Incident tracker

Recent cyber attacks and data breaches

This view includes companies named on ransomware leak sites. Those are the gangs’ claims, not verified breaches.

DisclosedCompanyWhat happenedTypeRecordsSource
2026-09-10AUDIT ENTITY: my***ruAUDIT ENTITY: my***ru named on audit team's leak site

AUDIT ID: D91BED92A5A9223F / DISCOVERY DATE: 2026-09-09

Ransomware claimClaimed by audit team · not verified
Not disclosedRansomLook
2026-09-10General Santos Doctors HospitalGeneral Santos Doctors Hospital named on rhysida's leak site

General Santos Doctors Hospital 3.502.636 files, total volume ~2.44 TBPatient data (PHI) � name-tagged scans across department shares (surgical pathology, hemodialysis charts, admission records), cancer-center dossiers with PhilHealth IDs, lab quotations incl. cancer-marker tests with birth dates, PhilHealth claims monitoring, neonatal (NICU) dataStaff and professionals � accredited physicians register (cell numbers, PRC licenses, PhilHealth IDs), named payroll workbooks (incl. the affiliated diagnostic center), HR dossiers, staff passport scans, drug-test filesMoney, audit and governance � audited financial statements personally signed by chairman/treasurer/CFO with BIR stamps, balance sheet, all bank accounts across six-plus banks, internal-audit memos on (cashier discrepancies and cash shortages), SEC stockholders' minutes, payroll bank-upload batches, related-party entities on the same sharesLeadership personal data � personal cell numbers of the president, hospital administrator and board members More

Ransomware claimClaimed by rhysida · not verified
Not disclosedRansomLook
2026-09-10Professional Retail ServicesProfessional Retail Services named on rhysida's leak site

Professional Retail Services Owner�s documents: employee evaluations, salary rates, bonuses, job offers, family documentsCFO�s documents: client credit reports, bankruptcy records, tax documents, father�s medical records (guardianship court case)Corporate financials: owner�s personal tax return, credit application, signed checks with MICR (BNB Bank)Corporate credit cards, drug testsMedical records, employee health insuranceAnd much more More

Ransomware claimClaimed by rhysida · not verified
Not disclosedRansomLook
2026-09-10California School Employees AssociationCalifornia School Employees Association named on ransomhouse's leak site
Ransomware claimClaimed by ransomhouse · not verified
Not disclosedRansomLook
2026-09-10mankatoclinic.commankatoclinic.com named on chaos's leak site

The Mankato Clinic was founded Mankato, Minnesota in 1916, by five area physicians who believed that a comprehensive, multi-specialty group practice offered the best means of providing quality health care to the residents of southern Minnesota. The mission of the Mankato Clinic is to improve the hea…

Ransomware claimClaimed by chaos · not verified
Not disclosedRansomLook
2026-09-10artiflexmfg.comartiflexmfg.com named on chaos's leak site

ArtiFlex Manufacturing LLC operates as a specialized contract manufacturer focused on delivering precision sheet metal solutions to diverse industrial sectors. The company has built its operational foundation on deep expertise in manufacturing engineering, combining technical knowledge with practica…

Ransomware claimClaimed by chaos · not verified
Not disclosedRansomLook
2026-09-10jms building corporationjms building corporation named on inc ransom's leak site
Ransomware claimClaimed by inc ransom · not verified
Not disclosedRansomLook
2026-09-10NcbChurchNcbChurch named on wallstreet's leak site

New Covenant Believers’ Church is a faith-based ministry focused on spiritual, emotional, and mental growth through God’s Word

Ransomware claimClaimed by wallstreet · not verified
Not disclosedRansomLook
2026-09-10On Demand Occupational MedicineOn Demand Occupational Medicine named on wallstreet's leak site

On Demand Occupational Medicine provides occupational health, drug testing, workplace safety, and employee wellness services in Austintown, Ohio.

Ransomware claimClaimed by wallstreet · not verified
Not disclosedRansomLook
2026-09-10Goldston Oil CorporationGoldston Oil Corporation named on wallstreet's leak site

Goldston Oil Corporation is a Houston-based oil and gas exploration and production company operating in Texas and Louisiana

Ransomware claimClaimed by wallstreet · not verified
Not disclosedRansomLook

About this tracker

435
Incidents
298
Ransomware gang claims
733
Last 30 days
402
Companies tracked
2,742,501,669
Records disclosed