Cybersecurity Daily — 2026-07-27

Written by

in

CRITICAL SECTION

[12] Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breached (HelpNetSecurity)
<p>Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: AI agents are still logging in as humans Most large companies run more than one AI platform at the same time. Developers pull up coding assistants, marketing teams lean on writing tools, and analysts query enterprise search across separate vendors. Single-provider setups keep giving way to mixed stacks as companies keep their options open. PR3TACK preemptive framework maps threats before &#8230;

CISA KEV (last 14 days)

No CISA KEV items found.

RANSOMWARE VICTIMS (today)

[RANSOMWARE]: [RANSOMWARE] Deadlock leaked West African Resources ltd, [RANSOMWARE] Section9 leaked *******.com, [RANSOMWARE] dragonforce leaked Syntron Bioresearch, [RANSOMWARE] dragonforce leaked Deluxe Medical Supply, [RANSOMWARE] ExfilSquad leaked District of Columbia Public Schools, [RANSOMWARE] ExfilSquad leaked Police National Legal Database, [RANSOMWARE] Global Secret Group leaked Nexon Corp., [RANSOMWARE] CRPxO leaked ProSmile Family Dental Care, [RANSOMWARE] CRPxO leaked Qube Aviation Catering, [RANSOMWARE] CRPxO leaked Performance Data Solutions, [RANSOMWARE] CRPxO leaked Host & Protect (RedBlink), [RANSOMWARE] CRPxO leaked RnnR Cloud, [RANSOMWARE] CRPxO leaked CodeConductor.ai, [RANSOMWARE] CRPxO leaked Prei Capital, [RANSOMWARE] CRPxO leaked FLP Law Group LLP, [RANSOMWARE] CRPxO leaked Summit Hill Insurance, [RANSOMWARE] CRPxO leaked MRO Aerospace, [RANSOMWARE] incransom leaked takethehop.com, [RANSOMWARE] Global Secret Group leaked Park Manufacturing Corp., [RANSOMWARE] ExfilSquad leaked Wesco International

NEWS

[7] [RANSOMWARE] Deadlock leaked West African Resources ltd (ransomware.live/Deadlock)
Victim: West African Resources ltd | Group: Deadlock | Website: www.westafricanresources.com | Country: AU | Details: West African Resources Limited (ASX: WAF) isan Australia-based, mid-tier gold mining and exploration companywith its primary operations located in Burkina Faso, West Africa . Founded in 2006, the company is headquartered in Subiaco, Western Australia, and focuses on the acquisition, development, and

[7] [RANSOMWARE] Section9 leaked *******.com (ransomware.live/Section9)
Victim: *******.com | Group: Section9 | Country: US | Details: ECOMMERCE

[7] [RANSOMWARE] dragonforce leaked Syntron Bioresearch (ransomware.live/dragonforce)
Victim: Syntron Bioresearch | Group: dragonforce | Website: syntron.net | Country: US | Details: Syntron Bioresearch, Inc. specializes in manufacturing rapid in vitro diagnostic tests and detection readers, focusing on fertility and over-the-counter tests for ovulation and pregnancy. The company is licensed as a Medical Device Establishment by the US FDA and the State of California Department o

[7] [RANSOMWARE] dragonforce leaked Deluxe Medical Supply (ransomware.live/dragonforce)
Victim: Deluxe Medical Supply | Group: dragonforce | Website: deluxemedical.com | Country: US | Details: Deluxe Medical Supply is a distributor of healthcare supplies that focuses on delivering quality home healthcare products and services. They provide a wide range of medical equipment, including mobility aids, incontinence supplies, and compression therapy garments, aimed at restoring independence an

[7] [RANSOMWARE] ExfilSquad leaked District of Columbia Public Schools (ransomware.live/ExfilSquad)
Victim: District of Columbia Public Schools | Group: ExfilSquad | Website: dcps.dc.gov | Country: US | Details: [AI generated] District of Columbia Public Schools (DCPS) is a public school district serving Washington, D.C., USA. It operates as the primary government-run K-12 educational system for the nation's capital, overseeing dozens of schools, thousands of students, and a large workforce of educators and

[7] [RANSOMWARE] ExfilSquad leaked Police National Legal Database (ransomware.live/ExfilSquad)
Victim: Police National Legal Database | Group: ExfilSquad | Country: GB | Details: DATA SUMMARY:
135k law enforcement contact records with first/last name, email, police force area, etc.

[6] [RANSOMWARE] Global Secret Group leaked Nexon Corp. (ransomware.live/Global Secret Group)
Victim: Nexon Corp. | Group: Global Secret Group | Website: nexon.com | Country: KR | Details: Internal infrastructure audit revealed multiple critical entry points across distributed network segments.

[5] [RANSOMWARE] CRPxO leaked ProSmile Family Dental Care (ransomware.live/CRPxO)
Victim: ProSmile Family Dental Care | Group: CRPxO | Country: US | Details: Sector: Healthcare / Dental | Data leaked: 9.6 GB

[5] [RANSOMWARE] CRPxO leaked Qube Aviation Catering (ransomware.live/CRPxO)
Victim: Qube Aviation Catering | Group: CRPxO | Country: US | Details: Sector: Aviation / Catering | Data leaked: 22.5 GB

[5] [RANSOMWARE] CRPxO leaked Performance Data Solutions (ransomware.live/CRPxO)
Victim: Performance Data Solutions | Group: CRPxO | Country: US | Details: Sector: Motorsport / Data Acquisition | Data leaked: 12.8 GB

[5] [RANSOMWARE] CRPxO leaked Host & Protect (RedBlink) (ransomware.live/CRPxO)
Victim: Host & Protect (RedBlink) | Group: CRPxO | Country: US | Details: Sector: Web Hosting / Security | Data leaked: 156.2 GB

[5] [RANSOMWARE] CRPxO leaked RnnR Cloud (ransomware.live/CRPxO)
Victim: RnnR Cloud | Group: CRPxO | Country: US | Details: Sector: Technology / Cloud Services | Data leaked: 68.9 GB

[5] [RANSOMWARE] CRPxO leaked CodeConductor.ai (ransomware.live/CRPxO)
Victim: CodeConductor.ai | Group: CRPxO | Website: CodeConductor.ai | Country: US | Details: Sector: Technology / AI / SaaS | Data leaked: 52.4 GB

[5] [RANSOMWARE] CRPxO leaked Prei Capital (ransomware.live/CRPxO)
Victim: Prei Capital | Group: CRPxO | Country: US | Details: Sector: Financial / Capital | Data leaked: 18.7 GB

[5] [RANSOMWARE] CRPxO leaked FLP Law Group LLP (ransomware.live/CRPxO)
Victim: FLP Law Group LLP | Group: CRPxO | Country: US | Details: Sector: Legal / Bankruptcy | Data leaked: 42.1 GB

[5] [RANSOMWARE] CRPxO leaked Summit Hill Insurance (ransomware.live/CRPxO)
Victim: Summit Hill Insurance | Group: CRPxO | Country: US | Details: Sector: Insurance | Data leaked: 34.5 GB

[5] [RANSOMWARE] CRPxO leaked MRO Aerospace (ransomware.live/CRPxO)
Victim: MRO Aerospace | Group: CRPxO | Country: US | Details: Sector: Aerospace / Defense | Data leaked: 87.3 GB

[5] [RANSOMWARE] incransom leaked takethehop.com (ransomware.live/incransom)
Victim: takethehop.com | Group: incransom | Website: takethehop.com | Country: US | Details: The HOP, an American regional public transit system operated by the Hill Country Transit District (HCTD). Founded in the 1960s in the state of Texas (USA) as a voluntary transportation service, the organization has grown over the decades into a major public public-transport network.

[5] [RANSOMWARE] Global Secret Group leaked Park Manufacturing Corp. (ransomware.live/Global Secret Group)
Victim: Park Manufacturing Corp. | Group: Global Secret Group | Website: parkmfg.com | Country: US | Details: Country: Cambridge, Minnesota 55008, US |
Website: parkmfg.com |
Revenue: $17.9 Million |
Industry: Appliances, Electrical, and Electronics Manufacturing |
Employees: 50-100 |
Properties: 195 GB (411,109 Files, 48,413 Folders)

[5] [RANSOMWARE] ExfilSquad leaked Wesco International (ransomware.live/ExfilSquad)
Victim: Wesco International | Group: ExfilSquad | Country: US | Details: Revenue: $24B

DATA SUMMARY:
2.6M~ records containing: customer and employee PII, account and contact data, CRM user profiles, credit and business identifiers, authentication metadata, and access information.

[5] [RANSOMWARE] genesis leaked Williams Accounting Professional (ransomware.live/genesis)
Victim: Williams Accounting Professional | Group: genesis | Website: bramptondirect.ca | Country: CA | Details: A full service CPA firm

[5] [RANSOMWARE] genesis leaked JJP Slip Forming Inc. (ransomware.live/genesis)
Victim: JJP Slip Forming Inc. | Group: genesis | Website: . | Country: US | Details: A company that operates in the Restaurants industry

[5] [RANSOMWARE] genesis leaked Building Envelope Systems (ransomware.live/genesis)
Victim: Building Envelope Systems | Group: genesis | Website: infinitypipeinc.com | Country: US | Details: A reputable construction company based in Plainville, MA

[5] [RANSOMWARE] genesis leaked Westlake Realty Group, Inc. (ransomware.live/genesis)
Victim: Westlake Realty Group, Inc. | Group: genesis | Website: westlake-realty.com | Country: US | Details: A full-service real estate development company

[5] [RANSOMWARE] genesis leaked Servonix Technologies (ransomware.live/genesis)
Victim: Servonix Technologies | Group: genesis | Website: servonix.com | Country: US | Details: A provider of IT services

[5] [RANSOMWARE] genesis leaked Infinity Pipeline,Inc. (ransomware.live/genesis)
Victim: Infinity Pipeline,Inc. | Group: genesis | Website: infinitypipeinc.com | Country: US | Details: A family owned, local construction company.

[5] [RANSOMWARE] Global Secret Group leaked Hinduja Tech | BMW Group & Škoda Auto (ransomware.live/Global Secret Group)
Victim: Hinduja Tech | BMW Group & Škoda Auto | Group: Global Secret Group | Website: hindujatech.com | Country: IN | Details: Country: India |
Website: hindujatech.com |
Revenue: $381 Million |
Industry: Engineering Services, Architecture, Engineering & Design, Product Engineering Solutions |
Employees: 2000-5000 |
Properties: 515 GB (212,785 Files, 83,982 Folders)

[5] [RANSOMWARE] Global Secret Group leaked Pro-Tuff | Decals (ransomware.live/Global Secret Group)
Victim: Pro-Tuff | Decals | Group: Global Secret Group | Website: protuffdecals.com | Country: US | Details: Country: Crystal Lake, US |
Website: protuffdecals.com |
Revenue: $9.6 million |
Industry: Business Services General, Business Services |
Employees: 10-20 |
Properties: 412 GB (589,623 Files, 40,081 Folders)

[5] [RANSOMWARE] Deadlock leaked High Class Car Limo (ransomware.live/Deadlock)
Victim: High Class Car Limo | Group: Deadlock | Website: www.highclasscarlimo.com | Country: US | Details: High Class Limousine & Car Service Corp. is a licensed private passenger transportation service in New York City, founded in 1995, specializing in non-emergency medical transportation . The company provides rides to medical appointments, dialysis sessions, and rehabilitation facilities, and has loca

[5] [RANSOMWARE] anubis leaked Eagle Crest Communities (ransomware.live/anubis)
Victim: Eagle Crest Communities | Group: anubis | Website: eaglecrestlife.org | Country: US | Details: Patient and employee data breach at elderly care service.

[5] [RANSOMWARE] Global Secret Group leaked Spergel (ransomware.live/Global Secret Group)
Victim: Spergel | Group: Global Secret Group | Website: spergel.ca | Country: CA | Details: Country: Canada |
Website: spergel.ca |
Revenue: $28.2 Million |
Industry: Business Services,Project Management |
Employees: 51-200 |
Properties: 5.4 TB (7,830,792 Files, 902,844 Folders)

[5] [RANSOMWARE] Deadlock leaked Caspian One (ransomware.live/Deadlock)
Victim: Caspian One | Group: Deadlock | Website: www.caspianone.com | Country: AZ | Details: Caspian One is an international provider of IT services and specialist talent for industries such as FinTech investment banking and broadcasting. Based in England the company offers professional recruitment and managed technology solutions and operates in Europe and North America.

[5] [RANSOMWARE] Section9 leaked *****.com.pt (ransomware.live/Section9)
Victim: *****.com.pt | Group: Section9 | Country: PT | Details: UNIVERSITY

[5] [RANSOMWARE] Section9 leaked ********.com.uy (ransomware.live/Section9)
Victim: ********.com.uy | Group: Section9 | Country: UY | Details: FOOD & SERVICES

[5] [RANSOMWARE] Section9 leaked ****.fr (ransomware.live/Section9)
Victim: ****.fr | Group: Section9 | Country: FR | Details: RETAIL

[5] [RANSOMWARE] Section9 leaked ********.com (ransomware.live/Section9)
Victim: ********.com | Group: Section9 | Country: US | Details: NEWS

[5] [RANSOMWARE] Section9 leaked ******.com.se (ransomware.live/Section9)
Victim: ******.com.se | Group: Section9 | Country: SE | Details: HEALTHCARE

[5] [RANSOMWARE] Section9 leaked ******.com (ransomware.live/Section9)
Victim: ******.com | Group: Section9 | Country: US | Details: CYBERSECURITY

[5] [RANSOMWARE] Section9 leaked ****.com.mc (ransomware.live/Section9)
Victim: ****.com.mc | Group: Section9 | Country: MC | Details: TRAVEL & TOURISM

[5] [RANSOMWARE] Section9 leaked *****.ind.br (ransomware.live/Section9)
Victim: *****.ind.br | Group: Section9 | Country: BR | Details: AGRICULTURE

[5] [RANSOMWARE] Section9 leaked ********** (ransomware.live/Section9)
Victim: ********** | Group: Section9 | Details: CYBERSECURITY

[5] [RANSOMWARE] Section9 leaked *****.com.br (ransomware.live/Section9)
Victim: *****.com.br | Group: Section9 | Country: BR | Details: FINTECH

[5] [RANSOMWARE] Section9 leaked ****.com.br (ransomware.live/Section9)
Victim: ****.com.br | Group: Section9 | Country: BR | Details: TELECOM

[5] [RANSOMWARE] Section9 leaked ****.com (ransomware.live/Section9)
Victim: ****.com | Group: Section9 | Country: BE | Details: INDUSTRY

[5] [RANSOMWARE] Section9 leaked ********.com.jp (ransomware.live/Section9)
Victim: ********.com.jp | Group: Section9 | Country: JP | Details: SOFTWARE

[5] [RANSOMWARE] Section9 leaked *****.com.cn (ransomware.live/Section9)
Victim: *****.com.cn | Group: Section9 | Country: CN | Details: FINANCE

[5] [RANSOMWARE] Section9 leaked ******.net.br (ransomware.live/Section9)
Victim: ******.net.br | Group: Section9 | Country: BR | Details: TAX

[5] [RANSOMWARE] Section9 leaked ******.com.br (ransomware.live/Section9)
Victim: ******.com.br | Group: Section9 | Country: BR | Details: MEDIA

[5] [RANSOMWARE] Section9 leaked ********.com.br (ransomware.live/Section9)
Victim: ********.com.br | Group: Section9 | Country: BR | Details: MINING

[5] [RANSOMWARE] Global Secret Group leaked Prism Telecom (ransomware.live/Global Secret Group)
Victim: Prism Telecom | Group: Global Secret Group | Website: prismtelecom.com | Country: FI | Details: Backbone network traffic analysis and SS7 protocol vulnerability assessment across 3 continents.

[5] [RANSOMWARE] Global Secret Group leaked Cipher Dynamics (ransomware.live/Global Secret Group)
Victim: Cipher Dynamics | Group: Global Secret Group | Website: cipherdyn.com | Country: IN | Details: Zero-trust architecture review and cryptographic key management assessment.

[5] [RANSOMWARE] Global Secret Group leaked Stratos Network (ransomware.live/Global Secret Group)
Victim: Stratos Network | Group: Global Secret Group | Website: stratosns.com | Country: AE | Details: Satellite communication relay analysis with deep-packet inspection across 14 ground stations.

[5] [RANSOMWARE] Global Secret Group leaked OmniLink AG (ransomware.live/Global Secret Group)
Victim: OmniLink AG | Group: Global Secret Group | Website: omnilink.software | Country: DE | Details: Full-scope penetration testing of financial transaction processing pipeline and API gateway.

[5] [RANSOMWARE] Global Secret Group leaked Vertex Systems (ransomware.live/Global Secret Group)
Victim: Vertex Systems | Group: Global Secret Group | Website: vertexsystems.com | Country: US | Details: Ongoing analysis of cloud-native architecture and microservice communication protocols.

[5] [RANSOMWARE] Global Secret Group leaked Farmers Mutual Fire Insurance (ransomware.live/Global Secret Group)
Victim: Farmers Mutual Fire Insurance | Group: Global Secret Group | Website: farmersofmarble.com | Country: US | Details: Country: Pennsylvania, United States |
Website: farmersofmarble.com |
Revenue: $5.2 Million |
Industry: Insurance |
Employees: 11-50 |
Properties: 5.72 GB (18,699 Files, 2,631 Folders)

[5] [RANSOMWARE] Global Secret Group leaked West Sixth Law (ransomware.live/Global Secret Group)
Victim: West Sixth Law | Group: Global Secret Group | Website: agslawyers.com | Country: US | Details: Country: Columbus, Indiana, United States |
Website: agslawyers.com |
Revenue: $5 Million |
Industry: Law Firms & Legal Services |
Employees: 11-50 Employees |
Properties: 328 GB (708,816 Files, 47,925 Folders)

[5] [RANSOMWARE] Global Secret Group leaked Baker Business & Tax Solutions (ransomware.live/Global Secret Group)
Victim: Baker Business & Tax Solutions | Group: Global Secret Group | Website: bakerbusinessandtax.com | Country: US | Details: Country: Kentucky, United States |
Website: bakerbusinessandtax.com |
Revenue: $1 Million |
Industry: Accounting for Legal Practices |
Employees: 1-10 Employees |
Properties: 213Gb (817,209 Files, 48,866 Folders)

[5] [RANSOMWARE] Global Secret Group leaked Carpets Direct (ransomware.live/Global Secret Group)
Victim: Carpets Direct | Group: Global Secret Group | Website: carpetsdirectfindlay.com | Country: US | Details: Country: Ohio, United States |
Website: carpetsdirectfindlay.com |
Revenue: $5 Million |
Industry: Retail,Furniture |
Employees: 11-50 |
Properties: 31.1 GB (1,442 Files, 788 Folders)

[5] [RANSOMWARE] Global Secret Group leaked AnyWeather (ransomware.live/Global Secret Group)
Victim: AnyWeather | Group: Global Secret Group | Website: ohrestorationservices.com | Country: US | Details: Country: Kentucky, United States |
Website: ohrestorationservices.com |
Revenue: $6 Million |
Industry: Construction |
Employees: 30 Employees |
Properties: 301 GB (33,041 Files, 4,133 Folders)

[5] [RANSOMWARE] Global Secret Group leaked Middendorf Animal Hospital & Laser Centre (ransomware.live/Global Secret Group)
Victim: Middendorf Animal Hospital & Laser Centre | Group: Global Secret Group | Website: middendorfanimalhospital.com | Country: US | Details: Country: Kentucky, United States |
Website: middendorfanimalhospital.com |
Revenue: <$5 Million |
Industry: Healthcare Services,Veterinary Services |
Employees: 11-50 |
Properties: 28.1 GB (34,237 Files, 8,806 Folders)

[5] [RANSOMWARE] Global Secret Group leaked Chappell Supply & Equipment (ransomware.live/Global Secret Group)
Victim: Chappell Supply & Equipment | Group: Global Secret Group | Website: chappellsupply.com | Country: US | Details: Country: Oklahoma, United States |
Website: chappellsupply.com |
Revenue: $9.2 Million |
Industry: Consumer Services,Retail,Manufacturing,Repair Services |
Employees: 11-50 |
Properties: 160 GB (268,758 Files, 30,522 Folders)

[5] [RANSOMWARE] Global Secret Group leaked La Sevillanita (ransomware.live/Global Secret Group)
Victim: La Sevillanita | Group: Global Secret Group | Website: lasevillanita.com | Country: AR | Details: Country: Argentina |
Website: lasevillanita.com |
Revenue: $15 million |
Industry: Freight & Logistics Services,Transportation |
Employees: 11-50 |
Properties: 200 GB (385,318 Files, 13,074 Folders)

[5] [RANSOMWARE] Global Secret Group leaked One Plus Capital (ransomware.live/Global Secret Group)
Victim: One Plus Capital | Group: Global Secret Group | Website: onepluscapital.net | Country: CY | Details: Country: Cyprus |
Website: onepluscapital.net |
Revenue: $7 Million |
Industry: Finance |
Employees: 11-50 |
Properties: 117 GB (285,919 Files, 32,404 Folders)

[5] [RANSOMWARE] Global Secret Group leaked Acens | Cloud & Backup (ransomware.live/Global Secret Group)
Victim: Acens | Cloud & Backup | Group: Global Secret Group | Website: acens.com | Country: ES | Details: Country: Spain |
Website: acens.com |
Revenue: $46.3 Million |
Industry: Hosting |
Employees: 201-500

[5] [RANSOMWARE] Global Secret Group leaked West Nova Fuels & Superline Fuels (ransomware.live/Global Secret Group)
Victim: West Nova Fuels & Superline Fuels | Group: Global Secret Group | Website: westnovasuperline.ca | Country: CA | Details: Country: Canada |
Website: westnovasuperline.ca |
Revenue: $18.9 Million |
Industry: Convenience Stores, Gas Stations & Liquor Stores |
Employees: 51-200 |
Properties: 45.8 GB (114,200 Files, 2,672 Folders)

[5] [RANSOMWARE] Global Secret Group leaked Sinop Energia (ransomware.live/Global Secret Group)
Victim: Sinop Energia | Group: Global Secret Group | Website: sinopenergia.com.br | Country: BR | Details: Country: Brazil |
Website: sinopenergia.com.br |
Revenue: $12.2 Million |
Industry: Electricity, Oil & Gas |
Employees: 51-200 |
Properties:300 GB (43,113 Files, 5,372 Folders)

[5] [RANSOMWARE] Global Secret Group leaked Al Hayat | Pepsi (ransomware.live/Global Secret Group)
Victim: Al Hayat | Pepsi | Group: Global Secret Group | Website: alhayatco.com | Country: IQ | Details: Country: Iraq |
Website: alhayatco.com |
Revenue: $100 Million |
Industry: Food & Beverage |
Employees: 501-1,000 |
Properties: 138 GB (205,992 Files, 17,178 Folders)

[5] [RANSOMWARE] Global Secret Group leaked SPDM (ransomware.live/Global Secret Group)
Victim: SPDM | Group: Global Secret Group | Website: spdm.org.br | Country: BR | Details: Country: Brazil |Website: spdm.org.br |Revenue: $197 Million |Industry: Hospitals & Clinics |Employees: 10.000 – 20.000 |Properties: 847 GB (871,912 Files, 76,047 Folders)

[5] [RANSOMWARE] Global Secret Group leaked Nourison | Home (ransomware.live/Global Secret Group)
Victim: Nourison | Home | Group: Global Secret Group | Website: nourison.com | Country: US | Details: Country: New Jersey 07663, US |
Website: nourison.com |
Revenue: $59.4 Million |
Industry: Wholesale, Furniture, Home Decor, Retail, Real Estate |
Employees: 100-300 |
Properties: 799 GB (93,941 Files, 13,733 Folders)

[5] [RANSOMWARE] Global Secret Group leaked Cold Front Distribution (ransomware.live/Global Secret Group)
Victim: Cold Front Distribution | Group: Global Secret Group | Website: coldfrontdist.com | Country: US | Details: Country: Colorado, United States |
Website: coldfrontdist.com |
Revenue: $120.1 Million |
Industry: Transportation |
Employees: 201-500 Employees |
Properties: 473 GB (890,775 Files, 51,621 Folders)

[5] [RANSOMWARE] Global Secret Group leaked Portman Finance Group (ransomware.live/Global Secret Group)
Victim: Portman Finance Group | Group: Global Secret Group | Website: portmanfinancegroup.co.uk | Country: GB | Details: Country: United Kingdom |
Website: portmanfinancegroup.co.uk |
Revenue: £300 Million |
Industry: Finance |
Employees: 1000-5000 Employees |
Properties: 209 GB (255,244 Files, 34,852 Folders)

[5] [RANSOMWARE] Global Secret Group leaked OFS (ransomware.live/Global Secret Group)
Victim: OFS | Group: Global Secret Group | Website: ofs.com | Country: US | Details: Country: Indiana, United States |
Website: ofs.com |
Revenue: $517.1 Million |
Industry: Furniture,Manufacturing,Transportation |
Employees: 1K – 5K |
Properties: 321 GB (322,742 Files, 18,081 Folders)

[5] [RANSOMWARE] Global Secret Group leaked Uniview Technologies (ransomware.live/Global Secret Group)
Victim: Uniview Technologies | Group: Global Secret Group | Website: uniview.com | Country: CN | Details: Country: China |
Website: uniview.com |
Revenue: $610 Million |
Industry: Manufacturing, Electronics |
Employees: 1000-5000 Employees |
Properties: 1.5 TB (2,172,194 Files, 114,352 Folders)

[5] [RANSOMWARE] Global Secret Group leaked Novum Energy (ransomware.live/Global Secret Group)
Victim: Novum Energy | Group: Global Secret Group | Website: novumenergy.com | Country: US | Details: Country: Texas, United States |
Website: novumenergy.com |
Revenue: $966 Million |
Industry: Convenience Stores, Gas Stations & Liquor Stores |
Employees: 51-200 |
Properties: 842 GB (971,325 Files, 117,085 Folders)

[5] [RANSOMWARE] chaos leaked remco.ca (ransomware.live/chaos)
Victim: remco.ca | Group: chaos | Website: remco.ca | Country: CA | Details: Founded in 1977 and headquartered in Quebec, Canada, Remco is an industry leader in warehousing, transportation and country-wide distribution for the retail industry

[5] [RANSOMWARE] qilin leaked Contacto Garantido (ransomware.live/qilin)
Victim: Contacto Garantido | Group: qilin | Website: www.contactogarantido.com | Country: MX | Details: N/A

[5] [RANSOMWARE] qilin leaked Universitatea de Vest „Vasile Goldiș” din Arad (ransomware.live/qilin)
Victim: Universitatea de Vest „Vasile Goldiș” din Arad | Group: qilin | Website: www.uvvg.ro | Country: RO | Details: N/A

[5] [RANSOMWARE] m3rx leaked hydraulic-components.net (ransomware.live/m3rx)
Victim: hydraulic-components.net | Group: m3rx | Website: hydraulic-components.net | Country: DE | Details: +44 1142764430 , VHS Hydraulics is a prominent supplier of hydraulic components and power packs, featuring products from renowned brands like Rexroth, Walvoil, and Casappa. With over 25 years of experience, they specialize in engineering bespoke power packs for demanding applications. Based in Sheff

[5] [RANSOMWARE] m3rx leaked createinfor.pt (ransomware.live/m3rx)
Victim: createinfor.pt | Group: m3rx | Website: createinfor.pt | Country: PT | Details: +351 262187684 , CreateInfor is a company that operates in the Repair Services industry. It employs 10to19 people and has 500Kto1M of revenue. The company is headquartered in Caldas da Rainha, Leiria, Portugal. Stolen: —

[5] [RANSOMWARE] m3rx leaked servicebypremier.com (ransomware.live/m3rx)
Victim: servicebypremier.com | Group: m3rx | Website: servicebypremier.com | Country: US | Details: +1(954) 646-0016 , This local HVAC and Refrigeration company, established in 2007, provides services across South Florida, from Florida City to Port St. Lucie. They specialize in commercial HVAC and refrigeration repairs, including maintenance for A/C and refrigeration equipment. The company prides

[5] [RANSOMWARE] ExfilSquad leaked Analog Devices (ransomware.live/ExfilSquad)
Victim: Analog Devices | Group: ExfilSquad | Website: analog.com | Country: US | Details: Revenue: $12.7B

DATA SUMMARY:
570K~ records containing: customer PII and addresses.

[5] [RANSOMWARE] ExfilSquad leaked Bonava (ransomware.live/ExfilSquad)
Victim: Bonava | Group: ExfilSquad | Website: bonava.se | Country: SE | Details: Revenue: SEK 8B

DATA SUMMARY:
842K~ records containing: significant PII, property ownership/interests, warranty and repair cases, contractor information, marketing preferences, and customer service history.

[5] [RANSOMWARE] ExfilSquad leaked City of Atlanta (ransomware.live/ExfilSquad)
Victim: City of Atlanta | Group: ExfilSquad | Website: atlantaga.gov | Country: US | Details: DATA SUMMARY:
3M~ records containing: significant PII, citizen service requests, addresses, municipal case history, and internal case management data.

[5] [RANSOMWARE] ExfilSquad leaked City of Houston (ransomware.live/ExfilSquad)
Victim: City of Houston | Group: ExfilSquad | Website: houstontx.gov | Country: US | Details: DATA SUMMARY:
6M~ records containing: significant PII, resident contact details, service requests, complaint descriptions, addresses, location data, case/ticket metadata, department routing, service status, resolution information, and extensive CRM metadata.

[5] [RANSOMWARE] ExfilSquad leaked Viavi Solutions (ransomware.live/ExfilSquad)
Victim: Viavi Solutions | Group: ExfilSquad | Website: viavisolutions.com | Country: US | Details: Revenue: $1B

DATA SUMMARY:
430K~ records containing: customer and partner contact information, significant PII, and enterprise account identifiers.

[5] [RANSOMWARE] ExfilSquad leaked Newcastle University (ransomware.live/ExfilSquad)
Victim: Newcastle University | Group: ExfilSquad | Website: ncl.ac.uk | Country: GB | Details: DATA SUMMARY:
440K~ records containing: applicant and student contact information, significant PII, and admissions data.

[5] [RANSOMWARE] ExfilSquad leaked Zenith Bank Plc (ransomware.live/ExfilSquad)
Victim: Zenith Bank Plc | Group: ExfilSquad | Website: zenithbank.com | Country: NG | Details: Revenue: ₦2.3T

DATA SUMMARY:
90M~ records containing: extensive PII, banking relationships, account information, financial data, government identifiers, customer contact information, and banking support cases.

[5] [RANSOMWARE] ExfilSquad leaked Frontier Airlines (ransomware.live/ExfilSquad)
Victim: Frontier Airlines | Group: ExfilSquad | Website: flyfrontier.com | Country: US | Details: Revenue: $1.5B

DATA SUMMARY:
2.4M~ records containing: significant PII, customer support cases, flight and travel information, complaint records, baggage details, and customer support email communications.

[5] [RANSOMWARE] ExfilSquad leaked TaylorMade & Sun Day Red golf (ransomware.live/ExfilSquad)
Victim: TaylorMade & Sun Day Red golf | Group: ExfilSquad | Website: taylormadegolf.com | Country: US | Details: Revenue: $1.5B

DATA SUMMARY:
2M~ records containing: significant PII, customer support history, orders, shipping information, business account data, financial/account information, internal notes, attachments, and AI support chat transcripts.

[5] [RANSOMWARE] ExfilSquad leaked Allstate (ransomware.live/ExfilSquad)
Victim: Allstate | Group: ExfilSquad | Website: allstate.com | Country: US | Details: Revenue: $67B

DATA SUMMARY:
657K~ records containing: significant PII, recruitment and licensing information, onboarding data, and internal employee account information.

[5] [RANSOMWARE] ExfilSquad leaked Microsoft (ransomware.live/ExfilSquad)
Victim: Microsoft | Group: ExfilSquad | Website: microsoft.com | Country: US | Details: Revenue: $318B

DATA SUMMARY:
8M~ records containing: significant PII, employee and customer contact information, authentication data, password hashes, portal identities, corporate account information, business leads, facilities management records, internal service tickets, and access permissions.

[5] [RANSOMWARE] ExfilSquad leaked UK Department for Education (ransomware.live/ExfilSquad)
Victim: UK Department for Education | Group: ExfilSquad | Website: education.gov.uk | Country: GB | Details: DATA SUMMARY:
Help Portal (~600K records) – Parent and staff contact records containing full names, email addresses, phone numbers, and job titles.

Turing Portal (~7K records) – Contact records containing full names, email addresses, phone numbers, and job titles.

[5] [RANSOMWARE] arcusmedia leaked Brazer Ingenierie (ransomware.live/arcusmedia)
Victim: Brazer Ingenierie | Group: arcusmedia | Website: brazeringenierie.com | Country: MA | Details: Brazer Ingénierie is a professional integrator specializing in IT and telecommunications s Deadline: 2026-08-01 21:06:00.000000

[5] [RANSOMWARE] arcusmedia leaked Power Moendas (ransomware.live/arcusmedia)
Victim: Power Moendas | Group: arcusmedia | Website: powermoendas.com.br | Country: BR | Details: Based in the sugar-energy industrial hub, in the city of Sertãozinho/SP, Power Empral has Deadline: 2026-08-01 21:06:00.000000

[5] [RANSOMWARE] Doommageddon leaked iw steelTEC Makine San. ve Tic. A.Ş. (ransomware.live/Doommageddon)
Victim: iw steelTEC Makine San. ve Tic. A.Ş. | Group: Doommageddon | Country: TR | Details: Status: leaked | Data size: 100 GB | Files: 0 files | Deadline: 2026-03-08T00:00:00Z

SUMMARY

Total new items: 98
Critical count: 1
Ransomware victims today: 95
CISA KEV items: 0

Companion HTML report: download report

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *