{
    "version": "https://jsonfeed.org/version/1.1",
    "title": "VULONE research feed",
    "home_page_url": "https://vulone.com/research-feed",
    "feed_url": "https://vulone.com/research-feed.json",
    "description": "Latest ransomware leak-site victim claims and VULONE publications. Claims are the groups' own assertions.",
    "generated_at": "2026-09-16T18:22:21+00:00",
    "totals": {
        "victims_all_time": 32123,
        "victims_30d": 1237,
        "groups": 843
    },
    "most_active_groups_30d": [
        {
            "name": "Qilin",
            "url": "https://vulone.com/ransomware/qilin",
            "victims_30d": 141,
            "victims_total": 2310
        },
        {
            "name": "Thegentlemen",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "victims_30d": 112,
            "victims_total": 867
        },
        {
            "name": "Storm",
            "url": "https://vulone.com/ransomware/storm",
            "victims_30d": 81,
            "victims_total": 100
        },
        {
            "name": "Krybit",
            "url": "https://vulone.com/ransomware/krybit",
            "victims_30d": 59,
            "victims_total": 160
        },
        {
            "name": "Akira",
            "url": "https://vulone.com/ransomware/akira",
            "victims_30d": 51,
            "victims_total": 1618
        },
        {
            "name": "Direwolf",
            "url": "https://vulone.com/ransomware/direwolf",
            "victims_30d": 45,
            "victims_total": 141
        },
        {
            "name": "Safepay",
            "url": "https://vulone.com/ransomware/safepay",
            "victims_30d": 42,
            "victims_total": 589
        },
        {
            "name": "Incransom",
            "url": "https://vulone.com/ransomware/incransom",
            "victims_30d": 35,
            "victims_total": 936
        },
        {
            "name": "Lockbit5",
            "url": "https://vulone.com/ransomware/lockbit5",
            "victims_30d": 35,
            "victims_total": 370
        },
        {
            "name": "The Gentlemen",
            "url": "https://vulone.com/ransomware/the_gentlemen",
            "victims_30d": 32,
            "victims_total": 32
        },
        {
            "name": "Settra",
            "url": "https://vulone.com/ransomware/settra",
            "victims_30d": 24,
            "victims_total": 64
        },
        {
            "name": "Panzer",
            "url": "https://vulone.com/ransomware/panzer",
            "victims_30d": 22,
            "victims_total": 34
        },
        {
            "name": "SilentRansomGroup",
            "url": "https://vulone.com/ransomware/silentransomgroup",
            "victims_30d": 21,
            "victims_total": 145
        },
        {
            "name": "AuditTeam",
            "url": "https://vulone.com/ransomware/auditteam",
            "victims_30d": 20,
            "victims_total": 35
        },
        {
            "name": "ZaWoo",
            "url": "https://vulone.com/ransomware/zawoo",
            "victims_30d": 19,
            "victims_total": 19
        },
        {
            "name": "Play",
            "url": "https://vulone.com/ransomware/play",
            "victims_30d": 18,
            "victims_total": 1316
        },
        {
            "name": "Chaos",
            "url": "https://vulone.com/ransomware/chaos",
            "victims_30d": 17,
            "victims_total": 96
        },
        {
            "name": "Rhysida",
            "url": "https://vulone.com/ransomware/rhysida",
            "victims_30d": 16,
            "victims_total": 291
        },
        {
            "name": "Coinbasecartel",
            "url": "https://vulone.com/ransomware/coinbasecartel",
            "victims_30d": 16,
            "victims_total": 206
        },
        {
            "name": "Shinyhunters",
            "url": "https://vulone.com/ransomware/shinyhunters",
            "victims_30d": 16,
            "victims_total": 160
        },
        {
            "name": "Emperador",
            "url": "https://vulone.com/ransomware/emperador",
            "victims_30d": 16,
            "victims_total": 18
        },
        {
            "name": "Dragonforce",
            "url": "https://vulone.com/ransomware/dragonforce",
            "victims_30d": 15,
            "victims_total": 654
        },
        {
            "name": "Nightspire",
            "url": "https://vulone.com/ransomware/nightspire",
            "victims_30d": 14,
            "victims_total": 329
        },
        {
            "name": "Dark Project",
            "url": "https://vulone.com/ransomware/dark_project",
            "victims_30d": 14,
            "victims_total": 33
        },
        {
            "name": "Black Nevas",
            "url": "https://vulone.com/ransomware/black_nevas",
            "victims_30d": 14,
            "victims_total": 14
        }
    ],
    "items": [
        {
            "id": "https://vulone.com/blog/nasbleed-inside-a-343k-host-credential-spill",
            "url": "https://vulone.com/blog/nasbleed-inside-a-343k-host-credential-spill",
            "title": "NASBleed: Inside a 343k-Host Credential Spill",
            "summary": "343,000 plain-text NAS and RDP logins found sitting in an open directory, most of them factory defaults. How the dump feeds access brokers, and what to check now.",
            "date_published": "2026-09-15T11:56:53Z",
            "date_modified": "2026-09-15T11:56:53Z",
            "tags": [
                "publication"
            ],
            "_markdown_url": "https://vulone.com/blog/nasbleed-inside-a-343k-host-credential-spill.md"
        },
        {
            "id": "https://vulone.com/blog/the-australian-behind-doxbin-identifying-unindicted-co-conspirator-cc-1-aka-kt",
            "url": "https://vulone.com/blog/the-australian-behind-doxbin-identifying-unindicted-co-conspirator-cc-1-aka-kt",
            "title": "The Australian Behind Doxbin: Identifying Unindicted Co-Conspirator CC-1 AKA KT",
            "summary": "For years, \"KT\" ruled Doxbin from the shadows, until a Minecraft griefer's forgotten footprints, a breached email, and one arrogant GitHub profile led us straight to his door. This is the story of how we unmasked the man behind the internet's most weaponized doxing archive, and the Australian developer who thought he would never be found.",
            "date_published": "2026-09-11T16:31:14Z",
            "date_modified": "2026-09-11T16:31:14Z",
            "tags": [
                "publication"
            ],
            "_markdown_url": "https://vulone.com/blog/the-australian-behind-doxbin-identifying-unindicted-co-conspirator-cc-1-aka-kt.md"
        },
        {
            "id": "https://vulone.com/blog/your-network-was-already-on-sale",
            "url": "https://vulone.com/blog/your-network-was-already-on-sale",
            "title": "Your Network Was Already On Sale",
            "summary": "We analyzed 28,634 ransomware victims and the forum listings that supply their attackers. Access into a $3B company sold for $10,000. A hospital went for $240. The market is public, priced, and in our data controlled by a handful of sellers, and defenders are watching the wrong end of it.",
            "date_published": "2026-08-31T00:17:44Z",
            "date_modified": "2026-09-04T12:44:59Z",
            "tags": [
                "publication"
            ],
            "_markdown_url": "https://vulone.com/blog/your-network-was-already-on-sale.md"
        },
        {
            "id": "https://vulone.com/blog/cyberleek-mapping-the-actor-behind-the-leak",
            "url": "https://vulone.com/blog/cyberleek-mapping-the-actor-behind-the-leak",
            "title": "Cyberleek: Mapping the Actor Behind the Leak ",
            "summary": "The Cyberleek attribution has been questioned after an analysis of the evidence surrounding the GnomodelincuenT claim. This report examines the link between the cyberleekario Telegram channel, a Spanish personal account, and the wider Cyberleek operation, comparing that trail against historical forum activity, infrastructure, and on-chain evidence. The findings suggest the Spanish attribution remains weak and that the available evidence does not independently establish control of the primary Cyberleek operation.",
            "date_published": "2026-08-21T03:56:15Z",
            "date_modified": "2026-09-04T12:44:59Z",
            "tags": [
                "publication"
            ],
            "_markdown_url": "https://vulone.com/blog/cyberleek-mapping-the-actor-behind-the-leak.md"
        },
        {
            "id": "https://vulone.com/blog/flotilla-anatomy-of-an-undocumented-cross-platform-covert-browser-botnet-delivered-through-the-gcleaner-channel",
            "url": "https://vulone.com/blog/flotilla-anatomy-of-an-undocumented-cross-platform-covert-browser-botnet-delivered-through-the-gcleaner-channel",
            "title": "Flotilla: Anatomy of an Undocumented Cross-Platform Covert-Browser Botnet Delivered Through the GCleaner Channel",
            "summary": "An undocumented Turkish-language malware platform running a covert Electron browser botnet on Windows and arm64 agents on macOS, sharing one epoch-synced control plane. Full reverse engineering, live infrastructure verified.",
            "date_published": "2026-08-15T22:47:30Z",
            "date_modified": "2026-09-04T12:44:59Z",
            "tags": [
                "publication"
            ],
            "_markdown_url": "https://vulone.com/blog/flotilla-anatomy-of-an-undocumented-cross-platform-covert-browser-botnet-delivered-through-the-gcleaner-channel.md"
        },
        {
            "id": "https://vulone.com/blog/quake3-the-xss-moderator-who-wrote-revil",
            "url": "https://vulone.com/blog/quake3-the-xss-moderator-who-wrote-revil",
            "title": "QUAKE3, The XSS Moderator Who Wrote REvil",
            "summary": "",
            "date_published": "2026-08-13T18:12:42Z",
            "date_modified": "2026-09-06T03:51:39Z",
            "tags": [
                "publication"
            ],
            "_markdown_url": "https://vulone.com/blog/quake3-the-xss-moderator-who-wrote-revil.md"
        },
        {
            "id": "https://vulone.com/ransomware/kairos#047cad6c5c2870e5973173f707211ed6",
            "url": "https://vulone.com/ransomware/kairos",
            "title": "kairos claims Leisure Coast Kitchens",
            "date_published": "2026-09-16T19:48:05Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "kairos",
            "_victim": "Leisure Coast Kitchens",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/wallstreet#af8bfe29be53ee3aaf21c732add6b3f4",
            "url": "https://vulone.com/ransomware/wallstreet",
            "title": "Wallstreet claims Odyssey Charter School, Inc.",
            "date_published": "2026-09-16T18:43:47Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Wallstreet",
            "_victim": "Odyssey Charter School, Inc.",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/wallstreet#d3072b31743e10c77ccbeea83b256f4a",
            "url": "https://vulone.com/ransomware/wallstreet",
            "title": "Wallstreet claims Roshd Sanat",
            "date_published": "2026-09-16T18:43:47Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Wallstreet",
            "_victim": "Roshd Sanat",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/qilin#ca326da0a9c6876771e65adc2627cf97",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Reddrop Group",
            "date_published": "2026-09-16T18:43:41Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Reddrop Group",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/qilin#cac4c972d1372c0bf52a5db904a207a3",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims In The Company of Huskies",
            "date_published": "2026-09-16T18:43:40Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "In The Company of Huskies",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/inc_ransom#af4635fde421110d2d7821814df0ace4",
            "url": "https://vulone.com/ransomware/inc_ransom",
            "title": "inc ransom claims Trulite Glass & Aluminum Solutions",
            "date_published": "2026-09-16T17:44:50Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "inc ransom",
            "_victim": "Trulite Glass & Aluminum Solutions",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/inc_ransom#49417758c8a40bbbacf9628cbc37e1f4",
            "url": "https://vulone.com/ransomware/inc_ransom",
            "title": "inc ransom claims Partners Financial Services, a.s.",
            "date_published": "2026-09-16T17:44:08Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "inc ransom",
            "_victim": "Partners Financial Services, a.s.",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/qilin#00ed405a31a52b4c0a863cb64cb2eaae",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Thorndale Foundation",
            "date_published": "2026-09-16T17:43:36Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Thorndale Foundation",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/inc_ransom#5ec75c4f518aaaa9da115d3a1031b6ed",
            "url": "https://vulone.com/ransomware/inc_ransom",
            "title": "inc ransom claims aidon.com",
            "date_published": "2026-09-16T17:43:31Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "inc ransom",
            "_victim": "aidon.com",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/akira#0d2fcfaca2e589b5c28e51557dc67902",
            "url": "https://vulone.com/ransomware/akira",
            "title": "Akira claims Manders",
            "date_published": "2026-09-16T17:42:54Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Akira",
            "_victim": "Manders",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/akira#4922700df2e3d1e8b751da879516de3f",
            "url": "https://vulone.com/ransomware/akira",
            "title": "Akira claims Blossomland Accounting",
            "date_published": "2026-09-16T17:42:53Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Akira",
            "_victim": "Blossomland Accounting",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/akira#f8637d31306a4692d0bbb125fc992165",
            "url": "https://vulone.com/ransomware/akira",
            "title": "Akira claims Bee Maid Honey",
            "date_published": "2026-09-16T17:42:52Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Akira",
            "_victim": "Bee Maid Honey",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/inc_ransom#691c7864a7e9e85449a5c279a0486afd",
            "url": "https://vulone.com/ransomware/inc_ransom",
            "title": "inc ransom claims Zito Marketi",
            "date_published": "2026-09-16T17:41:47Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "inc ransom",
            "_victim": "Zito Marketi",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/inc_ransom#f4663590f54664d6ef43607f6e02a8db",
            "url": "https://vulone.com/ransomware/inc_ransom",
            "title": "inc ransom claims City of Princeton",
            "date_published": "2026-09-16T17:41:03Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "inc ransom",
            "_victim": "City of Princeton",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/inc_ransom#c291796f09f056697be4f59034694b5c",
            "url": "https://vulone.com/ransomware/inc_ransom",
            "title": "inc ransom claims Chicago History Museum",
            "date_published": "2026-09-16T17:40:16Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "inc ransom",
            "_victim": "Chicago History Museum",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/qilin#a21612990572656281027e368b43ef69",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Thema Foundries",
            "date_published": "2026-09-16T16:36:23Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Thema Foundries",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/arcus_media#715396af073482fbd3c26db9a12155e8",
            "url": "https://vulone.com/ransomware/arcus_media",
            "title": "arcus media claims ARDA",
            "date_published": "2026-09-16T16:35:45Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "arcus media",
            "_victim": "ARDA",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/panzer#fd711321000e3d70fbb23d605394b0a6",
            "url": "https://vulone.com/ransomware/panzer",
            "title": "Panzer claims Nielsen Design",
            "date_published": "2026-09-16T15:34:45Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Panzer",
            "_victim": "Nielsen Design",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/qilin#f50d3623b4af75fb7b9526fd6eb3a7fa",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Aarsleff",
            "date_published": "2026-09-16T06:36:03Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Aarsleff",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/dragonforce#56e9dbb50e1bf1597f9e307379a980c4",
            "url": "https://vulone.com/ransomware/dragonforce",
            "title": "dragonforce claims Community Property Management",
            "date_published": "2026-09-16T06:35:31Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "dragonforce",
            "_victim": "Community Property Management",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/dragonforce#3b3aef4457fb05d32c609798669bbd09",
            "url": "https://vulone.com/ransomware/dragonforce",
            "title": "dragonforce claims Owen Leigh Optometry",
            "date_published": "2026-09-16T06:35:30Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "dragonforce",
            "_victim": "Owen Leigh Optometry",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/qilin#3faee48452eeec8db8dedc92cec5dd67",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Aarsleff",
            "date_published": "2026-09-16T04:01:03Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Aarsleff",
            "_victim_domain": "aarsleff.se",
            "_sector": "Manufacturing",
            "_country": "SE"
        },
        {
            "id": "https://vulone.com/ransomware/dragonforce#3d4d70dd80465b72f6a8a5f2436ecb68",
            "url": "https://vulone.com/ransomware/dragonforce",
            "title": "dragonforce claims Community Property Management",
            "date_published": "2026-09-16T03:55:01Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "dragonforce",
            "_victim": "Community Property Management",
            "_victim_domain": "cpm1.com",
            "_sector": "Other",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/dragonforce#f14661799f45a9cf45ea64c6ae2de99e",
            "url": "https://vulone.com/ransomware/dragonforce",
            "title": "dragonforce claims Owen Leigh Optometry",
            "date_published": "2026-09-16T03:54:08Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "dragonforce",
            "_victim": "Owen Leigh Optometry",
            "_victim_domain": "owenleighoptometry.co.uk",
            "_sector": "Healthcare",
            "_country": "GB"
        },
        {
            "id": "https://vulone.com/ransomware/vexy#c66347025c0b55c7574bcf18ff24d839",
            "url": "https://vulone.com/ransomware/vexy",
            "title": "vexy claims Hashimoto Jimuki",
            "date_published": "2026-09-15T21:36:00Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "vexy",
            "_victim": "Hashimoto Jimuki",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/safepay#94952db6d78aa7de161ab3d25aa9fae9",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims marlinhvac.com",
            "date_published": "2026-09-15T21:35:53Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "marlinhvac.com",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/safepay#8cc8a956d87d0e974d23c5565c8eec7d",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims neumerkel-gmbh.de",
            "date_published": "2026-09-15T21:35:52Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "neumerkel-gmbh.de",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/safepay#b565649514c58b737a0767bea22566b1",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims triniticaring.org",
            "date_published": "2026-09-15T21:35:51Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "triniticaring.org",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/safepay#6c445ac921dcf945ea3e263c83231cbd",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims laconcepcion.com.mx",
            "date_published": "2026-09-15T21:35:50Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "laconcepcion.com.mx",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/safepay#294c4c7157ad36597dbe66ba3f9d1bfe",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims meterex.com",
            "date_published": "2026-09-15T21:35:50Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "meterex.com",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/safepay#15764e0a340fceecede4ab0fd46a40c9",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims stoecklin-kuechen.ch",
            "date_published": "2026-09-15T21:35:49Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "stoecklin-kuechen.ch",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/safepay#6e339dedbd06e0b6e29c9a85dc307d1a",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims ryomo.co.jp",
            "date_published": "2026-09-15T21:35:48Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "ryomo.co.jp",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/safepay#2219069ffdec82dca8d520d9df0a802e",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims ara-lyss.ch",
            "date_published": "2026-09-15T21:35:47Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "ara-lyss.ch",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/safepay#37a97094f8ab43ac7c1c73cee71e4942",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims gob.pe",
            "date_published": "2026-09-15T21:35:46Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "gob.pe",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/interlock#721e619535f3da9e6a89d3fb189132a5",
            "url": "https://vulone.com/ransomware/interlock",
            "title": "interlock claims Springfield Public Schools",
            "date_published": "2026-09-15T20:33:22Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "interlock",
            "_victim": "Springfield Public Schools",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/vexy_ransomware#4da5fc249f942295f1c6f3933f9700fa",
            "url": "https://vulone.com/ransomware/vexy_ransomware",
            "title": "Vexy Ransomware claims Hashimoto Jimuki",
            "date_published": "2026-09-15T19:58:08Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Vexy Ransomware",
            "_victim": "Hashimoto Jimuki",
            "_victim_domain": "aoa21.com",
            "_sector": "Manufacturing",
            "_country": "JP"
        },
        {
            "id": "https://vulone.com/ransomware/safepay#eaec7ce8c209386576f92725d4a30b41",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims marlinhvac.com",
            "date_published": "2026-09-15T19:33:37Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "marlinhvac.com",
            "_victim_domain": "marlinhvac.com",
            "_sector": "Manufacturing",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/safepay#9f6d1f82ec1c678cc6dc23d87d052ccc",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims neumerkel-gmbh.de",
            "date_published": "2026-09-15T19:33:01Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "neumerkel-gmbh.de",
            "_victim_domain": "neumerkel-gmbh.de",
            "_sector": "Manufacturing",
            "_country": "DE"
        },
        {
            "id": "https://vulone.com/ransomware/safepay#32fe25f81b65390f2a762fbc47bb63ae",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims triniticaring.org",
            "date_published": "2026-09-15T19:32:29Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "triniticaring.org",
            "_victim_domain": "triniticaring.org",
            "_sector": "Healthcare",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/safepay#275bf1c131f0af72284312d7433b049b",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims laconcepcion.com.mx",
            "date_published": "2026-09-15T19:31:55Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "laconcepcion.com.mx",
            "_victim_domain": "laconcepcion.com.mx",
            "_sector": "Retail & E-Commerce",
            "_country": "MX"
        },
        {
            "id": "https://vulone.com/ransomware/safepay#52f0612e59ae1682156a70762e6c7ddd",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims meterex.com",
            "date_published": "2026-09-15T19:31:20Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "meterex.com",
            "_victim_domain": "meterex.com",
            "_sector": "Technology",
            "_country": "DE"
        },
        {
            "id": "https://vulone.com/ransomware/safepay#45ed1d300bb2e25a1a01ba2b063c6f78",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims stoecklin-kuechen.ch",
            "date_published": "2026-09-15T19:30:46Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "stoecklin-kuechen.ch",
            "_victim_domain": "stoecklin-kuechen.ch",
            "_sector": "Retail & E-Commerce",
            "_country": "CH"
        },
        {
            "id": "https://vulone.com/ransomware/safepay#375e7ff2f8c124d0427425cd2829564e",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims ryomo.co.jp",
            "date_published": "2026-09-15T19:30:13Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "ryomo.co.jp",
            "_victim_domain": "ryomo.co.jp",
            "_sector": "Not Found",
            "_country": "JP"
        },
        {
            "id": "https://vulone.com/ransomware/safepay#c643a667938134d6855990b3b569c18d",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims ara-lyss.ch",
            "date_published": "2026-09-15T19:29:39Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "ara-lyss.ch",
            "_victim_domain": "ara-lyss.ch",
            "_sector": "Professional Services",
            "_country": "CH"
        },
        {
            "id": "https://vulone.com/ransomware/safepay#85278b2e66e3e4bcefa0e7f4c298554d",
            "url": "https://vulone.com/ransomware/safepay",
            "title": "safepay claims gob.pe",
            "date_published": "2026-09-15T19:29:06Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "safepay",
            "_victim": "gob.pe",
            "_victim_domain": "gob.pe",
            "_sector": "Government & Defense",
            "_country": "PE"
        },
        {
            "id": "https://vulone.com/ransomware/insomnia#e12b0b05039be8d18c40fd92ee6adb9e",
            "url": "https://vulone.com/ransomware/insomnia",
            "title": "insomnia claims Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC",
            "date_published": "2026-09-15T19:25:43Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "insomnia",
            "_victim": "Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/interlock#3e25b3c44a01c1bee412c83e126e8978",
            "url": "https://vulone.com/ransomware/interlock",
            "title": "interlock claims Springfield Public Schools",
            "date_published": "2026-09-15T18:58:09Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "interlock",
            "_victim": "Springfield Public Schools",
            "_victim_domain": "springfieldpublicschools.com",
            "_sector": "Education",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/panzer#d3a75d0db694a17aad8a6ba56d2a800b",
            "url": "https://vulone.com/ransomware/panzer",
            "title": "Panzer claims Honda (Peru)",
            "date_published": "2026-09-15T18:26:46Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Panzer",
            "_victim": "Honda (Peru)",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/ransomhouse#14da4a13fab366c3ea5621a10b66a9d0",
            "url": "https://vulone.com/ransomware/ransomhouse",
            "title": "ransomhouse claims [DISCLOSED] California School Employees Association",
            "date_published": "2026-09-15T17:38:04Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "ransomhouse",
            "_victim": "[DISCLOSED] California School Employees Association",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/interlock#fb17ab83203dc86fcc67ff5aa8783ead",
            "url": "https://vulone.com/ransomware/interlock",
            "title": "interlock claims City of Fort Smith Arkansas",
            "date_published": "2026-09-15T17:37:34Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "interlock",
            "_victim": "City of Fort Smith Arkansas",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/dark_project#89617fb2c0ad4a789adb4d3d159c6f3d",
            "url": "https://vulone.com/ransomware/dark_project",
            "title": "dark project claims Cumar Marble & Granite",
            "date_published": "2026-09-15T17:37:28Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "dark project",
            "_victim": "Cumar Marble & Granite",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/arcus_media#551125c175e3b01233f711a325d0dbc4",
            "url": "https://vulone.com/ransomware/arcus_media",
            "title": "arcus media claims Asada Sarapiqu",
            "date_published": "2026-09-15T17:37:20Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "arcus media",
            "_victim": "Asada Sarapiqu",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/akira#3dc9c8b1540bc9388d6685b0a7578594",
            "url": "https://vulone.com/ransomware/akira",
            "title": "Akira claims Southern California Telephone Company",
            "date_published": "2026-09-15T17:37:19Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Akira",
            "_victim": "Southern California Telephone Company",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/akira#215e0d3b7ab68e1b8f2f9f2ad08947f1",
            "url": "https://vulone.com/ransomware/akira",
            "title": "Akira claims Lazyboyz",
            "date_published": "2026-09-15T17:37:18Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Akira",
            "_victim": "Lazyboyz",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/akira#1a4bf5cc38c9477c9ab27df130804808",
            "url": "https://vulone.com/ransomware/akira",
            "title": "Akira claims Pilot Precision",
            "date_published": "2026-09-15T17:37:17Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Akira",
            "_victim": "Pilot Precision",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/insomnia#3b5d30e065c95a0f8083fad74f4d24e6",
            "url": "https://vulone.com/ransomware/insomnia",
            "title": "insomnia claims Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC",
            "date_published": "2026-09-15T17:30:14Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "insomnia",
            "_victim": "Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC",
            "_victim_domain": "wigginschilds.com",
            "_sector": "Professional Services",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/qilin#b6a036b6f282bb3f1b0893c624ab1684",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Montana Civil Contractors",
            "date_published": "2026-09-15T16:47:32Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Montana Civil Contractors",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/qilin#adc43d1095d322983f0de252baab4d73",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Taurus Ibérica",
            "date_published": "2026-09-15T16:47:31Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Taurus Ibérica",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/interlock#9bb45e7724eead3f2fbccb04e9e02c43",
            "url": "https://vulone.com/ransomware/interlock",
            "title": "interlock claims City of Fort Smith Arkansas",
            "date_published": "2026-09-15T15:31:16Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "interlock",
            "_victim": "City of Fort Smith Arkansas",
            "_victim_domain": "fortsmithar.gov",
            "_sector": "Government & Defense",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/dark_project#1225f7e08ab806fd1c7180026140daa2",
            "url": "https://vulone.com/ransomware/dark_project",
            "title": "dark project claims Cumar Marble & Granite",
            "date_published": "2026-09-15T15:21:02Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "dark project",
            "_victim": "Cumar Marble & Granite",
            "_victim_domain": "cumar.com",
            "_sector": "Manufacturing",
            "_country": "TR"
        },
        {
            "id": "https://vulone.com/ransomware/qilin#c56bc44b62af32c2845a6e1aeb21d37e",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Taurus Ibérica",
            "date_published": "2026-09-15T15:01:54Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Taurus Ibérica",
            "_victim_domain": "taurusiberica.com",
            "_sector": "Manufacturing",
            "_country": "ES"
        },
        {
            "id": "https://vulone.com/ransomware/akira#5ae9e3b72e8c76b14cafc6e65b969a93",
            "url": "https://vulone.com/ransomware/akira",
            "title": "Akira claims Pilot Precision",
            "date_published": "2026-09-15T14:53:24Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Akira",
            "_victim": "Pilot Precision",
            "_victim_domain": "",
            "_sector": "Manufacturing",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/qilin#1a75fe0c7692da69ef102352fa9d3415",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims ADM",
            "date_published": "2026-09-15T14:39:57Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "ADM",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/qilin#4d6eaba48f08ed5572ae625bbc856842",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Resolve Law Group",
            "date_published": "2026-09-15T14:39:56Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Resolve Law Group",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/akira#a568f5c33304823e7c2f047dff7560c8",
            "url": "https://vulone.com/ransomware/akira",
            "title": "Akira claims Lazyboyz",
            "date_published": "2026-09-15T14:22:06Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Akira",
            "_victim": "Lazyboyz",
            "_victim_domain": "lazyboyz.no",
            "_sector": "Other",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/qilin#44cb1df8b5d681b5ef261fede38bc4eb",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Montana Civil Contractors",
            "date_published": "2026-09-15T14:02:02Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Montana Civil Contractors",
            "_victim_domain": "montanacivil.com",
            "_sector": "Manufacturing",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/akira#a59dc46e331dfe50eb16febc131b2d51",
            "url": "https://vulone.com/ransomware/akira",
            "title": "Akira claims Southern California Telephone Company",
            "date_published": "2026-09-15T13:53:02Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Akira",
            "_victim": "Southern California Telephone Company",
            "_victim_domain": "",
            "_sector": "Energy & Utilities",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/qilin#678d702d9c937b3c5f1de41084de1fe9",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Resolve Law Group",
            "date_published": "2026-09-15T13:03:21Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Resolve Law Group",
            "_victim_domain": "resolvelawgroup.com",
            "_sector": "Professional Services",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/qilin#32a17646e3317e802f9ab7cf5c9c59f6",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Incrys",
            "date_published": "2026-09-15T12:40:20Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Incrys",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/qilin#dce54aaf523c67311b50087ca3610254",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Bravo Group",
            "date_published": "2026-09-15T12:40:19Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Bravo Group",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/qilin#58f15880844bd2c1caddad96677d0625",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims ADM",
            "date_published": "2026-09-15T12:01:12Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "ADM",
            "_victim_domain": "adm.com",
            "_sector": "Agriculture and Food Production",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/metaencryptor#21d2b785fece42d8788a580cc950261b",
            "url": "https://vulone.com/ransomware/metaencryptor",
            "title": "metaencryptor claims SFA Engineering Corporation",
            "date_published": "2026-09-15T11:59:46Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "metaencryptor",
            "_victim": "SFA Engineering Corporation",
            "_victim_domain": "sfa.co.kr",
            "_sector": "Manufacturing",
            "_country": "KR"
        },
        {
            "id": "https://vulone.com/ransomware/metaencryptor#c856f9e5e4a9c2970eb8b970e32fedcf",
            "url": "https://vulone.com/ransomware/metaencryptor",
            "title": "metaencryptor claims Nippon Steel Corporation",
            "date_published": "2026-09-15T11:59:12Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "metaencryptor",
            "_victim": "Nippon Steel Corporation",
            "_victim_domain": "nipponsteel.com",
            "_sector": "Manufacturing",
            "_country": "JP"
        },
        {
            "id": "https://vulone.com/ransomware/arcusmedia#aea232bd6a43d697139c32bd1b792b61",
            "url": "https://vulone.com/ransomware/arcusmedia",
            "title": "arcusmedia claims Asada Sarapiqu",
            "date_published": "2026-09-15T11:52:38Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "arcusmedia",
            "_victim": "Asada Sarapiqu",
            "_victim_domain": "asadasarapiqui.com",
            "_sector": "Agriculture and Food Production",
            "_country": "CR"
        },
        {
            "id": "https://vulone.com/ransomware/iah647#b6c2ad86acdb01093bb9c8a58a02b299",
            "url": "https://vulone.com/ransomware/iah647",
            "title": "iah647 claims veritiv",
            "date_published": "2026-09-15T11:39:16Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "iah647",
            "_victim": "veritiv",
            "_victim_domain": "",
            "_sector": "",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/qilin#80b746c0629fcefcd290d33775b3f31c",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Incrys",
            "date_published": "2026-09-15T11:03:33Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Incrys",
            "_victim_domain": "incrys.com",
            "_sector": "Not Found",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/qilin#58ee30c453886c9f0970a644dd331c99",
            "url": "https://vulone.com/ransomware/qilin",
            "title": "qilin claims Bravo Group",
            "date_published": "2026-09-15T11:02:55Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "qilin",
            "_victim": "Bravo Group",
            "_victim_domain": "bravotankers.com",
            "_sector": "Not Found",
            "_country": "SG"
        },
        {
            "id": "https://vulone.com/ransomware/storm#547a4f8eaa230412800ece14013146b6",
            "url": "https://vulone.com/ransomware/storm",
            "title": "Storm claims McCarthy Tire Service",
            "date_published": "2026-09-15T10:47:23Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Storm",
            "_victim": "McCarthy Tire Service",
            "_victim_domain": "mccarthytire.com",
            "_sector": "Retail & E-Commerce",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/storm#31d0770426077f9f70fe76d678169630",
            "url": "https://vulone.com/ransomware/storm",
            "title": "Storm claims PANTHERx Rare",
            "date_published": "2026-09-15T10:46:52Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Storm",
            "_victim": "PANTHERx Rare",
            "_victim_domain": "pantherxrare.com",
            "_sector": "Healthcare",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/storm#45b29db93ca07f69332aacce4136def2",
            "url": "https://vulone.com/ransomware/storm",
            "title": "Storm claims Insight Credit Union",
            "date_published": "2026-09-15T10:46:21Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "Storm",
            "_victim": "Insight Credit Union",
            "_victim_domain": "insightcreditunion.com",
            "_sector": "Financial Services",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#8682d57c6a702a22645b253cc76591d7",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims ACA Pescara",
            "date_published": "2026-09-15T07:17:26Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "ACA Pescara",
            "_victim_domain": "aca.pescara.it",
            "_sector": "Energy & Utilities",
            "_country": "IT"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#14796a8b0ac7512a7bfb67596ca9186e",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Hattiesburg Eye Clinic",
            "date_published": "2026-09-15T07:17:04Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Hattiesburg Eye Clinic",
            "_victim_domain": "hattiesburgeyeclinic.com",
            "_sector": "Healthcare",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#544a890a84140b9e8c6ec960e2ec5ea4",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Indic",
            "date_published": "2026-09-15T07:16:43Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Indic",
            "_victim_domain": "indicelectronics.com",
            "_sector": "Technology",
            "_country": "IN"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#fd4aa03cb33529f49d33617c4b910a4c",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Aurora Technologies",
            "date_published": "2026-09-15T07:16:22Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Aurora Technologies",
            "_victim_domain": "ati-1.com",
            "_sector": "Technology",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#4161c568423c3ed36624fc78a3b66ea3",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Goteborgsregionens Tekniska Gymnasium",
            "date_published": "2026-09-15T07:16:09Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Goteborgsregionens Tekniska Gymnasium",
            "_victim_domain": "gtg.se",
            "_sector": "Education",
            "_country": "SE"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#11fdac84326e72ad6bb73275dfe9117e",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Alchin Long Group",
            "date_published": "2026-09-15T07:15:50Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Alchin Long Group",
            "_victim_domain": "alchinlong.com",
            "_sector": "Other",
            "_country": "SG"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#f181801f0fb41353eb38e545f374fadf",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Gelarti",
            "date_published": "2026-09-15T07:15:29Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Gelarti",
            "_victim_domain": "gelarti.com.pe",
            "_sector": "Other",
            "_country": "PE"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#07418b901a4f11eca94ddec8e21d8329",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Balkan Polymers",
            "date_published": "2026-09-15T07:15:09Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Balkan Polymers",
            "_victim_domain": "balkanpolymers.com",
            "_sector": "Manufacturing",
            "_country": "BG"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#1a032cc3e0902a9e0f140e83a3bf0906",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Cedars Foods",
            "date_published": "2026-09-15T07:14:48Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Cedars Foods",
            "_victim_domain": "cedarsfoods.com",
            "_sector": "Agriculture and Food Production",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#df558b8e59187f5b2b512882ab6a38f6",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Agenzia Vittoria Assicurazioni",
            "date_published": "2026-09-15T07:14:27Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Agenzia Vittoria Assicurazioni",
            "_victim_domain": "assicurazionilodi.it",
            "_sector": "Financial Services",
            "_country": "IT"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#dc19dea318131af9f77057dee250b946",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Downrite Engineering",
            "date_published": "2026-09-15T07:14:07Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Downrite Engineering",
            "_victim_domain": "downrite.com",
            "_sector": "Manufacturing",
            "_country": "US"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#604561a214572e04ec0bb5e65decfe45",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Neff Drexel",
            "date_published": "2026-09-15T07:13:46Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Neff Drexel",
            "_victim_domain": "neff-drexel.ch",
            "_sector": "Manufacturing",
            "_country": "CH"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#3b49faee80900eae3b6cd6d085989a1e",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Iveta",
            "date_published": "2026-09-15T07:13:26Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Iveta",
            "_victim_domain": "iveta.hr",
            "_sector": "Not Found",
            "_country": "HR"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#e421440b942a36399f7104c1f1197105",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Humboldt",
            "date_published": "2026-09-15T07:13:05Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Humboldt",
            "_victim_domain": "humboldt.com.br",
            "_sector": "Other",
            "_country": "BR"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#32fdc2256f57b0bbe3521421c3349057",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims High Oakham Primary School",
            "date_published": "2026-09-15T07:12:45Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "High Oakham Primary School",
            "_victim_domain": "highoakham.co.uk",
            "_sector": "Education",
            "_country": "GB"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#7c71765c0df4ed2946a96cc1dfd18aa0",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Tentac",
            "date_published": "2026-09-15T07:12:24Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Tentac",
            "_victim_domain": "tentac.co.jp",
            "_sector": "Technology",
            "_country": "JP"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#ce4f2256a37c33efecd69a2043913f87",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Dome Gold Mines",
            "date_published": "2026-09-15T07:12:00Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Dome Gold Mines",
            "_victim_domain": "",
            "_sector": "Manufacturing",
            "_country": ""
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#2224a0df33705fd3c322529db8a5508e",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Dang Invest Group",
            "date_published": "2026-09-15T07:11:41Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Dang Invest Group",
            "_victim_domain": "danginvestgroup.com",
            "_sector": "Financial Services",
            "_country": "VN"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#2ee30b25f03e217b562e31f58cfd8616",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims BGR Energy Systems",
            "date_published": "2026-09-15T07:11:20Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "BGR Energy Systems",
            "_victim_domain": "bgrcorp.com",
            "_sector": "Energy & Utilities",
            "_country": "IN"
        },
        {
            "id": "https://vulone.com/ransomware/thegentlemen#0bb28543715780e1840da6b243778461",
            "url": "https://vulone.com/ransomware/thegentlemen",
            "title": "thegentlemen claims Ardom Eilot",
            "date_published": "2026-09-15T07:11:00Z",
            "tags": [
                "leak-site-claim"
            ],
            "_group": "thegentlemen",
            "_victim": "Ardom Eilot",
            "_victim_domain": "ardomeilot.com",
            "_sector": "Not Found",
            "_country": "IL"
        }
    ]
}