Ransomware Group intelligence
Dark Project
ActiveTrack Dark Project with 36 published victims and 1 known leak locations in a single intelligence view.
Overview
Dark Project is tracked by Breach House as a ransomware group with 36 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Leak Status Distribution
- Leaked 18 50.0%
- Pending 18 50.0%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 1h ago | darkprn3d3udnhpuxknsrhft3376lrz5tenhgkrxge5hxqe46pkbrwid.onion |
Top Activity Sectors (11)
Typical Attacks (12)
▼MITRE ATT&CK does not currently catalogue Dark Project, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v20.0. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: Dark Project executes malicious payloads through PowerShell scripts to stage ransomware operations on compromised hosts.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: Dark Project modifies Windows Registry Run keys to ensure ransomware execution upon system restart for persistence.
What that means: Adversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: Dark Project disables security tools by terminating antivirus processes and modifying system behavior to evade detection.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1070.004 File Deletion Stealth
What they do: Dark Project deletes Volume Shadow Copies and temporary backup files using vssadmin and file deletion commands.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
What they do: Dark Project performs system checks to validate target environments and adapt encryption behavior before deployment.
What that means: Adversaries may employ various system checks to detect and avoid virtualization and analysis environments.
-
T1564.003 Hidden Window Stealth
What they do: Dark Project operates through hidden command windows to conceal malicious processes and tool execution during attacks.
What that means: Adversaries may use hidden windows to conceal malicious activity from the plain sight of users.
-
T1083 File and Directory Discovery Discovery
What they do: Dark Project performs file and directory discovery to identify critical business data and system folders for targeting.
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1135 Network Share Discovery Discovery
What they do: Dark Project uses network share discovery to locate victim file shares and storage paths for encryption targets.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: Dark Project uses SMB/Windows Admin Shares for lateral movement across networked manufacturing and engineering systems.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: Dark Project encrypts victim files using custom ransomware binaries to maximize operational disruption and extortion leverage.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1489 Service Stop Impact
What they do: Dark Project stops critical services like backup agents and monitoring systems using net stop commands to disrupt recovery.
What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
-
T1490 Inhibit System Recovery Impact
What they do: Dark Project inhibits system recovery by destroying Volume Shadow Copies and backup restore mechanisms via command-line tools.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Victims (36)
Search, filter and paginate the victim timeline for Dark Project. Showing 1–36 of 36.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Beach Eye Medical Group id35351 View details | United States | IT | pending | ||
|
About Beach Eye Medical Group The latest eye-care technology combined with decades of experience makes Beach Eye Medical Group a center of excellence for eye care. ur team of board-certified doctors is led by Dr. Samir Shah, a specialist in complex eye surgery with a sub-specialty in cataract, cornea, and refractive surgery. The company's physician team includes Dr. DruAnn McCluskey, who provides care for a variety of eye conditions, from cornea and external disease to dry eye and glaucoma. Dr. Kevin Jwo specializes in treating cataracts and glaucoma through a variety of medical, laser, and surgical techniques. As a result of the attack on Company Beach Eye Medical Group, more than 200 GB of confidential data was stolen. The data comprises more than 250,000 files containing information about the organization’s employees and their patients, medical records, and doctors reports, as well as other important company information. |
||||||
| Ransomware | Asensus Surgical id35352 View details | United States | IT | leaked | ||
|
About Asensus Surgical TransEnterix, which rebranded as Asensus Surgical in 2021, pursued the goal of challenging Intuitive Surgical in the robotic surgery market. After the FDA rejected its SurgiBot system in 2016, the company pivoted to the Senhance platform, a digital laparoscopy system featuring haptic feedback and eye-tracking camera control. Despite building a global procedure base, Asensus faced persistent financial difficulties and going-concern doubts, ultimately being acquired by KARL STORZ in 2024. The acquisition marked the end of Asensus as an independent entity, with its Senhance technology now folded into KARL STORZ's broader surgical portfolio. Asensus Surgical fell victim to a cyberattack, resulting in the theft of more than 600 GB of data and over 85,000 files containing confidential information, employees’ personal documents, research findings, and all of the company’s internal information. |
||||||
| Ransomware | The Excalibur Group id35353 View details | United States | Services | pending | ||
|
About The Excalibur Group The Excalibur Group is a Washington D.C. based company that focuses on enhancing local, state, and federal programs through staff augmentation, training, and program management in the Defense, IT, Workforce, Environmental, and Legal sectors. They provide specialized job training and placement services for individuals in various industries, including transitioning soldiers. The company also offers both permanent and contingent labor to support clients' internal IT and R&D projects. Their mission is to deliver efficient contract management and cost-effective solutions while promoting meaningful Veteran employment. Company The Excalibur Group was attacked, resulting in the theft of more than 600 GB of confidential data, such as banking and other financial information, personal data of employees and customers, and information marked “secret”. Currently, more than 400,000 files are not protected by The Excalibur Group |
||||||
| Ransomware | Franklin Miller Inc. id33782 View details | United States | — | pending | ||
|
About Franklin Miller Inc. Franklin Miller has been engineering wastewater grinders, crushers, shredders, and screens for municipal and industrial applications since 1918. Their products are designed for reliability and efficiency, catering to industries such as wastewater treatment, food processing, mining, oil and gas, and recycling. The company is committed to providing comprehensive post-sale support, ensuring that their equipment operates at peak performance. Trusted by industry leaders worldwide, Franklin Miller's equipment is precision manufactured in the USA to handle the toughest jobs. As a result of the attack on "Franklin Miller", more than 250 GB of confidential data were stolen. The organization lost control over documents such as drawings and project documentation, confidential agreements, banking and other financial information, as well as employees’ personal data. |
||||||
| Ransomware | PennEastern Architects LCC id33783 View details | United States | — | pending | ||
|
About PennEastern Architects LCC The principals of PennEastern Engineers, LLC are Paul Pasonick, Andrew Pasonick, Michael Amato and Daryl Pawlush. All principals have extensive experience in commercial and residential land developments, municipal projects, sanitary sewer projects, storm water projects, pavement projects, flood control projects and soil erosion and sedimentation control plans. In addition, each has assisted in design, specification writing, cost estimating, project bidding and bid review, construction observation and project management of the various projects. The Principals of PennEastern Architects, LLC are Andrew Pasonick, Emil Jarolen and Norman Manovsky. Design Principal Emil Jarolen has been practicing Architecture since 1974 and has been a Registered Architect in the State of Pennsylvania since 1978. As a result of a cyberattack on Company PennEastern Architects, more than 100 GB of corporate data was stolen. The breach includes a large volume of confidential information, including drawings and project documentation, data on the company’s customers and employees, as well as documents containing banking and financial information. Currently, approximately 60,000 files are unprotected by Company PennEastern Architects. |
||||||
| Ransomware | Claire's Inc. id33784 View details | United States | — | pending | ||
|
About Claire's Inc. Claire's Inc. is a jewelry and accessories retailer aimed at tweens and teens, known for its ear-piercing services and mall-based stores. The company has filed for bankruptcy twice and closed many locations in recent years. It now operates through remaining stores and partnerships with retailers such as Walmart and CVS. Claire's Inc. suffered a cyberattack that disrupted its operations and compromised customers and employees data. |
||||||
| Ransomware | Cumar Marble & Granite id32873 View details | Türkiye | IT | pending | ||
|
About Cumar Cumar Marble & Granite is a leading fabricator and supplier of high-quality marble, granite, limestone, and exotic stones in New England, specializing in luxury kitchens, bathrooms, and custom projects. The company caters to designers, architects, developers, and discerning homeowners, offering a wide range of custom stone products including countertops, sinks, and fireplaces. Their extensive inventory features various natural stones from around the world, ensuring elegance and durability in every project. Cumar is recognized for its commitment to quality and craftsmanship, making it the preferred choice for luxury stone solutions. Cumar Marble & Granite, a company specializing in luxury kitchens, bathrooms, and custom projects, has been the target of a massive cyberattack. Hackers stole 489 gigabytes of data from the company’s servers, including personal information, technical drawings, and financial documents. This incident raises serious concerns regarding the theft of intellectual property and potential breaches of employee and customer privacy. |
||||||
| Ransomware | Specchem LLC id32711 View details | United States | Manufacturing / Engineering | pending | ||
|
About Specchem LLC Specchem LLC is a U.S.-based supplier of concrete repair materials, flooring products, and chemical admixtures. The company offers a range of cementitious and epoxy-based systems. Their distribution network covers domestic commercial and industrial contractors. A cyberattack on Specchem LLC resulted in a massive data breach. As a result of the incident, approximately 500 GB of data—containing roughly 700,000 files, including confidential personal and financial information—was stolen. |
||||||
| Ransomware | MEI Architects id32672 View details | United States | Manufacturing / Engineering | leaked | ||
|
About MEI Architects MEI Architects is a firm based in San Francisco that specializes in commercial, residential, and public architecture. They provide elegant and pragmatic solutions tailored for government, nonprofit, and private clients. Their portfolio includes notable projects such as the Portsmouth Square Improvement Project and the VA Palo Alto Polytrauma Aquatic Therapy Center. The firm is committed to community-minded design and successful partnerships. As a result of the attack, 340 GB of data (approximately 130,000 files) was stolen: including Social Security numbers, passports, green cards, invoices, HR documents, and a vast number of architectural drawings—including those from past and current projects, as well as those currently under construction. |
||||||
| Ransomware | Master Manufacturing Co., Inc. id32644 View details | United States | Manufacturing / Engineering | pending | ||
|
About Master Manufacturing Master Manufacturing Co., Inc. specializes in custom metal stamping and production services, leveraging over 200 years of combined design and engineering expertise. Founded in 1970 and located in southern Indiana, the company offers a range of services including laser cutting, wire bending, and heat treatment, all while maintaining a commitment to high-quality standards certified by IATF 16949. Their intended clients span various industries such as appliance, HVAC, lighting, automotive, and RV, with a focus on delivering innovative and efficient solutions. Master Manufacturing prides itself on quick turnaround times and the ability to meet specific customer needs through early design involvement and advanced manufacturing techniques. Master Manufacturing Co specializing in custom metal stamping and production services has fallen victim to a significant cyberattack. Hackers reportedly exfiltrated 36 gigabytes of sensitive data from the company’s servers. The stolen information includes SQL databases containing personal data, as well as technical plans and schematics for custom metal parts. The breach raises serious concerns regarding intellectual property theft and potential privacy violations for employees and clients. |
||||||
| Ransomware | Alurwalls id32645 View details | Brazil | Retail / E-commerce | leaked | ||
|
About Alurwalls ALUR specializes in innovative glass wall systems, offering both single glazed and double glazed options. Their products are designed to create modern and functional workplace environments. ALUR's solutions are aimed at businesses looking to enhance their office spaces with stylish and efficient modular dividing walls. The company is recognized for its award-winning designs that contribute to the future of workplace architecture. Alurwalls was attacked, resulting in the theft of approximately 17 GB of confidential data. The stolen information includes banking and other financial documents, client building plans, and other personal data belonging to the company and its partners. Currently, more than 16,000 files are no longer protected by Alurwalls. |
||||||
| Ransomware | Pump Engineering Company id32092 View details | United States | Manufacturing / Engineering | leaked | ||
|
About Pump Engineering Company Pump Engineering Company is a full-service distributor and supplier of industrial pumps, parts, and fluid handling systems, serving Southern California since 1946. During the cyberattack, 120,000 files (115 GB) were stolen, including an extensive customer database, insurance documents, confidential financial documents, and a vast number of project drawings. |
||||||
| Ransomware | Dentist in New Britain, CT id32094 View details | United States | Healthcare / Pharma | pending | ||
|
About Dentist in New Britain, CT Dentist in New Britain has spent over a decade caring for families across New Britain—pairing modern technology with the kind of warmth you don't expect from a dental office. As a result of the attack, the following were compromised: the entire customer database, consisting of just over 8,000 files, as well as a small number of records containing Social Security numbers |
||||||
| Ransomware | The Liberty Group id32086 View details | United States | Services | leaked | ||
|
About The Liberty Group Companys offerings include local, long distance, and international moving, lab relocation services, and logistics solutions. They cater to a diverse range of clients, providing professional and comprehensive assistance to both residential and commercial customers. Investigators are working to identify the perpetrators and assess the full scope of the damage. A company has suffered a major cyberattack resulting in the theft of approximately 27,000 internal files. The leaked documents include financial records, internal working materials, and personal data of employees. Attackers encrypted the company's systems following the breach, severely disrupting operations |
||||||
| Ransomware | Jones, Little & Co., CPAs, LLP id32087 View details | United States | Retail / E-commerce | leaked | ||
|
About Jones, Little & Co., CPAs, LLP Jones, Little & Co., CPAs, LLP is a professional accounting firm that offers a wide range of services including business accounting, tax preparation, and IRS problem resolution. They cater to small businesses, non-profit organizations, and specialized industries such as auto dealers and retailers. At least 100 gigabytes of company data—including financial records, internal files, and employee personal information—were stolen in a cyberattack. Hackers encrypted the firm's systems after exfiltrating the documents, leaving operations paralyzed. |
||||||
| Ransomware | Design-Aire Engineering, INC id32083 View details | United States | Manufacturing / Engineering | leaked | ||
|
About Design-Aire Engineering, INC Design-Aire Engineering specializes in mechanical, electrical, plumbing, and energy engineering services. They focus on providing innovative and sustainable solutions for their clients. The company serves a diverse range of clients, including those in the public and private sectors. With a commitment to green engineering practices, they aim to enhance energy efficiency and environmental sustainability. Design-Aire Engineering, INC has suffered a cyberattack on its service systems, resulting in the theft of approximately 377GB of sensitive data. The breached information includes employees' personal data and detailed architectural plans of clients' buildings. |
||||||
| Ransomware | Furnished Quarters id32084 View details | United States | Retail / E-commerce | leaked | ||
|
About Furnished Quarters Headquartered in New York City, New York, Furnished Quarters, is to deliver exceptional residential experiences with passion, reliability and integrity always innovating and putting people first. They consider this in everything they do and every guest and client experience they deliver. The company "Furnished Quarters" was the victim of a successful cyberattack, as a result of which the company’s confidential data was stolen. The volume of data stolen amounts to 155 GB. The data stolen included the company’s customer details, as well as documents containing banking and financial information. Currently, around 198,000 files are no longer under the control of "Furnished Quarters". |
||||||
| Ransomware | Long-Lewis Automotive Group id31290 View details | United States | Retail / E-commerce | leaked | ||
|
About Long-Lewis Automotive Group The Long-Lewis Auto Group is Alabama’s largest automotive retailer, with origins tracing back to a hardware store founded in Bessemer, Alabama, in 1887. It became one of the nation's very first Ford dealerships in 1915 and operates multiple dealerships across the state. Following a successful cyberattack on Long Lewis, more than 500 GB of confidential information was stolen. More than 15,000 records containing personal data of the organization’s customers and employees, important financial and banking documents, and other valuable company information were compromised. Currently, Long Lewis lost control of more than 650,000 files. |
||||||
| Ransomware | The Metropolitan Entertainment & Convention Authority id31252 View details | United States | NGOs / Associations | leaked | ||
|
About MECA Omaha MECA is a organization that manages public event venues in Omaha, Nebraska, including the CHI Health Center, Charles Schwab Field, and The RiverFront. Established in 2000, it plays a crucial role in hosting world-class events and fostering community engagement through its facilities. As a result of a successful cyberattack on the company, MECA suffered damage; more than 500 GB of confidential information was stolen, specifically the company’s customer data, important financial documents, and the personal data of the organization’s employees. About 100 000 files are not secured by domain for now. Download here: http://667k2ck7qlzoqt52i6dq7evcfzko2ezfrhgv6zziccjet2cc653kvbid.onion/ |
||||||
| Ransomware | Laurel Institutes id31254 View details | United States | Education | pending | ||
|
About Laurel Institutes Laurel Institutes offers focused education and professional certifications across various fields, including business, healthcare, trades, cosmetology, and culinary arts. The institution emphasizes hands-on training and small class sizes to foster student engagement and skill development. Their programs are designed to prepare students for successful careers in industries they are passionate about. With multiple campuses and online options, Laurel Institutes aims to connect students with local employers and provide resources for career advancement. A "Laurel Institutes" company suffered a cyberattack that led to the theft of approximately 50+ GB of sensitive data. Exposed files include financial confidential papers, bank records and medical personal information. Personal data of more than 1,000 students and staff members was leaked Download here: http://tjaaioz32salcoj63ttxra6nfqggwbcezkzpwnhyoiwq5tuimzmsb3qd.onion |
||||||
| Ransomware | Ohio Living Home Health & Hospice id31257 View details | United States | Healthcare / Pharma | leaked | ||
|
About Ohio Living Founded in 1922, Ohio Living is an experienced not-for-profit provider of life plan communities and services in Ohio. Due to cyberattack at least 600Gb of sensitive data leaked in "Ohio Living Home Health & Hospice" in April 2026. It known that at least 5000 files with personal data were stolen, among whole it contained employee records, driver licenses, patient personal documents including photos, medical records, social security numbers, insurance information, also files with confidential company financial information and bank records covering period for 2022-2026. Download here: http://3i5px2hibsyityv6jixnqba35yz25jekbwwumjdxjqzt3euqsygjx5id.onion/ |
||||||
| Ransomware | Labpharma id31259 View details | Mexico | Healthcare / Pharma | pending | ||
|
Labpharmacorp Labpharma is a Clinical Laboratory in Miami dedicated to delivering dependable, high-quality laboratory services for clinical trials and research. About Labpharma Labpharma is a laboratory data company supporting clinical research trials. Company offers Local and Central Laboratory testing and data management. Standard Services: Laboratory Manual (electronic and hardcopy), kit production, door to door shipping (IATA certified), research trained and certified (CGP certified), while testing menu includes the following disciplines: Hematology, Clinical Chemistry, Immunochemistry, Infectious Disease, Hemostasis, and Toxicology. From end to end all samples are barcode, tracked and managed to ensure reliable laboratory services for research studies. Download here: http://t2ru74fbgut26xnagtrl4ajeh5vqytrl6cpr6cubmr6sqdxk5guh5mqd.onion/ |
||||||
| Ransomware | Ruhrpumpen id31261 View details | Germany | Manufacturing / Engineering | leaked | ||
|
About Ruhrpumpen Ruhrpumpen is a leading global manufacturer of highly engineered centrifugal and reciprocating pumps. A sophisticated cyberattack in the company's network led to a massive data breach. As a result of the incident, approximately 1 TB of data was leaked, including confidential personal and financial information. |
||||||
| Ransomware | Thermo King id31263 View details | Canada | Manufacturing / Engineering | leaked | ||
|
Due to cyberattack on Genesis more than 70 Gb of company data was stolen. Leakage contains big amount of sensitive data such as company's customers data, bank and financial information documents. About 10 000 files are not secured by THERMO KING for now. Download here: http://wjcml4mxpcvsmjxm33zhjb46nzutxk6g3f5w23fopgpwj6pqjcidiyqd.onion |
||||||
| Ransomware | Storer Transportation and Storer Coachways id31265 View details | United States | Transportation / Travel / Logistics | pending | ||
|
The company "Storer Transportation" and "Storer Coachways" was attacked, resulting in the theft of more than 50,000 folders (240+ GB) of the company’s confidential information, including more than 1,500 pieces of employee personal data, financial and banking documents, credit card information and a large amount of confidential incident data. Download here: http://pokttabd2hod47ladeeoin22wmq4remyo3wshwvxfuhgqygcbezq2qqd.onion |
||||||
| Ransomware | Genesis Engineering Group id31267 View details | United States | Manufacturing / Engineering | leaked | ||
|
Due to cyberattack on Genesis more than 75Gb of company personal data was stolen. Leakage contains big amount of sensitive data such as personal emlpoyes documents, company's customers data, bank and financial information documents. About 50 000 files are not secured by Genesis for now. Download here: http://x2jz63qemhcbhyskzt3pie757oicdkctk2rh5dpykmxsw2yoayeqs5yd.onion/ |
||||||
| Ransomware | Mayco International id31269 View details | United States | Finance / Legal / Insurance | leaked | ||
|
About Mayco International At least 2Tb of sensitive data were exfiltrated from the company’s control following a cyberattack. The compromised dataset leaked from Mayco internatioins company infrastructure includes internal organizational documents, proprietary technical schemas, employee personally identifiable information, and a substantial volume of financial records. |
||||||
| Ransomware | Sutherland Packaging id31271 View details | United Kingdom | Manufacturing / Engineering | pending | ||
|
About SPI Sutherland Packaging LLC is a leading manufacturer specializing in creative digitally printed full-color point-of-purchase displays for brands worldwide. The company offers a range of services including digital printing, retail packaging, and turnkey fulfillment, focusing on delivering custom-blended solutions that meet client demands. With over 50 years of experience, Sutherland Packaging is trusted by global brands for its high-quality and cost-effective solutions. Due to cyberattack on Sutherland Packaging more than "200" Gb of company data was stolen. Leakage contains big amount of sensitive data such as company's customers data, bank and financial information documents. About 250 000 files are not secured by Sutherland Packaging for now. |
||||||
| Ransomware | Brainhunter Companies LLC. and Brainhunter Systems Ltd. id31273 View details | United States | IT | pending | ||
|
About Brainhunter Companies LLC. and Brainhunter Systems Ltd. Founded in 1995, Brainhunter is an employment agency providing staffing and recruiting services to engineers, information technology, healthcare, and industrial sectors. Brainhunter also offers workplace management products, solutions and consulting, payroll and compliance services, and more. Brainhunter is headquartered in Toronto, Ontario. As a result of the attack on Brainhunter, more than 160 GB of the company's confidential data was stolen, including banking and financial documents, as well as the personal data of employees and customers. At this time, approximately 320,000 files remain unprotected by Brainhunter Foundation. |
||||||
| Ransomware | Leviton id31275 View details | United States | Manufacturing / Engineering | pending | ||
|
About Leviton Founded in 1906 and headquartered in Melville, New York, Leviton is a privately held global provider of electrical wiring devices, data center connectivity solutions, and lighting energy management systems. A major cyber attack has resulted in the Leviton company losing control over its entire repository of sensitive data, totaling approximately 1.4 terabytes. The massive breach exposed a wide range of highly confidential information, including internal financial records, proprietary project schematics and working documents, as well as the personal data of employees. Additionally, a significant quantity of other unclassified but highly sensitive information was exfiltrated in the breach, painting a stark picture of a total system compromise. |
||||||
| Ransomware | The Family Medicine Clinic id31277 View details | United States | Healthcare / Pharma | leaked | ||
|
About FMC The Family Medicine Clinic (Louisiana) suffered a serious cyberattack, which resulted in the encryption of a vast data archive and left the company without access to its own online systems. The leak of more then 250Gb FMC medical data encompasses a wide range of document types, including patient registration forms, lab test results, treatment plans, prescription records, and personal insurance information. In addition, employee personnel files were leaked, along with the full names, home addresses, and Social Security numbers of hundreds of customers. Download here: http://x4emye5homuwkrvrfaoql53hc5spbazkvcw3m4pv6jaj5tjqmjizleqd.onion |
||||||
| Ransomware | Rocky Mount Recyclers id31279 View details | United States | Other | pending | ||
|
Due to cyberattack on Rocky Mount Recyclers more than 40Gb of company personal data was stolen. Leakage contains big amount of sensitive data such as personal emlpoyes documents, company's customers data, bank and financial information documents. About 12,000 files are not secured by RMR for now. Download here: http://2zl5qc3mqap7vziqfis65oyjcgdiedigoequxbqsn6uwian7ieozvoqd.onion/ |
||||||
| Ransomware | The Miller Group id31281 View details | United Kingdom | Construction / Real Estate | pending | ||
|
About The Miller Group The Miller Group refers to The Miller Group - Multiplex Division, a retail display manufacturer with operations spanning Dupo, Illinois and Richmond, Virginia As a result of the cyberattack, the company lost control of 500 GB of confidential data, including: employees’ Social Security numbers, email addresses, home addresses, and ZIP codes—plain Excel spreadsheets; financial documents in PDF format—budgets, transactions, and internal reports; complete project drawings—working diagrams and perspective sketches. |
||||||
| Ransomware | TSC Logistics id31283 View details | Philippines | Transportation / Travel / Logistics | leaked | ||
|
About TSC Logistics TSC Logistics specializes in providing advanced transportation solutions that prioritize speed and cost-effectiveness for their clients. A cyberattack has resulted in the exfiltration of nearly 600 gigabytes of highly sensitive data, exposing a vast trove of internal records. The compromised material includes personal employee documents, confidential company financial records, invoices, taxpayer statements, and extensive client information. More than 10,000 PDF files have been leaked, containing unredacted Social Security numbers, driver’s licenses, payroll records, and other protected identifiers, raising the spectre of widespread identity theft and regulatory scrutiny. |
||||||
| Ransomware | Reid Electric Service, Inc id31285 View details | United States | Construction / Real Estate | pending | ||
|
About Reid Electric Service, Inc At Reid Electric Service, Inc. we realize the safety, and reliability of your electrical system is important to you. We take pride in exceeding your expectations to perform work on your electrical system on time, safely and on budget. Reid Electric Service, Inc has suffered a cyberattack on its service systems, resulting in the theft of approximately 50 GB of sensitive data. The breached information includes employees' personal data and detailed architectural plans of clients' buildings. |
||||||
| Ransomware | Mile Bluff Medical Center id31286 View details | United States | Healthcare / Pharma | leaked | ||
|
About Mile Bluff Medical Center Located in Mauston, Wisconsin, Mile Bluff Medical center has been in operation since 1912. Its services include acute emergency care, as well as long term nursing and rehabilitation A "Mile Bluff Medical Center" company suffered a cyberattack leading to the theft of over 550 GB of sensitive data. Exposed files include a full SQL database backup, employee records, confidential company financial information, bank records, patients' personal documents, Social Security numbers, medical records, medical histories, and surgical records. As a result, the personal data of more than 25,000 patients and staff members was leaked. Download here: http://7iphetz64a7iihcpwr3nirjioghyt6lrku62gu4z7f3zo7rcz5qrgvad.onion/ |
||||||