Germany
Targets by Group
Leak Coverage — Germany
- Leaked868%
- Pending101192%
- Deleted61%
- Other indexed sources
- Data breaches203
- Stealer logs0
- Leads3
Germany - Targeted Attacks in All period
Posts 1311 total Page 2 / 14
| Type | Target | Source | Discovered | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Dienst Pack Systems View Details | qilin | Manufacturing / Engineering | pending | ||
|
N/A |
||||||
| Ransomware | Okovolt Solartechnik View Details | thegentlemen | Energy | pending | ||
|
oekovolt.com Ökovolt Solartechnik GmbH is an Austrian company specializing in the planning, installation, and maintenance of photovoltaic systems for private, commercial, and industrial clients. Based in Upper Austria with over 15 years of experience, the firm provides comprehensive, customized solar energy solutions to promote sustainability and energy independence. They focus on high-quality components, expert consulting, and reliable service to maximize the efficiency and lifespan of every solar project |
||||||
| Ransomware | Evosys Laser GmbH View Details | aurora | Manufacturing / Engineering | leaked | ||
|
[manufacturer] Evosys Laser GmbH — an Erlangen-based industrial laser welding systems manufacturer with ~130 employees, subsidiaries in the US, China, and a string of Tier 1 automotive customers. The dataset is the complete corporate repository, spanning every business function: 130 employees' complete HR files — employment contracts, salary histories, bank IBANs, tax IDs, social insurance numbers, pension records, medical examinations, disciplinary warnings, and two confirmed minors' health records. <censored> <censored> Complete server infrastructure map via mRemoteNG XML — 7 servers named, domain admin credentials, internal IPs. The Citrix admin password is Password1. 326 GB of customer project data — laser welding process parameters, CAD files, robot control software, and the award-winning AQW process know-how. Complete financial history — Jahresabschlüsse (2015–2025), P&L forecasts through 2028, cash positions, investor documents, executive compensation. Attorney-client privileged communications (230 MB) and whistleblower reports under HinSchG. Industrial control data — robot SRS source code, PLC programs, nginx private keys for laser system web interfaces, VPN configurations for customer site remote access. |
||||||
| Ransomware | Franz Krause artworksgroup View Details | akira | Other | pending | ||
|
Franz Krause artworksgroup is a streamlined agency that leverages extensive experience in media and event management to deliver high-quality services while maintaining budget efficiency. The company emphasizes strong relationships and a commitment to client satisfaction. We will upload 81gb of corporate data soon. Employee information, detailed client information, financials, contracts and agreements, NDAs, confidential files, etc. |
||||||
| Ransomware | zinorm.de View Details | safepay | IT | pending | ||
|
Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, the family-owned company has more than seventy years of experience serving customers … |
||||||
| Ransomware | moebelmayer.de View Details | safepay | Retail / E-commerce | pending | ||
|
Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, the family-owned company has more than seventy years of experience serving customers … |
||||||
| Ransomware | paritaet-nrw.org View Details | safepay | NGOs / Associations | pending | ||
|
Headquartered in Wuppertal, the organization represents approximately 3,100 legally independent member organizations operating more than 7,000 social institutions and services … |
||||||
| Ransomware | haugbuersten.de View Details | safepay | Manufacturing / Engineering | pending | ||
|
Although the company in its current industrial form was founded in 1962, its family-owned brush-making tradition dates back to 1836, … |
||||||
| Ransomware | landesmuseum.de View Details | safepay | Public Sector | pending | ||
|
Established in 1919, the museum preserves and presents more than 50,000 years of human cultural history, ranging from prehistoric artifacts … |
||||||
| Ransomware | hst.eu View Details | safepay | — | pending | ||
|
Headquartered in Kressbronn am Bodensee, Germany, the company traces its mechanical engineering heritage back to 1950, while the original tea … |
||||||
| Ransomware | weier.org View Details | safepay | Other | pending | ||
|
The company specializes in representing manufacturers of plumbing, heating, water treatment, pumping, drainage, and building services equipment throughout western Germany. … |
||||||
| Breaches | fitmart.de_emailpass_70k.txt View Details | Database World ROC | — | leaked | ||
| Ransomware | OmniLink AG View Details | Global Secret Group | IT | leaked | ||
|
Full-scope penetration testing of financial transaction processing pipeline and API gateway. |
||||||
| Ransomware | hydraulic-components.net View Details | m3rx | Manufacturing / Engineering | leaked | ||
|
+44 1142764430 , VHS Hydraulics is a prominent supplier of hydraulic components and power packs, featuring products from renowned brands like Rexroth, Walvoil, and Casappa. With over 25 years of experience, they specialize in engineering bespoke power packs for demanding applications. Based in Sheffield, they offer extensive stock and provide same-day and next-day delivery services across the UK. Their team is equipped to assist clients with both individual components and complete hydraulic system solutions tailored to specific requirements. Stolen: 215 GB 226,961 Files |
||||||
| Ransomware | GURR Abdichtungstechnik GmbH View Details | qilin | Manufacturing / Engineering | leaked | ||
|
N/A |
||||||
| Ransomware | metrabyte.cloud View Details | apt73 | IT | leaked | ||
|
metrabyte.cloud is the website of Metrabyte Cloud Co., Ltd., a cloud service provider from Thaila... |
||||||
| Ransomware | menlosystems.com View Details | settra | Manufacturing / Engineering | pending | ||
|
FREQUENCY COMB ON TWO FRONTS A German company synchronizes time for the Pentagon while simultaneousl... |
||||||
| Breaches | bloggomio.de.rar View Details | Database World ROC | — | leaked | ||
| Ransomware | RehaVital Gesundheitsservice GmbH View Details | qilin | Healthcare / Pharma | leaked | ||
|
N/A |
||||||
| Ransomware | wdk.de View Details | safepay | Finance / Legal / Insurance | pending | ||
|
Founded in 1950 and headquartered in Frankfurt am Main, the organization serves as the central voice of German manufacturers of … |
||||||
| Ransomware | jaecklin-industrial.de View Details | safepay | Manufacturing / Engineering | pending | ||
|
Founded in 1935 by Julius Jäcklin, the company has developed from a regional machine repair workshop into a globally recognized … |
||||||
| Ransomware | lbb-treuhand.de View Details | safepay | Finance / Legal / Insurance | pending | ||
|
The company specializes in tax consulting, auditing, accounting, payroll administration, financial reporting, and business advisory services for private individuals, self-employed … |
||||||
| Ransomware | timetex.de View Details | safepay | Manufacturing / Engineering | pending | ||
|
The company traces its origins to 1991, when the TimeTEX brand was acquired and expanded into a comprehensive supplier of … |
||||||
| Ransomware | stroebel-gruppe.de View Details | safepay | Manufacturing / Engineering | pending | ||
|
Headquartered in Langenzenn, Bavaria, the company was founded in 1978 by Gerlinde and Gerhard Ströbel and has grown from a … |
||||||
| Ransomware | cenesco.de View Details | safepay | IT | pending | ||
|
Founded in 1998, the company provides comprehensive information technology solutions for small and medium-sized enterprises (SMEs), helping organizations modernize their … |
||||||
| Ransomware | mende-grundbesitz.de View Details | safepay | Construction / Real Estate | pending | ||
|
Founded in 1994, the company specializes in the professional administration of residential, commercial, and mixed-use real estate throughout the Berlin … |
||||||
| Ransomware | tws-tac.net View Details | threeam | Other | pending | ||
|
While ownership has changed over the years, the company has remained locally owned for over 65 years and family-owned for almost 40 years. The company is proud of the company's history and look forward to the future as the company continue to serv |
||||||
| Ransomware | Hanseata View Details | thegentlemen | Finance / Legal / Insurance | pending | ||
|
***.de traditional German flat glass wholesaler based near Hamburg, operating since 1953. The company specializes in supplying high-quality glass solutions, including vacuum glass, flat glass, and insulating glass, to commercial clients, architects, and construction firms worldwide. They are particularly known for their extensive stock capacity, specialized consulting for energy-efficient vacuum glazing, and comprehensive global logistics services |
||||||
| Ransomware | Landesbibliothek Coburg View Details | thegentlemen | Education | pending | ||
|
***.de zoominfo.com/c/landesbibliothek-coburg/429940598 regional state scientific library in Bavaria, Germany, originally founded in 1547. Located in the historic Ehrenburg Palace in Coburg, it houses a vast collection of around 500,000 volumes, including rare manuscripts, incunabula, and the historical book collections of the former Dukes of Coburg. Since 1973, the library has been administered by the Free State of Bavaria, serving as a vital cultural and research institution dedicated to preserving the region's historical heritage |
||||||
| Breaches | bvft.de.rar View Details | Database World ROC | — | leaked | ||
| Breaches | diedrucker.de.rar View Details | Database World ROC | — | leaked | ||
| Ransomware | Bosch View Details | D1R | Manufacturing / Engineering | pending | ||
|
Again, thanks to database Synopsys provided us with After analyzing technical leaks by other groups and cross-referencing targets from TARGETLIST.txt A company access was found and in the archives, a $10,000 gem: Bosch CAN module implementation Now it is going for free for every engineer and car enthusiast, thanks to Synopsys providing us with neat roadmap to tech sector Sorry, Bosch, you got third-partied! Call the Synopsys CEO and thank them for letting us all know where the valuable data is! |
||||||
| Breaches | old.partycam.de.zip View Details | Database World ROC | — | leaked | ||
|
📂 old.partycam.de.zip source: femboyforum.com/archive.php |
||||||
| Ransomware | giesdl.de View Details | lockbit5 | IT | leaked | ||
|
Die Gies Dienstleistungen GmbH ist ein deutsches Gebäudedienstleistungsunternehmen. Sie hat 19 Niede... |
||||||
| Ransomware | comtri.de View Details | lockbit5 | IT | deleted | ||
|
As a leading IT system house in the Stuttgart area, ComTRI GmbH is a highly qualified and trustworth... |
||||||
| Ransomware | INTERNET AG View Details | thegentlemen | IT | pending | ||
|
***.de zoominfo.com/c/inet/429716454 INTERNET AG is a professional German IT service provider specializing in reliable, sustainable, and flexible hosting and server solutions. The company delivers customized IT infrastructures, managed services, and global network connectivity tailored to complex business needs. Alongside its partner INTERNIC GmbH, it offers comprehensive enterprise software and secure digital operations for corporate clients |
||||||
| Ransomware | WH Müller View Details | Deadlock | Education | pending | ||
|
WH Müller is a family business in the field of electrical engineering and IT technology. |
||||||
| Ransomware | EFCA View Details | Deadlock | — | leaked | ||
|
EFCA a specialized accounting firm based in Paris, France. Core Expertise With over 30 years of experience, the firm specializes in real estate accounting and property management. Key services and areas of focus include: Property Management Support: Expertise in managing accounts for property administrators and real estate agencies. Trustee & Agent Accounting: Mastery of "comptabilité mandants" (client/trustee accounting) and navigating relationships with guarantee funds. Tax & Advisory: Handling complex tax and accounting issues specific to the real estate market. |
||||||
| Ransomware | 8.2 Group e.V. View Details | Deadlock | IT | deleted | ||
|
8.2 Group an international network of over 40 independent engineering firms specializing in technical inspection, consulting, and engineering for renewable energy projects. Headquartered in Germany, the group provides services throughout the lifecycle of wind, solar, and battery storage projects worldwide. |
||||||
| Ransomware | IFC Eur View Details | Deadlock | Education | pending | ||
|
IFC Europa is a Spanish-based distributor specializing in car audio, automotive lighting, and electronics. |
||||||
| Breaches | awo-suedost.de.7z View Details | Database World ROC | — | leaked | ||
| Ransomware | bergdemo.com View Details | settra | Other | pending | ||
|
Berg / Crushing Corporation of America: Demolition on Federal Money PROLOGUE In our possession are i... |
||||||
| Breaches | Germany_ID_Card_PSD_template (1).rar View Details | Database World ROC | — | leaked | ||
| Ransomware | Keifert View Details | thegentlemen | Manufacturing / Engineering | pending | ||
|
***.de zoominfo.com/c/keifert-gmbh/429980133 Keifert GmbH master-certified building cleaning company based in Schallstadt, Germany, with over 35 years of industry experience.They offer a comprehensive range of professional services, including office, industrial, and specialized cleaning, as well as janitorial services across the Southern Baden region.As a quality-focused enterprise, the company is certified according to DIN EN ISO 9001 and 14001 standards, ensuring reliable and environmentally conscious solutions for their clients |
||||||
| Ransomware | Kosmos View Details | thegentlemen | IT | pending | ||
|
***.de zoominfo.com/c/kosmos/470278755 Franckh-Kosmos Verlags-GmbH & Co. KG, a prominent media publishing house based in Stuttgart, Germany.Founded in 1822 by Johann Friedrich Franckh, the company is one of the leading publishers of guidebooks, children's books, board games, and educational experiment kits.It successfully combines long-standing tradition with modern trends to offer engaging products for children, families, and hobbyists |
||||||
| Ransomware | Tonnies Group View Details | thegentlemen | Agriculture / Food | pending | ||
|
***.de zoominfo.com/c/tönnies-group/427095219 Founded in 1971 as a family-owned business, the Tönnies Group is a leading German meat processing company headquartered in Rheda-Wiedenbrück.As a major global player in the food industry, it specializes in the slaughtering, butchering, and processing of pork and beef, generating around 5 billion euros in annual turnover with over 8,000 employees.Notably, the holding company is rebranding to "Premium Food Group" starting in 2025 to emphasize its focus on sustainable food solutions |
||||||
| Ransomware | MBT Energy View Details | thegentlemen | Energy | pending | ||
|
***.com zoominfo.com/c/mibet-energy/357309481 Xiamen Mibet New Energy Co., Ltd., is a high-tech enterprise based in China that specializes in one-stop solar mounting solutions and PV racking systems.The company manufactures a comprehensive range of structures for ground, rooftop, floating, tracking, carport, and agricultural solar applications. Holding over 200 global patents and an annual production capacity of 20GW+, Mibet exports its internationally certified products to more than 100 countries worldwide |
||||||
| Ransomware | COP® Vertriebs-GmbH Zentrale View Details | qilin | Manufacturing / Engineering | pending | ||
|
N/A |
||||||
| Ransomware | samberger24.de View Details | incransom | Retail / E-commerce | pending | ||
|
Samberger is a long-established medical supply store and sports and analysis center in Munich, offering orthopedic aids, shoe insoles and health products. |
||||||
| Breaches | Germany-80,375.csv View Details | Database World ROC | — | leaked | ||
| Breaches | Germany-79,692.csv View Details | Database World ROC | — | leaked | ||
| Breaches | CLEAN_Germany Data @updh1.txt View Details | Database World ROC | — | leaked | ||
| Breaches | Germany 6M Mobile phone with DOB.txt View Details | Database World ROC | — | leaked | ||
|
🔵 Germany Mobile Phone With DOB ┏• Date: ???? ┣• Lines: 6kk ┗• Size: 224 Mb 📄 Data: phone,name,dob #Germany |
||||||
| Leads | Germany, Switzerland, Austria 15k Leads(2023).xlsx View Details | Database World ROC | — | leaked | ||
| Ransomware | bmiprojects.de View Details | safepay | Construction / Real Estate | pending | ||
|
Originally operating under the name Bez Marine Interiors GmbH, the company built on decades of experience in the maritime industry … |
||||||
| Ransomware | caritas-koblenz.de View Details | safepay | NGOs / Associations | pending | ||
|
Headquartered in Koblenz, the association was founded in 1918 and has provided charitable and community-based services for more than a … |
||||||
| Ransomware | knobel-bau.de View Details | safepay | Construction / Real Estate | pending | ||
|
Founded in 1947, the company has grown from a small sand and gravel business established after the Second World War … |
||||||
| Ransomware | rtngmbh.de View Details | safepay | IT | pending | ||
|
Founded in 2015, the company specializes in the construction, installation, maintenance, and rehabilitation of underground utility networks and civil engineering … |
||||||
| Ransomware | lh-wohnverbund-wohnen-nrw.de View Details | safepay | Construction / Real Estate | pending | ||
|
They specialize in providing residential care, supported living, and social assistance for children, adolescents, and adults with intellectual and developmental … |
||||||
| Ransomware | shw-fr.de View Details | safepay | Manufacturing / Engineering | pending | ||
|
The company traces its origins to 1596, making it one of Germany's oldest industrial manufacturers, although its current corporate structure … |
||||||
| Ransomware | hahn-airport.de View Details | safepay | Transportation / Travel / Logistics | pending | ||
|
Originally developed as a United States military air base, the facility began civilian operations in 1993 and has since become … |
||||||
| Ransomware | ENB Versich View Details | payload | Finance / Legal / Insurance | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | Deutsche Bank View Details | unsafe | Finance / Legal / Insurance | leaked | ||
|
Revenue: 30 billion |
||||||
| Ransomware | Sitmatic View Details | qilin | IT | pending | ||
|
N/A |
||||||
| Ransomware | Tofutown View Details | payload | Agriculture / Food | pending | ||
|
TOFUTOWN is a traditional organic manufacturer specializing in plant-based foods, founded in 1981. The company offers a diverse range of products including vegan spreads, tofu, and seitan, all made from high-quality organic ingredients. With a commitment to sustainability and natural ingredients, TOFUTOWN caters to health-conscious consumers looking for convenient and delicious plant-based meal options. |
||||||
| Ransomware | Sgs Gmbh View Details | medusalocker | Manufacturing / Engineering | pending | ||
|
Organization with 933 emails extracted. Domain: sgs-gmbh.com |
||||||
| Ransomware | T Online View Details | medusalocker | Telecommunications | leaked | ||
|
Organization with 823 emails extracted. Domain: t-online.de |
||||||
| Ransomware | FunkeScheid View Details | medusalocker | IT | pending | ||
|
Notarkanzlei FunkeScheid, Kanzlei im Ostend, Frankfurt. 9755 emails. AD: Kanzlei.FunkeScheid.com |
||||||
| Ransomware | MBO GmbH View Details | thegentlemen | Manufacturing / Engineering | pending | ||
|
***.com MBO GmbH is a German surface technology company based in Roding, serving as the in-house surface treatment unit for the Mühlbauer Parts & Systems Group.With over 40 years of experience, they specialize in various advanced coating processes, including electroplating, powder coating, and painting.The company provides comprehensive technical advice and surface finishing solutions that are directly integrated with their parent company's production lines |
||||||
| Ransomware | Stadttheater Giessen View Details | thegentlemen | Hospitality / Food & Beverage / Tourism | pending | ||
|
***.de rocketreach.co/stadttheater-giessen-gmbh-profile_b40b4590ff936dde Stadttheater Gießen is a prominent multi-genre municipal theatre in Germany, renowned for its striking Art Nouveau (Jugendstil) building constructed in 1907. As the cultural heart of the Mittelhessen region, it offers a diverse repertoire encompassing opera, musicals, drama, and classical concerts. The theatre is celebrated for its high-quality productions, blending traditional classics with innovative contemporary works for audiences of all ages |
||||||
| Ransomware | Immling View Details | thegentlemen | Retail / E-commerce | pending | ||
|
***.de is the official website for the Immling Festival, a renowned classical music and opera event held annually at Gut Immling in Halfing, Germany. Running primarily from June to August since 1997, it features high-quality opera productions and symphony concerts in a picturesque setting. In 2026, the festival celebrates its 30th anniversary, remaining a major cultural highlight in the Chiemgau region |
||||||
| Ransomware | awo-suedost.de View Details | safepay | NGOs / Associations | pending | ||
|
Established in 1994, it is one of the regional branches of the Arbeiterwohlfahrt (AWO), one of Germany's six largest independent … |
||||||
| Ransomware | dia179.com View Details | safepay | Other | pending | ||
|
Founded in 2007, the firm specializes in industrial architecture, logistics facilities, research centers, production plants, and corporate office buildings. Unlike … |
||||||
| Ransomware | Primed Halberstadt Medizintechnik View Details | aurora | Manufacturing / Engineering | leaked | ||
|
[manufacturer] *** GmbH — a German manufacturer of medical devices founded in 1946 and now part of the PE-backed PP Medtech group (Wiesmann & Co. KG). The exfiltration captured four entire server volumes: Daten (883 GB) — File server: 289 employee home directories (547 GB), Czech subsidiary data (66 GB), production processes (162 GB), machine configurations (81 GB) EE (807 GB) — Enterprise system: Apollo ERP, VBANK banking (8 accounts), complete database backup (100.6 GB, dated June 3), product images WINDVSW1 (344 GB) — Windows server: DATEV accounting (115+ data directories including LODAS payroll), bank transfers, DMS exports dmsscan (12 GB) — Scanned documents from 51+ employee DMS mailboxes A database backup (spiel.zip.001–010, 100.6 GB) was created on 2026-06-03 |
||||||
| Ransomware | orion4value.com View Details | settra | IT | pending | ||
|
THE CERTIFICATE AS A VULNERABILITY: Documents of Orion Registrar Inc. PROLOGUE Financial reports and... |
||||||
| Ransomware | Hemmersbach GmbH & Co. KG View Details | qilin | IT | pending | ||
|
N/A |
||||||
| Ransomware | Kunert Fashion View Details | qilin | Manufacturing / Engineering | leaked | ||
|
N/A |
||||||
| Ransomware | straightperformance.de View Details | unsafe | IT | leaked | ||
|
Revenue: 2 million |
||||||
| Ransomware | Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik View Details | thegentlemen | IT | pending | ||
|
https://www.***.com/c/atlas-elektronik-gmbh/22289599 https://www.***.com/c/atlas-north-america-llc/346681852 https://www.***.com/c/thyssenkrupp-marine-systems/559786010 www.atlas-elektronik.com na.atlas-elektronik.com https://www.tkmsgroup.com/atlas-elektronik/ ThyssenKrupp Marine Systems of Germany (often abbreviated TKMS) is a group and holding company of providers of naval vessels, surface ships and submarines. It was founded when large industrial conglomerate ThyssenKrupp acquired Howaldtswerke-Deutsche Werft on January 5, 2005 TKMS Group is a leading provider of integrated system solutions in maritime defense technologies, catering to the complex requirements of modern navies. The company specializes in surface vessels, submarines, and advan Atlas Elektronik, founded in 1902 and headquartered in Bremen, Germany, is a marine electronics and systems business. It is involved in the development of integrated sonar systems for submarines and heavyweight torpedoes. 1TB+ |
||||||
| Ransomware | hellmold-plank.de View Details | safepay | Manufacturing / Engineering | pending | ||
|
Founded in 1904 by Heinrich Hellmold and Heinrich Plank, the company has evolved from a local cartage business into a … |
||||||
| Ransomware | Kuhnline View Details | play | Manufacturing / Engineering | leaked | ||
|
United States |
||||||
| Breaches | Germany Banking Data.csv View Details | Database World ROC | — | leaked | ||
| Breaches | Germany Loans Data.csv View Details | Database World ROC | — | leaked | ||
| Breaches | studio-onpoint.de.rar View Details | Database World ROC | — | leaked | ||
| Breaches | db-host203.checkdomain.de.sql View Details | Database World ROC | — | leaked | ||
| Breaches | Germany.rar View Details | Database World ROC | — | leaked | ||
|
Sent with @v_NeXa_Bot |
||||||
| Ransomware | ingerman.com View Details | chaos | Other | leaked | ||
|
Ingerman is a developer, builder and manager of multifamily housing communities throughout the Mid-Atlantic region. |
||||||
| Ransomware | Nachlass Nord View Details | anubis | Other | pending | ||
|
Inheritance lawyers expose IDs, estate records, and client data. |
||||||
| Ransomware | ehg.bayern View Details | safepay | Other | pending | ||
|
Founded in 1991, the company has evolved from a regional waste management enterprise into a specialized provider of infrastructure operations, … |
||||||
| Ransomware | Aerospace & Advanced Composites GmbH View Details | aurora | Manufacturing / Engineering | leaked | ||
|
*** (AAC) — an Austrian space-materials R&D company headquartered in Wiener Neustadt, with deep ties to the European Space Agency. Obtained two complete NAS snapshots spanning 30+ years of operations: aacdata (31 December 2022) — 123 GB: the complete Testhouse, R&D, and engineering share, including the ESA thermal vacuum test archive, polymer composites formulations, and 22 Outlook PST email backups. aacdata1 (14 January 2025) — 86 GB: the administrative share, including managing director's full PC backup (browser credentials, passport scans), 15 years of financial statements, shareholder agreements, and the IT credentials master spreadsheet. BMD_DATA — 34 MB: the complete BMD business software accounting database with employee payroll, SEPA payments, and VAT declarations. done/ — Bitlocker recovery keys for 12 endpoints and WMI system dumps. The exposed material includes: 4 passport scans, 1 social security number, 25 employees' complete HR files, 50–100+ job applicant CVs — the full identity-theft toolkit for the workforce plus third-party data subjects. The IT credentials master spreadsheet (AAC CODES.xlsx) containing every system password, plus browser-stored logins for ESA SSO, the company's IT provider, and industrial suppliers. 12 Bitlocker recovery keys enabling full-disk decryption of 6 company laptops. 123 GB of ESA thermal vacuum test data — 30+ years of space-grade materials testing that represents the company's core competitive advantage and cannot be recreated. 137 executed NDAs with partners including Airbus, RUAG, Safran, Thales, ESA, BMW, Tesla, Google, Samsung SDI, CERN, DLR, and 126 others. 15 years of annual financial statements, bank records, insurance policies, and shareholder agreements — the company's entire financial anatomy laid bare. |
||||||
| Ransomware | Kochs GmbH View Details | aurora | Manufacturing / Engineering | leaked | ||
|
[manufacturer] *** — a family-owned German manufacturer of windows, doors, and aluminium façade systems headquartered in Herzogenrath, Nordrhein-Westfalen, with ~240 employees across Germany, the Netherlands, and Hungary. The exposed material includes: 22 GB of payroll database backups (7 MSSQL .bak files, 2016–2023) — every employee's salary, bank IBAN, tax class, social insurance number, pension contributions, and wage garnishments. 2.3 GB of DATEV payroll records (through May 2026) — individual named salary documents, garnishment data, company car records for all three entities. 7 Active Directory passwords in plaintext batch scripts — including both Managing Directors, with one MD's credentials spanning three separate AD domains. 28+ proprietary application source code repositories — WinPro ERP, Apertum CRM, MES integrations, production viewers, time-tracking, and rack-management systems. Each one hardcodes its database credentials. SSL/TLS private keys for kochs.de (2021–2026) — enabling domain impersonation and man-in-the-middle attacks. 77 VPN pre-shared keys from the LANCOM gateway configuration — the complete remote-access roster since 2018. Managing Director's MRI and X-ray scans — brain and spine medical imaging, GDPR Art. 9 special category health data. 16 named employee disciplinary records, 11 driver's license scans, attorney-client privileged litigation files from two active employment lawsuits. Complete financial records — 2024 annual accounts, P&L, balance sheets, SFirm banking database, Syska ProFI general ledger, cost accounting through December 2024. |
||||||
| Ransomware | probat.ag View Details | lockbit5 | Manufacturing / Engineering | leaked | ||
|
PROBAT Bau AG is a leading construction company based in Munich, Ingolstadt, and Upper Bavaria, spec... |
||||||
| Ransomware | Alexander Buch Bilanzbuchhalter View Details | thegentlemen | Retail / E-commerce | pending | ||
|
***.de Alexander Buch is a certified accountant (Bilanzbuchhalter) based in Herne, Germany, offering professional financial services to both businesses and individuals. His practice specializes in ongoing bookkeeping, payroll accounting, commercial consulting, and comprehensive support for startup founders. Additionally, he provides dedicated tax assistance services, helping clients efficiently manage their financial obligations and regulatory requirements |
||||||
| Ransomware | Roth Industries View Details | qilin | Manufacturing / Engineering | pending | ||
|
N/A |
||||||
| Ransomware | ra-vogeler.de View Details | cloak | Finance / Legal / Insurance | pending | ||
|
Country: germany | Size: 1.1TB | Private | Views: 1 |
||||||
| Ransomware | neuwoges.de View Details | incransom | Construction / Real Estate | pending | ||
|
The Neubrandenburger Wohnungsgesellschaft mbH (NEUWOGES), a municipal housing company and subsidiary of the Vier-Tore-Stadt Neubrandenburg in Mecklenburg-Western Pomerania, Germany. It is one of the largest regional housing providers, managing around 12,000 apartments alongside commercial units and care facilities. It’s no secret that the company was subjected to a cyberattack and that data was stolen. But let’s pull back the curtain a bit. At first, the company’s leadership cut costs on proper IT infrastructure, and after the attack they continued to do so—this time at the expense of the security of their clients, employees, vendors, etc. Relying on the supervisory board, they attempted to obtain more information about the compromised data in order to protect themselves. Now you’re learning about this for free. Stay tuned. |
||||||
| Ransomware | zaunsysteme.de View Details | safepay | Manufacturing / Engineering | pending | ||
|
Operating within Germany’s construction materials and perimeter security sector, the company provides a wide range of products, including double-wire mesh … |
||||||
| Ransomware | gut-heckenhof.de View Details | safepay | Agriculture / Food | pending | ||
|
Established in 1992, the company operates a four-star hotel and one of the largest golf facilities in the region. The … |
||||||
| Ransomware | eurOptimum View Details | play | Finance / Legal / Insurance | leaked | ||
|
United States |
||||||
| Ransomware | Sumitomo Electric Bordnetze View Details | aurora | Manufacturing / Engineering | leaked | ||
|
[electric] *** SE (SEBN) — a Wolfsburg-headquartered subsidiary of Sumitomo Electric Industries (TSE:5802, ~$31B group revenue), employing approximately 40,000 people across 14 countries. Exfiltrated 1.1 terabytes of data from five manufacturing sites. SEBN Moldova (103 GB) — HR, payroll, personal tax records, competition-council litigation files, home directories SEBN Ukraine (115 GB) — HR/salary, Audi B9 project data, process documentation, including displaced-worker records for Ukrainian IDPs SEBN Tunisia — Fejja (191 GB + 493 GB shared) — passport copies, email archives (671 MB PST), quality/FMEA data, finance SEBN Slovakia (268 GB) — the crown jewel: Citibank corporate banking infrastructure including the TESTKEY authentication system, IBAN registries, daily bank statements, SAP salary-payment files, and years of department email archives The dataset contains 173,000 Excel files, 149,000 PDFs, 2,500 CAD engineering drawings, 2,500 Outlook messages, 1,500 FMEA/PPAP quality files, and 9 Outlook PST archives. |
||||||