 2023, and on November 3 2026 they vote Issue 5C, a 4.9 million dollar tax hike, or face 1.3 million in mid-year cuts. New superintendent Dr. Justin Ralston launched a 2026 to 2029 plan reviving agriculture and adding IT and cybersecurity tracks. Oil and gas covers over half the local tax base.

Herkunft

n0nCompany #102US
kein Firmenname im Eintrag

Beschreibung der Täter

network and IT services · New York, United States | [PENDING EXPOSURE]

Herkunft

n0nCompany #101US
kein Firmenname im Eintrag

Beschreibung der Täter

wholesale distribution · Dallas, Texas, United States | [PENDING EXPOSURE]

Herkunft

n0nCompany #100US
kein Firmenname im Eintrag

Beschreibung der Täter

rheumatology medical practice · Riverside, California, United States | [PENDING EXPOSURE]

Herkunft

n0nTheHomeMag NorCalUS

Beschreibung der Täter

home services advertising · US | Internal network configuration and access credentials of a US home-services advertising franchise; Staff contact and infrastructure records | [NOT PAID — EXPOSED]

Herkunft

clopLEGAL-RECORDS.USUS

Herkunft

scarlettgroupgenesys.comUS

Beschreibung der Täter

Genesys Cloud Services, Inc. is a Cloud-based customer experience software specializing in contact centers, AI-powered customer support, and business communications.

Herkunft

scarlettgroupnbcuniversal.comUS

Beschreibung der Täter

NBCUniversal is a global entertainment company producing films, television, news, streaming, and world-class theme park experiences worldwide.

Herkunft

n0nXylanpicksUS

Beschreibung der Täter

online sports betting analytics · United States | The complete database of a sports betting analysis platform, including 108,781 historical game results; Every model-generated betting pick with model probabilities and outcomes; Live paid API keys for sports data providers | [NOT PAID — EXPOSED]

Herkunft

emperadorBruin Group LLCUS

Beschreibung der Täter

Bruin Group LLC is a telecom expense management (TEM) and communications auditing firm. Companies hand them carrier invoices, circuit inventories, wire instructions, letters of authorization, and internal ticket correspondence so Bruin can audit and recover overcharges. Bruin sits on a concentrated pile of third-party financial and telecom data for every client they serve. We have your entire ticket repository. Wire instructions, account numbers, W-9s, EINs, signed LOAs, Tenet patient call traces, all of it, for every client you manage. Tenet. Welltower. USDA. MarineMax. Allegis. Lincare. Salvation Army. Realogy. Delek. Quiktrip. CubeSmart. SRS. Baymark. Partial list. $1,000,000 in BTC or XMR. Pay and it ends. Don't and we contact your clients directly with their own documents, then publish one company at a time. emperadorlol@proton.me xdlmfao@morke.ru Session: 05651c732327b723588d47455471ee9e27feb5187a30f2933554a705aacb38358 [Sector: Telecommunications]

Herkunft

global secret groupGraves Fireplaces, Inc.US

Beschreibung der Täter

Country: Cumming, Georgia, US | Website: www.gravesfireplaces.com | Revenue: $5.3 Million | Industry: Hearth Products, Fireplace Sales and Installation | Employees: 20-50 | Properties: 76.1 GB (77,117 Files, 5,170 Folders)

Herkunft

inc ransomcentralrogers.comUS

Herkunft

dark projectAsensus SurgicalUS
healthcare

Beschreibung der Täter

Asensus Surgical fell victim to a cyberattack, resulting in the theft of more than 600 GB of data and over 85,000 files containing confidential information, employees’ personal documents, research findings, and all of the company’s internal information.

Herkunft

dark projectBeach Eye Medical GroupUS
healthcare

Beschreibung der Täter

As a result of the attack on Company Beach Eye Medical Group, more than 200 GB of confidential data was stolen. The data comprises more than 250,000 files containing information about the organization’s employees and their patients, medical records, and doctors reports, as well as other important company information.

Herkunft

dark projectThe Excalibur GroupUS
finanzen

Beschreibung der Täter

Company The Excalibur Group was attacked, resulting in the theft of more than 600 GB of confidential data, such as banking and other financial information, personal data of employees and customers, and information marked “secret”. Currently, more than 400,000 files are not protected by The Excalibur Group

Herkunft

the gentlemenP**** ProductsUS
kein Firmenname im Eintrag

Beschreibung der Täter

P**** Products p****products.com specializes in storage and material handling equipment, offering a wide range of products including lockers, shelving, pallet racks, garment dispensers, and hygiene products. Their offerings cater to various sectors such as schools, healthcare, and government agencies, with a focus on providing durable and efficient storage solutions. The company operates a modern manufacturing facility in North Carolina and utilizes QuickShip distribution centers to ensure timely delivery of products. P**** is committed to quality and innovation, serving clients with tailored solutions for their storage needs.

Herkunft

n0n51Ridge (Newark NJ hosting/IT)US

Beschreibung der Täter

IT services · USA

Herkunft

booba teamChicago Vein InstituteUS
healthcare

Beschreibung der Täter

Medical Practices Website: www.chicagoveininstitute.com Stolen data: 3 GB.

Herkunft

booba teamResearch Foundation of The City University of New YorkUS

Beschreibung der Täter

Education Administration Programs Website: www.rfcuny.org Stolen data: 295 GB.

Herkunft

auroraDuarte Nursery, Inc.US

Beschreibung der Täter

Duarte Nursery, Inc. is a wholesale deciduous fruit and nut tree nursery in Hughson, California — an S Corporation run by brothers John and Jeff Duarte. The dataset is the company's complete digital footprint: 300–500 full Social Security numbers from California DE9 quarterly employment tax filings (2024 Q1 through 2026 Q2). The owners' complete identity packages — John Duarte: SSN 545-67-5279, DOB 9/9/1966, DL C3261756, BofA account 325107115395. Jeff Duarte: SSN 545675712, DOB 7/19/1969. Bank account and routing numbers for ~100 employees via NACHA ACH direct deposit files — plus the company's own BofA commercial account credentials and wire transfer instructions. Two years of reviewed financial statements showing the company is <redacted> Privileged litigation documents from active lawsuits including P2G class certification strategy and settlement documents. Proprietary rootstock and grafting data — the IP that differentiates Duarte from competing Central Valley nurseries. Complete salary and compensation data for 23 salaried employees, insurance coverage details, tax returns, and 401(k) census information.

Herkunft

boobaPearland PediatricsUS
healthcare

Beschreibung der Täter

Hospitals and Health Care Stolen data: 35 GB.

Herkunft

boobaCity of Mt. Angel, OregonUS

Beschreibung der Täter

Government Administration Stolen data: 18 GB.

Herkunft

boobaCity Hall - Everett, MAUS
behoerden

Beschreibung der Täter

Government Administration Stolen data: 15 GB.

Herkunft

boobaCOASTAL CAROLINA NEUROPSYCHIATRIC CENTER, PAUS
healthcare

Beschreibung der Täter

Medical Practices Stolen data: 10 GB.

Herkunft

global secret groupRosenberg & PittinskyUS

Beschreibung der Täter

NameCompany: Rosenberg & Pittinsky, LLP | Country: New York, NY 10016 | Website: rpllplaw.com | Revenue: $5 Million | Industry: Legal Services, Law Firm, Real Estate & Commercial Litigation | Employees: 25-50 | Properties: 430 GB (218,361 Files, 6,630 Folders)

Herkunft

lockbit5chooseultimate.comUS

Beschreibung der Täter

Ultimate Health Plans is a local Medicare Advantage Plan based in Spring Hill, Florida, serving vari...

Herkunft

redactBaker DonelsonUS

Beschreibung der Täter

Sector: Law Firm

Herkunft

n0nVormittag Associates IncUS

Beschreibung der Täter

ERP software and hosting company · USA | Internal network configurations and security credentials of an ERP hosting company; Administrator and remote access credentials; Network topology of corporate and hosted client environments | [NOT PAID — EXPOSED]

Herkunft

global secret groupSeminole SchoolsUS

Beschreibung der Täter

NameCompany: Seminole Schools | Domain: internal.seminole.org | Country: Seminole,Florida,US | Website: sps.k12.ok.us | Revenue: $15.5 Million | Industry: Education General, Education | Employees: 50-100 | Properties: 39.6 GB (54,468 Files, 5,495 Folders)

Herkunft

n0nFroggys FogUS

Beschreibung der Täter

special-effects fog fluid manufacturer and distributor (order management and shipping operations) · Tennessee, USA | The complete shipping and order management database of a specialty fluid manufacturer, including full nightly backup copies from January 2026 to present; Employee account directory for the company domain; Shipping software and remote access configuration for their warehouse servers | [NOT PAID — EXPOSED]

Herkunft

nitrogenWalbroUS

Beschreibung der Täter

Walbro is a global market leader in engine management and fuel systems for the Outdoor Power Equipment, Recreational, Marine, and Personal Transportation markets, and a leading supplier of high pressure aluminum die casting to various industries. Walbro manufactures carburetors, electronic fuel injection systems, ignition systems, fuel tanks, fuel pumps, valves and fuel storage and distribution systems, and offers value-added machining, electronics and assembly capabilities.

Herkunft

qilinDental Team FLUS
healthcare

Beschreibung der Täter

N/A

Herkunft

silent ransomLatham & WatkinsUS

Beschreibung der Täter

Founded in 1934, Latham & Watkins is an international law firm specializing in activism, communication…

Herkunft

n0nHotel DuPontUS

Beschreibung der Täter

hospitality · United States | Network and phone system configurations for a hospitality property, including access credentials; Complete phone fleet and voice equipment inventory | [NOT PAID — EXPOSED]

Herkunft

n0nKingwood EndoscopyUS
healthcare

Beschreibung der Täter

Healthcare - Ambulatory Surgery Center (US) · Texas, US | The complete network configuration of an outpatient endoscopy surgery center: every account, password and access path; Proof of total control of the center's records, camera and remote-access systems; The center's full device and systems map | [NOT PAID — EXPOSED]

Herkunft

n0nThe Akeeli GroupUS

Beschreibung der Täter

investigations and due diligence · USA | Client investigation reports on named individuals, with dates of birth, aliases, phone numbers and addresses; Comprehensive background reports on investigation subjects, including criminal, license and relative history | [NOT PAID — EXPOSED]

Herkunft

n0nCompany #94US
kein Firmenname im Eintrag

Beschreibung der Täter

automotive retail · United States | [PENDING EXPOSURE]

Herkunft

auroraPOWERsonic Industries Inc.US

Beschreibung der Täter

[manufacturer] POWERsonic Industries Inc. — a privately held wire harness and cable assembly contract manufacturer founded in 1998 with ~100-150 employees across 7 locations. The exposed material spans every entity in the POWERsonic corporate structure: <redacted> <redacted> Employee PII for 93-150 employees — SIN documents, passports, I-20 visas, LMIA immigration approvals, W-2 tax forms, pay stubs, banking information. Plus 8 complete email archives totaling 13.2 GB. Customer proprietary designs — 7.5 GB of Demers Ambulance wiring harness data, 15 GB of CIRRIS cable test results, Mold Masters drawings, and a bilateral NDA with Husky Injection Molding. Full financial records — Dec 2025 balance sheet ($285K cash, $5.1M AP), trial balance, revenue data ($17.7M US), loan agreements, order margins (~45%), insurance policies. <redacted>

Herkunft

stormBaltimore Tank LinesUS
transport

Beschreibung der Täter

Energy | Glen Burnie, Maryland, United States | Baltimore Tank Lines is a leading transporter of liquid bulk commodities, including fuel, DEF, motor oils, fertilizer, and food-grade products. With over 75 years of experience, the company serves a diverse clientele across local, regional, and national accounts. They are committed to expanding their operations and client base by adding new service locations and growing their manpower and equipment. Baltimore Tank Lines also offers flexible job opportunities and a comprehensive benefits package for transport drivers. The company headquarters is located in 180 8th Avenue NW, Glen Burnie, MD 21061, United States. 11-50 Employees | Deadline: 2026-11-03T02:17:22.941Z

Herkunft

stormMerit Financial GroupUS
finanzen

Beschreibung der Täter

FinTech | Alpharetta, Georgia, United States | Merit Financial Group, LLC, doing business as Merit Financial Advisors ("Merit"), is a national wealth management firm that supports both the independent broker-dealer and RIA models. Based in Atlanta, Georgia, Merit has 24 additional offices throughout the U.S. and managed $5.59 billion in assets as of June 30, 2021 ($3.53 billion in advisory, $1.95 billion in brokerage assets and with $112 million in assets under advisement). Merit's mission is to establish and exceed the financial goals of its clients, while also providing its advisors and offices with practice management resources, an industry leading technology platform and the investment expertise needed to drive growth and deliver a superior client experience. The company headquarters is located in 2400 Lakeview Parkway, Suite 550, Alpharetta, GA 30009, United States. 201-500 Employees | Deadline: 2026-10-29T02:15:36.855Z

Herkunft

helixAmerican CampusUS

Herkunft

helixAmerican CampusUS

Herkunft

helixAmerican CampusUS

Beschreibung der Täter

American Campus records. Yearly revenue ~$1 billion yearly. GoFile links and passwords unlock in 6 hours.

Herkunft

stormPatriot MaritimeUS
transport

Beschreibung der Täter

Aerospace & Defense | Concord, California, United States | Patriot Maritime is a leading maritime contractor in the United States, specializing in the management and operation of vessels for both government and commercial clients. The company supports U.S. military readiness and commercial trade by managing a variety of vessel classes, including Ready Reserve Force ships and RO-RO cargo vessels. With a commitment to safety, compliance, and operational excellence, Patriot Maritime serves federal agencies, educational institutions, and private maritime organizations. As a privately held company, it aims to advance the future of maritime services in support of U.S. national security. The company headquarters is located in 1320 Willow Pass Road, Suite 485, Concord, CA 94520, United States. 11-50 Employees | Deadline: 2026-10-26T02:13:50.670Z

Herkunft

n0nFinzly CorpUS
finanzen

Beschreibung der Täter

fintech payments · US | Network configuration and access secrets for payment infrastructure; Cloud environment topology and access keys | [NOT PAID — EXPOSED]

Herkunft

n0nCompany #93US
kein Firmenname im Eintrag

Beschreibung der Täter

healthcare support services · United States | [PENDING EXPOSURE]

Herkunft

n0nAmagi Media LabsUS

Beschreibung der Täter

media technology / broadcast playout · United States | Network and device configuration files from a US broadcast playout site; Internal network maps of the site | [NOT PAID — EXPOSED]

Herkunft

n0nAll Business Technologies (Fox Hill bookkeeping and tax practice)US

Beschreibung der Täter

Accounting & Tax Preparation (US) · Massachusetts, USA

Herkunft

n0nSMIC US Company (Sunnyvale, CA — US arm of Semiconductor Manufacturing International CorpoUS
kein Firmenname im Eintrag

Beschreibung der Täter

Semiconductor manufacturing · California, USA

Herkunft

qilinLlano Independent School DistrictUS

Beschreibung der Täter

N/A

Herkunft

iah6477mckenneysUS

Beschreibung der Täter

Size: 295.9 GiB

Herkunft

n0nCompany #91US
kein Firmenname im Eintrag

Beschreibung der Täter

home services advertising · US | [PENDING EXPOSURE]

Herkunft

helixSouthwireUS

Herkunft

helixSouthwireUS

Herkunft

helixSouthwireUS

Beschreibung der Täter

Southwire records. Yearly revenue ~$9 billion. GoFile links and passwords unlock in 6 hours.

Herkunft

settrawww.marvinpac.comUS

Beschreibung der Täter

Marvinpac CZ, s.r.o. — the Czech subsidiary of Swiss group Marvinpac SA — specialises in contract packaging and co-packing for some of the world's leading brands: Nespresso, L'Oréal, COTY (Gucci, Hugo Boss, Calvin Klein), air up, LEGO, and others. The company has operated since 2010 at its production facility in Říčany–Jažlovice near Prague, and forms part of an international group with divisions in Switzerland, France, and Italy.

Herkunft

settraacclaimcompanies.comUS

Beschreibung der Täter

The Social Security Numbers of both group executives — Gerald C. Johnson Jr. and Mark C. Johnson — are fully exposed in corporate documents (IRS Form SS-4). The Johnson Family Trust holds an investment portfolio of $1.67 million at First Republic Bank against a margin loan of $280K, while parent company Acclaim Asset Management simultaneously received two different EINs from the IRS — per CP212 notice (January 2025). Baboo Properties LLC, in which Mark C. Johnson is a member, failed to file the required Form 940 for 2015, despite receiving IRS notice CP080. A corporate network of 15+ legal ent

Herkunft

settrabinsky.comUS

Beschreibung der Täter

Piscataway, New Jersey. Binsky &amp; Snyder, LLC has been servicing piping, HVAC, and mechanical systems since 1938. Its website tells a story of "family values" and "trust from day one." The actual corporate records tell a different story.

Herkunft

settramonroeroadways.comUS
transport

Beschreibung der Täter

Rochester, New York. A construction company that goes by Monroe Roadways in bid documents but appears as MRI Contractors of New York, Inc. in banking records. One address: 300 Hogan Road, Fairport. One president: Jeffrey D. Taylor. Two names — and not a single public word about what lies behind them.

Herkunft

settraexo.incUS
finanzen

Beschreibung der Täter

This article is based on a portion of the company's documents to which we gained access. Patient names, internal identifiers of employees as research subjects, specific diagnoses, serial numbers of problematic devices, and banking details have been intentionally redacted—the company failed to protect them, so we are protecting them.

Herkunft

n0nCompany #90US
kein Firmenname im Eintrag

Beschreibung der Täter

biotech manufacturing · US | [PENDING EXPOSURE]

Herkunft

n0nCompany #89US
kein Firmenname im Eintrag

Beschreibung der Täter

online sports betting analytics · United States | [PENDING EXPOSURE]

Herkunft

helixQuikreteUS

Herkunft

helixQuikreteUS

Herkunft

helixQuikreteUS

Beschreibung der Täter

Quikrete records. GoFile links and passwords unlock in 6 hours.

Herkunft

n0nECO USAUS
energie

Beschreibung der Täter

manufacturing · USA | 217,186 production and check records from the plant production system; 33 company and partner accounts with plain text passwords; vendor and item master data with part numbers; bill of materials and production statistics | [NOT PAID — EXPOSED]

Herkunft

n0nSQA Services IncUS

Beschreibung der Täter

software quality assurance (Wolters Kluwer/CCH Axcess test lab) · California, USA | VPN access credentials for all 64 employee accounts; Domain controller configuration: group policies, DNS zones, network maps; Client software test environment configuration, including stored service credentials | [NOT PAID — EXPOSED]

Herkunft

helixPersonify HealthUS
healthcare

Herkunft

helixPersonify HealthUS
healthcare

Herkunft

helixPersonify HealthUS
healthcare

Beschreibung der Täter

Personify Health records. Yearly revenue ~$500 million. GoFile links and passwords unlock in 12 hours.

Herkunft

helixBay AlarmUS

Herkunft

helixBay AlarmUS

Herkunft

helixBay AlarmUS

Beschreibung der Täter

Bay Alarm records. Yearly revenue ~$256 million. GoFile links and passwords unlock in 12 hours.

Herkunft

helixSmith Douglas HomesUS

Herkunft

helixSmith Douglas HomesUS

Herkunft

helixSmith Douglas HomesUS

Beschreibung der Täter

Smith Douglas Homes records. Yearly revenue ~$971 million. GoFile links and passwords unlock in 12 hours.

Herkunft

dragonforceoakgrovetechUS

Beschreibung der Täter

The company specializes in multi-domain training, unmanned systems & robotics, cyber/space operations, learning/courseware development, staff augmentation, intelligence analysis, and operates a Test & Training Center near Fort Bragg/Hoffman, NC. It primarily serves DoD clients including USASOC and 1st Special Forces Command. Corporate email archive of CEO and executive management (12 PST files, 35.14 GB) — forwarded credentials, NDAs, negotiations with the DoD/FBI and other companies. Deltek GCS payroll module: banking details of all vendors and contractors. Accounting system backup. Company QuickBooks files — OGT financial database: bank accounts, employee SSNs, administrator password. Contracts, personal data (PII), SSNs and much more.

Herkunft

n0nCompany #88US
kein Firmenname im Eintrag

Beschreibung der Täter

home healthcare services · United States | [PENDING EXPOSURE]

Herkunft

helixRheem GlobalUS

Beschreibung der Täter

Rheem Global customer records. Yearly revenue ~$6 billion. GoFile links and passwords unlock in 12 hours.

Herkunft

n0nCompany #86US
kein Firmenname im Eintrag

Beschreibung der Täter

real estate and land development · United States | [PENDING EXPOSURE]

Herkunft

n0nCompany #85US
kein Firmenname im Eintrag

Beschreibung der Täter

IT services · USA | [PENDING EXPOSURE]

Herkunft

n0nCompany #84US
kein Firmenname im Eintrag

Beschreibung der Täter

construction (custom homes) · USA | [PENDING EXPOSURE]

Herkunft

playMicroSearch CorporationUS

Beschreibung der Täter

United States

Herkunft

playPure OptionsUS
finanzen

Beschreibung der Täter

United States

Herkunft

redactONEOK, Inc.US
energie

Beschreibung der Täter

Sector: Oil & Gas Energy | Revenue: $39.4B USD

Herkunft

the gentlemenFirst Dental HealthUS
healthcare

Beschreibung der Täter

firstdentalhealth.com First Dental Health, Inc. dental consulting company founded in 1995 and based in Sacramento, California. It is led by Chairman and CEO Michael Zhang together with founder Dr. Rick Kershner, a periodontist who previously worked with Western Dental, Coast Dental and Pacific Dental Services. The company transforms existing dental practices of 40 to 250 chairs through leadership development, culture building and operational excellence, typically raising performance by 40 to 80 percent within 2 to 4 years. Its flagship case is Sacramento Dentistry Group, which grew from around 330000 dollars monthly revenue in 2014 to roughly 640000 dollars by 2023. It also runs a DSO consolidation model that merges 6 to 10 practices under one brand with owners keeping equity and a 3 to 7 year exit path. The team has built 14 companies that made the Inc. 5000 list, positioning it as a small but high-impact operator in US dental business consulting.

Herkunft

n0nCompany #80US
kein Firmenname im Eintrag

Beschreibung der Täter

managed IT services · Texas, USA | [PENDING EXPOSURE]

Herkunft

n0nCompany #79US
kein Firmenname im Eintrag

Beschreibung der Täter

hospitality · United States | [PENDING EXPOSURE]

Herkunft

n0nCompany #78US
kein Firmenname im Eintrag

Beschreibung der Täter

Healthcare - Ambulatory Surgery Center (US) · Texas, US | [PENDING EXPOSURE]

Herkunft

n0nCompany #77US
kein Firmenname im Eintrag

Beschreibung der Täter

investigations and due diligence · USA | [PENDING EXPOSURE]

Herkunft

n0nCompany #76US
kein Firmenname im Eintragfinanzen

Beschreibung der Täter

fintech payments · US | [PENDING EXPOSURE]

Herkunft

n0nCompany #72US
kein Firmenname im Eintrag

Beschreibung der Täter

Software / fundraising services · California, USA | [PENDING EXPOSURE]

Herkunft

n0nCompany #71US
kein Firmenname im Eintrag

Beschreibung der Täter

manufacturing · USA | [PENDING EXPOSURE]

Herkunft

redactParker-Hannifin CorporationUS

Beschreibung der Täter

Sector: Industrial Machinery | Revenue: $21.5B USD

Herkunft

n0nCompany #82US
kein Firmenname im Eintrag

Beschreibung der Täter

hospitality · United States | [PENDING EXPOSURE]

Herkunft

n0nCompany #81US
kein Firmenname im Eintrag

Beschreibung der Täter

Healthcare - Ambulatory Surgery Center (US) · Texas, US | [PENDING EXPOSURE]

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.