{"generated":"2026-05-23T12:07:54.099430+00:00","count":100,"filters":{"group":null,"country":null,"since":null},"victims":[{"id":"TW9wYXMgT25saW5lIFN1cGVybWFya2V0QEF1ZGl0VGVhbQ==","discovered":"2026-05-23T09:20:19.076203+00:00","website":"mopas.com.tr","country":"TR","activity":"Consumer Services","description":"mopas.com.tr is a prominent Turkish retail chain and e-commerce platform primarily serving the Marmara region, offering an extensive online shopping experience that covers everything from fresh produce, halal meat, and dairy to household cleaning supplies and personal care products, all backed by a robust local delivery network that ensures fast, same-day service for residents in cities like Istanbul and Kocaeli.","post_url":"http://6tdqqaxftvradka5d2frzgwixis7fmro7rfh4ettzcx7jfapkebe6jad.onion/entity/974E9F6C44C975EA","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/6aa5a50ef40c5d91e9228d9682259114.png","infostealer":{"update":"2026-05-23T10:12:25.738226","employees":0,"users":843,"thirdparties":3,"employees_url":0,"users_url":11,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/TW9wYXMgT25saW5lIFN1cGVybWFya2V0QEF1ZGl0VGVhbQ==","attackdate":"2026-05-15T00:00:00+00:00","victim":"Mopas Online Supermarket","group":"AuditTeam"},{"id":"QmFrZXIgRGlzdHJpYnV0aW5nIENvbXBhbnlAc2hpbnlodW50ZXJz","discovered":"2026-05-23T00:24:53.418510+00:00","website":"bakerdist.com","country":"US","activity":"Business Services","description":"Over 260k Salesforce records containing PII and other internal corporate data have been compromised. This is a final warning to reach out by 27 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. Pay or Leak. | Updated: 23 May 2026 | Warning: FINAL WARNING PAY OR LEAK","post_url":"","ransom":null,"data_size":null,"screenshot":"","infostealer":{"update":"2026-05-23T10:12:09.123232","employees":2,"users":161,"thirdparties":4,"employees_url":3,"users_url":17,"last_employee_compromised":"2025-04-23T08:35:36+00:00","last_user_compromised":"2026-05-15T00:00:00+00:00","infostealer_stats":{"Raccoon":6,"UNKNOWN":4,"Azorult":12,"RedLine":42,"Acreed":1,"StealC":12,"Generic Stealer":38,"Lumma":31,"Vidar":3}},"press":null,"permalink":"https://www.ransomware.live/id/QmFrZXIgRGlzdHJpYnV0aW5nIENvbXBhbnlAc2hpbnlodW50ZXJz","attackdate":"2026-05-23T00:24:45.791876+00:00","victim":"Baker Distributing Company","group":"shinyhunters"},{"id":"Q2hhcnRlciBDb21tdW5pY2F0aW9ucywgSW5jLkBzaGlueWh1bnRlcnM=","discovered":"2026-05-23T00:24:34.890391+00:00","website":"charter.com","country":"US","activity":"Telecommunication","description":"Over 42M records containing PII have been compromised. This is a final warning to reach out by 27 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. Pay or Leak. | Updated: 23 May 2026 | Warning: FINAL WARNING PAY OR LEAK","post_url":"","ransom":null,"data_size":null,"screenshot":"","infostealer":{"update":"2026-05-23T10:11:53.307568","employees":232,"users":1806,"thirdparties":0,"employees_url":29,"users_url":100,"last_employee_compromised":"2026-04-30T00:00:00+00:00","last_user_compromised":"2026-05-19T00:00:00+00:00","infostealer_stats":{"Taurus":2,"Lumma":304,"Vidar":59,"CRYPTBOT":2,"Raccoon":101,"Acreed":11,"Generic Stealer":520,"StealC":27,"RedLine":441,"Azorult":265,"UNKNOWN":35}},"press":null,"permalink":"https://www.ransomware.live/id/Q2hhcnRlciBDb21tdW5pY2F0aW9ucywgSW5jLkBzaGlueWh1bnRlcnM=","attackdate":"2026-05-23T00:24:33.383955+00:00","victim":"Charter Communications, Inc.","group":"shinyhunters"},{"id":"RGVudGFRdWVzdC5jb21Ac2hpbnlodW50ZXJz","discovered":"2026-05-23T00:24:22.457787+00:00","website":"DentaQuest.com","country":"US","activity":"Healthcare","description":"You wouldn't want us to describe what data and how much data was compromised publicly. It is in your best interests to reply to us or we are leaking it all by the deadline. This is a final warning to reach out by 27 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. Pay or Leak. | Updated: 23 May 2026 | Warning: FINAL WARNING PAY OR LEAK","post_url":"","ransom":null,"data_size":null,"screenshot":"","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/RGVudGFRdWVzdC5jb21Ac2hpbnlodW50ZXJz","attackdate":"2026-05-23T00:24:20.609136+00:00","victim":"DentaQuest.com","group":"shinyhunters"},{"id":"KioqKiAmICoqKioqKioqQGdlbmVzaXM=","discovered":"2026-05-22T23:51:57.624383+00:00","website":".","country":"US","activity":"Not Found","description":"A legal firm dedicated to safeguard the rights of its clients","post_url":"http://genesis6ixpb5mcy4kudybtw5op2wqlrkocfogbnenz3c647ibqixiad.onion/069e114bcc3edd29df4c/","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/b1ca4a1af1d2fae0799d1778f5af7fea.png","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/KioqKiAmICoqKioqKioqQGdlbmVzaXM=","attackdate":"2026-05-21T00:00:00+00:00","victim":"**** & ********","group":"genesis"},{"id":"bGFzZXZpbGxhbml0YS5jb21Aa3J5Yml0","discovered":"2026-05-22T22:22:56.739827+00:00","website":"lasevillanita.com","country":"ES","activity":"Hospitality and Tourism","description":"Transportes La Sevillanita Srl is a company that operates in the Freight & Logistics Services industry. It employs 10to1...","post_url":"http://krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.onion/blog/56d5ba2b78a185c8232a69cf3e5be18f67f5ee8704a61dd0556b672b5a92e83c/","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/8dc16d8f6f059673cf5cad40e49fec10.png","infostealer":{"update":"2026-05-22T22:22:43","employees":0,"users":0,"thirdparties":4,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/bGFzZXZpbGxhbml0YS5jb21Aa3J5Yml0","attackdate":"2026-05-22T22:22:43.482201+00:00","victim":"lasevillanita.com","group":"krybit"},{"id":"QU1BQ0NBT0Bub3Zh","discovered":"2026-05-22T19:26:07.826950+00:00","website":"amaccao.vn","country":"VN","activity":"Not Found","description":"AMACCAO Group is a reputable and strong multi-industry corporation in Vietnam with 30 years of experience. The company is a pioneer in various fields including energy and environmental investment, real estate investment, industrial production, consumer goods manufacturing, and education and training. AMACCAO aims to serve a diverse clientele through its commitment to sustainable development and innovative solutions. The group also engages in construction and installation services, contributing to the infrastructure and economic growth of the region - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.","post_url":"http://novadmrkp4vbk2padk5t6pbxolndceuc7hrcq4mjaoyed6nxsqiuzyyd.onion/amaccao","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/f4dc1d615ed767224cf18ff66b90f18c.png","infostealer":{"update":"2026-05-23T10:11:03.039936","employees":8,"users":0,"thirdparties":5,"employees_url":3,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/QU1BQ0NBT0Bub3Zh","attackdate":"2026-05-22T00:00:00+00:00","victim":"AMACCAO","group":"nova"},{"id":"SG95IENvbnN0cnVjdGlvbkBub3Zh","discovered":"2026-05-22T19:25:41.950225+00:00","website":"hoyconstruction.com","country":"US","activity":"Construction","description":"Since 1933, Hoy Construction has specialized in commercial construction management for commercial, industrial, and institutional facilities in Hampton Roads, VA. As a 100% employee-owned company, they emphasize a design-build approach, preconstruction services, and open-book transparency. Their experienced team collaborates with owners and architects to effectively manage costs and schedules while delivering high-quality, durable buildings. Hoy Construction is dedicated to building strong partnerships and ensuring accountability and communication throughout the construction process - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.","post_url":"http://novadmrkp4vbk2padk5t6pbxolndceuc7hrcq4mjaoyed6nxsqiuzyyd.onion/hoy-construction","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/5ff2e19ccebae916d0eefb08f3fd3710.png","infostealer":{"update":"2026-05-23T10:10:39.580202","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":1,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/SG95IENvbnN0cnVjdGlvbkBub3Zh","attackdate":"2026-05-22T00:00:00+00:00","victim":"Hoy Construction","group":"nova"},{"id":"R2l0aXNAYWtpcmE=","discovered":"2026-05-22T15:50:26.205006+00:00","website":"gitis.it","country":"IT","activity":"Not Found","description":"GITIS S.r.l. specializes in the production of high-quality rubber components, including O-rings\n, rubber moulded components, and co-moulded components. Their products cater to various industr\nies such as automotive, general industry, food, pharmaceuticals, biomedical, oil and gas, and h\nydrogen technology.\n\nWe will upload 30gb of corporate data soon. Employee personal information, contracts and agreem\nents, financials, clients information, lots of projects, NDAs, etc.\n","post_url":"","ransom":null,"data_size":null,"screenshot":"","infostealer":{"update":"2026-05-23T10:10:18.260834","employees":0,"users":0,"thirdparties":1,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/R2l0aXNAYWtpcmE=","attackdate":"2026-05-22T00:00:00+00:00","victim":"Gitis","group":"akira"},{"id":"Qk1KIFBhcGVycGFja0B3b3JsZGxlYWtz","discovered":"2026-05-22T15:26:08.977819+00:00","website":"www.bmjpaperpack.com","country":"ID","activity":"Manufacturing","description":"[AI generated] N/A","post_url":"https://worldleaksartrjm3c6vasllvgacbi5u3mgzkluehrzhk2jz4taufuid.onion/companies/9862296101","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/5595057592fd5414ba942f6f20e1ffcd.png","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/Qk1KIFBhcGVycGFja0B3b3JsZGxlYWtz","attackdate":"2026-05-22T15:11:19+00:00","victim":"BMJ Paperpack","group":"worldleaks"},{"id":"U2VtZ3JlcEBxaWxpbg==","discovered":"2026-05-22T15:24:14.606701+00:00","website":"semgrep.dev","country":"US","activity":"Technology","description":"N/A","post_url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=67045d50-5347-4ae2-a610-38593d71994d","ransom":null,"data_size":null,"screenshot":"","infostealer":{"update":"2026-05-22T15:23:41","employees":0,"users":2,"thirdparties":0,"employees_url":0,"users_url":1,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/U2VtZ3JlcEBxaWxpbg==","attackdate":"2026-05-22T15:23:41.385932+00:00","victim":"Semgrep","group":"qilin"},{"id":"Q2FibGVtYXRpYyBEb3MgTWlsIFNMVUBndW5yYQ==","discovered":"2026-05-22T15:22:25.645401+00:00","website":"cablematic.com","country":"ES","activity":"Business Services","description":"[AI generated] Cablematic Dos Mil SLU is a Spanish company operating in the electronics and technology distribution sector. Based in Spain, it specializes in the wholesale and retail distribution of networking equipment, cables, connectors, computer peripherals, and audiovisual accessories. The company supplies both professional and consumer markets, offering a wide catalog of hardware components and connectivity solutions across Europe, primarily through e-commerce channels.","post_url":"","ransom":null,"data_size":null,"screenshot":"","infostealer":{"update":"2026-05-22T15:22:21","employees":2,"users":1960,"thirdparties":5,"employees_url":1,"users_url":100,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/Q2FibGVtYXRpYyBEb3MgTWlsIFNMVUBndW5yYQ==","attackdate":"2026-05-22T15:22:21.764091+00:00","victim":"Cablematic Dos Mil SLU","group":"gunra"},{"id":"S2FybGluIEZvb2RzQGFraXJh","discovered":"2026-05-22T15:20:22.213288+00:00","website":"karlinfoods.com","country":"US","activity":"Agriculture and Food Production","description":"Karlin Foods is a private label food manufacturer that offers a wide range of products includin\ng potato and rice side dishes, skillet dinners, dips, sauces, and premium items.\n\nWe will upload corporate data soon. Employee and clients, contracts and agreements, financials,\nprojects, etc.\n","post_url":"","ransom":null,"data_size":null,"screenshot":"","infostealer":{"update":"2026-05-23T10:09:38.561452","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/S2FybGluIEZvb2RzQGFraXJh","attackdate":"2026-05-22T00:00:00+00:00","victim":"Karlin Foods","group":"akira"},{"id":"dGtnbS5nb3YudHJAYXB0NzM=","discovered":"2026-05-22T14:50:39.992561+00:00","website":"tkgm.gov.tr","country":"TR","activity":"Public Sector","description":"TKGM (Tapu ve Kadastro Genel Müdürlüğü) is a government agency from Turkey, the General Dire...","post_url":"http://basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion/page_company.php?id=168","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/0fe9e23cd157db4818dfc3a9faf49731.png","infostealer":{"update":"2026-05-22T14:50:23","employees":165,"users":5053,"thirdparties":49,"employees_url":11,"users_url":100,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/dGtnbS5nb3YudHJAYXB0NzM=","attackdate":"2026-05-22T14:50:23.934128+00:00","victim":"tkgm.gov.tr","group":"apt73"},{"id":"bWluc2EuY29tLm14QGFwdDcz","discovered":"2026-05-22T14:20:40.658584+00:00","website":"minsa.com.mx","country":"MX","activity":"Not Found","description":"Minsa is a company from Mexico, one of the largest producers of nixtamalizada (masa harina) corn ...","post_url":"http://basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion/page_company.php?id=167","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/7a7f967d4d133c76db27b4220e3de7cb.png","infostealer":{"update":"2026-05-22T14:20:23","employees":11,"users":2,"thirdparties":16,"employees_url":14,"users_url":7,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/bWluc2EuY29tLm14QGFwdDcz","attackdate":"2026-05-22T14:20:23.223268+00:00","victim":"minsa.com.mx","group":"apt73"},{"id":"QnVmZmFsbyBOaWFnYXJhIENvbnZlbnRpb24gQ2VudGVyQGFraXJh","discovered":"2026-05-22T13:20:34.452182+00:00","website":"buffaloconvention.com","country":"US","activity":"Hospitality and Tourism","description":"The Buffalo Convention Center is a premier meetings and convention space located in downtown Bu\nffalo, NY, easily accessible from major interstate highways. It caters to event planners, exhib\nitors, and attendees, offering a beautiful venue surrounded by vibrant city life, including res\ntaurants, shopping, and entertainment.\n\nWe will upload 46gb of corporate data soon. You are going to get precious data. You will find e\nmployee personal information (passports, DLs), client and partners information (personal data o\nf 180,000 people), contracts and agreements, financials, projects, etc.\n","post_url":"","ransom":null,"data_size":null,"screenshot":"","infostealer":{"update":"2026-05-23T10:09:10.578065","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/QnVmZmFsbyBOaWFnYXJhIENvbnZlbnRpb24gQ2VudGVyQGFraXJh","attackdate":"2026-05-22T00:00:00+00:00","victim":"Buffalo Niagara Convention Center","group":"akira"},{"id":"RnVuY3Rpb24gRW50ZXJwcmlzZXNAYWtpcmE=","discovered":"2026-05-22T12:50:20.349288+00:00","website":"","country":"","activity":"Not Found","description":"Function Enterprises, Inc. is a trusted roofing company based in Springfield, VA, offering a ra\nnge of services including roofing construction, commercial roofing, infrared inspection, and du\nmpster rentals. They prioritize client trust and satisfaction, providing a free one-hour consul\ntation for new clients.\n\nWe will upload corporate data soon. Employee personal information (passports, DLs), contracts a\nnd agreements, clients info, financials, projects, etc.\n","post_url":"","ransom":null,"data_size":null,"screenshot":"","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/RnVuY3Rpb24gRW50ZXJwcmlzZXNAYWtpcmE=","attackdate":"2026-05-22T00:00:00+00:00","victim":"Function Enterprises","group":"akira"},{"id":"dGhyZWFkaW5ub3ZhdGlvbnNAaW5jcmFuc29t","discovered":"2026-05-22T12:22:53.893934+00:00","website":"trendinnovations.ca","country":"CA","activity":"Technology","description":"Thread has developed a proprietary technology for the production of cost-effective, efficient, and scalable carbon fiber. This process is based on utilizing the natural molecular structure of asphaltenes found in oil sands bitumen. Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation.","post_url":"http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a0f559dd152110a6a4f6395","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/097c1828d0273619de99b9a36144ab49.png","infostealer":{"update":"2026-05-23T10:08:50.926233","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/dGhyZWFkaW5ub3ZhdGlvbnNAaW5jcmFuc29t","attackdate":"2026-05-22T12:00:00+00:00","victim":"threadinnovations","group":"incransom"},{"id":"TGUgUGFpbiBRdW90aWRpZW4gVVNAZHJhZ29uZm9yY2U=","discovered":"2026-05-22T10:51:35.717611+00:00","website":"lepainquotidien.com","country":"US","activity":"Hospitality and Tourism","description":"Established in 1990 and headquartered in New York, New York, Le Pain Quotidien US is a chain of bakery restaurants specializing in baked goods, bread, salads, sandwiches, beverages, tartines, and more.","post_url":"http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=b4d29f61-59ef-4ca0-9bff-959c292d6225","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/45b4c18f4d9652b36bdda9298e3540cb.png","infostealer":{"update":"2026-05-22T10:51:00","employees":0,"users":4,"thirdparties":2,"employees_url":0,"users_url":4,"last_employee_compromised":"1970-01-01T00:00:00+00:00","last_user_compromised":"2026-05-16T00:00:00+00:00","infostealer_stats":{"Lumma":1}},"press":null,"permalink":"https://www.ransomware.live/id/TGUgUGFpbiBRdW90aWRpZW4gVVNAZHJhZ29uZm9yY2U=","attackdate":"2026-05-22T10:29:17.357969+00:00","victim":"Le Pain Quotidien US","group":"dragonforce"},{"id":"dHZubWVkaWEuY29tQGFwdDcz","discovered":"2026-05-22T09:50:34.524704+00:00","website":"tvnmedia.com","country":"PL","activity":"Telecommunication","description":"TVN Media is a multimedia company from Panama, engaged in broadcasting, radio, digital media and ...","post_url":"http://basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion/page_company.php?id=166","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/e2c65c73ea102c1fa6ac1339839525af.png","infostealer":{"update":"2026-05-22T09:50:18","employees":11,"users":9,"thirdparties":8,"employees_url":2,"users_url":7,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/dHZubWVkaWEuY29tQGFwdDcz","attackdate":"2026-05-22T09:50:18.898973+00:00","victim":"tvnmedia.com","group":"apt73"},{"id":"Uk9UTyBJbW1vYmlsaWVuQHFpbGlu","discovered":"2026-05-21T20:26:12.248975+00:00","website":"www.roto-immobilien.at","country":"AT","activity":"Construction","description":"N/A","post_url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=723469f2-6713-46a5-a07c-99f446fd6148","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/6de5a38f64bfd827d2180fedd343ba68.png","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/Uk9UTyBJbW1vYmlsaWVuQHFpbGlu","attackdate":"2026-05-21T20:25:55.192976+00:00","victim":"ROTO Immobilien","group":"qilin"},{"id":"VmVybm9uICYgR2luc2J1cmdAcWlsaW4=","discovered":"2026-05-21T18:55:10.652553+00:00","website":"www.vernonginsburg.com","country":"US","activity":"Not Found","description":"N/A","post_url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=b5d7cd8d-5f29-4f49-b180-326eee4e6ddc","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/471934d110a55de5dbf1dd71fcba19ab.png","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/VmVybm9uICYgR2luc2J1cmdAcWlsaW4=","attackdate":"2026-05-21T18:54:49.442425+00:00","victim":"Vernon & Ginsburg","group":"qilin"},{"id":"U255ZGVyIFBhY2thZ2luZ0BxaWxpbg==","discovered":"2026-05-21T18:25:59.200592+00:00","website":"www.snyderpkg.com","country":"US","activity":"Manufacturing","description":"N/A","post_url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=b473a74f-5a6a-404b-956c-aac8458821ca","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/0c8fb1b6df5da04fd2e93c3fe2db5599.png","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/U255ZGVyIFBhY2thZ2luZ0BxaWxpbg==","attackdate":"2026-05-21T18:25:41.430300+00:00","victim":"Snyder Packaging","group":"qilin"},{"id":"Z3J1cG9wZXRlcnNlbi5jb20uYXJAYXB0NzM=","discovered":"2026-05-21T16:22:34.651196+00:00","website":"grupopetersen.com.ar","country":"AR","activity":"Agriculture and Food Production","description":"Grupo Petersen is a multidisciplinary financial and industrial group from Argentina, operating in...","post_url":"http://basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion/page_company.php?id=165","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/0fa6c247724069057cd39e4d11bbfb40.png","infostealer":{"update":"2026-05-21T16:22:18","employees":4,"users":3,"thirdparties":3,"employees_url":1,"users_url":1,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/Z3J1cG9wZXRlcnNlbi5jb20uYXJAYXB0NzM=","attackdate":"2026-05-21T16:22:18.367518+00:00","victim":"grupopetersen.com.ar","group":"apt73"},{"id":"bmFyaXQub3IudGhAYXB0NzM=","discovered":"2026-05-21T15:53:01.625984+00:00","website":"narit.or.th","country":"TH","activity":"Public Sector","description":"The National Astronomical Research Institute of Thailand (Thailand's National Astronomical Resear...","post_url":"http://basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion/page_company.php?id=164","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/88f032ffc2ea08eb0d6d47074a2652dc.png","infostealer":{"update":"2026-05-21T15:52:44","employees":30,"users":78,"thirdparties":21,"employees_url":16,"users_url":54,"last_employee_compromised":"2026-03-18T00:00:00+00:00","last_user_compromised":"2026-04-22T08:34:53+00:00","infostealer_stats":{"KPOT":1,"Generic Stealer":2,"StealC":10,"Lumma":19,"Raccoon":4,"Vidar":2,"RedLine":26,"UNKNOWN":1}},"press":null,"permalink":"https://www.ransomware.live/id/bmFyaXQub3IudGhAYXB0NzM=","attackdate":"2026-05-21T15:52:44.087987+00:00","victim":"narit.or.th","group":"apt73"},{"id":"c2hlcHBhZHZpc2VyLmNvbS5hdUBCcmFpbkNpcGhlcg==","discovered":"2026-05-21T15:50:23.972795+00:00","website":"sheppadviser.com.au","country":"AU","activity":"Business Services","description":"[AI generated] N/A","post_url":"http://vkvsgl7lhipjirmz6j5ubp3w3bwvxgcdbpi3fsbqngfynetqtw4w5hyd.onion/n/sheppadviser","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/f5c07f0ad16509d74f82fbc01bd95bf0.png","infostealer":{"update":"2026-05-21T15:50:11","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/c2hlcHBhZHZpc2VyLmNvbS5hdUBCcmFpbkNpcGhlcg==","attackdate":"2026-05-21T15:50:11.275564+00:00","victim":"sheppadviser.com.au","group":"BrainCipher"},{"id":"YWxrYWxvaWQuY29tLm1rQGFwdDcz","discovered":"2026-05-21T15:22:37.344545+00:00","website":"alkaloid.com.mk","country":"MK","activity":"Healthcare","description":"Alkaloid is a pharmaceutical company from Northern Macedonia, founded in Skopje in 1936, producin...","post_url":"http://basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion/page_company.php?id=163","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/fbf3a52f034e42516a182fc729f47058.png","infostealer":{"update":"2026-05-21T15:22:19","employees":7,"users":166,"thirdparties":15,"employees_url":3,"users_url":8,"last_employee_compromised":"2026-05-09T09:56:44+00:00","last_user_compromised":"2026-02-16T05:03:46+00:00","infostealer_stats":{"Raccoon":10,"Azorult":2,"Lumma":55,"Vidar":3,"Generic Stealer":26,"StealC":10,"RedLine":55,"UNKNOWN":3}},"press":null,"permalink":"https://www.ransomware.live/id/YWxrYWxvaWQuY29tLm1rQGFwdDcz","attackdate":"2026-05-21T15:22:19.418122+00:00","victim":"alkaloid.com.mk","group":"apt73"},{"id":"U29mdHNlYmFAbm92YQ==","discovered":"2026-05-21T14:25:09.820956+00:00","website":"softseba.com","country":"BD","activity":"Technology","description":"a leading software provider with 5 years of experience in developing and delivering high-quality software solutions to businesses of all sizes. We have a team of experienced and skilled software developers who are passionate about creating 1 innovative and user-friendly software products. Our expertise lies in a wide range of technologies, including web development, mobile app development, cloud computing, and artificial intelligence. We have a proven track record of delivering successful software projects on time and within budget. Our commitment to customer satisfaction and our ability to provide tailored solutions have earned us a reputation as a trusted and reliable software provider. Whether you are a startup or an established enterprise, we can help you leverage the power of software to achieve your business goals.","post_url":"http://novadmrkp4vbk2padk5t6pbxolndceuc7hrcq4mjaoyed6nxsqiuzyyd.onion/softseba","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/120499bf54af7a8da68364964d2321dc.png","infostealer":{"update":"2026-05-23T10:08:23.946427","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/U29mdHNlYmFAbm92YQ==","attackdate":"2026-05-21T00:00:00+00:00","victim":"Softseba","group":"nova"},{"id":"TmV1Ym94QG5vdmE=","discovered":"2026-05-21T13:25:04.602133+00:00","website":"neubox.com","country":"","activity":"Technology","description":"the following websites is down, their data will be leaked, source codes, docs, databases, phpmyadmin and more\r\n511producciones.com     acerosbeta.com     advancedaestheticcare.com     advancedfootcarergv.com     advancedwoundcarergv.com     dreduardoalvarez.com     echoview.com.mx     ellugarcitogastronomico.com     empresadelimpiezaencdmx.com     empresadelimpiezaenguadalajara.com     inventario.ellugarcitogastronomico.com     korticalx.com     laamatistaeventos.com     lascruceseventos.com     lumabusiness.com     persapartesmetalicas.com     pos.ellugarcitogastronomico.com     prestaeventos.com.mx     puertasparavivienda.com     rensomexico.com arkinmexico.com.mx                    empresadelimpiezaenleon.com         misiondefundadores.com                  riggingmexico.com\r\ncacexconsultores.com.mx               empresadelimpiezaenmerida.com       mynewschoolmexico.com.mx                samtrabusiness.com\r\ncasasyterrenosirem.com                empresadelimpiezaenmexico.com       opiniones.dreduardoalvarez.com          sheigarcia.com\r\ncincoonce.com.mx                      empresadelimpiezaenpuebla.com       perforacionesloga.com                   sistema.vattacademy.com\r\ncondesareal.com                       empresadelimpiezaentijuana.com      persacontainersdallas.com               sistem.mynewschoolmexico.com.mx\r\nconexionesymanguerasmonterrey.com     empresasloga.com                    persacontainershouston.com              survey.ellugarcitogastronomico.com\r\ncovasal.com.mx                        endoscopios.com.mx                  persacontenedoresjuarez.com             tacoselcoreano.com\r\ndelivery.ellugarcitogastronomico.com  eni360.com.mx                       persacontenedoresqueretaro.com          taqueriafundadores.com\r\ndemmiasocialvenue.com                 footandanklespecialistrgv.com       persacontenedoresramosarizpe.com        vattacademy.com\r\ndestapededrenajeflag.com              grupoperforacioneshd.com            persacontenedoressanluispotosi.com\r\ndicsamonterrey.net                    igidiamonds.mx                      persacontenedoressilao.com\r\n\r\nWe ask kind from company to contact for negotiations.","post_url":"http://novadmrkp4vbk2padk5t6pbxolndceuc7hrcq4mjaoyed6nxsqiuzyyd.onion/neubox","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/c81a8731cd5516887411a0f2c9c1dffe.png","infostealer":{"update":"2026-05-23T10:07:28.572282","employees":0,"users":5288,"thirdparties":0,"employees_url":0,"users_url":60,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/TmV1Ym94QG5vdmE=","attackdate":"2026-05-21T00:00:00+00:00","victim":"Neubox","group":"nova"},{"id":"RyBUaGVvZG9yIEZyZWVzZUBwYXlsb2Fk","discovered":"2026-05-21T10:56:07.144976+00:00","website":"gtf-freese.de","country":"DE","activity":"Manufacturing","description":"GTF Freese is a family-owned company with over 110 years of experience, specializing in ship deck coverings, flooring technology, building protection, and coating systems. The company prides itself on its motto 'We make floors good,' ensuring high-quality products like TEFROTEX and TEFROKA are manufactured under strict quality control according to DIN ISO 9001 standards.","post_url":"http://payloadrz5yw227brtbvdqpnlhq3rdcdekdnn3rgucbcdeawq2v6vuyd.onion/posts/d2d3491f-ae6b-4d20-b97d-87914a821488","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/ac90bbcff8fbe2280bda39be72d9a249.png","infostealer":{"update":"2026-05-23T10:08:03.514970","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/RyBUaGVvZG9yIEZyZWVzZUBwYXlsb2Fk","attackdate":"2026-05-21T10:55:38.148197+00:00","victim":"G Theodor Freese","group":"payload"},{"id":"QS1Tb25pYyBMb2dpc3RpYyBTb2x1dGlvbnNAcGF5bG9hZA==","discovered":"2026-05-21T10:55:27.372248+00:00","website":"asonic-logisticsolutions.com","country":"","activity":"Transportation/Logistics","description":"Founded in 1993, A-Sonic Logistic Solutions is a supply chain management service provider that specializes in international and domestic multimodal transportation and warehousing, airside logistics services, air cargo general sales and marketing for international airlines, and more. The company is headquartered in Singapore.","post_url":"http://payloadrz5yw227brtbvdqpnlhq3rdcdekdnn3rgucbcdeawq2v6vuyd.onion/posts/8c920770-c009-405a-9404-bb857715e3eb","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/cf14aa2aa3c63532808550e7bffc876a.png","infostealer":{"update":"2026-05-23T10:06:31.365523","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/QS1Tb25pYyBMb2dpc3RpYyBTb2x1dGlvbnNAcGF5bG9hZA==","attackdate":"2026-05-21T10:54:58.734512+00:00","victim":"A-Sonic Logistic Solutions","group":"payload"},{"id":"SW50ZXJuYWwgTWVkaWNpbmUgYW5kIFBlZGlhdHJpY3Mgb2YgQ3VsbG1hbkBwYXlsb2Fk","discovered":"2026-05-21T10:26:49.871473+00:00","website":"impcullman.com","country":"US","activity":"Healthcare","description":"Internal Medicine and Pediatrics of Cullman provides comprehensive healthcare services for families, focusing on both internal medicine and pediatrics. The practice is staffed by board-certified physicians dedicated to delivering high-quality care using modern medical equipment. They offer a range of services including preventative medicine, in-house lab and radiology, and same-day appointments.","post_url":"http://payloadrz5yw227brtbvdqpnlhq3rdcdekdnn3rgucbcdeawq2v6vuyd.onion/posts/2b8ea072-6d08-4063-a1b1-fd3d0e0296e6","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/b7ae40038f515f3cc1aac08424e914b6.png","infostealer":{"update":"2026-05-23T10:05:58.706614","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/SW50ZXJuYWwgTWVkaWNpbmUgYW5kIFBlZGlhdHJpY3Mgb2YgQ3VsbG1hbkBwYXlsb2Fk","attackdate":"2026-05-21T10:26:17.331769+00:00","victim":"Internal Medicine and Pediatrics of Cullman","group":"payload"},{"id":"Um9iaW5zb25zQHBheWxvYWQ=","discovered":"2026-05-21T10:26:06.449707+00:00","website":"","country":"SG","activity":"Consumer Services","description":"Founded in 1858, Robinsons established itself to become a household name in Singapore, and as a mecca for elevated shopper experiences with their extraordinary product and service innovations. The first flagship - Robinsons The Heeren - opened in November 1858, redefined a new standard for retail experiences in Singapore.","post_url":"http://payloadrz5yw227brtbvdqpnlhq3rdcdekdnn3rgucbcdeawq2v6vuyd.onion/posts/a2c7fa7b-5ee7-488b-a289-aa198eea5bee","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/254faec21f55d5ee2c95a72a9599b368.png","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/Um9iaW5zb25zQHBheWxvYWQ=","attackdate":"2026-05-21T10:25:20.473522+00:00","victim":"Robinsons","group":"payload"},{"id":"R3J1cG8gUGFzcXVlbEB0aGVnZW50bGVtZW4=","discovered":"2026-05-21T09:53:23.408494+00:00","website":"grupopasquel.com","country":"EC","activity":"Agriculture and Food Production","description":"grupopasquel.com zoominfo.com/c/grupo-pasquel/430007218 Grupo Pasquel is a well-established Ecuadorian enterprise from Quito, with over three decades of excellence in construction and hardware retail. Through its Mi Ferre brand, it delivers quality products and integrated solutions, empowering builders and DIY enthusiasts nationwide with trusted service and logistics","post_url":"","ransom":null,"data_size":null,"screenshot":"","infostealer":{"update":"2026-05-21T09:53:21","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/R3J1cG8gUGFzcXVlbEB0aGVnZW50bGVtZW4=","attackdate":"2026-05-21T07:19:03+00:00","victim":"Grupo Pasquel","group":"thegentlemen"},{"id":"TUJNIENvcnBAdGhlZ2VudGxlbWVu","discovered":"2026-05-21T09:53:20.463672+00:00","website":"mbmcorp.com","country":"US","activity":"Not Found","description":"mbmcorp.com rocketreach.co/mbm-corp-profile_b5efe288f42e7251 MBM Corporation, founded in 1936 and headquartered in Charleston, South Carolina, is a trusted leader in professional print finishing and document security solutions. Renowned for Destroyit® shredders, Triumph™ cutters, and AeroCut® digital finishing systems, MBM empowers print shops and businesses with precision-engineered equipment backed by expert support and industry-leading warranties","post_url":"","ransom":null,"data_size":null,"screenshot":"","infostealer":{"update":"2026-05-21T09:53:17","employees":0,"users":3,"thirdparties":0,"employees_url":0,"users_url":3,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/TUJNIENvcnBAdGhlZ2VudGxlbWVu","attackdate":"2026-05-21T07:22:49+00:00","victim":"MBM Corp","group":"thegentlemen"},{"id":"WU1DQSBvZiBDb2x1bWJpYUB0aGVnZW50bGVtZW4=","discovered":"2026-05-21T09:53:15.690701+00:00","website":"columbiaymca.org","country":"US","activity":"Consumer Services","description":"columbiaymca.org zoominfo.com/c/ymca-of-columbia/8912958 Founded in 1854, the YMCA of Columbia is a cornerstone charitable organization dedicated to building healthy spirit, mind, and body for all across South Carolina's Midlands. Through five community branches, they deliver impactful youth development, wellness programs, and social responsibility initiatives rooted in Christian values of caring, respect, and inclusion. Every day, the Y empowers neighbors of all ages and backgrounds to learn, grow, and thrive together","post_url":"","ransom":null,"data_size":null,"screenshot":"","infostealer":{"update":"2026-05-21T09:53:14","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/WU1DQSBvZiBDb2x1bWJpYUB0aGVnZW50bGVtZW4=","attackdate":"2026-05-21T07:24:08+00:00","victim":"YMCA of Columbia","group":"thegentlemen"},{"id":"dW5nZXJlcmFuZGNvbXBhbnkuY29tQGFwdDcz","discovered":"2026-05-21T09:22:32.395006+00:00","website":"ungererandcompany.com","country":"DE","activity":"Not Found","description":"Ungerer & The Company is an American company founded in 1893 that develops and manufactures flavo...","post_url":"http://basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion/page_company.php?id=162","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/366599af1354fa3a69b8d53f1365f33c.png","infostealer":{"update":"2026-05-21T09:22:15","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/dW5nZXJlcmFuZGNvbXBhbnkuY29tQGFwdDcz","attackdate":"2026-05-21T09:22:15.337402+00:00","victim":"ungererandcompany.com","group":"apt73"},{"id":"SG90ZWxvZ2l4IENvbXBhbnkgKEhvdGVsb2dpeC5jb20pQHNoYWRvd2J5dDMk","discovered":"2026-05-21T06:22:11.225742+00:00","website":"Hotelogix.com","country":"IN","activity":"Hospitality and Tourism","description":"Should've not messed with us Hotelogix. We gave you guys numerous times to reach back and proceed with payment but you decided to fuck around and you found out. Any company that contacts us because you had a warning or we leaked proof should look at what we got if your concerned then contact us for payment if everything matches up. It's that simple and don't think twice or it can lead to what happened with this company. Don't be like Hotelogix and wait till the last Minute. It's best to pay first to so you don't end up like these companies to name a few University Of Georgia, Hotelogix, starBucks, and more mega link conversations: https://mega.nz/file/mwAGQDaA#TX0wXzN2JmzehD1WxV234_QiHaK7AzSA1PumfWq_HCU","post_url":"","ransom":null,"data_size":null,"screenshot":"","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/SG90ZWxvZ2l4IENvbXBhbnkgKEhvdGVsb2dpeC5jb20pQHNoYWRvd2J5dDMk","attackdate":"2026-05-21T06:22:09.598537+00:00","victim":"Hotelogix Company (Hotelogix.com)","group":"shadowbyt3$"},{"id":"U3RhckJ1Y2tzIENvbXBhbnkgKFN0YXJCdWNrcy5jb21Ac2hhZG93Ynl0MyQ=","discovered":"2026-05-21T05:52:10.947443+00:00","website":"Starbucks.com","country":"US","activity":"Hospitality and Tourism","description":"StarBucks Failed to reach out to us and didn't pay even $500,000 when we know they can afford it. It's not even that much we were asking for. Since you didn't contact is no negotiations and this is now in the hands of cybercriminals. This is a warning to all companies if you see yourself posted here to reach us. This is the only ammount we have on are servers due to migrating dmca and ignore abuse infrastructure. They were breached on 04/01/2026 and they know they were breached because they closed the s3 bucket starbucks-prod.","post_url":"","ransom":null,"data_size":null,"screenshot":"","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/U3RhckJ1Y2tzIENvbXBhbnkgKFN0YXJCdWNrcy5jb21Ac2hhZG93Ynl0MyQ=","attackdate":"2026-04-01T00:00:00+00:00","victim":"StarBucks Company (StarBucks.com","group":"shadowbyt3$"},{"id":"SGFtZXIgQ2hpbGRzQHFpbGlu","discovered":"2026-05-20T21:57:39.337629+00:00","website":"www.hamerchilds.co.uk","country":"GB","activity":"Not Found","description":"N/A","post_url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=c5d607cc-33aa-4006-a808-599dc0997a32","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/474f213867f02dd7452a673037977f9d.png","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/SGFtZXIgQ2hpbGRzQHFpbGlu","attackdate":"2026-05-20T21:57:21.768976+00:00","victim":"Hamer Childs","group":"qilin"},{"id":"UG9ydGVyIFcgWWV0dEBxaWxpbg==","discovered":"2026-05-20T20:25:16.594518+00:00","website":"www.porteryett.com","country":"GB","activity":"Business Services","description":"N/A","post_url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=347b2dc8-7f13-4389-bc11-9c9f80a2721d","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/30fb09160d69b8c60065acd98a99b372.png","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/UG9ydGVyIFcgWWV0dEBxaWxpbg==","attackdate":"2026-05-20T20:24:58.821043+00:00","victim":"Porter W Yett","group":"qilin"},{"id":"Q0ogQXJjaGl0ZWN0c0BxaWxpbg==","discovered":"2026-05-20T15:56:46.473413+00:00","website":"www.cjarchitects.net","country":"US","activity":"Construction","description":"N/A","post_url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=b643f9eb-7e30-4836-8955-415480cfe9a6","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/714dbd6c13b46d7cc8b288341d83d0f9.png","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/Q0ogQXJjaGl0ZWN0c0BxaWxpbg==","attackdate":"2026-05-20T15:56:30.532849+00:00","victim":"CJ Architects","group":"qilin"},{"id":"V05TIExvd2VyeUBxaWxpbg==","discovered":"2026-05-20T15:25:35.092742+00:00","website":"www.wnslowery.com","country":"US","activity":"Business Services","description":"N/A","post_url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=e4c4a268-d65e-48e5-8e4c-7cb4de80c2f4","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/c98bb302f2ad80192e92c5283907dd6b.png","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/V05TIExvd2VyeUBxaWxpbg==","attackdate":"2026-05-20T15:25:17.192094+00:00","victim":"WNS Lowery","group":"qilin"},{"id":"Q3ogQ29sbGVjdGlvbnNAcWlsaW4=","discovered":"2026-05-20T15:25:15.635139+00:00","website":"www.czcollections.com","country":"CZ","activity":"Consumer Services","description":"N/A","post_url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=7703e181-abfd-4df1-8dfa-42b24cfcae3d","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/50193c0c7c8f0fb2b11330ac46d8cf9c.png","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/Q3ogQ29sbGVjdGlvbnNAcWlsaW4=","attackdate":"2026-05-20T15:24:55.911693+00:00","victim":"Cz Collections","group":"qilin"},{"id":"QWlyIENvbmRpdGlvbmluZyBGbG9yaWRhICYgTXJkc2xsYyAmIFJURSBTdHVjY28gJiBNUiBEcnl3YWxsIFNlcnZpY2VzQHFpbGlu","discovered":"2026-05-20T14:55:11.605558+00:00","website":"www.airconditioning-florida.com, www.mrdsllc.com, www.rtesllc.com, www.mrdrywallservices.com","country":"US","activity":"Construction","description":"N/A","post_url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=51c6ae31-29db-4c4b-88cc-0dd412b17c58","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/7c3e7c36d876d644a45eca68d27bbc03.png","infostealer":{"update":"2026-05-20T14:54:55","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/QWlyIENvbmRpdGlvbmluZyBGbG9yaWRhICYgTXJkc2xsYyAmIFJURSBTdHVjY28gJiBNUiBEcnl3YWxsIFNlcnZpY2VzQHFpbGlu","attackdate":"2026-05-20T14:54:55.540545+00:00","victim":"Air Conditioning Florida & Mrdsllc & RTE Stucco & MR Drywall Services","group":"qilin"},{"id":"VmlhbCBBZ3JvQHFpbGlu","discovered":"2026-05-20T14:54:53.920502+00:00","website":"www.vialagro.com.ar","country":"AR","activity":"Agriculture and Food Production","description":"N/A","post_url":"http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=d1cb3efc-3eb6-4a34-b5f1-0ba599964cac","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/31cb4cfe45dd689c720319a9af8444e8.png","infostealer":"","press":null,"permalink":"https://www.ransomware.live/id/VmlhbCBBZ3JvQHFpbGlu","attackdate":"2026-05-20T14:54:36.704782+00:00","victim":"Vial Agro","group":"qilin"},{"id":"U2lkIEhhcnZleSdzQGFraXJh","discovered":"2026-05-20T13:52:23.431270+00:00","website":"sidharvey.com","country":"US","activity":"Consumer Services","description":"Sid Harvey Industries is a wholesale distributor of refrigeration, air conditioning, and heatin\ng equipment and parts for contractors in the United States.\n\nWe will upload 740gb of corporate data soon. Detailed employee personal information (~500 ppl p\nassports, DLs, SSNs, personal financials, death certs, confidential agreements, credit cards an\nd so on), contracts and agreements, financials, clients and partners, etc.\n","post_url":"","ransom":null,"data_size":null,"screenshot":"","infostealer":{"update":"2026-05-23T10:05:25.410880","employees":0,"users":4,"thirdparties":0,"employees_url":0,"users_url":3,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/U2lkIEhhcnZleSdzQGFraXJh","attackdate":"2026-05-20T00:00:00+00:00","victim":"Sid Harvey's","group":"akira"},{"id":"UHJvIEZhcm0gR3JvdXAgSW5jQHBlYXI=","discovered":"2026-05-20T13:25:59.042091+00:00","website":"profarm.com","country":"US","activity":"Agriculture and Food Production","description":"Experts at discovering, developing, and commercializing naturally derived technologies","post_url":"http://pearsmob5sn44ismokiusuld34pnfwi6ctgin3qbvonpoob4lh3rmtqd.onion/Companies/profarm","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/8a6130b13777568fe2651d35871948fd.png","infostealer":{"update":"2026-05-20T13:25:45","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/UHJvIEZhcm0gR3JvdXAgSW5jQHBlYXI=","attackdate":"2026-05-14T00:00:00+00:00","victim":"Pro Farm Group Inc","group":"pear"},{"id":"RmFuYSBKZXdlbHJ5IEluY0BwZWFy","discovered":"2026-05-20T13:25:43.696783+00:00","website":"fanajewelry.com","country":"US","activity":"Consumer Services","description":"Crafting jewelry for countless generations","post_url":"http://pearsmob5sn44ismokiusuld34pnfwi6ctgin3qbvonpoob4lh3rmtqd.onion/Companies/fanajewelry","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/2648c6e93823cbd59836860151d81a93.png","infostealer":{"update":"2026-05-20T13:25:28","employees":0,"users":1,"thirdparties":0,"employees_url":0,"users_url":1,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/RmFuYSBKZXdlbHJ5IEluY0BwZWFy","attackdate":"2026-05-14T00:00:00+00:00","victim":"Fana Jewelry Inc","group":"pear"},{"id":"SW5kaWFuIENyZWVrIFZhbGxleSBXYXRlciBBdXRob3JpdHlAcGVhcg==","discovered":"2026-05-20T13:25:27.246220+00:00","website":"icvwater.org","country":"US","activity":"Public Sector","description":"Indian Creek Valley Water Authority","post_url":"http://pearsmob5sn44ismokiusuld34pnfwi6ctgin3qbvonpoob4lh3rmtqd.onion/Companies/icvwater","ransom":null,"data_size":null,"screenshot":"https://images.ransomware.live/victims/8c53f3097d5942209c3152ebc6eef908.png","infostealer":{"update":"2026-05-20T13:25:13","employees":0,"users":0,"thirdparties":0,"employees_url":0,"users_url":0,"last_employee_compromised":null,"last_user_compromised":null,"infostealer_stats":{}},"press":null,"permalink":"https://www.ransomware.live/id/SW5kaWFuIENyZWVrIFZhbGxleSBXYXRlciBBdXRob3JpdHlAcGVhcg==","attackdate":"2026-05-13T00:00:00+00:00","victim":"Indian Creek Valley Water Authority","group":"pear"}]}