INVADERS
Ransomware Tracker
Structured data rendered for: CollectionPage

Ransomware Victims

Comprehensive database of organizations affected by ransomware attacks. Search, filter, and explore victim data.

Last updated:

Total Victims

7,351

Last 30 Days

202

Last Attack

Yesterday

Top Targeted Countries

Top Targeted Industries

Showing 73 to 96 of 7,351 victims

Machelen (Belgium)

Machelen (Belgium) Machelen (Belgium) - municipal and social welfare (OCMW) file servers1.3 million files, ~2.9 TB. Working copy + backup copy (lawer2/lawer3). Language: Dutch, partly French.Contents:Social welfare and migration service client files: passports, ID cards, residence permits, sick notes.WZC nursing home: medical files, staff HR dossiers, workplace accidents.Civil status records (births, marriages) with national register numbers (NISS/RRN).Payslips, financial data.Correspondence (~23k messages), employee home folders.Databases and backups: full OCMW database backup (6 GB, 09/2026), 645 .mdb databases, 12,873 .dbf, 110 .bak (17 GB).Verified: 13,319 files with personal data. Among them - a valid Belgian ID card (expiry 02/2029), Belgian and Moroccan passports, national register numbers (RRN), sick notes with patient addresses, medical documents (GDPR Art. 9 special categories). More

Rhysida
View Details →

Cipsa Industrias Sa De Cv

Cipsa Industrias Sa De Cv Compania Industrial Papelera Poblana, S.A. de C.V. (CIPPSA) and Tubos y Empaques de Puebla, S.A. de C.V. (TEPSA / KJAS TEPSA), a Mexican corrugated cardboard, packaging and paper-tube manufacturer. Complete employee HR records: names, dates of birth, home addresses, phone numbers, personal and corporate email addresses, CURP, RFC, IMSS numbers, salaries and employee badge photographs.Payroll records, tax data, fiscal validation files and HSBC payroll-bank files containing employee account and CLABE data.Information showing executive compensation through an **honorarios** arrangement outside the regular payroll system.Financial and industrial reports, sales/procurement/payroll budgets, production costs, operational analytics, invoices and accounting records.Customer complaint records and overdue receivables data.Occupational-safety, psychosocial-risk, industrial-incident and hazardous-waste documentation. More

Unknown
Rhysida
View Details →

Ivan Smith Furniture

For 65 years, Ivan Smith Furniture has believed that great service starts with treating people like neighbors. What began as a small-town furniture store has grown to 40 locations across Louisiana, Texas, and Arkansas, but the values that built our business remain the same.Geo: USA - Leak size: 500 gb - Contains: Files and data bases

Unknown
Sarcoma
View Details →

INTI International University & Colleges

INTI International University & Colleges INTI International University & Colleges offers a diverse range of academic programs including undergraduate, postgraduate, and professional development courses across various fields such as business, engineering, health sciences, and design. More

Unknown
Rhysida
View Details →

INTAX, Inc.

INTAX, Inc. Complete file server of INTAX, Inc. (Lexington, KY, USA) - a property-tax compliance and bill-pay firm.892,867 files, 1.27 TBClient tax returns: 649,905 PDFs. Clients include AARP, ADT, Pilot Travel Centers, Wendy's, Valvoline, Zions, Raytheon (~100 companies).Client accounting: 100+ QuickBooks company files � full ledgers, banks, payroll.Money: bank account + routing numbers, $910,000 wire form, signed W-9, proof the firm opens dedicated accounts and pays client taxes (~$73.6M/yr moved).Identity data: US passports of the owner and employees, driver license, birth certificate, W-2s with SSNs, IRS filings 2025�2026, medical insurance cards.60+ cleartext password files: US government tax portals + the firm's own QuickBooks.24,000+ emails, personal employee folders, lawsuit records, owner exit/sale planning. More

Unknown
Rhysida
View Details →

Noelker and Hull

Noelker and Hull NHA-FULL � US ARCHITECTURE FIRM (est. 1971) - HEALTHCARE / SENIOR-LIVING DESIGN - COMPLETE INTERNAL FILE-SERVER - FRESH TO 2026No credentials in this lot (excluded by decision). Focus: identity and familypackages, payroll SQL, tax/bank pipes, litigation, seals & signatures, 26 GB mail.SUBJECT - Noelker and Hull Associates, Inc. (Chambersburg PA, est. 1971) + KAPClegacy (Frederick MD). ~41 employees, 9 shareholders. Revenue $8.56M -> $7.01M.~990 delivered projects: Penn State Health, WellSpan, Meritus, UPMC, SelectMedical, Tower Health, Holland America, Hershey, Gettysburg College - incl.hospital & crisis-center plans.KEY NUMBERS: 990 project folders | 30+ healthcare clients | 26 GB mail |60+ SSN rows | exec passports+DL x4 | edge 2026.INVENTORY - raw files from the firm's servers, values masked, full set on close.[1] IDENTITY & FAMILY PACKAGES - FULLZ - ~80-100 PA residentsPassports+DL of the President and VP (x4); W-2 with full SSN (SSA TY2024),pay stubs (VP, YTD ~$116K, 07/2026), 401(k) x2, I-9; background checks -MD Criminal History + FBI Identity History + fingerprints.'Kennedy': SSN, mortgage 03/2024, 3 child birth certs, child medical.'Karpowicz' (employee's mother, dementia): Medicare MBI, bank accounts,Morgan Stanley check $86,650.68, returns 2022-2025, IRS POA.'Hoffman': UPMC/WellSpan medical, custody. + ~62 resumes, phones ~45.Below PA AG >500 bar - but every name is a plaintiff (Dittman) + a victim.[2] PAYROLL - Ajera ERP SQL backups, 140 tablesSSN x61+ | Salary x459 | W-2 x1151 | 1099 x991 | DirectDeposit x176 |BankAccount x1503. Full compensation/bank anatomy for payroll-diversion.[3] TAX & FINANCE - Form 1120 x4 yrs, QuickBooks (KAPC); PPP $802,480 +$803,347.83 forgiven; IRS audit TY2020 closed no-change; BlueRidge acct104729, positive-pay exports. Fraud precedent: forged checks $45.5K (2022)+ fraudulent SBA EIDL #7672918108 in the firm's name - scheme proven.[4] LITIGATION - ACTIVE: PJ Dick v. Lehigh No. 2026-C-2439, $13M+, 'designerrors, omissions' against NHA � internal assessments, stop-work, delayclaims. Fleet Landing demand ~$1.41M. Vincentian 'DO NOT MOVE OR DELETE'hold; SpiriTrust privileged folder; CIA subpoena response.[5] FORGERY KIT - signatures of 14 employees + architect seals (MD/PA); ~140Certificates of Insurance; license keys (Autodesk/Adobe) bonus.[6] COMMERCIAL SECRETS - fee pipeline 2010-2026 (5.00-8.50%, markup 10%,Hourly Rates, Past-Due notices); Meritus master specs; CAD Standards37.7 GB; aborted Olsen merger docs.[7] MAIL - ~26 GB, into 2026. Indexed sample: 6,195 msgs - 401(k)/ERISA/PHI.Rest as-is, unprobed.[+] AS-IS - encrypted browser stores x3 (OWA/banks/PayPal/USCIS listed),Credential Manager x91, .pfx, ACT! DB. Unproven, not in the price.FRESHNESS - A�live: pay stubs 07/2026, COI to 05/2027, case 2026-C-2439, mail.B�recent: Ajera, pipeline, returns 2022-25, litigation. C�archival (KAPC2009-14): W-2, background - SSN/biometrics don't expire.BUYERS - elder-fraud/fullz (1); BEC/payroll-diversion (2+3); competitor AEC (6);PA/MD plaintiff bar (1+4); contractor scams (5).DEAL - mockup only. 1. Sample: masked docs, table-list screenshot, watermarkedseal, SHA-256 manifest. 2. Escrow, multi-sig; whole lot or per-section split.3. Dead-drop container, hash check vs. manifest, proof-of-deletion on exclusive.DISCLAIMER - HYPOTHETICAL RED-TEAM SCENARIO from a confirmed forensic inventory(60 findings). Nothing is offered for sale. Credential rotation = UNVERIFIEDassumption (artifacts dated 2026). '~' = enumerated; unparsed = unproven. More

Unknown
Rhysida
View Details →

ClaimTek Systems

ClaimTek Systems ClaimTek Systems specializes in preparing individuals for successful entry into the medical billing and practice management business with a comprehensive training and support system. They offer a range of scalable products and services, including state-of-the-art billing software and marketing tools, targeted towards aspiring entrepreneurs in the healthcare industry. More

Unknown
Rhysida
View Details →

Broadstreet HEOR

Broadstreet HEOR Broadstreet Health Economics & Outcomes Research (Vancouver, Canada)is a consultancy running health-economics and real-world-evidencestudies for Pfizer, Bayer, Boehringer Ingelheim, Takeda, Madrigal,Alexion/AstraZeneca, Bristol-Myers Squibb, Sarepta, Taysha, Biohavenand others.- US patient PHI: Medicaid (11.3M rows: DOB, race, diagnoses, NDCdrugs, payments), Veradigm/Allscripts EHR tables, licensed IBMMarketScan / Optum Clinformatics data.- Production Alexiondb (PostgreSQL): schema + claims rows.- Live SQL Server credentials of client Taysha Gene Therapies(production DB irsf-nhs-prod-db, public IP).- Confidential pharma materials: unpublished Boehringer Ingelheimslides, Takeda manuscript, Bayer CEM models, Madrigal reports,Pfizer/VA emails.- Staff personal documents. More

Unknown
Rhysida
View Details →

Phoenix Charter Academy

Phoenix Charter Academy Phoenix Charter Academy Network is a public charter school network in Massachusetts, USA, operating three campuses (Chelsea, Lawrence, Springfield) and serving mainly low-income and immigrant families.36,829 files, 445.1 GB of data.Domain controller (password hashes of ~170+ staff accounts)File server, helpdesk server, print serverPowerSchool test server � the student databaseStudent special-education records of named minors: signed IEP/504 plans for the 2025�2026 school year, BASC-3 psychological protocols, three-year re-evaluations, speech-therapy files, discipline recordsImmigration records of students' families: official CBP I-94 entry records, parole application statements, immigration cover lettersStaff personal and financial data: W-2 forms with SSNs and salaries, US passport card and foreign passport scans, bank statements with account numbers (Bank of America / Tremont Credit Union), signed direct deposit authorizations, CORI background-check filesMedical data: MassHealth cards and applications, immunization recordsMunicipal compliance files: Lawrence Board of Health licenses and inspections (2022�2024), Fire Department inspection certificatesInternal HR material: network-wide salary bands More

Unknown
Rhysida
View Details →