Ransomware
BrainCipher claims data breach at clinicaromero.com
The threat actor known as BrainCipher has published a data leak announcement claiming to have compromised clinicaromero.com.
2 min read
Author
Siberpol Intelligence Unit
Editorial team
786 stories
- Ransomware
oflaherty-law.com listed on BrainCipher leak site
The BrainCipher group has listed oflaherty-law.com on its leak site, claiming to possess 32 GB of data belonging to the organization.
2 min read
- Ransomware
Brain Cipher ransomware group lists novagroupgbc.com on its leak site
Nova Group GBC has been listed on the Brain Cipher leak site. The group says it holds 70 GB of data including invoices, payment schedules and property details, with a deadline of 31 October 2026.
2 min read
- Ransomware
Lamashtu lists WEPOS Chemie on leak site
WEPOS Chemie, a German maker of cleaning and care products, has been listed on the Lamashtu leak site. The details of the listing could not be seen because the screenshot did not load.
3 min read
- Ransomware
MECA-PRECIS listed on lamashtu ransomware leak site
French manufacturing firm MECA-PRECIS has been listed on the leak site of the ransomware group known as lamashtu.
3 min read
- Ransomware
FuG-Gruppe listed on Lamashtu ransomware leak site
FuG Gruppe, an IT systems integrator in Halver, North Rhine-Westphalia, has been listed on the Lamashtu leak site. The group claims to hold a 50 GB archive of 75,000 files.
3 min read
- Ransomware
Heritage Senior Living listed on N0n leak site
Heritage Senior Living has been listed on the N0n leak site as unpaid. The listing says network security configuration and internal network maps will be published.
3 min read
- Ransomware
Lamashtu ransomware group claims data breach against VERGI Muenster
The Lamashtu ransomware group has published a data leak announcement claiming to possess data belonging to the German tax and business consulting firm VERGI Muenster.
3 min read
- Ransomware
Gräfliches Hofbrauhaus Freising listed on Lamashtu ransomware leak site
Gräfliches Hofbrauhaus Freising, a German brewery, has been listed on the leak site of the ransomware group known as Lamashtu.
2 min read
- Ransomware
Inc Ransom ransomware group lists bereskinparr.com smartbiggar.ca on its leak site
The Inc Ransom group claims to have obtained data belonging to bereskinparr.com and smartbiggar.ca.
3 min read
- Ransomware
Linebarger Goggan Blair & Sampson listed on Everest ransomware leak site
The US law firm Linebarger Goggan Blair & Sampson has been listed on the Everest leak site. The screenshot is blurred, so the details of the listing cannot be read.
3 min read
- Ransomware
Hecker Holzsystembau listed on Lamashtu leak site
Hecker Holzsystembau, a timber construction company in Berching, Germany, has been listed on the Lamashtu leak site. The group claims to hold a 40 GB project archive of about 50,000 files.
3 min read
- Ransomware
Space Bears ransomware group lists SGLA (Schwartz, Giannini, Lantsberger & Adamson) on its leak site
SGLA Accountancy Corporation, a firm in Stockton, California, has been listed on the Space Bears leak site. The group says fragments of the archive will become downloadable when a countdown ends and that the full archive can be purchased.
2 min read
- Ransomware
PwC listed on Everest ransomware leak site
The Everest threat actor added PwC, the global audit and advisory network, to its leak site under a United Kingdom record. The listing gives no detail on the type or size of the data or on which PwC entity is involved.
3 min read
- Ransomware
Creative Universe listed on Qilin ransomware leak site
The Qilin threat actor added Creative Universe in Australia to its leak site. The listing gives no detail on the type or size of the data.
3 min read
- Ransomware
Bathurst RSL listed on Qilin ransomware leak site
The Qilin threat actor added Bathurst RSL, a club in New South Wales, Australia, to its leak site. The listing gives no detail on the type or size of the data.
3 min read
- Ransomware
Airtificial listed on Qilin ransomware leak site
The Qilin threat actor added Airtificial, a Madrid-based industrial technology company, to its leak site. The listing gives no detail on the type or size of the data.
3 min read
- Ransomware
Rhysida claims to have stolen data from DR.SCHNELL GmbH & Co. KGaA
The Rhysida threat actor listed about 2.52 TB of data comprising 175,151 files that it claims is a full network dump of DR.SCHNELL GmbH & Co. KGaA, a Munich-based maker of cleaning and hygiene products. According to the listing, the data covers ERP backups, HR and payroll records for staff in Germany, Switzerland and Austria, executive documents and access credentials.
3 min read
- Ransomware
Annapath listed on Akira ransomware leak site
The Akira threat actor announced it will publish about 110 GB of corporate data belonging to Annapath, a Maryland-based pathology laboratory. According to the listing, the data includes employees' passports and personal files, customer information and contracts.
3 min read
- Ransomware
Medienwerkstatt listed on Akira ransomware leak site
The Akira threat actor announced it will publish about 130 GB of corporate data belonging to Medienwerkstatt, a media services company in Switzerland's canton of Thurgau. According to the listing, the data includes employee personal information, customer information and contracts.
3 min read