🔴 Alicotrans found by Qilin on the dark web.

📍 Brazil · Transportation · 14 Sep 2026
🏴 Qilin has listed 2,265 victims since October 2022.

https://cyberthreatintelligence.net/ransomware-victim/alicotrans-qilin-2026

#ransomware #leaksite #infosec

🔴 Gilco Scaffolding listed by Qilin

📍 United Kingdom · Manufacturing · 13 Sep 2026
🏴 Qilin has listed 2,265 victims since October 2022.

https://cyberthreatintelligence.net/ransomware-victim/gilco-scaffolding-qilin-2026

#ransomware #threatintel #leaksite

🔴 INCOR Group listed by Doommageddon

📍 Other · 13 Sep 2026
🏴 Doommageddon has listed 10 victims since March 2026.

https://cyberthreatintelligence.net/ransomware-victim/incor-group-doommageddon-2026

#ransomware #leaksite #threatintel

🔴 Watchops.com found Unsafe on leak site.

📍 United States · Technology · 12 Sep 2026
🏴 Unsafe has listed 22 victims since December 2022.

https://cyberthreatintelligence.net/ransomware-victim/watchops-com-unsafe-2026

#ransomware #threatintel #leaksite

🔴 Krybit reveals swadeshicipl.com on leak site

📍 India · Manufacturing · 12 Sep 2026
🏴 Krybit has listed 134 victims since March 2026.

https://cyberthreatintelligence.net/ransomware-victim/swadeshicipl-com-krybit-2026

#ransomware #threatintel #leaksite

🔴 Shelco Filters seen by Securotrop

📍 United States · Manufacturing · 12 Sep 2026
🏴 Securotrop has listed 42 victims since June 2025.

https://cyberthreatintelligence.net/ransomware-victim/shelco-filters-securotrop-2026

#ransomware #infosec #leaksite

🔴 Nightspire includes Perimetral Oriental de Bogotá S.A.S. on leak site

📍 Colombia · Transportation · 11 Sep 2026
🏴 Nightspire has listed 322 victims since February 2025.

#ransomware #threatintel #leaksite

🔴 Tuboaços da Amazônia Ltda. listed by Nightspire leak site

📍 Brazil · Manufacturing · 11 Sep 2026
🏴 Nightspire has listed 322 victims since February 2025.

https://cyberthreatintelligence.net/ransomware-victim/tuboa-os-da-amaz-nia-ltda-nightspire-2026

#ransomware #threatintel #leaksite

🔴 Pear includes Foss Inc. in leak site

📍 United States · 11 Sep 2026
🏴 Pear has listed 118 victims since August 2023.

https://cyberthreatintelligence.net/ransomware-victim/foss-inc-pear-2026

#ransomware #threatintel #leaksite

🔴 General Santos Doctors Hospital found on Rhysida's dark web list

📍 Philippines · Healthcare · 10 Sep 2026
🏴 Rhysida has listed 283 victims since June 2023.

https://cyberthreatintelligence.net/ransomware-victim/general-santos-doctors-hospital-rhysida-2026

#ransomware #rhysida #leaksite

🔴 Mankatoclinic.com added to Chaos' leak site

📍 United States · Healthcare · 10 Sep 2026
🏴 Chaos has listed 86 victims since February 2025.

https://cyberthreatintelligence.net/ransomware-victim/mankatoclinic-com-chaos-2026

#ransomware #threatintel #leaksite

🔴 Wallstreet hits Goldston Oil Corporation

📍 United States · Energy & Utilities · 10 Sep 2026
🏴 Wallstreet has listed 12 victims since June 2026.

https://cyberthreatintelligence.net/ransomware-victim/goldston-oil-corporation-wallstreet-2026

#ransomware #threatintel #leaksite

🔴 AK Stamping found by Akira on leak site

📍 Manufacturing · 10 Sep 2026
🏴 Akira has listed 1,595 victims since April 2023.

https://cyberthreatintelligence.net/ransomware-victim/ak-stamping-akira-2026

#ransomware #manufacturing #leaksite

🔴 Emperador names EASY JOB S.A.S. in leak

📍 Colombia · Professional Services · 10 Sep 2026
🏴 Emperador has listed 1 victims since August 2026.

https://cyberthreatintelligence.net/ransomware-victim/easy-job-s-a-s-emperador-2026

#ransomware #threatintel #leaksite

🔴 Akira adds George Cameron Nash to leak site

📍 10 Sep 2026
🏴 Akira has listed 1,595 victims since April 2023.

https://cyberthreatintelligence.net/ransomware-victim/george-cameron-nash-akira-2026

#ransomware #akira #leaksite

🔴 Clop posts HARLEY-DAVIDSON.COM on dark web

📍 United States · Manufacturing · 10 Sep 2026
🏴 Clop has listed 1,300 victims since March 2020.

https://cyberthreatintelligence.net/ransomware-victim/harley-davidson-com-clop-2026

#ransomware #leaksite #infosec

🔴 HENRYPRATT.COM found by Clop on dark web

📍 United States · Manufacturing · 10 Sep 2026
🏴 Clop has listed 1,300 victims since March 2020.

https://cyberthreatintelligence.net/ransomware-victim/henrypratt-com-clop-2026

#ransomware #leaksite #infosec

🔴 Mo***al found on Auditteam leak site

📍 Germany · 9 Sep 2026
🏴 Auditteam has listed 23 victims since February 2026.

https://cyberthreatintelligence.net/ransomware-victim/mo-al-auditteam-2026

#ransomware #auditteam #leaksite

🔴 Https://mediengruppethiel.de/ added to Incransom leak site

📍 Germany · Other · 9 Sep 2026
🏴 Incransom has listed 933 victims since August 2023.

https://cyberthreatintelligence.net/ransomware-victim/https-mediengruppethiel-de-incransom-2026

#ransomware #leaksite #threatintel

🔴 RelyComply AML Platform found on Direwolf leak site

📍 United Kingdom · Financial Services · 9 Sep 2026
🏴 Direwolf has listed 131 victims since April 2025.

https://cyberthreatintelligence.net/ransomware-victim/relycomply-aml-platform-direwolf-2026

#ransomware #direwolf #leaksite