Incident tracker

Recent cyber attacks and data breaches

This view includes companies named on ransomware leak sites. Those are the gangs’ claims, not verified breaches.

DisclosedCompanyWhat happenedTypeRecordsSource
2026-09-14Downrite EngineeringDownrite Engineering named on the gentlemen's leak site

downrite.com zoominfo.com/c/downrite-engineering-corp/354082568 Downrite Engineering 1983-founded, family-owned Florida specialty contractor (Flaxman family, now led by 2nd-generation Brandon Flaxman, ~200 employees, ~$40–50M revenue est., HQ Coconut Creek) covering the full "site infrastructure" stack: underground utilities (water/sewer/storm), unlimited-license electrical, traffic signals/ITS, fiber optics — and its signature niche, sports lighting, where it's the default design-build contractor for municipal athletic complexes, schools and parks across South Florida. Moats: vertical integration (one contract, one PM for fields + parking + signals + fiber), a 100+ vehicle fleet (40+ digger derricks, 20+ bucket trucks), hurricane-restoration demand, FDOT prequalification and 40-year municipal relationships; new ~9–10k sq ft HQ opened 2023. Bottom line: a quiet Florida infrastructure dynasty — digging, wiring and lighting the state since 1983, profiting every storm season.

Ransomware claimClaimed by the gentlemen · not verified
Not disclosedRansomLook
2026-09-14Neff DrexelNeff Drexel named on the gentlemen's leak site

neff-drexel.ch zoominfo.com/c/neff--drexel/431534427 Neff & Drexel AG Swiss multimedia retailer and integrator founded in 1967 in Gais (Appenzell) as a family Radio-TV shop — today operating as 1xRichtig ("once, correctly") from Gaiserstrasse 46, Appenzell (AG, UID CHE-105.772.429, capital CHF 100,000 after a June 2026 capital reduction from CHF 400,000). It sells, installs and repairs consumer and professional audio/video tech — home Hi-Fi and home cinema (with room-calibration via its own measurement system), plus pro-AV integration for churches, school halls, swimming pools, restaurants and boardrooms — and retails through the European Expert buying cooperative to match marketplace pricing. Run by Jakob Sutter (board president) and Markus Wetter — a 32-year multimedia veteran and former president of the Swiss radio/TV retailers' association for Eastern Switzerland + Liechtenstein — it's also an accredited apprenticeship company (Multimediaelektroniker EFZ, 4-year program).

Ransomware claimClaimed by the gentlemen · not verified
Not disclosedRansomLook
2026-09-14IvetaIveta named on the gentlemen's leak site

iveta.hr rocketreach.co/iveta-doo-windows-and-doors-profile_b58bc102f9eb0201 Iveta Croatian family confectionery & bakery from Split — traditions since 1985 — producing Dalmatian classics: Splitska torta (Split cake), mandulato, zabac, kroštule, bajamini and custom celebration cakes. Distribution: own cafés in Split and Trogir, B2B supply to Dalmatian hotels and restaurants, online orders; tourist-souvenir channel for the summer season. Digital: 24,000+ Facebook followers (the local 35–65 demographic lives there), active Meta ad campaigns since 2018, modest Instagram. Small family business (2nd generation), minimal public registry data (verify OIB/capital/revenue via sudreg.hr).

Ransomware claimClaimed by the gentlemen · not verified
Not disclosedRansomLook
2026-09-14Metropolitan Community Health ServicesMetropolitan Community Health Services named on insomnia's leak site

Agape Health Services, a CCBHC/FQHC run by Metropolitan Community Health Services, offers sliding-scale primary, preventive, dental, pharmacy, and behavioral health care, plus mobile, law-enforcement, training, and reentry services.

Ransomware claimClaimed by insomnia · not verified
Not disclosedRansomLook
2026-09-14Massey, Stotser & NicholsMassey, Stotser & Nichols named on insomnia's leak site

Massey, Stotser & Nichols is a Birmingham, AL law firm offering real estate, family law, and civil/corporate litigation. They serve Fortune 500, businesses, and individuals, delivering personalized solutions with big-firm capability.

Ransomware claimClaimed by insomnia · not verified
Not disclosedRansomLook
2026-09-14Rosello et FilsRosello et Fils named on eclipse's leak site

Rosello & Fils is a fruit and vegetable wholesaler based in Saint-Laurent-Blangy, France. With over 100 years of experience, the company operates exclusively within the Hauts-de-France region, serving professionals in the Nord, Pas-de-Calais, and Somme departments. Its client base includes commercial and collective catering, local shops, and large and medium-sized retail surfaces

Ransomware claimClaimed by eclipse · not verified
Not disclosedRansomLook
2026-09-14Little OtterLittle Otter named on direwolf's leak site
Ransomware claimClaimed by direwolf · not verified
Not disclosedRansomLook
2026-09-14Hazel HealthHazel Health named on direwolf's leak site
Ransomware claimClaimed by direwolf · not verified
Not disclosedRansomLook
2026-09-14Alchin Long GroupAlchin Long Group named on the gentlemen's leak site

alchinlong.com zoominfo.com/c/alchin-long-group/1158898894 Alchin Long Group Australian hardware conglomerate founded in 1969, when Ray Long and Roy Alchin started a dormant sand-casting foundry out of an old racehorse stable in Annandale, Sydney — today HQ'd in a purpose-built 12,000 m² Wetherill Park campus with ~250 staff, ~$50–100M revenue, and manufacturing across Australia, NZ, Malaysia, Taiwan and China. Its portfolio covers the whole door & window hardware value chain: flagship Doric (award-winning locks, rollers, chainwinders, multi-point systems + new Sparq smart automation), heritage Cowdroy (est. 1890 — tracks & seals), Colonial Castings (world's largest cast-aluminium outdoor furniture maker), government-endorsed security brand AMS, and repair franchise Lock & Roll — plus its own NATA-accredited testing lab (Azuma Design), a rare in-house compliance moat. Second-generation family leadership (Nigel Long, Mike Alchin), 80+ patents, in-house 3D printing/CNC

Ransomware claimClaimed by the gentlemen · not verified
Not disclosedRansomLook
2026-09-14GelartiGelarti named on the gentlemen's leak site

gelarti.com.pe zoominfo.com/c/gelarti/459647742 Gelarti Peru's leading gourmet ice-cream parlor chain — 39 shops & cafés in the country's top malls — operating since 2013 through Franquicias Unidas del Perú S.A.C. (RUC 20548498181). The twist: Gelarti is the international alias of Colombia's legendary Popsy (Danesi Cantagali Group, founded 1981 by UN-economist-turned-entrepreneur Álvaro Londoño and his wife Elena) — the Popsy name couldn't be registered abroad, so exports run under Gelarti ("gelato + arte"): Panama since 2003 (with its own plant, now claims #1 there) and Peru since 2013 (a $20M/50-store plan with local flavors lúcuma & pisco sour). Menu: copas (~S/19.90), milkshakes, frapps, 1L family tubs, crepes, pastries and coffee — a gelateria-café format with delivery via Rappi and its own site (ratings 4.1–4.4). The group behind it runs the full vertical: plants, cold chain, B2B distribution (Tottus, Tambo) and 200+ Popsy stores in 46 Colombian cities (~12M ice creams/year).

Ransomware claimClaimed by the gentlemen · not verified
Not disclosedRansomLook

About this tracker

435
Incidents
296
Ransomware gang claims
731
Last 30 days
401
Companies tracked
2,742,501,669
Records disclosed