Ransomware Victims on Dark Web – 10th March, 2025

Note: No files or stolen information are hosted or disclosed in this report. Any legal issues relating to the content of the files should be directed at the attackers directly. This summary is solely for informational purposes.

D’Carosolutions – Ransomhub

Threat Actor: Ransomhub
Victim: www.dcarosolutions.com
Industry: Manufacturing
Details of Breach: The ransomware leak page for D’Carosolutions indicates a potential compromise of sensitive information. The page features three images that may provide insights into the extent of the breach. However, specific details regarding the content of these images are not disclosed. The absence of download links suggests that the information is limited to visual representation rather than accessible files.

British Virgin Islands London Office – Rhysida

Threat Actor: Rhysida
Victim: British Virgin Islands London Office
Industry: Government
Details of Breach: The leak page for the British Virgin Islands London Office does not provide explicit mentions of a data compromise but indicates the potential involvement of the Rhysida group. The absence of specific details about the breach or sensitive information raises questions about the incident’s timeline and implications for public sector data security.

Syma-System – Play

Threat Actor: Play
Victim: Syma-System
Industry: Technology
Details of Breach: The ransomware leak page for Syma-System reveals a significant data compromise with over 90 GB of sensitive documents reported as compromised. A screenshot is included, hinting at the nature of the leaked data, although specific details remain unspecified. The leak poses serious risks to the company’s operations and customer trust.

Jerue Companies – Play

Threat Actor: Play
Victim: Jerue Companies
Industry: transportation
Details of Breach: The ransomware leak page for Jerue Companies highlights a significant data breach with unspecified details regarding the nature of the compromise. A screenshot is included, suggesting potential exposure of sensitive data. The absence of a specific compromise date leaves uncertainty about the incident’s timeline.

T J Machine & Tool – Play

Threat Actor: Play
Victim: T J Machine & Tool
Industry: Manufacturing
Details of Breach: The ransomware leak page for T J Machine & Tool indicates a data compromise affecting the manufacturing sector. While specific details about the data types stolen are not provcccided, a screenshot suggests potential exposure of internal documents, emphasizing the need for robust cybersecurity measures.

Compound Solutions – Play

Threat Actor: Play
Victim: Compound Solutions
Industry: Food
Details of Breach: The leak page for Compound Solutions indicates a significant data breach, with sensitive information potentially compromised. The presence of a screenshot highlights the severity of the incident, although specific details or download links are not provided. The situation underscores the critical need for enhanced cybersecurity measures.

Gevril – Play

Threat Actor: Play
Victim: Gevril
Industry: Manufacturing
Details of Breach: The ransomware leak page for Gevril reveals potential exposure of sensitive company data. The page includes a screenshot indicating the severity of the breach, although details regarding the specific nature of the data are not disclosed. This situation highlights ongoing cybersecurity threats within the industry.

Peak Season – Play

Threat Actor: Play
Victim: Peak Season
Industry: Manufacturing
Details of Breach: The ransomware leak page for Peak Season indicates that sensitive information has been compromised, although specific details about the nature of the data are not available. A screenshot is included to provide context for the breach, emphasizing the need for vigilant cybersecurity practices.

Clawson Honda – Play

Threat Actor: Play
Victim: Clawson Honda
Industry: Automotive
Details of Breach: The leak page associated with Clawson Honda indicates a significant data compromise affecting the organization. Specific details regarding the data types stolen are not provided, but the presence of a screenshot suggests potential exposure of critical information. The incident raises serious concerns regarding data security in the automotive sector.

Yorke & Curtis – Play

Threat Actor: Play
Victim: Yorke & Curtis
Industry: Construction
Details of Breach: The ransomware leak page for Yorke & Curtis reveals a significant data compromise affecting the company. The incident was discovered on March 9, 2025. While specific details about the data types compromised are not provided, the presence of a screenshot suggests potential exposure of sensitive information. The breach underscores the need for robust cybersecurity measures within the construction sector.

Holiday Comfort – Play

Threat Actor: Play
Victim: Holiday Comfort
Industry: Hospitality
Details of Breach: The ransomware leak page for Holiday Comfort indicates a recent data breach linked to the Play group. Although specific details of the compromised data are not available, the leak suggests that sensitive internal information may be at risk. A screenshot is included to highlight the severity of the breach, raising concerns about data security within the hospitality industry.

Buckley BalaWilson Mew – Play

Threat Actor: Play
Victim: Buckley BalaWilson Mew
Industry: Legal
Details of Breach: The ransomware leak page for Buckley BalaWilson Mew indicates a compromise involving sensitive information. A screenshot shows internal documents related to the company, although specific details about the data stolen remain unspecified. This incident raises significant concerns regarding data exposure and cybersecurity protocols.

Dectron – Play

Threat Actor: Play
Victim: Dectron
Industry: Technology
Details of Breach: The ransomware leak page for Dectron indicates a potential data compromise. Although specific details about the nature of the breach are not provided, a screenshot suggests that sensitive internal documents may have been exposed. The incident highlights ongoing cybersecurity challenges faced by organizations in the technology sector.

State Bar of Texas – Incransom

Threat Actor: Incransom
Victim: State Bar of Texas
Industry: Legal
Details of Breach: The ransomware leak page for the State Bar of Texas discloses potential compromises of sensitive data. The page, discovered on March 9, 2025, implies that internal documents may have been exposed, raising concerns about data security in the legal sector. The absence of specific details leaves uncertainties regarding the extent of the breach.

Greenwood Village South GVS – Incransom

Threat Actor: Incransom
Victim: Greenwood Village South GVS
Industry: Healthcare
Details of Breach: The ransomware leak page related to Greenwood Village South highlights a data compromise affecting the retirement community. The leak suggests potential exposure of sensitive information, with a screenshot illustrating the severity of the breach. The incident emphasizes the importance of cybersecurity in the healthcare industry.

Nor Arc – Play

Threat Actor: Play
Victim: Nor Arc
Industry: Manufacturing
Details of Breach: The ransomware leak page for Nor Arc indicates a significant data compromise. Although specific details regarding the nature of the breach are unavailable, the presence of a screenshot suggests potential exposure of sensitive data. This incident raises concerns about cybersecurity vulnerabilities within the organization.

Baldauf Architekten – Incransom

Threat Actor: Incransom
Victim: Baldauf Architekten
Industry: Architecture
Details of Breach: The ransomware leak page for Baldauf Architekten reveals a significant breach involving sensitive data related to the architectural firm. The page includes a screenshot indicating the nature of the compromised data, although specifics remain redacted. This raises concerns regarding data security in the architecture sector.

Berks County Bar Association – Incransom

Threat Actor: Incransom
Victim: Berks County Bar Association
Industry: Legal
Details of Breach: The ransomware leak page for the Berks County Bar Association indicates a potential compromise of sensitive organizational data. The leak suggests that internal documents may have been exposed, posing risks to public trust and operational integrity in the legal sector.

Emperor’s College – Incransom

Threat Actor: Incransom
Victim: emperors.edu
Industry: Education
Details of Breach: The ransomware leak page for Emperor’s College of Traditional Oriental Medicine highlights a significant data breach affecting the institution. Discovered on March 9, 2025, the leak suggests potential exposure of sensitive information related to students and faculty. The presence of a screenshot indicates the severity of the breach, although specific details about the compromised data are not disclosed. This incident underscores the importance of cybersecurity in educational institutions.

Wohnungsgesellschaft Kaiserbäder – Incransom

Threat Actor: Incransom
Victim: wog-kaiserbaeder.de
Industry: Real Estate
Details of Breach: The ransomware leak page for Wohnungsgesellschaft Kaiserbäder indicates a data compromise involving sensitive information related to the company’s operations. The leak was discovered on March 9, 2025, and suggests potential risks to customer and operational data. A screenshot provides some visual context, but specific details about the data compromised remain unspecified. This incident emphasizes the need for stringent cybersecurity measures in the real estate sector.

K Labs – Funksec

Threat Actor: Funksec
Victim: klabs.it
Industry: Education
Details of Breach: The ransomware leak page for K Labs indicates a serious data compromise, with approximately 50 GB of sensitive material reported as compromised. The leak includes various types of sensitive documents related to ICT and digital training programs. Screenshots illustrate the severity of the breach, and the page suggests potential download links for the compromised data. This incident highlights the critical need for robust cybersecurity measures in educational institutions.

ACTi Corporation – Lynx

Threat Actor: Lynx
Victim: ACTi Corporation
Industry: Technology
Details of Breach: The ransomware leak page for ACTi Corporation reveals a significant data breach in which sensitive company information may have been exposed. Discovered on March 9, 2025, the leak suggests that various internal documents could be at risk. A screenshot is included, indicating the seriousness of the incident, although specific details about the nature of the data compromised are not provided. The incident underscores the ongoing cybersecurity threats faced by technology firms.

Summary