Incident tracker

Recent cyber attacks and data breaches

This view includes companies named on ransomware leak sites. Those are the gangs’ claims, not verified breaches.

DisclosedCompanyWhat happenedTypeRecordsSource
2026-09-09National SalvageNational Salvage named on storm's leak site

Energy | Bloomington, Indiana, United States | National Salvage is a leading treated wood recycler specializing in wood recycling, rail services, and environmental services. With over 40 years of experience, they offer services such as track demolition, bridge demolition, and asbestos abatement. Their product range includes used railroad ties, recycled rail, utility poles, and railroad tie fuel. The company primarily serves clients in need of sustainable solutions for wood and rail recycling. The company headquarters is located in 6755 S Old State Road 37, Bloomington, IN 47403, United States. 201-500 Employees | Deadline: 2026-08-25T09:20:49.000Z

Ransomware claimClaimed by storm · not verified
Not disclosedRansomLook
2026-09-09The Cecilian BankThe Cecilian Bank named on storm's leak site

FinTech | Hardin County, Kentucky, United States | The Cecilian Bank is an FDIC-insured financial institution that offers a wide range of personal and business banking services, including checking and savings accounts, loans, and online banking. Their services cater to individuals, small businesses, and large corporations, providing competitive rates and tailored financial solutions. The bank emphasizes convenience with features like online account opening and 24/7 access to banking services. With a commitment to community support, The Cecilian Bank aims to help clients achieve financial independence and business growth. The company headquarters is located in 104 East Main Street, Cecilia, KY 42724, United States.. 201-500 Employees | Deadline: 2026-08-24T12:54:01.000Z

Ransomware claimClaimed by storm · not verified
Not disclosedRansomLook
2026-09-09American Contractors Insurance GroupAmerican Contractors Insurance Group named on storm's leak site

FinTech | Richardson, Texas, United States | ACIG is a construction industry owned insurance facility based in Dallas, TX. ACIG provides workers compensation, general liability, automobile liability and subcontractor default insurance through ACIG Insurance Company and American Contractors Insurance Company Risk Retention Group. ACIG's mission is to save lives, prevent injuries and reduce the overall cost of risk and insurance for its members. The company headquarters is located in 2600 N. Central Expressway, Suite 800, Richardson, TX 75080, United States. 51-200 Employees | Deadline: 2026-08-20T20:36:09.948Z

Ransomware claimClaimed by storm · not verified
Not disclosedRansomLook
2026-09-09Gellibrand Support ServicesGellibrand Support Services named on anubis's leak site

A data breach at a company full of smiling patients.

Ransomware claimClaimed by anubis · not verified
Not disclosedRansomLook
2026-09-09gayafores.esgayafores.es named on safepay's leak site

The company is headquartered in Onda, Castellón, one of Europe's most important ceramic manufacturing regions. Established in 1949, Gayafores has …

Ransomware claimClaimed by safepay · not verified
Not disclosedRansomLook
2026-09-09cenmar-manila.comcenmar-manila.com named on safepay's leak site

The company was registered with the Philippine Securities and Exchange Commission in 1997 and received authorization to operate as a …

Ransomware claimClaimed by safepay · not verified
Not disclosedRansomLook
2026-09-09gsngestion.esgsngestion.es named on safepay's leak site

The company is based in Villaviciosa de Odón, Madrid, and operates through the GSN Gestión brand. Its website states that …

Ransomware claimClaimed by safepay · not verified
Not disclosedRansomLook
2026-09-09hbpro.pthbpro.pt named on safepay's leak site

Established in 1994, the company has more than three decades of experience providing technology products, infrastructure, consulting, maintenance, and technical …

Ransomware claimClaimed by safepay · not verified
Not disclosedRansomLook
2026-09-09Sales BoomerangSales Boomerang named on direwolf's leak site
Ransomware claimClaimed by direwolf · not verified
Not disclosedRansomLook
2026-09-09Red Star OilRed Star Oil named on play's leak site
Ransomware claimClaimed by play · not verified
Not disclosedRansomLook

About this tracker

442
Incidents
314
Ransomware gang claims
756
Last 30 days
414
Companies tracked
2,742,606,708
Records disclosed