Devman

SSN, medical data, medical cards ID 26099

Finance documents, clients PII ID 26083

Patient data, med cards ID 26006

[AI generated] N/A ID 26003

The data contains materials of national security including BIO laboratory facilities blue prints, and infromation regardless US army nitroglycerin supply chain. ID 25906

PII data, SSN´s financial and audit reports. ID 25905

Client data, HR data ID 25887

No additional victim description available. ID 25886

[AI generated] TIW Group is a specialist software firm with over 30 years of experience in developing solutions for the insurance industry. Their flagship product, ALIS, provides end-to-end solutions for life insurance and annuity processing. Additionally, they provide business process automation, legacy modernization, and risk compliance management services. Their digital solutions help businesses to streamline operations and improve business efficiency. ID 25882

PII data, SSN´s financial and audit reports. ID 25881

[AI generated] TWI Group is a specialized freight forwarder and logistics provider that primarily focuses on the trade show industry. The company provides a wide range of services, including domestic and international transportation, on-site handling, customs clearance, and more. Based in Nevada, USA, TWI operates globally reaching more than 180 countries. They are recognized for their expertise in managing logistics for all sizes of trade show exhibits. ID 25859

The data contains materials of national security including BIO laboratory facilities blue prints, and infromation regardless US army nitroglycerin supply chain. ID 25834

Insurance data, Hr data, client data ID 25831

No additional victim description available. ID 25808

Patient data, medical cards clinic records ID 25734

No additional victim description available. ID 25733

[AI generated] AutoMax.com is a leading used car dealership group in the US. Known for its wide range of high-quality pre-owned vehicles, AutoMax.com provides affordable options with comprehensive auto inspection and warranty. They offer financing options for all credit situations. The company is committed to delivering excellent customer service through its knowledgeable and friendly staff. ID 25668

[AI generated] N/A ID 25667

No additional victim description available. ID 25666

No additional victim description available. ID 25665

No additional victim description available. ID 25664

[AI generated] Mims.com is an online resource for medical professionals used mainly in Asia-Pacific and Middle East regions. It provides latest drug information and medical news, with a database featuring information about thousands of prescription medications. It also offers feature articles, opinion pieces and continuing medical education (CME) activities. It's extensively used by doctors, pharmacists, nurses and students. ID 25663

[AI generated] N/A ID 25662

[AI generated] Tvgoiania is a media and news company based in Goiânia, Brazil. It provides a platform for local news, events, and updates significant to the Goiania area. The company offers a variety of media content in the form of live shows, news broadcasts, publications, and web content. Tvgoiania operates primarily in Portuguese language. ID 25654

NSSF is a retail and e-commerce entity associated with Sweden, a market where online commerce is widely used across consumer and business sales channels. Sweden’s retail sector is characterized by strong e-commerce adoption and modern payment and platform infrastructure, supporting digital storefronts and transaction processing. In that context, NSSF fits within a sector focused on online merchandising, customer ordering, and commerce operations. It was listed as a ransomware victim associated with devman. ID 25653

[AI generated] N/A ID 25459

Financial, contracts HR data ID 25454

[AI generated] Consigaz is a Brazilian company that specializes in the distribution of Liquefied Petroleum Gas (LPG) for both industrial and residential use. They offer services such as cooking gas delivery and installation of gas systems for businesses. The company is committed to safety and environmental responsibility, using advanced technology for efficient gas handling and distribution. Consigaz operates across several Brazilian states. ID 25453

Datatheft 300gb of data stollen includes gov documents, deeds and much more ID 25452

data theft, evidence, officers personal information police reports, DEA open cases information ID 25451

Patients data, plastic operations data, SSNs ID 25450

Financial, patients data, HR data ID 25449

Case data, atourney client data, hr data ID 25448

Financial, Hr documents, claims ID 25180

Patients data, financial data ID 25179

Financial data, HR data ID 25178

Financial, Custommer data ID 25177

HR data ID 25092

Financial, Hr documents, claims ID 25091

Hr data, client data ID 25090

Patients' full records, HIV test results, IDs. Throughout a long waiting period, and despite a vast number of phone calls and emails sent by our team to the hospital, we have seen no action from the clinic to resolve the issue - knowing that the HIV tests could potentially change the lives of people whose relatives, friends, and workplaces will... ID 25016

HR data ID 25005

Financial, Client IDS ID 24989

Passport scans, Financial ID 24988

Financial, HR data ID 24956

SRC, Client data ID 24955

Financial, Client IDS ID 24954

[AI generated] N/A ID 24937

Financial, HR ID 24880

Patients full records, HIV tests results, ID's ID 24879

Financial, HR data, Client data ID 24859

No additional victim description available. ID 24858

HR data, clients data, Financial data ID 24806

Financial, HR data, Client data ID 24805

Financial, HR ID 24804

[AI generated] N/A ID 24782

Financial data, clients data ID 24760

No additional victim description available. ID 24759

Employee data, hr info, projects, Work logs of the power plants, Scada SRC ID 24719

[AI generated] Hopital La Rabta is a major hospital located in Tunis, Tunisia. It provides a wide array of medical services to the Tunisian population. The hospital prides itself on its team of highly skilled and dedicated medical professionals who utilize advanced medical equipment to effectively diagnose and treat diseases. It offers surgical services, specialty medicine, emergency care, and outpatient services. ID 24718

No additional victim description available. ID 24697

Financial data, clients data ID 24696

Data theft 80gb ID 24695

patient data ID 24662

Financial Records, Med cards, Hr documents ID 24661

Full quickbooks dump, patients data, and financial data ID 24660

[AI generated] Solidere, short for Société Libanaise de Développement et Reconstruction, is a Lebanese joint stock company responsible for the reconstruction, development, and management of Beirut’s Central District. Created in 1994, the firm is entrusted with restoring Beirut's historical buildings, attracting investments, and promoting tourism. It effectively serves as a private real estate company, but granted with governmental powers for urban development. ID 24553

Financial data, medical records ID 24542

Financial Records, Med cards, Hr documents ID 24541

Datatheft Client DB ID 24540

Financial data, medical cards ID 24539

Ransom: 200gb 150k ID 24418

Ransom: 200gb 220k ID 24367

Ransom: 75k 50gb ID 24366

Ransom: ecaretest.com 350k 246gb ID 24329

Ransom: 90k 236gb ID 24328

Ransom: 550k 280gb ID 24327

Ransom: 75k 50gb ID 24326

Ransom: 200gb 150k ID 24325

Ransom: 250k 200gb ID 24324

Ransom: 500gb 400k ID 24124

Ransom: data theft 40gb 120K ID 24122

Ransom: 200k 120gb ID 24003

mcchemical.com is the website of MidContinental Chemical Company, Inc. (MCC), a US-based manufacturer headquartered in Olathe, Kansas. The company produces and distributes petroleum additives designed to improve the performance of fuels and lubricating oils in vehicles, equipment, and machinery. MCC has operated since 1994 and supports research and product development alongside sales, marketing, and supply chain functions. In threat-intelligence listings, mcchemical.com was identified as a ransomware victim associated with devman. ID 23997

Ransom: 200k 80gb ID 24581

Ransom: 300k 120gb ID 23936

Ransom: 210k 145gb ID 23935

Ransom: 248000 30gb of files exfiltrated ID 23814

Omnium International is an independent professional services firm focused on project management, commercial management, contract management, cost consultancy, quantity surveying, and dispute resolution. Its website says it serves clients across Dubai, Abu Dhabi, Saudi Arabia, the UK, Europe, and Cyprus, with international offices supporting its work. Available directory and company listings place Omnium International in the business services category and identify the firm as headquartered outside the US, while this index lists omniumint.com under a US ransomware victim entry. It was listed as a ransomware victim associated with devman. ID 23787

Ransom: 1.2million 1.2 tb and one very interesting email ID 24580

Ransom: 500k 120gb ID 23621

Ransom: 500k 60gb ID 23583

Ransom: 50gb 100k ID 23553

Ransom: 500k 120gb ID 23541

Ransom: 60gb 300k ID 23540

Ransom: data theft 400k ID 23451

Ransom: 700k 120gb ID 23438

Ransom: 500k 60gb ID 23437

Ransom: oracle theft 200k ID 23436

Ransom: oracle theft 400k ID 23435