Ransomware Activity

fuel trading and construction materials · Bulgaria | The complete counterparty ledger of a fuel trading company: 694 companies with full legal names, addresses, managing persons, national company numbers, tax numbers and bank account details; More than 3,100 live customs and fuel movement documents from December 2025 through October 2026, and a 12 year archive of more than 46,000 documents from 2014 through 2025; Records of 611 drivers and 651 tanker trucks with registration plates; More than 2.6 million automated tank gauge readings from fuel storage tanks; Named staff accounts of the accounting system | [NOT PAID - EXPOSED]

media production (audio description and accessibility media) · Montreal, Quebec, Canada | Current 2026 client production files from your work in progress library, including active projects modified in October 2026; A job candidate resume with full personal contact details from your human resources records; Your archive of finished productions from 2016 through 2021, including a 2.1 GB demonstration archive; Internal technical documentation of your media production platform | [NOT PAID - EXPOSED]

diamond and lab grown diamond trading · New York, New York, United States | Diamond stock and inventory lists with stock codes and certificate numbers; Customer return records with customer names and tracking references; More than 2,200 bank deposit and invoice documents | [NOT PAID - EXPOSED]

Legal Services - Family Law (US) · California, USA | Client case files of a San Diego family law practice: divorce, custody and support matters with California court filings (FL-150 financial declarations, FL-300 requests for orders, FL-335 proofs of service) and XSpouse support calculations; Client intake records with Social Security numbers and dates of birth; Client bank statements (Navy Federal, Discover and other institutions) and the practice trust account statements; Client billing roster with balances | [NOT PAID - EXPOSED]

plumbing and kitchen products distribution · Cincinnati, Ohio, United States | Sales orders with customer names, item numbers and product descriptions; Customer and order detail files with over 16,000 records; A full backup image of the main application library | [NOT PAID - EXPOSED]

Financial Advisory & Restructuring (US) · Chicago, Illinois, USA | Patient records with names and dates of birth from the patient database backup of December 2025 (3,698 records), taken from the office network; The complete patient database backup history, 2018 through 2025; More than 13,000 patient eye examination records with full ocular, medical and social history; OCT eye scan files from the imaging server on the network; Workstation profiles of office staff including stored system credentials | [NOT PAID - EXPOSED]

wholesale distribution · Dallas, Texas, United States | Vendor and contractor tax records with Social Security numbers and employer identification numbers; Customer account number lists; Monthly operations scheduling and order logs active through October 2026 | [NOT PAID - EXPOSED]

engineering design and installations · Portugal | The full project archive of an engineering design office, spanning 2000 through 2026, including tender submissions, client proposals and technical drawings; Project folders for named clients including hospital installations for a private hospital group; Scanned office documents with activity through October 2026; A company bank account document with the full IBAN and tax number; Staff curricula with photos and personal details | [NOT PAID - EXPOSED]

health insurance administration · Guayaquil, Ecuador | Identity and contact records of 139,006 named insurance clients, including identity document numbers and dates of birth; 383,159 policy beneficiary records with insured amounts; 402,988 medical and insurance claims with diagnosis codes and dollar amounts, current through 20 October 2026; Policy billing, home and work addresses and bank account details | [NOT PAID - EXPOSED]

network and IT services · New York, United States | The live accounting database of the company, more than 627 megabytes, active through 20 October 2026; A second company accounting database of Elevate Networks, Inc., more than 331 megabytes, active through 20 October 2026; Transaction logs and scheduled accounting backups | [NOT PAID - EXPOSED]

rheumatology medical practice · Riverside, California, United States | Scanned laboratory requisitions of named patients with dates of birth, home addresses and Medicare subscriber details, April through October 2026; Accounts receivable aging with patient names, account numbers, insurers and balances; Patient billing files and records correspondence of the practice | [NOT PAID - EXPOSED]

smart grid engineering firm · Spain | [PENDING EXPOSURE]

Environmental NGO · Ethiopia | The complete SAP Business One production database of the organization: 15,275 journal transactions with 89,929 journal lines, 1,007 business partner records of regional partner organizations with contacts, 333 general ledger accounts, procurement and inventory records; A verified full backup of the production ERP database and a fresh copy of the landscape database; The complete financial and operational record of a donor funded environmental organization | [NOT PAID - EXPOSED]

textile manufacturing · Tunisia | Client master records of the group's accounting and commercial dossiers: 84 records with client names, addresses, Tunisian tax registration numbers, phones and emails; Supplier master records: 32 records with the same level of detail; Article and inventory data of both confection workshops and the Bizerte branch; Business documents of 2026: quotes, invoices and delivery notes for named clients; Print and production templates of the group | The victim can verify everything in their private negotiation room. | [NOT PAID - EXPOSED]

solar energy company · Switzerland | Financial and bank records of a Swiss solar energy company, including annual accounts and audit files; Payroll and staff data with employee names and social insurance records; Customer and project files for solar installations at four sites; The accounting database with its backups | [NOT PAID - EXPOSED]

automotive retail · United States | Network security configuration of an automotive retailer; Private network tunnel definitions between locations; Internal network maps and device inventory | [NOT PAID - EXPOSED]