Ransomware Group intelligence
Thegentlemen
ActiveTrack Thegentlemen with 1084 published victims and 2 known leak locations in a single intelligence view.
Overview
Thegentlemen is tracked by Breach House as a ransomware group with 1084 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Leak Status Distribution
- Leaked 17 1.6%
- Pending 1067 98.4%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 5h ago | tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion |
| Leak location 2 | Onion service | Down checked 5h ago | i2ohjeeqe37jre4f2u7pyq73cbm6lecumdxapkvrlryna6rc3it4zsid.onion |
Top Activity Sectors (21)
- IT 167
- Manufacturing / Engineering 128
- Communication / Marketing 89
- Healthcare / Pharma 88
- Services 79
- Retail / E-commerce 74
- Finance / Legal / Insurance 59
- Construction / Real Estate 51
- Transportation / Travel / Logistics 35
- Not identified 34
- Education 30
- Agriculture / Food 30
- Public Sector 22
- Energy 19
- NGOs / Associations 14
- Hospitality / Food & Beverage / Tourism 14
- Telecommunications 8
- null 6
- Media / Entertainment 1
- Law Enforcement / Public Sector 1
- Research 1
Typical Attacks (17)
▼How Thegentlemen typically operates, as attributed by MITRE ATT&CK v20.0. Attributed via The Gentlemen.
-
T1583.001 Domains Resource Development
What they do: The Gentlemen has maintained a TOR Data Leak Site (DLS) to post stolen victim data.
What that means: Adversaries may acquire domains that can be used during targeting.
-
T1585 Establish Accounts Resource Development
What they do: The Gentlemen and its affiliates have leveraged Tox to communicate with victims.
What that means: Adversaries may create and cultivate accounts with services that can be used during targeting.
-
T1585.001 Social Media Accounts Resource Development
What they do: The Gentlemen has established social media accounts on X.
What that means: Adversaries may create and cultivate social media accounts that can be used during targeting.
-
T1588.002 Tool Resource Development
What they do: The Gentlemen has provided a custom EDR killing tool called GentleKiller and other like software that abuse vulnerable drivers via the Bring Your Own Vulnerable Driver (BYOVD) technique to their affiliates that attempts to disable EDR solutions.
What that means: Adversaries may buy, steal, or download software tools that can be used during targeting.
-
T1683.001 Written Content Resource Development
What they do: The Gentlemen has utilized branded code and ransom notes.
What that means: Adversaries may create or tailor written materials to support targeting and malicious operations.
-
T1683.002 Audio-Visual Content Resource Development
What they do: The Gentlemen has leveraged a branded graphic that is placed on the systems desktop wallpaper that symbolizes the association of malicious activity to the group.
What that means: Adversaries may create or manipulate audio, image, and video content to support targeting and malicious operations.
-
What they do: The Gentlemen has leveraged compromised user credentials to gain access to victim hosts.
What that means: Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
T1190 Exploit Public-Facing Application Initial Access
What they do: The Gentlemen has exploited vulnerable public-facing devices and services to gain access to victim environments.
What that means: Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
-
T1068 Exploitation for Privilege Escalation Privilege Escalation
What they do: The Gentlemen has assisted affiliates with gaining privilege escalation through the use of BYOVD.
What that means: Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
-
T1027.002 Software Packing Stealth
What they do: The Gentlemen has packed The Gentlemen Ransomware binaries utilizing either Themida or Enigma to obfuscate the malicious payloads.
What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
-
T1036 Masquerading Stealth
What they do: The Gentlemen has fabricated the version information of payload files to evade detection.
What that means: Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools.
-
T1036.001 Invalid Code Signature Stealth
What they do: The Gentlemen has copied digital signatures from legitimate executables in attempts to circumvent detection.
What that means: Adversaries may attempt to mimic features of valid code signatures to increase the chance of deceiving a user, analyst, or tool.
-
T1036.005 Match Legitimate Resource Name or Location Stealth
What they do: The Gentlemen has named The Gentlemen Ransomware payload files to resemble well-known software vendors to include security vendors.
What that means: Adversaries may match or approximate the name or location of legitimate files, Registry keys, or other resources when naming/placing them.
-
T1018 Remote System Discovery Discovery
What they do: The Gentlemen has utilized internal network scanning tools to enumerate additional hosts in the victim environment to include Advanced IP Scanner.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1219.002 Remote Desktop Software Command and Control
What they do: The Gentlemen has relied on remote access tools, such as AnyDesk, as a means of maintaining access to victim environment.
What that means: An adversary may use legitimate desktop support software to establish an interactive command and control channel to target systems within networks.
-
T1486 Data Encrypted for Impact Impact
What they do: The Gentlemen has used The Gentlemen Ransomware to encrypt victim’s data.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1657 Financial Theft Impact
What they do: The Gentlemen has used double-extortion tactics to sway victims to pay a ransom to include exfiltrating sensitive data, encrypting files, and threatening public release if a payment is not received.
What that means: Adversaries may steal monetary resources from targets through extortion, social engineering, technical theft, or other methods aimed at their own financial gain at the expense of the availability of these resources for victims.
Tools Observed (64)
▼Software Thegentlemen has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
Defense evasion
Discovery
Discovery & enumeration
Exfiltration
LOLBAS (living-off-the-land binaries)
Networking & tunnelling
OffSec
Offensive security tooling
RMM Tools
Remote monitoring & management
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Ransom Notes (3)
▼The note this group leaves on a compromised machine. Click a filename to read it.
README-GENTLEMEN_3.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 13343E50C1B3466F0EA35B5B3E55A044CB7132FD28A8665EFEA0E5848E276D548C21B79F15C2 Download Tox messenger: https://tox.chat/download.html Contact us (add via SimpleX): https://smp14.simplex.im/a#4mlOiePV8NBXOv2QrZ9CaPeRPm1mBUgxn4SdpFnm978 Download SimpleX https://simplex.chat/downloads/ СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/TheGentlemen26 Clearnet blog link: https://thegentlemen.cc/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats. We have stolen more than 100 GB of your corporate information from your servers, including critically important data. Your company is facing a massive information security breach. A total data leak has occurred. This greatly increases the risk of colossal financial and reputational losses.
README-GENTLEMEN_2.txt
[snip] = YOUR ID Gentlemen, your network has been encrypted. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. In addition, it will be reported to the relevant data protection authorities and regulators. This may result in official investigations, significant fines, and reputational damage for your company. 6. We guarantee 100% file recovery to their original state, bit by bit. To demonstrate the quality of our work, you can provide three sample files, and we will restore them free of charge. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): 98C132E2B20B531BE6604397D97040C1E9EB42FCE12EDF119BCE8B4031CA5C70DAF5E65FA3C3 Download Tox messenger: https://tox.chat/download.html Contact us (add via Session ID): 05809b2da1d5b1a302f48b5767fd1843d54f3c516f9ab0eb26b544ffa73340292e Download Session https://getsession.org СONTACT TO PREVENT DATA LEAK (7 DAYS BEFORE YOUR COMPANY DATA WILL BE PUBLISHED IN OUR BLOG, WITH 239 HOURS REVEAL TIMER) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Follow us on X: https://x.com/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website. After adding (us) in Tox or Session, please wait for your request to be processed and stay online. If you do not receive a reply within 36 hours, create another account and contact us again. In your first message in chat, immediately provide your ID from the note and the name of your organization. Assign one person as contact responsible for all negotiations. Do not create multiple chats.
README-GENTLEMEN.txt
[snip] = YOUR ID Gentlemen, your network is under our full control. All your files are now encrypted and inaccessible. 1. Any modification of encrypted files will make recovery impossible. 2. Only our unique decryption key and software can restore your files. Brute-force, RAM dumps, third-party recovery tools are useless. It’s a fundamental mathematical reality. Only we can decrypt your data. 3. Law enforcement, authorities, and “data recovery” companies will NOT help you. They will only waste your time, take your money, and block you from recovering your files — your business will be lost. 4. Any attempt to restore systems, or refusal to negotiate, may lead to irreversible wipe of all data and your network. 5. We have exfiltrated all your confidential and business data (including NAS, clouds, etc). If you do not contact us, it will be published on our leak site and distributed to major hack forums and social networks. TOX CONTACT - RECOVER YOUR FILES Contact us (add via TOX ID): F8E24C7F5B12CD69C44C73F438F65E9BF560ADF35EBBDF92CF9A9B84079F8F04060FF98D098E Download Tox messenger: https://tox.chat/download.html COOPERATE TO PREVENT DATA LEAK (239 HOURS LEFT) Check our blog: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ Download Tor browser: https://www.torproject.org/download/ Any other means of communication are fake and may be set up by third parties. Only use the methods listed in this note or on the specified website.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (1084)
Search, filter and paginate the victim timeline for Thegentlemen. Showing 1–100 of 1084.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | MKG Kirchrode id36136 View details | Germany | Services | pending | ||
|
MKG Kirchrode mkg-kirchrode.de 900GB MKG Kirchrode is a premium oral and maxillofacial surgery practice in Hannover-Kirchrode, Germany, led by Dr. med. Jennifer Rublack with Dr. Dr. Holger Moysich and Dr. Stephan Adam. Its 420 square meter facility offers the full spectrum of MKG surgery from wisdom teeth removal and dental implants to skin cancer reconstruction and aesthetic procedures like thread lifting and Botox. Three levels of anesthesia including general anesthesia and sedation are available for anxious patients, with a dedicated anesthesiologist on staff. The practice is equipped with an operating microscope, 3D CBCT imaging, soft laser and PRP therapy, offering both titanium and ceramic implants. Open Monday to Friday from 7:45 to 18:00, it provides barrier-free access, free parking and is just 1 minute from the U6 U-Bahn station. Services are available in German, English, Italian, French and Polish with interest-free installment payment plans. Activates in 238:04:23 |
||||||
| Ransomware | European Motorcars id36090 View details | Germany | Transportation / Travel / Logistics | pending | ||
|
European Motorcars european-motorcars.com European Motorcars is a multi-brand premium European car dealership founded in 1972 in Dayton, Ohio, with 54 years of experience selling and servicing Mercedes-Benz, BMW, Audi, Porsche, Land Rover, Jaguar, Volvo and MINI. With 50 to 100 employees across two locations on Miamisburg-Centerville Road and Dorothy Lane in Kettering, it offers new and certified pre-owned vehicles, official service centers with brand-specific diagnostic equipment and an in-house body shop. The dealership provides full-cycle services including financing, insurance, trade-in and professional detailing. It stands out as one of the few multi-brand premium European dealers in the region, allowing customers to compare and service multiple brands under one roof. Key strengths are 54 years of local trust, certified technician teams for each brand and original parts inventory. It serves the greater Dayton metropolitan area of approximately 800,000 people. Activates in 238:04:22 |
||||||
| Ransomware | Mitsubishi Motors Ukraine id36091 View details | Ukraine | Manufacturing / Engineering | pending | ||
|
Mitsubishi Motors Ukraine itsubishi-motors.com.ua Mitsubishi Motors Ukraine is the official importer and distributor of Mitsubishi Motors vehicles in Ukraine, managing sales, service and parts through over 20 authorized dealers nationwide. Its model range includes the Outlander and Outlander PHEV crossover, Eclipse Cross, ASX and the legendary L200 pickup truck. As part of the Renault-Nissan-Mitsubishi Alliance, it benefits from global R&D, shared platforms and a 5-year warranty. The Ukrainian automotive market recovered to around 60,000 new car sales in 2025, with Mitsubishi holding a 3 to 5 percent share led by Outlander and L200. Services span new and certified pre-owned sales, original parts, financing through partner banks and full after-sales support. Strategic initiatives include expanding the PHEV hybrid lineup and preparing for fully electric model launches. Activates in 238:01:33 |
||||||
| Ransomware | Customs Support id36088 View details | United Kingdom | null | pending | ||
|
Customs Support customssupport.com Revenue $389.4 Million IZD GmbH Europe's largest customs brokerage network, founded with headquarters in the Netherlands and operating 50 plus offices across 14 countries with over 1,600 employees. Its German subsidiary IZD GmbH is based in Duisburg, Europe's largest inland port, providing 24/7 customs clearance for automotive, electronics, pharmaceutical and e-commerce clients. Services cover import and export clearance, transit procedures, tariff classification, bonded warehousing, AEO certification and export controls. The group is backed by European private equity fund Castik Capital and serves over 5,000 clients. Its digital platform at customssupport.com offers EDI integration, real-time tracking and customs data analytics. Estimated group revenue is 300 to 500 million euro with recent additions including Brexit advisory and preferential trade consulting. Activates in 149:58:10 |
||||||
| Ransomware | MegChem id36089 View details | United States | Manufacturing / Engineering | pending | ||
|
MegChem megchem.com MegChem is a South African engineering consultancy founded in 1985 in Secunda, Mpumalanga, providing process, mechanical, structural, electrical and piping engineering for the petrochemical, oil and gas, energy and mining sectors. With over 350 engineers and offices in Secunda, Cape Town, Johannesburg and Richards Bay, it offers full lifecycle services from FEED studies through detailed design to construction supervision. It is strategically located next to Sasol Secunda, one of the world's largest petrochemical complexes, giving it direct access to major projects. Key sectors include coal-to-liquids, gas processing, refinery upgrades, power generation and water treatment. The company has completed projects across South Africa and Mozambique over 41 years of continuous operation. Its 8 engineering disciplines under one roof enable integrated multidisciplinary delivery for large-scale industrial projects. Activates in 238:06:32 |
||||||
| Ransomware | Five Star Plating id36081 View details | United States | Manufacturing / Engineering | pending | ||
|
Five Star Plating fivestarplating.com Five Star Plating LLC is an American electroplating and metal finishing company founded in 2007 in Little Rock, Arkansas, with 82 employees and approximately 12.5 million dollars in annual revenue. It operates 3 automatic plating lines plus 1 manual rack line across two facilities, coating around 50 million parts per year. Its core offerings include zinc and zinc alloy plating, phosphate coatings, E-Coat electrocoating and specialty finishes like zinc-nickel as a cadmium replacement for aerospace and defense. The company serves automotive, oil and gas, construction, aerospace and military clients with ISO 9001 certification and salt spray testing capabilities up to 1,000 hours. Key strengths are full-spectrum plating from mass barrel to custom rack work, a dedicated testing laboratory and strategic location in central Arkansas. It is the largest specialized plater in the state with continued growth of 16 percent year over year. Activates in 238:21:10 |
||||||
| Ransomware | Secretaria de Estado de Saúde id36082 View details | Brazil | Public Sector | pending | ||
|
Secretaria de Estado de Saúde saude.mt.gov.br The Secretaria de Estado de Saúde de Mato Grosso is the state health department of Mato Grosso, Brazil, responsible for public healthcare across 141 municipalities and 3.6 million inhabitants. Headquartered in Cuiabá under Secretary Renata Aparecida Barbirato, it manages state hospitals, laboratories, blood centers and the AFFARMES free medication program. Its network includes the Julio Müller General Hospital, the Tropical Diseases Hospital, the Maternal-Infant Hospital, UPA emergency units and the LACEN state laboratory. In 2026 it launched new water quality monitoring programs and updated its vaccination calendar including COVID-19 and tropical disease campaigns. The department runs an open procurement portal for medical equipment and pharmaceuticals with a budget of approximately 4 to 5 billion reais. Digital transformation initiatives include electronic health records, the SEI-MT document system and integration with Brazil's national health data network. Activates in 238:17:31 |
||||||
| Ransomware | Logsytech Group id36083 View details | India | IT | pending | ||
|
Logsytech Group logsytech.fr Logsytech Group is a French logistics holding company based in Émerainville near Paris, founded in 2001 and acquired by D-Groupe Logistique in December 2022. With 160 employees, 7 warehouses totaling 30,000 square meters and 4 million shipments per year, it provides e-commerce, telecom, IoT and marketing logistics services. Its six subsidiaries cover Optilog for e-commerce, Mecalog for telecom equipment, ARC for point-of-sale advertising logistics, Optiaustral for Reunion Island distribution and Logsys for in-house IT solutions. Major clients include SFR, TotalEnergies, Weight Watchers, La Française des Jeux and Recommerce. The group runs its own WMS, ERP and TMS software with real-time tracking and a call center handling 3,000 calls per day. Combined with D-Groupe, the entity generates 100 million euro in revenue with 600 staff. Activates in 238:08:58 |
||||||
| Ransomware | Antwerp House Dental id36084 View details | Belgium | Healthcare / Pharma | pending | ||
|
Antwerp House Dental antwerphousedentistry.co.uk Antwerp House Dental Practice is a premium private dental clinic in Cambridge, England, founded in 2011 by Dr. Daniel Hayes and located in a 600-year-old historic building on Lensfield Road near Cambridge University. With 10 to 20 staff and a 4.9 out of 5 rating across 500 plus Google reviews, it offers dental implants, Invisalign, cosmetic dentistry, microscope-assisted endodontics and CEREC same-day crowns. Dr. Hayes holds an Advanced Diploma in Implantology and FICOI Fellowship status, and the practice is a Diamond Invisalign Provider. It also operates as a referral center for complex root canal cases from other Cambridge dentists. Technologies include CBCT 3D scanning, digital smile design, intraoral scanning and diode laser treatment. The team of specialists covering implants, orthodontics, endodontics and hygiene all work under one roof with payment plans available for nervous patients. Activates in 238:02:33 |
||||||
| Ransomware | Barking Shopfronts id36080 View details | United Kingdom | Retail / E-commerce | pending | ||
|
Barking Shopfronts bsfgroup.co.uk Barkingshopfronts Limited is a London-based shop front manufacturer and installer founded in 2018 in Barking, specializing in aluminium, frameless glass and timber shop fronts, roller shutters, canopies and structural steel for retail, restaurants and offices. With around 20 to 30 staff and estimated revenue of 1 to 5 million pounds, it runs its own production facility on Movers Lane in East London. Its unique Sit-and-Go Shops product offers fully fitted ready-to-open retail spaces from frontage to interior fixtures. The company has delivered projects across all London boroughs including a flagship aluminium frontage for a Mayfair espresso bar and international work in Romania. Services span design, manufacturing, installation and maintenance of shop fronts, bi-fold doors, automatic doors, fire exits and security shutters. Key strengths are in-house production, full-spectrum frontage solutions and the innovative turnkey shop concept. Activates in 238:23:32 |
||||||
| Ransomware | Neighborhood House Association id36076 View details | United States | NGOs / Associations | pending | ||
|
Neighborhood House Association neighborhoodhouse.org Revenue $238.7 Million Neighborhood House is Portland's oldest nonprofit social services organization, founded in 1905 and serving over 3,000 people annually through food, education, health and housing programs. With 50 to 100 staff and hundreds of volunteers, it operates from a modern campus in the Marquam Hill and South Waterfront area of Southwest Portland. Its programs include a food pantry, Head Start early childhood education, ESL classes, mental health services, senior programs and emergency rental and utility assistance. The organization holds a 3-star Charity Navigator rating and is part of the National Community Action Partnership. In 2018 it completed a major campus expansion and in 2025 celebrated 120 years of continuous community service. It is funded through federal and state grants, foundation support including the Oregon Community Foundation and United Way, corporate sponsorships and individual donations. Activates in 238:40:32 |
||||||
| Ransomware | TransLogWest id36077 View details | United States | Transportation / Travel / Logistics | pending | ||
|
TransLogWest translogwest.de TransLogWest S.L. is a Spanish freight forwarding and logistics company founded in 2012 in Bilbao, Basque Country, specializing in international maritime, air, road and rail transport with customs clearance services. With around 20 employees and offices in Galdakao (Bizkaia) and Madrid, it positions itself as a boutique logistics partner for mid-sized businesses. The company holds AEO, IATA and FIATA certifications enabling streamlined customs processing and multimodal transport worldwide. Its services cover FCL and LCL container shipping, air freight, project cargo, dangerous goods, warehousing and temperature-controlled logistics. Key strengths are personalized service, full multimodal capability and European customs expertise. It serves clients across Europe, Asia, Latin America and North Africa. Activates in 238:36:32 |
||||||
| Ransomware | Pages Asociados id36078 View details | Venezuela, Bolivarian Republic of | IT | pending | ||
|
Pages Asociados pages.com.ve Pages Asociados C.A. is a Venezuelan engineering and consulting firm founded in 1972 in Caracas with over 52 years of experience in civil, structural, mechanical and electrical engineering. It operates its own geotechnical and materials testing laboratory, covering soil mechanics, concrete, asphalt and steel testing alongside field investigation services. With offices in Caracas, Maracaibo, Puerto Ordaz and Barinas, it serves the oil and gas, transport, energy and industrial sectors across Venezuela. Key projects include oil terminals for PDVSA, highways, bridges, hydropower plants and port infrastructure. Led by the Pages family across multiple generations, it employs around 200 to 500 engineers and technicians depending on project load. Key strengths are 52 years of market presence, in-house laboratory capabilities and full-service engineering from design through construction supervision and project management. Activates in 238:30:37 |
||||||
| Ransomware | HighTec id36079 View details | Switzerland | IT | pending | ||
|
HighTec hightec.ch HighTec AG is a Swiss industrial engineering company founded in 1988 in Winterthur, specializing in turnkey surface treatment systems including painting booths, powder coating lines, air filtration and drying systems. With 50 to 100 employees, it designs, manufactures, installs and maintains coating solutions for automotive, aerospace, furniture and metal fabrication industries. Its product range covers dry filter and water wash booths, cartridge filter systems, ATEX explosion-proof solutions, electrostatic coating and energy-efficient drying ovens. The company emphasizes Swiss quality engineering with VOC compliance, waste heat recovery and digital monitoring. Key strengths are 38 years of experience, full turnkey delivery from concept to commissioning and ATEX-certified hazardous environment systems. It competes with Dürr and Nordson while offering personalized Swiss engineering and local European support. Activates in 238:26:10 |
||||||
| Ransomware | Academy of the Sacred Heart id36074 View details | United States | null | pending | ||
|
Academy of the Sacred Heart ashrosary.org Academy of the Sacred Heart is a private Catholic all-girls school in New Orleans founded in 1867, educating girls from age 1 through grade 12 across two campuses on historic St. Charles Avenue. Ranked the number one Catholic, all-girls and K-12 school in Louisiana by Niche, it enrolls 818 students with a 9 to 1 student-faculty ratio and 18 AP courses. It is part of a global network of 150 plus Sacred Heart schools in 41 countries, sending 77 students on international exchanges in 2025-26 to places like Austria and Uganda. Its Cardinals athletics program has won 111 state titles since 1984, including the 2026 Division II state golf championship. Tuition ranges from 17,530 to 24,800 dollars per year with financial aid available. The school's Innovation Lab features design thinking, 3D printing and robotics, and 100 percent of graduates are accepted to four-year colleges. Activates in 238:47:29 |
||||||
| Ransomware | Airdrie Christian Academy id36075 View details | Canada | Education | pending | ||
|
Airdrie Christian Academy airdriechristian.com Airdrie Christian Academy is a private K-12 Christian school founded in 1987 in Airdrie, Alberta, with over 1,250 students across full-time, shared responsibility and home education programs. Accredited by Alberta Education and ranked 60th out of 292 high schools by the Fraser Institute, it is the top-ranked school in Airdrie. Led by Head of School Andrew Casali, it offers 40 plus elective courses from robotics and 3D printing to woodworking and criminal science alongside Bible instruction and worship teams. The school represents 45 plus nationalities through its International Student Program and annual multicultural weeks. Tuition ranges from 4,085 to 9,345 Canadian dollars per year with the fourth child attending free and charitable donation receipts reducing tax costs. Its athletes compete at provincial zone levels and graduates pursue university, trades, professional sports and international missions. Activates in 238:44:09 |
||||||
| Ransomware | Solutis Tecnologias id36069 View details | Spain | IT | pending | ||
|
Solutis Tecnologias solutis.com.br Revenue $53 Million Solutis Tecnologias is a Brazilian IT integration company founded in 2010, now headquartered in São Paulo with over 1,200 employees across 5 countries. It specializes in AI, digital transformation, Salesforce, FICO and cloud solutions for financial services, utilities and public sector clients like Sabesp, Furnas, Serasa and Banco Rendimento. In September 2026 it launched SOL.AI, a proprietary AI platform with 6 solution domains covering agentic software engineering, data pipelines, enterprise AI governance and regulatory readiness. Led by CEO Paulo Marcelo since 2019, revenue grew from R$100 million to R$140 million in 2022 with a target of R$300 million by 2027. Strategic partnerships include Salesforce, AWS, Microsoft, Databricks and Elastic. Its own AI Center and Studio.AI development platform power client delivery. Activates in 238:32:07 |
||||||
| Ransomware | KABS Pharmaceutical Services id36070 View details | United Kingdom | Healthcare / Pharma | pending | ||
|
KABS Pharmaceutical Services kabs.com Revenue $27.2 Million KABS Laboratories is a Canadian pharmaceutical CDMO founded in 1997 in Saint-Hubert, Quebec by Dr. Jean-Simon Blais and Dr. Gérard Akinocho, with 150+ specialists serving clients in 28 countries. It is a WHO prequalified Quality Control Laboratory audited by Health Canada, USFDA and EU QPs, offering aseptic manufacturing from 100 to 100,000 vials per batch. In 2021 it received CAD 54.2 million from Canada's Strategic Innovation Fund to expand fill-and-finish to 30 million vials per year and build a bioprocessing plant for monoclonal antibodies. Through joint venture MendeliKABS it developed MDK-Nitisinone, an orphan drug for tyrosinemia type 1, priced 10 times lower than the Swedish competitor and approved in Europe, UK, Brazil, China and Algeria. The company also runs an African quality control office in Benin. Activates in 238:28:25 |
||||||
| Ransomware | RedBlink Technologies id36064 View details | United States | IT | pending | ||
|
RedBlink Technologies redblink.com RedBlink Technologies is an AI and software development company founded in 2008 in Danville, California, with over 150 employees across a hybrid onshore/offshore model spanning the US, India, Canada, Italy and Dubai. It specializes in generative AI, machine learning, NLP, AI chatbots, web and mobile development, cloud, DevOps and AI-powered SEO services. Led by Director of Delivery Sahil Aggarwal and Director Bahadur Singh, it serves healthcare, retail and technology clients from startups to enterprises. Revenue is estimated at 10 to 25 million dollars with competitive rates around 15 dollars per hour thanks to its India-based development center in SAS Nagar. Its tech stack includes Python, TensorFlow, PyTorch, React, Node.js, AWS and fine-tuned LLM models like BERT and GPT. The company is self-funded with no external investors and offers rapid staff augmentation including ChatGPT developers within 48 hours. Activates in 238:51:57 |
||||||
| Ransomware | Lighting Direct id36065 View details | United States | Retail / E-commerce | pending | ||
|
Lighting Direct lightingdirect.co.nz Lighting Direct is New Zealand's largest lighting specialist, founded in 1974 in Auckland by Bill and Penny Fulford as Keldene Industries and rebranded in 1992, now operating 23 stores nationwide plus an online store. Led by CEO Dean Fulford, the second generation of the family, it buys directly from overseas manufacturers, landing one container of lighting daily to its Auckland distribution center. Its range covers pendant lights, ceiling lights, wall lights, downlights, outdoor lighting, lamps and ceiling fans across modern, Scandinavian and classic styles. The company was the first retailer to reopen after the 2011 Christchurch earthquake and celebrated 50 years in business in 2024. In 2025 it opened a new Queenstown store and launched a redesigned online platform. Free design consultations, a trade programme for builders and electricians, free shipping over 200 dollars and 7-day returns make it the go-to lighting destination for Kiwi renovators. Activates in 238:48:56 |
||||||
| Ransomware | Hausarztpraxis Ries id36066 View details | Germany | Healthcare / Pharma | pending | ||
|
Hausarztpraxis Ries hausarzt-praxis-ries.de Hausarztpraxis Ries is a family general practice in Frickenhausen, Baden-Württemberg, Germany, run by three doctors from the Ries family offering comprehensive primary care for patients aged 14 and above. Its services span acute and chronic disease treatment, minor surgery, pain therapy, palliative care, geriatric medicine and acupuncture. The practice is equipped with ECG, Holter monitoring, ultrasound, spirometry and an in-house lab plus disease management programs for diabetes, coronary disease and asthma. Led by Alexander Ries as the responsible physician, it accepts statutory and private insurance and communicates in German, English and Russian. It also offers weight loss injections, travel medicine, diving and driver medical certificates and home visits for immobile patients. Extended hours, video consultations and separate phone lines for prescriptions and appointments make it highly accessible for the Frickenhausen community. Activates in 238:46:17 |
||||||
| Ransomware | McEwan Fraser Legal id36067 View details | Canada | Finance / Legal / Insurance | pending | ||
|
McEwan Fraser Legal mcewanfraserlegal.co.uk McEwan Fraser Legal is Scotland's largest property law firm and award-winning estate agency, founded in 2009 in Edinburgh by Ken McEwan and former footballer Scott Fraser, with 100 to 160 staff across 20 plus locations in Scotland. It was the first Scottish firm to win the Sunday Times Best Estate Agency in the UK award in 2013 and has since collected over 20 national awards including multiple Negotiator Awards and Scottish Legal Awards. Its unique model combines solicitors, estate agency and marketing under one roof with a proprietary Property Matching database and PRO tracking system. The firm operates 7 days a week until midnight, employs translators in 12 languages for overseas investors and runs 5,000 plus targeted landing pages. Revenue is estimated at 16 to 19 million dollars annually. CEO Ken McEwan has been nominated for Entrepreneur of the Year at the 2026 British Business Awards. Activates in 238:39:46 |
||||||
| Ransomware | Grupo Lorrio id36068 View details | Spain | null | pending | ||
|
Grupo Lorrio grupolorrio.es Grupo Lorrio is a Spanish industrial engineering and construction group founded in 1989 in San Fernando de Henares, Madrid, formerly known as J Lorrio SL and rebranded in 2020. Led by sole owner and administrator Raúl Lorrio González, the group comprises J. Lorrio, Lorclima and Grupo 6, offering full lifecycle services from engineering design to installation and maintenance of industrial systems. Its 14 technical specialties include fire protection, HVAC, refrigeration, compressed air, steam, plumbing, electrical, insulation and intelligent building management. The company holds triple ISO certification covering quality, environmental management and occupational health and safety. With 4 to 10 employees and revenue up to 1.5 million euro, it serves industrial clients across the Madrid region with a no-exclusivity policy that ensures best-fit solutions. Its integrated model covers project, construction, maintenance and energy management phases in one continuous service. Activates in 238:37:00 |
||||||
| Ransomware | Labatec id36062 View details | Peru | Manufacturing / Engineering | pending | ||
|
Labatec labatecpharma.com Revenue $19 Million Labatec S.A. is a Swiss laboratory instruments company founded in 1965 in Meyrin, Geneva, manufacturing and distributing high-precision analytical equipment for chemistry, biotech, pharma and energy sectors across 100 plus countries. Its three divisions cover Labatec Instruments for analytical and sample preparation equipment, Labatec Pharma for GMP quality control solutions and Labatec Energy for oil and gas testing systems. With offices in Geneva, Zurich and Dubai Jebel Ali Free Zone, it partners with major global brands including Metrohm, Anton Paar, Mettler Toledo, Agilent and Thermo Fisher. The company holds ISO 9001, ISO 17025 calibration and ISO 13485 medical device certifications. Its product range spans titrators, spectrometers, chromatographs, pH meters, mills, centrifuges and industrial fuel analyzers. It serves customers from small labs to multinational pharmaceutical and petrochemical corporations. Activates in 238:57:56 |
||||||
| Ransomware | Coemi Imóveis id36063 View details | Brazil | Construction / Real Estate | pending | ||
|
Coemi Imóveis coemi.com.br Coemi Imóveis is a Brazilian real estate agency founded in 1985 in Brasília with 41 years of experience in buying, selling, renting and property management across the Federal District and Goiás state. It operates three offices including its Asa Norte headquarters, an Águas Claras branch and a new Goiânia unit opened in 2023, with 18 to 33 employees and a portfolio of over 1,500 rental properties. The company is an official correspondent of Caixa Econômica Federal for mortgage financing and a member of the Rede Brasília de Imóveis network. Its services cover personalized sales consulting, rental management with differentiated payment options, property evaluation and legal support through to notarial closing. It runs a free online property valuation tool and actively publishes market guides for Brasília neighborhoods. Led by a single owner and registered under Simples Nacional as a small enterprise with R$78,800 in share capital. Activates in 238:54:32 |
||||||
| Ransomware | CommTank id35962 View details | United States | IT | pending | ||
|
CommTank commtank.com CommTank Inc is a US storage tank contractor founded in 1997 in Winchester, Massachusetts, specializing in installation, removal, inspection and maintenance of underground and aboveground storage tanks across New England and the Mid-Atlantic. With 50 to 100 employees and estimated revenue of 10 to 25 million dollars, it serves government facilities, hospitals, schools and industrial clients across 8 states. Its services cover the full tank lifecycle including UST and AST installation, leak testing, cathodic protection, soil remediation and emergency spill response. Led by founder Rick Connolly, it holds EPA, MA DEP, CT DEEP and NFPA certifications and runs its own field crews without subcontracting core work. It also provides Phase I and II environmental site assessments and SPCC compliance planning. The company has built a niche in high-barrier tank services requiring specialized licensing and regulatory expertise. Activates in 238:07:04 |
||||||
| Ransomware | Ined id35961 View details | United States | IT | pending | ||
|
Ined ined.fr INED is France's National Institute for Demographic Studies, founded in 1945 in Paris as a public scientific research institution under CNRS patronage and the world's largest demographic research center with 200 staff and 120 researchers. It holds a unique mandate as France's national population statistics authority, producing the annual Démographie de la France report and the monthly Population and Sociétés bulletin. Its 8 research departments cover mortality, fertility, migration, social stratification and global health, publishing over 300 scientific papers per year. INED maintains 20 plus demographic databases including the global Human Fertility and Human Mortality Databases with Max Planck and UC Berkeley. Led by Director Cyrille Schott, it partners with the UN, WHO and 50 plus international institutions while offering open access to all publications. Activates in 238:10:29 |
||||||
| Ransomware | NOVADATA id35960 View details | Argentina | IT | pending | ||
|
NOVADATA novadata.com.ar NOVADATA S.A. is an Argentine IT integration group founded in 1994 in Buenos Aires, comprising Novadata, Net Service and Compañía Global de Servicios with 130 plus certified professionals. It provides IT infrastructure, business continuity, AI, pay-per-use HPE GreenLake, microinformatics and 24/7 Service Desk services to major corporations across Argentina. It holds HPE Platinum, Microsoft Gold, Cisco Silver, VMware Enterprise and Symantec Gold partner certifications, adding Huawei Enterprise Authorized Reseller status in 2026. Major clients include Bayer, Veolia, La Anónima, Petrobras, Citibank, Roche and Bimbo, many with over 10 years of partnership. The group completed a financial restructuring agreement from 2014, declared fulfilled by court in March 2026. Recent strategic moves include an AI alliance with AYI Group, Fortinet cybersecurity training and launch of Novadata GREEN IT asset disposition services. Activates in 238:14:02 |
||||||
| Ransomware | Spontini id35919 View details | Italy | Services | pending | ||
|
Spontini spontinimilano.com Spontini is a Milanese pizza by the slice chain founded in 1953, now run by the third generation of the Innocenti family with Massimo Innocenti as CEO and his son Andrea leading operations. The group runs about 27 stores in Milan and 15 more across 10 countries including Japan, Korea, Qatar and Saudi Arabia, mostly through franchising with partners like M.H. Alshaya. It serves around 2.4 million pizza slices a year using an unchanged 1953 recipe with 100 percent Italian ingredients like Molini Certosa flour and Rodolfi tomatoes. Revenue has grown to roughly 30 million euro with over 800 employees, driven by expansion into travel locations like Milan Central station and Malpensa airport. In 2026 the brand entered retail with a frozen pizza line called Tonda 1953 produced with SanNico Food. Activates in 80:18:16 |
||||||
| Ransomware | Serit CC id35914 View details | Thailand | Services | pending | ||
|
Serit CC serit.no Serit CC, formally C.C. Solution AS, is a Norwegian IT services company founded in 2007 in Bergen, providing cloud, cybersecurity, managed IT, Microsoft 365 and AI automation to small and medium businesses. It has 6 employees and annual revenue of around 17 million Norwegian kroner, and since June 2025 it is part of Serit, one of Norway's largest independent IT groups with 27 offices and over 200 specialists. The company holds Helsenett certification for healthcare clients and runs its own Norwegian data center, keeping all data inside the country. It is led by founder and CEO Christopher Andreas Namtvedt, a former NATO systems administrator, together with CTO Ole Erik Skare who has been with the firm for 17 years. Core strengths are deep Bergen market knowledge combined with the national scale of Serit group partnerships with Microsoft, Fortinet, Dell and Lenovo. A newer focus is secure AI adoption and workflow automation for business clients. Activates in 169:42:58 |
||||||
| Ransomware | Marie Kruses Skole id35915 View details | United States | Education | leaked | ||
|
Marie Kruses Skole mks.dk Marie Kruses Skole is a private school in Farum, Denmark, founded in 1869 by education pioneer Marie Kruse, offering a full track from kindergarten through gymnasium STX to about 1100 students. It is the only free primary school and the only gymnasium in Furesø Kommune, employing 107 people and led by rektor Carsten Gade. The school runs 8 gymnasium study lines including Biotek, Mat-Fys, sports, business, super languages and music, plus unique programs like Kruse Elitesport and diving. Revenue in 2024 reached 109.5 million Danish kroner with a 1.4 million profit, backed by 68 percent state subsidy and a stable surplus for 5 straight years. Tuition is 2190 kroner per month with financial aid available, and it attracts over 1100 students on its waiting list. Its key strengths are 157 years of heritage, top national exam results and free admissions independent of municipal student distribution rules. Activates in 169:35:29 |
||||||
| Ransomware | United Rolls id35916 View details | United States | Manufacturing / Engineering | pending | ||
|
United Rolls unitedrolls.com United Rolls United Rolls Inc. is a US mill roll manufacturer founded in 1898 in Canton, Ohio, producing horizontally spun cast iron and steel rolls for hot strip, cold strip, plate and roughing mills worldwide. It is a subsidiary of WHEMCO and Park Corporation, employing around 64 to 110 people and generating estimated revenue of 10 to 20 million dollars. Its plant pours, heat treats, grinds and tests rolls under one roof with a capacity of 18,000 tons per year and rolls up to 66 tons. The company is known for its patented Synergy line, including Synergy 100 high-speed steel rolls and UR2-EC niobium carbide iron rolls that extend mill campaign life. Led by President Robert Feielin since 2024, it is part of WHEMCO, the only US maker of all roll types for flat rolling, with sales offices in Berlin and Sheffield. Key strengths are 128 years of heritage and full vertical integration. Activates in 169:32:53 |
||||||
| Ransomware | Pac Production id35917 View details | Sweden | null | pending | ||
|
Pac Production pac.se PAC Group is a Swedish power plant automation company founded in 1979 in Stockholm, delivering control systems, simulation and optimization solutions for thermal, hydro, nuclear and renewable power plants. It has completed over 600 projects on more than 100 power plants across 50 countries with a combined capacity exceeding 110 gigawatts. Its product portfolio includes PAC Control, PAC-Sim full scope simulators, PAC-Balance and the ARTOCloud optimization platform, plus engineering, commissioning and cybersecurity services. The company is independent from major DCS vendors like Siemens and Emerson, giving it flexibility to integrate any technology. Led by CEO Mikael Andersson, many engineers have been with PAC for 20 to 34 years, ensuring deep institutional expertise. New directions include hydrogen power plants, battery energy storage, hybrid plant control and digital twin solutions. Activates in 169:29:40 |
||||||
| Ransomware | Zehren and Associates id35918 View details | United States | Services | pending | ||
|
Zehren and Associates zehren.com Zehren and Associates Zehren & Associates is an architecture and design firm founded in 1983 in Avon, Colorado, specializing in resort and mountain architecture with a second office in Santa Barbara, California. Led by founder Jack Zehren, a West Point graduate, the firm has about 37 employees and revenue of roughly 5 million dollars. It offers a full package of architecture, master planning, interior design and landscape architecture, known for projects like The 10th restaurant on Vail Mountain and The Blake hotel at Taos Ski Valley, voted the best ski hotel in North America. The firm designed the Beaver Creek master plan, winner of the Snow Country Best Resort award, and has worked in over 9 countries including Argentina, Korea and Mexico. Key strengths are 43 years of niche expertise and long-term partnerships with Vail Resorts and East West Partners. Activates in 169:26:55 |
||||||
| Ransomware | ASL İnsaat id35911 View details | Türkiye | Services | pending | ||
|
ASL İnsaat aslinsaat.com.tr ASL İnsaat is a Turkish construction company based in Istanbul, operating in civil and industrial building contracting both domestically and internationally. It provides full-cycle services including design, general contracting and project management for residential, commercial and industrial projects. The company is privately held with estimated staffing of several hundred employees scaling with active construction sites. Turkey is the world's second largest market for international construction contractors, and ASL operates within this competitive ecosystem. Key sectors are residential complexes, shopping centers, hotels, factories and infrastructure. Typical strengths of Turkish contractors like ASL are cost competitiveness, speed of delivery and experience in challenging geographies across the Middle East, Africa and Central Asia. Activates in 170:07:47 |
||||||
| Ransomware | Surexport id35912 View details | United States | Transportation / Travel / Logistics | pending | ||
|
Surexport surexport.es Surexport is the largest independent berry producer in Europe, founded in 1994 in Huelva, Spain, growing strawberries, raspberries, blueberries and blackberries across Spain, Portugal, the Netherlands, Morocco and Kenya. Owned since 2020 by Alantra Private Equity, the group is valued at around 600 million euros with revenue approaching 400 million and over 2500 employees. Its competitive edge is exclusive berry varieties developed with US genetics partner Plant Sciences since 2007, sold under the Doñarosa, Berry Sensations and Fruhi brands. Major clients include Tesco, Lidl, Mercadona and Sainsbury's, with 80 percent of revenue from exports to Northern Europe. The company invested 200 million euros in acquisitions and secured a 250 million euro loan in 2025. Activates in 170:02:49 |
||||||
| Ransomware | Northwest Micro Systems id35913 View details | United States | IT | pending | ||
|
Northwest Micro Systems nwmicro.com Northwest Micro Systems, formally Northwest Micro Inc., is a private IT services and software company founded in 1998 in Atlanta, Georgia, serving small businesses with managed IT, cloud backup, email, CRM and custom .NET development. Led by founder and owner Leo Zhadanovsky, it has around 11 employees and steady revenue of roughly 5 million dollars. Its unique model offers affordable one-time products like the One 2 One email server and Speed To Success CRM for about 100 dollars with lifetime updates and support. The company positions itself as the anti-corporate alternative to Oracle and Microsoft, focused on keeping small business clients for life. Core strengths are 28 years of market presence, a loyal SMB client base and a low-overhead operation. Its tech stack centers on Microsoft 365, SQL Server and .NET with a mix of SaaS and on-premise tools. Activates in 170:01:06 |
||||||
| Ransomware | Epic Health id35907 View details | United States | Services | pending | ||
|
Epic Health epichealth.com.au Epic Health is an Australian medical group founded in 2001 in Melbourne, running multiple brands including Epic Medical general practice, Epic Youth Health, Epic Skin Health and Alevia Medical Weight Loss. Its fastest-growing division is Alevia, offering doctor-supervised weight loss programs using GLP-1 medications like Mounjaro and Ozempic across four clinics plus telehealth Australia-wide. The group combines traditional family medicine with niche verticals like dermatology, adolescent health and aesthetic medicine under one team-based model. Led by medical director Dr. Neeraj Mahindra, it serves patients nationally through Medicare-compatible telehealth with instant rebates and a dedicated digital app. Key strengths are 24 years of operation, a debt-free financial position and multi-brand diversification into high-demand health niches. The company is well positioned in Australia's booming medical weight loss and telehealth markets. Activates in 178:05:51 |
||||||
| Ransomware | Incomelec id35908 View details | United States | IT | pending | ||
|
Incomelec incomelec.com Incomelec is a Colombian company founded in 2006 in Bogota, the Latin American leader in pedestrian, vehicle and passenger access control including turnstiles and automated barriers. With 52 employees and operations in 14 countries, it has installed equipment in over 20 airports, 90 parking facilities and 250 buildings, handling more than 85 percent of Colombia's toll booth systems. Its flagship product is BIOMIG, an automated migration control system used at El Dorado and Medellin airports with iris scanning and passport verification. It is the exclusive regional partner of Automatic Systems from the Bollore Group and the only distributor worldwide that locally assembles TR-490 and TR-491 turnstile lines. Led by CEO Kris De Sutter Gomez, it serves Metro de Medellin, TransMilenio and BD Bacata, Colombia's tallest building. Activates in 178:04:04 |
||||||
| Ransomware | WIKA Beton id35902 View details | Germany | Manufacturing / Engineering | pending | ||
|
WIKA Beton wika-beton.co.id WIKA Beton (PT Wijaya Karya Beton Tbk) is Indonesia's largest precast and prestressed concrete manufacturer, founded in 1997 and listed on the Indonesia Stock Exchange since 2014 as part of state-owned Wijaya Karya group. It operates over 20 production plants across Indonesia from Java to Papua, producing more than 189 types of concrete products including bridge girders, piles, culverts and railway sleepers. Revenue is estimated at around 5.3 trillion rupiah with a market cap of 1.9 trillion, offering a 3.5 percent dividend yield and trading well below book value. The company is a primary supplier for Indonesia's massive infrastructure boom including toll roads, the Jakarta-Bandung high-speed railway and new port construction. Led as a state-owned enterprise, it benefits from priority access to government contracts and a unique nationwide plant network. Activates in 178:29:48 |
||||||
| Ransomware | StarImage id35903 View details | United States | Services | pending | ||
|
StarImage starimagesouthlake.com StarImage Dental Boutique & Oral Surgery is a premium dental practice in Southlake, Texas, opened in January 2021 as the second location of StarImage Dentistry founded by Dr. James Green in Wichita Falls over 25 years ago. Led by Dr. Green, oral surgeon Dr. Dustin Van Tassell and Dr. Susan Millner, it offers cosmetic and reconstructive dentistry, dental implants, full mouth rehabilitation, oral surgery, TMJ treatment and sleep apnea care all under one roof. The clinic is one of the most technologically advanced dental offices in the US, equipped with Planmeca ProMax 3D CBCT imaging, MLS laser therapy, VELscope cancer screening and CT-guided implant surgery. Both lead doctors hold Fellow status at the Las Vegas Institute for Advanced Dental Studies, and the practice maintains a perfect 5.0 rating across 50 plus reviews. Its dedicated TMJ and Sleep Center provides a high-margin specialization in jaw disorders and obstructive sleep apnea. Activates in 178:27:40 |
||||||
| Ransomware | Grupo Sanirent id35904 View details | Mexico | null | pending | ||
|
Grupo Sanirent sanirent.com.mx Grupo Sanirent is a 100 percent Mexican company founded in 1983 in Mexico City, the national leader in portable toilet rental, mobile offices, septic services and waste management. With 178 employees and operations in all 32 Mexican states, it serves everything from private events and luxury weddings to massive construction sites and industrial operations. Its business lines include standard and VIP portable toilets, camper-style luxury stations, mobile office rentals, industrial drain cleaning with specialized vactor and guzzler trucks, and full waste collection including hazardous and bio-infectious materials. The company holds ISO 9001 certification and has won 53 government contracts with major institutions like IMSS, CFE, CAPUFE and the National Culture Secretariat. Its premium Eventos Especiales division provides luxury sanitary facilities for high-end events across the country. Key strengths are 43 years of experience, full national coverage, diversified service. Activates in 178:25:09 |
||||||
| Ransomware | Farmacias 911 id35905 View details | Brazil | Healthcare / Pharma | pending | ||
|
Farmacias 911 farmacias911.com.ec Gettareq S.A., known as Farmacias 911, is a major Ecuadorian pharmaceutical company founded in 2013 in Guayaquil, combining retail pharmacy, wholesale distribution, OEM manufacturing and medical consulting across the whole country. The group operates six brands including Farmacias 911 retail, ACOSAR wholesale distribution, Galenic for private label manufacturing, One Laboratory for quality testing and Conseplus for consulting. It has grown from 11 to 500 employees with a 166 percent increase in headcount, working with global pharmaceutical giants like Abbott, Bayer, Bristol Myers Squibb, Takeda and Roche. Led by founder and CEO Marlon Morillo, the company hosted Ecuador's largest pharmaceutical convention in 2025 alongside APESFA. Its vertical integration from import and production to retail and lab testing is unique in the Ecuadorian market. Activates in 178:19:20 |
||||||
| Ransomware | SoftwareOne id35906 View details | United States | IT | pending | ||
|
SoftwareOne softwareone.com SoftwareOne Turkiye is the Turkish arm of SoftwareOne Holding AG, a Swiss-listed global software and cloud solutions provider that merged with Crayon to form a 13,000 person company operating in over 70 countries. Based in Ataşehir, Istanbul and active since 2019, it employs around 40 to 60 people and works with 100 percent of Turkey's top 50 companies and 80 percent of the top 500. Services span software licensing advisory for Microsoft, IBM and Oracle, cloud migration across Azure, AWS and Google Cloud, DevSecOps, cybersecurity, AI and FinOps. In December 2024 SoftwareOne AG acquired full ownership of the Turkish entity, approved by the Turkish Competition Authority. Led by Managing Director Doğa Pekdemir and CFO Hakan Keriş, it has delivered projects for Turkish Airlines, TAV Airports, Coca-Cola and Vakıf Katılım. Key strengths are its unmatched enterprise market coverage in Turkey and full access to the global SoftwareOne and Crayon ecosystem. Activates in 178:13:56 |
||||||
| Ransomware | Belmont Resorts id35898 View details | United States | Hospitality / Food & Beverage / Tourism | pending | ||
|
Belmont Resorts belmontresorts.com Belmont Resorts is a small boutique hotel in McLeodganj, Dharamshala, Himachal Pradesh, operating as Hotel Satovari Pride on the Strawberry Hills with panoramic views of the snow-capped Dhauladhar mountains. It has just 14 rooms across four categories from Deluxe to Premium Gold corner suites with private balconies, mini-fridges and sunrise-sunset views from both sides. Positioned as a value-for-money alternative next to ITC Hotels and Lemon Tree, it offers a pure vegetarian restaurant with Jain cuisine, 24/7 power backup, fast WiFi and free parking. The hotel caters to relaxation, spiritual tourism, trekking and long-term workation stays with tour packages to Khajjiar and Dalhousie. Activates in 178:43:37 |
||||||
| Ransomware | Atlas Stamping Manufacturing id35901 View details | United States | Manufacturing / Engineering | pending | ||
|
Atlas Stamping Manufacturing atlasstamping.com Atlas Stamping Manufacturing Corp. is a US metal stamping company founded in 1971 in Richardson, Texas, producing precision stamped parts for automotive, aerospace, electronics, medical and industrial customers. With around 50 to 200 employees and estimated revenue of 5 to 20 million dollars, it operates a full-service plant offering progressive and transfer die stamping, deep draw, forming, welding and assembly. Its own tool and die shop designs and maintains all stamping dies in-house, giving full control over quality and lead times. Press capabilities range from 30 to 400 tons handling materials from thin foil to quarter-inch thick steel, aluminum and specialty alloys. The company has served the Dallas-Fort Worth industrial market for 54 years with ISO 9001 quality systems and PPAP compliance for OEM clients. Activates in 178:33:01 |
||||||
| Ransomware | EPMMOP id35900 View details | Ecuador | Other | pending | ||
|
EPMMOP epmmop.quito.gob.ec EPMMOP is the Metropolitan Public Company of Mobility and Public Works of Quito, Ecuador, responsible for urban transportation infrastructure and public works across the capital district of 2.7 million people. It manages the city's integrated transport system including the new Quito Metro, launched in December 2023 as Ecuador's first subway line with 22.4 kilometers and 15 stations. The agency also operates the TelefériQo cable car, one of the highest in the world, plus trolleybus, BRT and cable car systems under the SITM integrated transit framework. It builds and maintains roads, bridges, sidewalks, drainage and one of Latin America's largest cycling networks. The company works within Quito's UNESCO World Heritage context, requiring unique engineering solutions for the historic center. Activates in 178:37:34 |
||||||
| Ransomware | Pure Perfection id35899 View details | United States | Other | pending | ||
|
Pure Perfection pureperfection.com Pure Perfection GmbH is a German live communication agency founded in 2008 in Wiesbaden, ranked number one in the 2026 BlachReport German Event Creativity Ranking ahead of insglück and Vok Dams. With 72 to 80 employees across offices in Wiesbaden, Berlin, Düsseldorf and Florida, it delivered 133 events in 2025, with 90 of them abroad including Shanghai, Miami and Singapore. Led by co-founders Jan Rogozinski and Kim Meisinger, the agency works through three units: Pure Live for events, Pure Space for brand spaces and architecture, and Pure Content for storytelling and PR. Major clients include Audi, ŠKODA, L'Oréal, Bentley and Nestlé, with pharma being its largest vertical at 90 events per year. Revenue peaked at 26.4 million euro in 2023 and the agency won 60 MUSE Creative Awards in 2026 alone. Activates in 178:40:38 |
||||||
| Ransomware | Zinkan Enterprises id35897 View details | United States | Other | pending | ||
|
Zinkan Enterprises zinkanenterprises.com Zinkan Enterprises is a private US environmental services company founded in 1983 in Hunt Valley, Ohio, operating in water treatment, pond and lake management, oil and gas chemicals and waste management. With 45 to 75 employees and estimated revenue of 5 to 20 million dollars, it owns several brands including Pace Products, the creator of Freeze Free, the world's first anti-freeze pond coating dating back to the 1960s. Its Crystal Clear division manages ponds and water features for prestigious clients including Walt Disney World golf courses and the 2006 Open Championship at Royal Liverpool. Led by founder Thomas Zinkan, the company offers full-cycle solutions from chemical products to fountain equipment and contract pond maintenance. Core strengths are 42 years of experience, a unique patented anti-freeze technology and diversified revenue across four environmental service verticals. Activates in 178:49:45 |
||||||
| Ransomware | WABAG id35892 View details | Philippines | Services | pending | ||
|
WABAG wabag.in VA Tech WABAG is the world's leading pure-play water technology company, founded in 1924 and headquartered in Chennai, India, operating in over 25 countries with 2000 engineers and over 1500 plants delivered. Listed on NSE and BSE, it posted record FY2026 revenue of 3944 crore rupees with PAT of 371 crore and has been net cash positive for 6 straight years with a credit rating of AA minus stable. Its order book surged to an all time high of 19400 crore rupees in Q1 FY2027, over 4 times annual revenue, backed by World Bank, ADB and JICA funded projects across India, the Middle East, Africa and Southeast Asia. Key projects include Southeast Asia's largest 400 MLD desalination plant in Chennai and a 300 MLD mega desalination order in Saudi Arabia. The company holds 125 plus proprietary patents and ranks 3rd globally among private water operators and desalination suppliers per Global Water Intelligence. Led by Chairman Rajiv Mittal. Activates in 179:09:46 |
||||||
| Ransomware | Unisa Shoes id35893 View details | Brazil | Retail / E-commerce | leaked | ||
|
Unisa Shoes unisa.es Unisa Shoes is a Spanish footwear company founded in 1973 in Elche, Alicante, with 52 years of history across three generations of the Pérez Parres family. It designs and produces women's, men's and accessories collections sold in 70 plus countries through around 30 own stores, 150 plus Espacio Unisa points of sale and its e-commerce platform. Revenue reached 25.3 million euro in 2024 with 145 employees, and international online sales hit a record 16 percent in 2025. Led by CEO Carlos Pérez Parres, the company launched its men's line in 2021 and an eco-friendly recycled suede collection, positioning itself as an accessible Spanish lifestyle brand. It opened a 300 square meter showroom in Madrid and a subsidiary in Italy to expand European distribution. Core strengths are family heritage, global reach across 70 countries and a diversified omnichannel sales model. Activates in 179:08:26 |
||||||
| Ransomware | Acodafe id35894 View details | United States | IT | pending | ||
|
Acodafe acodafe.com Acodafe S.L. is a Spanish IT services company founded in 2009 in Mataró, Barcelona, providing managed IT, network installation, cybersecurity, cloud backups, data center hosting and GDPR consulting for small and medium businesses. Led by sole administrator Adrián Conde Kuller, it has just 4 employees and annual revenue between 500,000 and 1.5 million euro. The company grew sales by 22.8 percent in 2024 and climbed over 12,000 positions in Spain's national business ranking. Its services cover the full IT lifecycle for SMEs and industrial clients from system maintenance and installation to 24/7 emergency support. In 2019 it expanded into data protection consulting, a growing regulatory niche in Spain. Key strengths are 17 years of market presence, a lean and profitable operation and a diversified service portfolio tailored to small business needs. Activates in 178:56:59 |
||||||
| Ransomware | Malmsten id35896 View details | Sweden | IT | pending | ||
|
Malmsten malmsten.com Malmsten AB is a Swedish family-owned company founded in 1975 in Täby, the world's leading manufacturer of swimming pool and open water equipment including lane lines, buoys, starting blocks and safety gear. With around 30 employees and global distribution, its equipment has been used at 11 consecutive Olympic Games from Moscow 1980 to Paris 2024. Founder Robert Malmsten received the FINA Gold Pin Award in 2024 for 48 years of service to the international swimming federation's equipment committee. The company's proprietary wave calming technology reduces turbulence in competition lanes, making its Golden Series the gold standard for elite swimming events. Led by CEO David Malmsten in the second generation, it operates a subsidiary in Australia and serves 100 plus national swimming federations worldwide. Key strengths are FINA approval, Olympic heritage and a full product range from elite competition to public pool equipment. Activates in 178:52:01 |
||||||
| Ransomware | Betopia Group id35895 View details | United States | Other | pending | ||
|
Betopia Group betopiagroup.com Betopia Group Betopia Group is a Bangladeshi tech holding based in Dhaka, formally created in July 2025 by consolidating 22 business units including Bdcalling IT, Softvence, Sparktech, JVAI and Zencore, claiming 5,000 employees and 36 million dollars in annual revenue. Founded by Muhammad Monir Hossain, who went from freelancing on oDesk in 2013 to launching Bdcalling IT in 2017 with just 500,000 taka and 7 people, the group now serves clients in over 80 countries with 80 to 90 percent of business from the United States. Its units span software development, AI, cloud infrastructure via ZenexCloud, Odoo ERP implementation, renewable energy through PulseGrid and IT education. In July 2026 the group unveiled Vision 2030, planning to double its workforce and build Betopia City, an AI-powered smart tech hub in Bangladesh. The company is embroiled in a major scandal, with Fiverr suspending around 300 accounts linked to Betopia for coordinated marketplace manipulation. Activates in 178:55:05 |
||||||
| Ransomware | Groupe AC Environnement id35889 View details | France | Services | pending | ||
|
Groupe AC Environnement ac-environnement.com Groupe AC Environnement is a French environmental engineering company founded in 1997 in Pontarlier, delivering integrated solutions for water treatment, wastewater, waste management and bioremediation. With 160 employees across five subsidiaries including GEG, Maraîch'Hydro and Biovéa, it has completed over 120 projects in 13 countries. Its standout project is the STEP des Voraces, France's first large-scale wastewater plant featuring demethanization serving 300,000 equivalent inhabitants. The group offers 26 specialized technical solutions spanning drinking water, industrial effluent, zero liquid discharge and circular economy applications. Led by Johan Hansma, it operates across the full project lifecycle from design and construction to long-term operations and maintenance. Activates in 179:27:27 |
||||||
| Ransomware | SAP id35890 View details | Germany | IT | pending | ||
|
SAP sap.com SAP Latin America and Caribbean is the regional arm of SAP SE, the world's largest enterprise software company, managing operations across 10 countries with about 6,000 employees led by President Adriana Aroulho since April 2025. Brazil is the standout market, cited in 40 straight quarters of global earnings for exceptional cloud revenue growth and now having more customers running on cloud than on-premise. The region serves over 5,000 clients in Brazil alone and holds 50 percent share among large Brazilian enterprises, with major wins including Grupo Nutresa, Honda South America, Votorantim, Chedraui and Motta Internacional. Through RISE with SAP and GROW with SAP, the company drives cloud ERP migration and Business AI adoption with its Joule assistant, targeting up to 30 percent productivity gains for clients. SAP's global cloud revenue reached 6.7 billion euro in Q3 2026 with the LatAm cloud market projected to double to 125 billion dollars by 2030. Activates in 179:22:16 |
||||||
| Ransomware | Trade Union Co id35888 View details | United States | NGOs / Associations | pending | ||
|
Trade Union Co tradeunionco.com tuc-dxb.com Trade Union Co. is a family-owned automotive spare parts wholesaler and retailer founded in 1960 in Beirut, Lebanon, with over 65 years of experience serving customers across the Middle East, Africa, Europe, Asia and the Americas. The group operates through its Beirut headquarters and The Trade Union International LLC in Dubai, a 5000 square meter global re-export hub established in 2007 with offices also in Germany, Russia and Nigeria. With over 150 employees and 20 plus international aftermarket brands including Bosch, Mahle, ZF and Sachs, it supplies parts for European, Japanese and American passenger and commercial vehicles. Led by CEO Walid El Bissani and Head of Strategy Tarek Jamil, the company is a member of NEXUS Automotive International, the world's largest automotive distribution community. It regularly exhibits at Automechanika Dubai and Frankfurt, showcasing its growing brand portfolio and global logistics network. Activates in 179:30:13 |
||||||
| Ransomware | Lydenburg Toyota id35891 View details | South Africa | Retail / E-commerce | pending | ||
|
Lydenburg Toyota lydenburg.toyota.co.za Lydenburg Toyota is a Toyota dealership in Lydenburg (Mashishing), Mpumalanga, South Africa, part of the Toyota South Africa Motors dealer network selling new Toyota and Lexus vehicles, certified used cars, service, parts and financial services. The town is also home to Toyota SA Manufacturing, the largest Toyota plant in Africa, assembling Hilux, Fortuner and Corolla Cross with engines and components exported to over 40 countries including the United States. Toyota SA Motors holds 24.2 percent of the South African vehicle market and exported 187 billion rand in FY2023, with 8500 direct employees across its plants. The company invested 2.43 billion rand in hybrid technology and is developing a 2.2 billion dollar Mbombela megaproject including housing, schools and hospitals around the Lydenburg plant. Corolla Cross production from Lydenburg began exports to the US in April 2024. Activates in 179:19:42 |
||||||
| Ransomware | SOME id35887 View details | Italy | IT | pending | ||
|
SOME some.it SOME Srl is an Italian ERP and financial systems consulting company founded in 2001 in Milan, delivering end-to-end implementations of Epicor Kinetic, Infor SunSystems and Fluentis ERP for manufacturing, hospitality and oil and gas clients. With about 22 employees and revenue of 2.8 million euro, it has completed over 100 implementations across Europe, the Americas and North Africa. The company operates both as a system designer building ERP architectures and as a local specialist adapting global models to Italian fiscal and regulatory requirements. Led by Sales Director Franco Giannini and Partner Hussein Bahobeshi with 25 years of hospitality ERP expertise, it serves international hotel chains, oil companies like Mellitah and ENI Congo, and mid-size manufacturers. Activates in 179:33:16 |
||||||
| Ransomware | Grundbaulabor Trier id35882 View details | Germany | Manufacturing / Engineering | pending | ||
|
Grundbaulabor Trier gbl-trier.de Grundbaulabor Trier is a German geotechnical engineering firm founded in 1960 in Trier by Dr. Paul Lehmann, now run by the third generation of the Lehmann family with 23 qualified engineers. It has completed over 20,000 projects in soil investigation, foundation design, construction supervision, environmental contamination assessment and hydrogeology across Rhineland-Palatinate, Saarland and Luxembourg. The firm operates its own soil mechanics laboratory offering fast and reliable sample processing with modern testing equipment. Led by Managing Directors Eric Lehmann and Bernd Mertes, it is one of the leading geotechnical bureaus in the Trier-Saarbrücken-Luxembourg region. Activates in 179:57:53 |
||||||
| Ransomware | Rexville Radiology id35883 View details | United States | Healthcare / Pharma | pending | ||
|
Rexville Radiology rexvilleradiology.com Rexville Radiology is a diagnostic imaging center in Bayamón, Puerto Rico, founded by neuro-radiology specialist Dr. Ramón Pizarro Fornaris and accredited by the American College of Radiology. It offers a full range of imaging services under one roof including open MRI, 64-slice CT scanning, 3D digital mammography with tomosynthesis, ultrasound, DEXA bone density and digital X-ray. The center stands out for its open MRI design that accommodates claustrophobic patients and its advanced breast imaging with 3D tomosynthesis for early cancer detection. Led by Dr. Pizarro, a recognized neuro-radiologist, it provides personalized care with fast turnaround times and early opening hours from 6 AM six days a week. Activates in 179:53:24 |
||||||
| Ransomware | SuperScale id35884 View details | United States | IT | pending | ||
|
SuperScale superscale.com SuperScale is a Slovak game growth platform founded in 2015 in Bratislava, helping over 500 mobile game studios scale their games through AI-powered performance marketing, data science and monetization optimization. With around 60 employees and 1000 plus games grown, it offers both a SaaS platform and managed growth services acting as an outsourced UA and live ops team. Its core technology includes predictive LTV and retention models, automated user acquisition campaigns and AI creative production across Facebook, Google, TikTok and Apple Search Ads. Led by CEO Ivan Trancik, the company specializes in hybrid monetization strategies combining ads, in-app purchases and subscriptions for casual, midcore and hypercasual titles. Activates in 179:50:23 |
||||||
| Ransomware | Mercantile Investment Corporation Bolivia S A id35885 View details | Bolivia, Plurinational State of | Finance / Legal / Insurance | pending | ||
|
Mercantile Investment Corporation Bolivia S A Mercantile & Investment Corporation Bolivia S.A. is a Bolivian broker-dealer and investment house founded in 1983 in La Paz, licensed by ASFI, the national financial regulator, with over 43 years of experience in the Bolivian capital markets. It is the investment arm of international Grupo MIC, offering securities trading, foreign exchange, financial leasing, repo operations, centralized securities custody and discretionary portfolio management. Led by Managing Director Alberto Barrón Michel, it serves institutional investors and corporate clients seeking access to Bolivia's Bolsa Boliviana de Valores. Bolivia's capital market is one of the smallest in Latin America, giving licensed players like MIC a niche with limited competition. Key strengths are full ASFI licensing, international group backing and a comprehensive financial product suite spanning brokerage, leasing and asset management. The firm positions itself as a trusted long-term wealth protector in a market dominated by trade Activates in 179:48:11 |
||||||
| Ransomware | Mann Group id35886 View details | United States | Services | pending | ||
|
Mann Group manngroup.com.au Mann Group is an Australian multi-disciplinary engineering and construction company founded in 1992 in Sydney, operating through eight subsidiaries including Mechtronic Engineering, Mann Fab, Mann Energy, Mann Enviro and Mann Solar. With 350 plus employees, it is Australia's leading provider of thermal, electrical, environmental and sanitary engineering solutions. The group covers pipe fabrication, structural steel, pressure vessels, industrial boilers, HVAC, waste-to-energy and renewable energy systems. Its headquarters and central workshop are located in Milperra, Sydney, with a financial year ending in June. Activates in 179:35:27 |
||||||
| Ransomware | FPT Software id35875 View details | Viet Nam | IT | pending | ||
|
FPT Software fptsoftware.com FPT Software is the largest IT services company in Southeast Asia, founded in 1999 in Hanoi with 1.34 billion dollars in revenue and over 33,000 employees across 31 countries. It serves 1,100 clients including 130 Fortune Global 500 companies across automotive, banking, healthcare and energy, with Japan as its largest international market. Its AI-first strategy uses the FleziPT platform delivering 30 percent productivity gains, with AI and data services growing 60 percent in 2026. In 2025 it signed a record 256 million dollar AI transformation deal and secured 26 projects above 10 million dollars. Strategic partnerships span NVIDIA, Microsoft, SAP, AWS and OpenAI. Key strengths are unmatched scale from Vietnam, deep AI capabilities and a 152,000 strong education talent pipeline. Activates in 195:27:52 |
||||||
| Ransomware | Bi Link id35876 View details | United States | IT | pending | ||
|
Bi Link bi-link.com Revenue $380.2 Million Bi-Link US precision manufacturer founded in 1961 (HQ Bloomingdale, IL), making metal stampings and injection-molded plastics with in-house tooling and assembly for automotive, medical, wireless, and consumer electronics OEMs. It owns plants in Shanghai, Nanning, Mexico (Juárez), and a new Vietnam site (2024), offering prototype-to-production under one roof. Revenue isn't reliably public — broker estimates range wildly from ~$10M to $50M, but a TaiPEX filing suggests ~$5M+/month after consolidation. The critical development: in October 2025 family owners agreed to sell the company to Taiwan-listed Donpon Precision, closed and consolidated from Jan 2026. Despite the site still claiming "family-owned", control is now Donpon's, and long-time CEO Tom Harris has exited. Certifications (ISO 9001, ISO 13485, IATF 16949) support real OEM work (e.g. Teleflex via a 3D Systems case) Activates in 208:05:15 |
||||||
| Ransomware | Eichstatt id35877 View details | Germany | null | pending | ||
|
Eichstatt eichstaett.de 1,5 tb information Eichstätt is a small historic town in Upper Bavaria with 13,500 inhabitants and 1400 years of history, famous for its baroque architecture, Jura Museum with Archaeopteryx fossils and UNESCO Altmühltal Geopark. The Katholische Universität Eichstätt-Ingolstadt enrolls about 4,800 students across 4 faculties spanning theology, philosophy, languages and business in Ingolstadt. Under President Dr. Klaus Stüwe since 2023, it received 5.86 million euro in Bavarian funding for digital transformation and AI programs. It is developing an international campus in Shandong, China and launching new sustainability master's degrees. Key strengths are its Catholic identity, small class sizes and strategic location between Munich and Nuremberg. Activates in 193:38:21 |
||||||
| Ransomware | ImmoVia Hausverwaltung id35879 View details | Germany | Services | pending | ||
|
ImmoVia Hausverwaltung immovia-hausverwaltung.de ImmoVia Hausverwaltung GmbH is a German property management company registered in November 2025 in Bautzen, Saxony, founded by property owners who bring their own landlord experience to managing rental properties and condominium associations. Led by Managing Director Ramona Biehle with equal shareholders holding 33.3 percent each, the firm offers rental management, WEG administration, technical building management and DATEV-compatible tax data integration. Its philosophy is reliable, solution-oriented and personal management treating each property as if it were its own. Activates in 181:07:11 |
||||||
| Ransomware | Regency Park Oak Knoll id35878 View details | United States | Other | pending | ||
|
Regency Park Oak Knoll www.regencypk.com https://www.zoominfo.com/c/regency-park-oak-knoll/235454820 Regency Park Oak Knoll specializes in providing world-class memory care and assisted living services for residents with dementia or memory loss in Pasadena, California. With over 50 years of experience, their expert staff offers personalized care, socialization, and a range of therapies tailored to each resident's needs. The facility is dedicated to ensuring a safe, secure, and homelike environment, focusing on the physical, emotional, and spiritual well-being of its residents. Recognized as a premier memory care community, Regency Park Oak Knoll is committed to treating every resident like family. Activates in 187:20:50 |
||||||
| Ransomware | Cherry Bekaert id35870 View details | United States | Services | pending | ||
|
Cherry Bekaert cbh.com Revenue $446.7 Million CBH Group Australia's largest grain cooperative, founded in 1933 in Perth and owned by over 3,700 farmer shareholders across Western Australia. It operates the world's largest grain export network with around 200 receival sites, 20 million tons of storage capacity and four export terminals at Kwinana, Albany, Geraldton and Esperance. Each year it handles approximately 20 million tons of grain and exports 15 to 17 million tons, mainly wheat, barley and canola to Asia, the Middle East and beyond. Led by CEO Brendan White, it has invested over 2 billion dollars in infrastructure modernization including rail upgrades, solar energy and digital platforms like the CBH App. The cooperative is financially strong with a BBB credit rating and returns profits to farmers through patronage dividends. It operates its own rail fleet of 360 wagons, runs quality testing laboratories at every site and is expanding port capacity to load Panamax vessels at Kwinana and Albany. Activates in 219:25:54 |
||||||
| Ransomware | SK Capital Partners id35871 View details | United States | Finance / Legal / Insurance | pending | ||
|
SK Capital Partners skcapitalpartners.com Revenue $63 Million SK Capital Partners is a New York-based private equity firm founded in 2007 as a spinoff from Apax Partners, managing approximately 10 billion dollars across 60 plus investments in specialty chemicals, pharmaceuticals and ingredients. Led by co-founder Barry Siadat, it targets control investments in companies with 100 million to 1 billion dollars in revenue and has built platforms like Advansix, Sartomer and Cura Particles through buy-and-build strategies. Its portfolio companies employ over 12,000 people and generate more than 5 billion dollars in annual revenue. Recent deals include the July 2026 acquisition of Lorama Group and the October 2026 purchase of Vesuvius Americas refractory assets. Key strengths are deep sector expertise in real-economy industrial businesses and proven IPO and trade sale exits. Activates in 219:22:32 |
||||||
| Ransomware | Svedala Kommun id35872 View details | Sweden | Services | pending | ||
|
Svedala Kommun svedala.se Revenue $282.1 Million Svedala kommun is a municipality in Skåne County, Sweden, part of Greater Malmö with 23,722 residents and a projected growth to 26,800 by 2032. It jumped from 63rd to 15th place in Sweden's Bäst att leva 2026 ranking, ranking number one nationwide in business climate, self-sufficiency and outbound commuting. The local economy centers on transport and warehousing driven by Malmö Airport, with Sandvik SRP as the largest private employer and a new Airport City MMX business park planned to create 1,000 jobs. The municipality runs a balanced budget of SEK 1.66 billion with a tax rate below the national average. Education performs above average with 89.8 percent gymnasium eligibility and 80.3 percent qualified teachers. It is investing 431 million kronor in infrastructure 2025 to 2027. Activates in 219:19:22 |
||||||
| Ransomware | Angeles Contractor id35873 View details | United States | Construction / Real Estate | pending | ||
|
Angeles Contractor angelescontractor.com Angeles Contractor Inc is a general contractor founded in 1998 in City of Industry, California, with 8 CSLB license categories and 63 to 95 employees delivering construction projects across Southern California. It has completed 259 public works projects worth over 197 million dollars for 47 government agencies, led by San Bernardino County with 73 contracts. Its portfolio includes the Rose Bowl renovation, UCLA dining hall, CGV Cinemas, Paakuma K-8 School and a 14.5 million dollar Big Bear Airport terminal rebuild. Led by President Young W. Kang and VP Alex Cho, it maintains over 90 percent repeat business across education, healthcare, commercial and residential sectors. It holds multiple JOC contracts with San Bernardino, San Mateo and Sourcewell worth up to 30 million dollars per year. The company is a certified Minority Business Enterprise with active expansion into Northern California through offices in San Jose and Salinas. Activates in 219:14:24 |
||||||
| Ransomware | First Dental id35874 View details | United States | Healthcare / Pharma | pending | ||
|
First Dental myfirstdental.com First Dental Care is a dental practice network in Massachusetts founded by Dr. Farshad Ghobbeh, who opened his first clinic in Medford in 2008 and expanded to Somerville in 2012 and four more locations including Arlington, Watertown, Acton and Bedford. With over 20,000 patients and 18 years of experience, it offers general and cosmetic dentistry, dental implants, Invisalign, emergency care and smile makeovers across six clinics. Its Smile Now Pay Later model with Klarna makes implants available from 58 dollars per month and whitening at 149 dollars instead of 500. The team is multilingual speaking English, Spanish, Portuguese, Russian, Chinese and Persian to serve diverse Massachusetts communities. It accepts over 15 insurance plans including Aetna, Blue Cross Blue Shield, Delta Dental and MassHealth. Key strengths are 18 years of community trust, multi-location accessibility, affordable payment plans and Dr. Ghobbeh's personal commitment to quality oral health. Activates in 217:20:16 |
||||||
| Ransomware | GIO Dental id35869 View details | United States | Healthcare / Pharma | pending | ||
|
GIO Dental giodentalsl.com GIO Dental SL is a modern dental clinic and laboratory founded by Nigerian dentist Dr. Gift Nwachukwu Obiorah in Freetown, Sierra Leone, with an additional location in Koidu, Kono District. It is Sierra Leone's first fully integrated dental provider offering clinical treatment, a prosthetics laboratory, dental technology education and equipment repair under one brand. Services span general and cosmetic dentistry, orthodontics, oral surgery, custom prosthetics fabrication and community oral health programs. Led by founder Dr. Gio, the company trains local dental technicians and runs outreach campaigns to make premium dental care accessible across the country. Its vertical model combining treatment, manufacturing and education is unique in the Sierra Leonean healthcare market. It also provides equipment repair and supply services to other dental clinics in the region. Activates in 223:40:34 |
||||||
| Ransomware | Weld Re 8 School District id35525 View details | United States | Manufacturing / Engineering | pending | ||
|
Weld Re 8 School District weld8.org Weld Re-8 School District public school district founded in 1914 in Fort Lupton, Colorado, serving about 2500 students across 7 schools with a 43.5 million dollar budget. The student body is 76 percent minority with over half on free lunch, and academics are weak, math proficiency 16 to 19 percent, reading 22 to 26 percent, far below state averages. The core problem is teacher pay, starting salaries 47500 dollars versus 53000 to 64500 nearby, driving 23 percent yearly turnover. Voters rejected four tax requests since 2023, and on November 3 2026 they vote Issue 5C, a 4.9 million dollar tax hike, or face 1.3 million in mid-year cuts. New superintendent Dr. Justin Ralston launched a 2026 to 2029 plan reviving agriculture and adding IT and cybersecurity tracks. Oil and gas covers over half the local tax base. Data |
||||||
| Ransomware | Red Oak Technologies id35526 View details | United States | IT | pending | ||
|
Red Oak Technologies redoaktech.com Red Oak Technologies private IT staffing and managed services company founded in 1995 and headquartered in San Jose, California, with offices in Austin and Denver. It has about 250 employees across 5 countries and estimated revenue of roughly 105 million dollars. The company provides contract tech talent, direct hire and full project delivery with offshore and nearshore teams. It specializes in cloud, DevOps, semiconductor and life sciences clients from startups to Fortune 500. Led by President Joel Leege, ex-Randstad Technology, it has completed over 1700 projects in 30 years with 92 percent client retention. Activates in 96:05:10 |
||||||
| Ransomware | Penco Products id35527 View details | United States | Manufacturing / Engineering | pending | ||
|
Penco Products pencoproducts.com Penco Products US metal manufacturer founded in 1869, now based in Greenville, North Carolina, making steel lockers, shelving, pallet racks and garment dispensers at its 375,000 square foot ISO certified plant in Hamilton. It is part of the IMC industrial group and has around 200 employees, up to 350 in summer peaks. Its lockers are an American standard in schools, gyms, hospitals and military facilities, with new smart locker lines for contactless pickup. Led by CEO Craig Atwater since 2021, it sells through a national distributor network with QuickShip warehouses across the country. Strengths are 157 years of brand trust, full US vertical production and diversification into school furniture. Data |
||||||
| Ransomware | Conax Technologies id35528 View details | Norway | IT | pending | ||
|
Conax Technologies conaxtechnologies.com Conax Technologies US manufacturer founded in 1952 in Buffalo, New York, producing temperature sensors like thermocouples and RTDs together with high-pressure compression seal fittings for extreme conditions. Owned by the private equity firm May River Capital, it has around 200 to 500 employees and estimated revenue of roughly 41 million dollars. Its products operate in extreme temperatures up to 2000 Fahrenheit and pressures up to 100,000 psi across aerospace, defense, semiconductor, medical and energy markets. The company runs a 101,000 square foot plant with 150 machines, holds AS9100, NADCAP and ISO certifications, and has over 45 patents with 100 million products installed worldwide. Under CEO John LeFevre since 2023 it is expanding through acquisitions such as Vulcan Electric and Sorregosa Spain plus growth in semiconductor and medical verticals. Data |
||||||
| Ransomware | Wellington College International School Bangkok id34941 View details | Thailand | Education | leaked | ||
|
Wellington College International School Bangkok wellingtoncollege.ac.th Wellington College Bangkok is a British international school for ages 2 to 18, opened in 2018 as part of Wellington College UK, with around 1100 students on a 28 acre campus in eastern Bangkok. The curriculum runs from the English National Curriculum to IGCSE and A Levels, with the first graduating class in 2026. Fees range from about 639000 baht per year in pre nursery up to 1283500 baht in Year 12, plus a 225000 baht registration fee and a 175000 baht refundable deposit. Results are elite level with 80 percent A star or A at IGCSE and every graduate of 2026 admitted to their first choice university including Stanford, Yale and Imperial College. Admissions are selective with CAT4 testing and interviews, and strong English is required from Year 10. The school is famous for its Olympic pool, FIFA standard pitch, 600 seat theatre, wellbeing curriculum and scholarships in music, swimming, golf and academics. Data |
||||||
| Ransomware | Gio Dental Med Spa id34942 View details | Italy | Healthcare / Pharma | — | pending | |
|
giodentalspa.com Gio Dental & Med Spa private dental and aesthetic clinic founded around 2006 in Ciudad Juárez, Mexico, targeting patients from the US border region of El Paso and Las Cruces. The practice has about 6 employees and estimated annual revenue of roughly 430000 dollars, making it a small self-owned business with no external funding. Its business model is built on cross-border dental tourism, accepting American HMO and PPO insurance and transporting patients from El Paso directly to the clinic. Core services are dental implants, orthodontics, endodontics, veneers and oral surgery, plus a med spa division with botox, fillers and physiotherapy. The clinical founder and director is Dr. Mauro D. Álvarez, an implantology specialist, working with a team of about five additional dentists. The company is positioned on price: complex dental procedures cost a fraction of US rates while offering full-service treatment and aftercare for American patients. |
||||||
| Ransomware | First Dental Health id34943 View details | United States | Healthcare / Pharma | — | pending | |
|
firstdentalhealth.com First Dental Health, Inc. dental consulting company founded in 1995 and based in Sacramento, California. It is led by Chairman and CEO Michael Zhang together with founder Dr. Rick Kershner, a periodontist who previously worked with Western Dental, Coast Dental and Pacific Dental Services. The company transforms existing dental practices of 40 to 250 chairs through leadership development, culture building and operational excellence, typically raising performance by 40 to 80 percent within 2 to 4 years. Its flagship case is Sacramento Dentistry Group, which grew from around 330000 dollars monthly revenue in 2014 to roughly 640000 dollars by 2023. It also runs a DSO consolidation model that merges 6 to 10 practices under one brand with owners keeping equity and a 3 to 7 year exit path. The team has built 14 companies that made the Inc. 5000 list, positioning it as a small but high-impact operator in US dental business consulting. |
||||||
| Ransomware | AirQ id34945 View details | Andorra | Communication / Marketing | — | pending | |
|
airq-ad.com AirQ UAE drone manufacturer founded in 2021 in Masdar City, Abu Dhabi, producing unmanned aerial systems fully in-house. It was started by Croatian entrepreneurs Dino Dedić as CEO and Igor Pongrac as CTO, who previously worked at Rimac Automobili, and has grown from 6 people to about 100 engineers. The flagship product is the Harara modular VTOL drone, carrying 6 kg of payload and flying up to 7 hours or 600 km in hybrid mode, with over 1000 test flights completed. Other products include the StingJet reusable jet target drone for air defense training and the world's first fully electric UAV launcher. The company is backed by Abu Dhabi institutions such as Tawazun Council and Masdar City Free Zone and runs real operations like medical blood sample delivery between hospitals. Its main strengths are full in-house composite production and dual defense plus commercial markets, while the main risks are its young age, ongoing aviation certification and dependence on UAE defense. |
||||||
| Ransomware | Martin LLP id34532 View details | United Kingdom | Services | — | pending | |
|
martinllp.net Martin LLP Martin LLP is a boutique business law firm founded in 1996, with offices in Stamford and New York. It focuses on middle-market companies, private equity sponsors, lenders, and business owners. Core practices: M&A and private equity, banking and finance, commercial litigation, and commercial real estate. The firm positions itself as partner-led, with small teams and senior lawyers doing hands-on work on deals from a few million to several hundred million dollars. Its people come from large national firms like Skadden, Latham & Watkins, Mayer Brown, and Schulte Roth. It publishes actively on M&A topics, notably representation and warranty insurance (RWI). It is recognized in regional rankings such as Best Law Firms 2026 for Corporate Law in Stamford. |
||||||
| Ransomware | MAP SA id34533 View details | Switzerland | IT | — | pending | |
|
map.ch MAP SA Swiss communications agency in Cossonay, Vaud (UID CHE-106.859.955), operating since 1968 as a business; the current legal entity was registered in 1981. It's a ~13-person full-service shop covering brand strategy, SEO/SEA, social media, and event management. Leadership: Sébastien Graap (took over 2003) and Caroline Müller (partner since 2008). Only revenue figure ever made public is ~CHF 2M for 2010; no current financials are disclosed anywhere. Core clients are French-speaking Swiss SMEs and public bodies — CarPostal, Transports publics de la région lausannoise, La Source, Yverdon Énergies, Changins. A separate training arm, map.academy, publishes rates (CHF 800–3,900 packages, CHF 1,200/day, CHF 890/month coaching); agency project work is quote-only. Portfolio runs ~30 cases with claimed results (e.g. 7% energy savings, 1,200+ event visitors) |
||||||
| Ransomware | Suhai Segurana Pessoal id34534 View details | Brazil | Services | — | pending | |
|
suhaiseguranca.com.br Suhai Segurança Pessoal Brazilian personal security company founded in 1992 — one of the older, established firms in its niche. Core business: bodyguard/executive protection, family and residential security, security drivers, and corporate guarding, delivered nationwide. Teams are described as vetted, licensed professionals backed by 24/7 monitoring and in-house tactical training. The firm claims ISO 9001 and Great Place to Work certification, but doesn't publish certificates — claims are self-reported. No revenue, pricing, or verified headcount is public; everything is custom-quoted per job. Critically: since Brazil's 2024 law, security work is only legal if the firm holds a current federal police permit for that specific service and state — confirm yours before hiring. Also beware the unrelated "Suhai" auto insurer sharing the name — most complaints you'll find online are about insurance, not this company. |
||||||
| Ransomware | SBI Audiovisual Medinbox id34535 View details | Spain | IT | — | pending | |
|
sbiav.com SBI Audiovisuel is a Quebec AV company founded in 1991 (HQ in Saint-Bruno-de-Montarville, ~11 staff), doing corporate event production — sound, lighting, video, webcasting — plus its signature niche: live streaming of surgical operations for medical training. It deploys its own CASTER mobile system and claims exclusive North American rights to France's Medinbox tech, which is used at hospitals like Mount Sinai NY; note SBI is an integrator, not the tech's manufacturer. Public activity runs from 2018 through 2026 (US tours, medical congresses, hiring), with no lawsuits or scam signs found. Revenue is not disclosed — third-party estimates vary ($1–5M range), all unverified. Weak spots: no independent client reviews, no published certificates, and the site blurs its own brand with Medinbox's. For Quebec/Canada corporate events or live-surgery broadcasts it's a credible pick; for critical projects, verify team size, redundancy plans, and patient-data handling in writing. |
||||||
| Ransomware | Saga University id34536 View details | Japan | Education | — | pending | |
|
saga-u.ac.jp Saga University is a national Japanese university in Saga Prefecture, Kyushu — founded in 1949 (roots back to 1875), merged with Saga Medical School in 2003, operating as a national university corporation since 2004. Scale: ~6,600 students, ~3,300 staff, 6 faculties (including medicine with a ~600-bed hospital) across Honjo, Nabeshima, and Arita campuses. Annual revenue ¥44B ($300M), ~57% of it generated by the university hospital; state capital ¥47.3B, with a +¥1.6B surplus in FY2024. Signature strength: the Institute of Ocean Energy (IOES) — a world leader in OTEC (ocean thermal energy), pursuing the world's first 1-MW commercial plant ~2026-27 with Mitsui O.S.K. Lines. Rector since Oct 2025: Koichi Node (cardiologist); 2026 launches include Japan's first national-university cosmetic science program (30 students, 7x oversubscribed) and a joint teacher-training degree with Kumamoto University. Weak points: rankings have slid for a decade (QS Asia 801-850, THE 1501+) |
||||||
| Ransomware | Netcore Unbxd id34537 View details | India | IT | — | pending | |
|
netcoreunbxd.com Netcore Unbxd AI product-discovery platform for enterprise e-commerce: smart site search, 1:1 personalization, recommendations, visual intelligence ("Complete the Look"), catalog enrichment, and — its 2026 bet — a Shopping Agent (agentic commerce). Owned by India's Netcore Cloud since March 2022 (~$100M deal, 90%), run by founders Pavan Sondur and Prashant Kumar; SaaS sits on composable, API-first infra (Cloudflare, Kubernetes, multi-region), with <10ms response on 95% of queries and 35M documents processed monthly. Recognition: Gartner Magic Quadrant Leader 3 years running, highest "Current Offering" score in Forrester Wave Q3 2025, 7 G2 badges Summer 2025. Claimed customer results (self-reported): +38% AOV, +28% conversion, −60% null searches, −53% bounce. Positioning is sharply anti-native-search and anti-generic-AI, aimed at retail merchandisers with no-code workbenches and full override control. Site's main CTA is a free "personalized site experience audit." |
||||||
| Ransomware | REGiO Nord id34538 View details | Germany | Manufacturing / Engineering | — | pending | |
|
regio-nord.com REGiO-Nord mbH (HRB 1203, Amtsgericht Neuruppin) is a municipal regional-development company in Gransee, Brandenburg, founded 2008–2009 to run the shared "Mittelzentrum" of Gransee–Zehdenick–Fürstenberg/Havel. It is 100% publicly owned (Zehdenick 1/3, Fürstenberg 1/3, Gransee 1/6, Amt Gransee 1/6), led by sole managing director Olaf Bechert with a staff of ~5 plus two tourist info offices. Its real money flows through the Kooperationsfonds — ~€8.9M in projects since 2008, with €538K spent in 2025 and €563K budgeted for 2026, of which €312K funds the company's own coordination work. Four workstreams: education (teacher recruitment, apprenticeship exchange), economy (business services, doctor recruitment, arztidylle.de), tourism (two info stations, region portals, RegioApp), and regional marketing (REGiO-Card, library network). Finances are project-transparent (open budget reports) but the GmbH's own annual accounts are only public through 2022 — request 2023–2025. |
||||||
| Ransomware | Museum Siam id34539 View details | Thailand | Education | — | pending | |
|
museumsiam.org Museum Siam museum in Bangkok run by NDMI under the public organization OKMD — the .org domain is real, but it's a government institute, not a private company. It occupies the former Ministry of Commerce building (1921–1922) and opened as a museum on 2 April 2008. The core exhibit Decoding Thainess (14 rooms on how Thai identity was formed) has run since 2017; there's also a free Underground Museum at MRT Sanam Chai (2020). Attendance is ~250–343K per year (different counting methods), 3.8M over 17 years; museum-level revenue isn't disclosed — finances publish only at OKMD level. Tickets: 100 THB adult, 50 students, free for kids under 15, 60+, monks, disabled visitors; open Tue–Sun 10:00–18:00. Beyond exhibits: a 4,000+ resource library, digital archives, venue rental (5–80K THB), and a nationwide museum-network support program. |
||||||
| Ransomware | Skin Center id34540 View details | United States | Healthcare / Pharma | — | pending | |
|
skincenter.com Skin Center dermatology clinic in Fort Lauderdale, FL (6550 N Federal Hwy, Suite 320) with 40+ years of practice roots (formerly Dr. Roger Stewart's clinic, led by Dr. Barry Galitzer since the 2010s). Full spectrum: medical dermatology, Mohs surgery for skin cancer, cosmetic injectables/lasers (Botox, CoolSculpting, Ultherapy, Fraxel), an Acne Center, aesthetics, and massage. The hidden headline: since 2021 it's owned by Forefront Dermatology (125+ clinics, backed by Canadian pension fund OMERS Private Equity) — billing, records, and HR run through the network, not the local brand. Doctors rate excellent (Galitzer 4.7/5 on Healthgrades; Castle Connolly Top Doctor), but admin/office process is the weak spot — complaints cite long waits, forgotten patients, and a brusque bedside manner. Team: ~10 providers (Galitzer, Fien, Perrotto, Soro, White, Brown + PAs), plus a second office in Pompano Beach; 200+ patients/day, 10,000 sq ft. |
||||||
| Ransomware | Thai Ha PCL KASET id34541 View details | Thailand | Retail / E-commerce | — | pending | |
|
kasetbrand.co.th Thai Ha PCL (SET: KASET) is a Thai public company founded 1993, listed since 2005, exporting jasmine rice, mung bean noodles, and snacks (brands KASET, SMART CHEF, IMPERIAL TASTE) to 80+ countries — the US is its largest market (902+ shipments, active as of Oct 2026). Core assets: a rice mill in Nakhon Pathom (100K tons/yr capacity) and a noodle factory in Nakhon Sawan; certified BRC Grade A+, US FDA, Halal, KOSHER, SMETA. The family Tangpiroonthum controls ~42% via Cheer Group Holdings, CEO Somroek Tangpiroonthum in place since 2004. But financially it's been bleeding: revenue fell from ฿611M (2020) to ฿302M (2025), six consecutive years of losses totaling ~฿330M, negative operating cash flow, debt/equity ~143%. A turnaround plan launched in 2024 — including halving par value (฿1.00→฿0.50) to wipe ~฿139M accumulated deficit — is narrowing losses (Q2 2026 −66% YoY) but the company is still unprofitable. |
||||||
| Ransomware | Inovar Packaging Group id34542 View details | Australia | Manufacturing / Engineering | — | pending | |
|
inovarpackaging.com Inovar Packaging Group (Irving, TX) is a PE-backed buy-and-build platform producing pressure-sensitive labels, shrink sleeves, flexible packaging, and RFID — 14 US plants, 12+ acquisitions since 2016 (latest: Kiliper Corp, Feb 2026). Owned by Kelso & Company since May 2022 (previously AEA Investors); CEO/Chairman Jeff Brezek leads, with deal advisors Milbank and Mesirow confirming real M&A scale. Revenue is private and undisclosed — realistic estimates put it at $100–250M, with ~500–750 employees (Form 5500 filings show plan participants growing 121→743 in 2020–2024). Certifications are strong: ISO 9001/14001, first US printer with GMI Platinum (both digital + flexo; serves CVS, Target, Walgreens, Home Depot), FDA 21 CFR 11 / EU Annex 11, EcoVadis Gold; won the 2024 TLMI Eugene Singer Award. Clients: food & beverage, healthcare, ag-chem, supplements, personal care — with built-in redundancy across plants for continuity. |
||||||
| Ransomware | Engineers Ireland id34543 View details | Ireland | Manufacturing / Engineering | — | pending | |
|
engineersireland.ie Engineers Ireland Ireland's national professional body for engineers, founded 1835 with a Royal Charter (1877) and statutory authority under a 1969 Act to award the "Chartered Engineer" (CEng) title. HQ at 22 Clyde Road, Ballsbridge, Dublin 4; ~30,000 members (21,052 paying) across 35 regional/divisional sectors. Revenue ~€7.6M (2024) with ~€0.7M surplus and a ~€5M investment portfolio; ~49 staff, over 500 volunteers. Core functions: CEng accreditation, education program recognition (194 accredited university programs, Washington Accord member), mandatory CPD (35 hrs/yr), annual Salary Survey, and policy advocacy. President 2025–26 is John Jordan; new Director General Áine Myler started August 2026 (previously led Society of Chartered Surveyors Ireland). Membership fees run €80–€495/year by grade; the profession it represents is ~98,000 engineers contributing €12.65B to the economy, but the country faces a shortfall of ~6,000 engineers/year through 2030. |
||||||
| Ransomware | North Bridge Venture Partners id34544 View details | United States | IT | — | leaked | |
|
northbridge.com North Bridge Venture Partners one of Boston's most storied venture capital firms, founded in 1994 by Bill Geary, Doug Kingsley, Ed Anderson, Mike Pehl, and Richard D'Amore — ~$3.5B under management across 8 funds, ~200+ investments, 100+ exits, and 14 unicorns. Legendary portfolio: Demandware (sold to Salesforce for $2.8B), Starent Networks ($2.9B to Cisco), Proto Labs (IPO), Couchbase ($1.5B to Haveli, 2025), Quora, Salsify, Acquia ($1B to Vista), Actifio (to Google), Paydiant (to PayPal). Its growth-equity arm split off in 2018 as Guidepost Growth Equity ($1.1B+ AUM). Today the fund is in harvest mode — no new deals since 2021–2022, small remaining team, minimal website. May 2026: ransomware group DragonForce claimed to have stolen 22.9GB of internal files (unconfirmed by the firm). For startups seeking capital it's not an active option; for portfolio/LP diligence or the breach, it remains relevant. |
||||||
| Ransomware | SONGWOOI id34545 View details | Korea, Republic of | Retail / E-commerce | — | pending | |
|
songwooi.co.kr SONGWOOI (Song Woo Industrial Co., Ltd.,) South Korean manufacturer of automotive and industrial rubber hoses — intercooler/TCI, heater, fuel, CPF/DPF, and power steering lines — founded 1998 in Busan, HQ and plant in Yangsan since 2002. Founder-Chairman Park Su-kon localizated TCI hoses that were 100% imported from Japan, claiming 90% Korean market share; customers include Hyundai, Kia, Renault Samsung, Hyundai Heavy Industries, and Volvo CE. Certifications: IATF 16949, ISO 14001, ISO 9001; Plus Inno-Biz/Main-Biz status and national awards (Bronze Tower Medal 2015 to Park). Revenue ₩69.9B ($50M) in 2025, down from ₩104.8B peak (2013) — declining four years straight as the industry shifts to EVs — but profitability improved (5.2% operating margin, ROE 23%). Financials are unusually strong: zero debt, 80% equity ratio, ₩52.9B total assets; ~163–197 employees. Watch-outs: some databases list a different CEO (Park Eun-chul) |
||||||
| Ransomware | Petroleum Telcom Communications id34546 View details | Pakistan | Telecommunications | — | pending | |
|
ptelcom.com Petroleum Telcom, Inc. (dba Telcom, Inc. / Telcom Communications) Southern California communications integrator founded in 1978 in Oxnard, CA — specializing in two-way radio for police/fire, microwave links, fiber optics, cell towers, and FCC licensing. Owned and led by Frank R. Hines (president since 1986), now a lean ~6-person shop (peak 35 in 1999), dealer for Motorola, Kenwood, and Bendix-King, with ~200 owned repeaters across CA/NV/AZ/UT. CA contractor license #620689 (B + C7) active since 1991, zero complaints, bonded and insured. Government track record is real and documented: Ventura County since 1982, Stanislaus County $1.2M, Port of LA police radio system $1.19M (2017–19), City of Oxnard up to $900K (2023–27), USGS, and 5 DoD contracts. Revenue not disclosed (est. $1–5M). |
||||||
| Ransomware | Axle Logistics id34547 View details | United States | Transportation / Travel / Logistics | — | pending | |
|
axlelogistics.com Axle Logistics non-asset freight brokerage founded in 2012 in Knoxville, Tennessee, by Drew Johnson and Jon Clay — two University of Tennessee grads who started with two people and one trucking software license. It organizes truckload, LTL, intermodal, and port drayage shipments across the US, Canada, and Mexico by matching loads with third-party carriers, focusing on Fortune 500 shippers and mid-market brands. Revenue exploded from $80M (2018) to over $1.2B gross / $159M net (2025), and headcount grew from 2 to roughly 700 — making it one of the fastest-scaling brokers in the country. It's landed on the Inc. 5000 list over a decade straight, ranked #52 among Transport Topics' top 50 logistics companies, and won Knoxville Top Workplaces seven years running. The company invested $38M in a gleaming new 84,000 sq ft HQ with state support and pays employees an average of ~$117K/year. It's a brokerage, not a carrier — so shipment quality depends on the carriers. |
||||||
| Ransomware | CAS Paper Mill id34549 View details | Canada | Manufacturing / Engineering | — | pending | |
|
caspapermill.com C.A.S. Paper Mill Co., Ltd. is a Thai paper manufacturer in Singburi (est. 1990, operating since 1994), part of the Charoen Aksorn Group — Thailand's largest paper distributor, backed by Bangkok Bank and Vacharaphol. It produces 130,000 MT/yr of newsprint, printing and kraft paper plus 30,000 MT/yr of tissue (Toscotec line, 2022), from 100% recycled US/Canadian waste paper. Zero-liquid-discharge since 1994, 10 MWp floating solar; ISO 9001/14001/45001, TIS 758, FSC C125297. Exports: Vietnam, Philippines, Pakistan. Revenue est. $80–150M (~300 staff), but fell ~10% in 2025 as newsprint demand declines. Main red flag: 2018 villagers' protest over alleged coal pollution affecting 10,000+ residents, and denial of a license for the coal expansion. |
||||||