{ "today": { "generated_at": "2026-11-07T11:05:38.752Z", "as_of": "2026-11-07", "window_days": 14, "notice_window_days": 120, "min_classes": 2, "convergences": [ { "entity_key": "insightcreditunion", "name": "Insight Credit Union", "classes": [ "leak", "notice", "press" ], "parties": [ "attacker", "victim" ], "corroboration": 1, "first_ts": "2026-09-15T10:46:21.469Z", "last_ts": "2026-11-06T23:59:59.000Z", "days_to_converge": 52.6, "converged_at": "2026-11-06T23:59:59.000Z", "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-09-15T10:46:21.469Z", "seen": "2026-09-16T09:30:04.308Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Insight Credit Union listed by Storm", "ref": "SW5zaWdodCBDcmVkaXQgVW5pb25AU3Rvcm0=", "url": "https://www.ransomware.live/id/SW5zaWdodCBDcmVkaXQgVW5pb25AU3Rvcm0=" }, { "ts": "2026-10-11T15:00:00.000Z", "seen": "2026-10-28T21:24:22.910Z", "source_class": "press", "source": "AhnLab ASEC", "kind": "press-mention", "label": "AhnLab ASEC: Security Issues in the Korean & Global Financial Sector in September 2026", "ref": "https://asec.ahnlab.com/en/96155/", "url": "https://asec.ahnlab.com/en/96155/" }, { "ts": "2026-11-06T23:59:59.000Z", "seen": "2026-11-07T11:04:58.886Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Insight Credit Union filed a breach notice with the Texas Attorney General, 656 affected", "ref": "tx-ag:BR-0005499", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "photonhealth", "name": "Photon Health", "classes": [ "leak", "litigation", "notice" ], "parties": [ "attacker", "victim" ], "corroboration": 3, "first_ts": "2026-08-19T00:55:57.169Z", "last_ts": "2026-10-31T11:06:58.555Z", "days_to_converge": 72.4, "converged_at": "2026-10-30T11:04:46.414Z", "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-08-19T00:55:57.169Z", "seen": "2026-08-19T09:30:03.443Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Photon Health, Inc. listed by direwolf", "ref": "UGhvdG9uIEhlYWx0aCwgSW5jLkBkaXJld29sZg==", "url": "https://www.ransomware.live/id/UGhvdG9uIEhlYWx0aCwgSW5jLkBkaXJld29sZg==" }, { "ts": "2026-08-25T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Carey v. Photon Health Inc (District Court, S.D. New York)", "ref": "https://www.courtlistener.com/docket/74696320/1/carey-v-photon-health-inc/", "url": "https://www.courtlistener.com/docket/74696320/1/carey-v-photon-health-inc/" }, { "ts": "2026-08-28T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Horne v. Photon Health, Inc. (District Court, S.D. New York)", "ref": "https://www.courtlistener.com/docket/74715844/1/horne-v-photon-health-inc/", "url": "https://www.courtlistener.com/docket/74715844/1/horne-v-photon-health-inc/" }, { "ts": "2026-09-02T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Marshall v. Photon Health, Inc. (District Court, S.D. New York)", "ref": "https://www.courtlistener.com/docket/74739157/1/marshall-v-photon-health-inc/", "url": "https://www.courtlistener.com/docket/74739157/1/marshall-v-photon-health-inc/" }, { "ts": "2026-10-30T11:04:46.414Z", "seen": "2026-10-30T11:04:46.414Z", "source_class": "notice", "source": "ca-ag", "kind": "breach-notice", "label": "Photon Health filed a breach notice with the California Attorney General", "ref": "ca-ag:sb24-632026", "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-632026" }, { "ts": "2026-10-31T11:06:58.555Z", "seen": "2026-10-31T11:06:58.555Z", "source_class": "notice", "source": "hhs-ocr", "kind": "breach-notice", "label": "Photon Health filed a breach notice with HHS OCR, 30,625 affected", "ref": "hhs-ocr:1500573", "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf" } ] }, { "entity_key": "fisher59", "name": "Fisher59, LLC", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "corroboration": 0, "first_ts": "2026-10-20T03:57:32.679Z", "last_ts": "2026-11-06T23:59:59.000Z", "days_to_converge": 17.8, "converged_at": "2026-11-06T23:59:59.000Z", "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-10-20T03:57:32.679Z", "seen": "2026-10-20T09:30:02.215Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Fisher59 listed by anubis", "ref": "RmlzaGVyNTlAYW51Ymlz", "url": "https://www.ransomware.live/id/RmlzaGVyNTlAYW51Ymlz" }, { "ts": "2026-11-06T23:59:59.000Z", "seen": "2026-11-07T11:04:58.886Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Fisher59, LLC filed a breach notice with the Texas Attorney General, 627 affected", "ref": "tx-ag:BR-0005496", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "parkdental", "name": "Park Dental Partners, Inc.", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "corroboration": 0, "first_ts": "2026-10-01T12:26:41.502Z", "last_ts": "2026-11-06T23:59:59.000Z", "days_to_converge": 36.5, "converged_at": "2026-11-06T23:59:59.000Z", "curated": true, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-10-01T12:26:41.502Z", "seen": "2026-10-02T09:30:02.149Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "parkdental.com listed by chaos", "ref": "cGFya2RlbnRhbC5jb21AY2hhb3M=", "url": "https://www.ransomware.live/id/cGFya2RlbnRhbC5jb21AY2hhb3M=" }, { "ts": "2026-11-06T23:59:59.000Z", "seen": "2026-11-07T11:04:58.886Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Park Dental Partners, Inc. filed a breach notice with the Texas Attorney General, 2,481 affected", "ref": "tx-ag:BR-0005494", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "nuevaschool", "name": "The Nueva School", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "corroboration": 0, "first_ts": "2026-07-18T13:34:28.127Z", "last_ts": "2026-11-03T10:57:03.094Z", "days_to_converge": 107.9, "converged_at": "2026-11-03T10:57:03.094Z", "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-07-18T13:34:28.127Z", "seen": "2026-07-19T09:30:04.677Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "The Nueva School listed by qilin", "ref": "VGhlIE51ZXZhIFNjaG9vbEBxaWxpbg==", "url": "https://www.ransomware.live/id/VGhlIE51ZXZhIFNjaG9vbEBxaWxpbg==" }, { "ts": "2026-11-03T10:57:03.094Z", "seen": "2026-11-03T10:57:03.094Z", "source_class": "notice", "source": "ca-ag", "kind": "breach-notice", "label": "The Nueva School filed a breach notice with the California Attorney General", "ref": "ca-ag:sb24-632155", "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-632155" } ] }, { "entity_key": "troutman pepper locke", "name": "Troutman Pepper Locke LLP", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "corroboration": 0, "first_ts": "2026-08-18T22:51:57.496Z", "last_ts": "2026-10-30T23:59:59.000Z", "days_to_converge": 72.5, "converged_at": "2026-10-30T11:04:46.414Z", "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-08-18T22:51:57.496Z", "seen": "2026-08-19T09:30:03.443Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Troutman Pepper Locke listed by SilentRansomGroup", "ref": "VHJvdXRtYW4gUGVwcGVyIExvY2tlQFNpbGVudFJhbnNvbUdyb3Vw", "url": "https://www.ransomware.live/id/VHJvdXRtYW4gUGVwcGVyIExvY2tlQFNpbGVudFJhbnNvbUdyb3Vw" }, { "ts": "2026-10-30T11:04:46.414Z", "seen": "2026-10-30T11:04:46.414Z", "source_class": "notice", "source": "ca-ag", "kind": "breach-notice", "label": "Troutman Pepper Locke LLP filed a breach notice with the California Attorney General", "ref": "ca-ag:sb24-632020", "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-632020" }, { "ts": "2026-10-30T23:59:59.000Z", "seen": "2026-10-31T11:06:58.555Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Troutman Pepper Locke LLP filed a breach notice with the Texas Attorney General, 4,194 affected", "ref": "tx-ag:BR-0005470", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "bass medical", "name": "BASS Medical Group", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "corroboration": 0, "first_ts": "2026-10-22T23:59:59.000Z", "last_ts": "2026-10-27T13:51:59.761Z", "days_to_converge": 4.6, "converged_at": "2026-10-27T13:51:59.761Z", "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-10-22T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "ca-ag", "kind": "breach-notice-backfill", "label": "BASS Medical Group filed a breach notice with the California Attorney General", "ref": "ca-ag:sb24-631746", "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-631746" }, { "ts": "2026-10-27T13:51:59.761Z", "seen": "2026-10-28T10:30:02.734Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "BASS Medical Group listed by Booba Project", "ref": "QkFTUyBNZWRpY2FsIEdyb3VwQEJvb2JhIFByb2plY3Q", "url": "https://www.ransomware.live/id/QkFTUyBNZWRpY2FsIEdyb3VwQEJvb2JhIFByb2plY3Q" } ] } ] }, "history": { "generated_at": "2026-11-07T11:05:39.611Z", "since": "2026-06-04", "until": "2026-11-07", "window_days": 14, "min_classes": 2, "entries": [ { "entity_key": "fisher59", "name": "Fisher59, LLC", "first_as_of": "2026-11-07", "last_as_of": "2026-11-07", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-10-20T03:57:32.679Z", "seen": "2026-10-20T09:30:02.215Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Fisher59 listed by anubis", "ref": "RmlzaGVyNTlAYW51Ymlz", "url": "https://www.ransomware.live/id/RmlzaGVyNTlAYW51Ymlz" }, { "ts": "2026-11-06T23:59:59.000Z", "seen": "2026-11-07T11:04:58.886Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Fisher59, LLC filed a breach notice with the Texas Attorney General, 627 affected", "ref": "tx-ag:BR-0005496", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "insightcreditunion", "name": "Insight Credit Union", "first_as_of": "2026-11-07", "last_as_of": "2026-11-07", "classes": [ "leak", "notice", "press" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-09-15T10:46:21.469Z", "seen": "2026-09-16T09:30:04.308Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Insight Credit Union listed by Storm", "ref": "SW5zaWdodCBDcmVkaXQgVW5pb25AU3Rvcm0=", "url": "https://www.ransomware.live/id/SW5zaWdodCBDcmVkaXQgVW5pb25AU3Rvcm0=" }, { "ts": "2026-10-11T15:00:00.000Z", "seen": "2026-10-28T21:24:22.910Z", "source_class": "press", "source": "AhnLab ASEC", "kind": "press-mention", "label": "AhnLab ASEC: Security Issues in the Korean & Global Financial Sector in September 2026", "ref": "https://asec.ahnlab.com/en/96155/", "url": "https://asec.ahnlab.com/en/96155/" }, { "ts": "2026-11-06T23:59:59.000Z", "seen": "2026-11-07T11:04:58.886Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Insight Credit Union filed a breach notice with the Texas Attorney General, 656 affected", "ref": "tx-ag:BR-0005499", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "nuevaschool", "name": "The Nueva School", "first_as_of": "2026-11-04", "last_as_of": "2026-11-07", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-07-18T13:34:28.127Z", "seen": "2026-07-19T09:30:04.677Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "The Nueva School listed by qilin", "ref": "VGhlIE51ZXZhIFNjaG9vbEBxaWxpbg==", "url": "https://www.ransomware.live/id/VGhlIE51ZXZhIFNjaG9vbEBxaWxpbg==" }, { "ts": "2026-11-03T10:57:03.094Z", "seen": "2026-11-03T10:57:03.094Z", "source_class": "notice", "source": "ca-ag", "kind": "breach-notice", "label": "The Nueva School filed a breach notice with the California Attorney General", "ref": "ca-ag:sb24-632155", "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-632155" } ] }, { "entity_key": "troutman pepper locke", "name": "Troutman Pepper Locke LLP", "first_as_of": "2026-10-31", "last_as_of": "2026-11-07", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-08-18T22:51:57.496Z", "seen": "2026-08-19T09:30:03.443Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Troutman Pepper Locke listed by SilentRansomGroup", "ref": "VHJvdXRtYW4gUGVwcGVyIExvY2tlQFNpbGVudFJhbnNvbUdyb3Vw", "url": "https://www.ransomware.live/id/VHJvdXRtYW4gUGVwcGVyIExvY2tlQFNpbGVudFJhbnNvbUdyb3Vw" }, { "ts": "2026-10-30T11:04:46.414Z", "seen": "2026-10-30T11:04:46.414Z", "source_class": "notice", "source": "ca-ag", "kind": "breach-notice", "label": "Troutman Pepper Locke LLP filed a breach notice with the California Attorney General", "ref": "ca-ag:sb24-632020", "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-632020" }, { "ts": "2026-10-30T23:59:59.000Z", "seen": "2026-10-31T11:06:58.555Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Troutman Pepper Locke LLP filed a breach notice with the Texas Attorney General, 4,194 affected", "ref": "tx-ag:BR-0005470", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "bass medical", "name": "BASS Medical Group", "first_as_of": "2026-10-28", "last_as_of": "2026-11-07", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-10-22T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "ca-ag", "kind": "breach-notice-backfill", "label": "BASS Medical Group filed a breach notice with the California Attorney General", "ref": "ca-ag:sb24-631746", "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-631746" }, { "ts": "2026-10-27T13:51:59.761Z", "seen": "2026-10-28T10:30:02.734Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "BASS Medical Group listed by Booba Project", "ref": "QkFTUyBNZWRpY2FsIEdyb3VwQEJvb2JhIFByb2plY3Q", "url": "https://www.ransomware.live/id/QkFTUyBNZWRpY2FsIEdyb3VwQEJvb2JhIFByb2plY3Q" } ] }, { "entity_key": "photonhealth", "name": "Photon Health", "first_as_of": "2026-10-22", "last_as_of": "2026-11-07", "classes": [ "leak", "litigation", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-08-19T00:55:57.169Z", "seen": "2026-08-19T09:30:03.443Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Photon Health, Inc. listed by direwolf", "ref": "UGhvdG9uIEhlYWx0aCwgSW5jLkBkaXJld29sZg==", "url": "https://www.ransomware.live/id/UGhvdG9uIEhlYWx0aCwgSW5jLkBkaXJld29sZg==" }, { "ts": "2026-08-25T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Carey v. Photon Health Inc (District Court, S.D. New York)", "ref": "https://www.courtlistener.com/docket/74696320/1/carey-v-photon-health-inc/", "url": "https://www.courtlistener.com/docket/74696320/1/carey-v-photon-health-inc/" }, { "ts": "2026-08-28T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Horne v. Photon Health, Inc. (District Court, S.D. New York)", "ref": "https://www.courtlistener.com/docket/74715844/1/horne-v-photon-health-inc/", "url": "https://www.courtlistener.com/docket/74715844/1/horne-v-photon-health-inc/" }, { "ts": "2026-09-02T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Marshall v. Photon Health, Inc. (District Court, S.D. New York)", "ref": "https://www.courtlistener.com/docket/74739157/1/marshall-v-photon-health-inc/", "url": "https://www.courtlistener.com/docket/74739157/1/marshall-v-photon-health-inc/" }, { "ts": "2026-10-21T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "or-doj", "kind": "breach-notice-backfill", "label": "Photon Health filed a breach notice with the Oregon Department of Justice, 521 affected", "ref": "or-doj:ec48c6eb98663930", "url": "https://justice.oregon.gov/consumer/DataBreach/" }, { "ts": "2026-10-23T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Photon Health filed a breach notice with the Texas Attorney General, 3,085 affected", "ref": "tx-ag:BR-0005440", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" }, { "ts": "2026-10-30T11:04:46.414Z", "seen": "2026-10-30T11:04:46.414Z", "source_class": "notice", "source": "ca-ag", "kind": "breach-notice", "label": "Photon Health filed a breach notice with the California Attorney General", "ref": "ca-ag:sb24-632026", "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-632026" }, { "ts": "2026-10-31T11:06:58.555Z", "seen": "2026-10-31T11:06:58.555Z", "source_class": "notice", "source": "hhs-ocr", "kind": "breach-notice", "label": "Photon Health filed a breach notice with HHS OCR, 30,625 affected", "ref": "hhs-ocr:1500573", "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf" } ] }, { "entity_key": "encore", "name": "Encore Enterprises", "first_as_of": "2026-10-17", "last_as_of": "2026-10-30", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-08-02T03:50:43.130Z", "seen": "2026-08-02T09:30:03.123Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Encore Enterprises, Inc. listed by CRPxO", "ref": "RW5jb3JlIEVudGVycHJpc2VzLCBJbmMuQENSUHhP", "url": "https://www.ransomware.live/id/RW5jb3JlIEVudGVycHJpc2VzLCBJbmMuQENSUHhP" }, { "ts": "2026-10-16T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Encore Enterprises filed a breach notice with the Texas Attorney General, 1,746 affected", "ref": "tx-ag:BR-0005426", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "parkdental", "name": "Park Dental Partners, Inc.", "first_as_of": "2026-10-14", "last_as_of": "2026-11-07", "classes": [ "filing", "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": true, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-10-01T12:26:41.502Z", "seen": "2026-10-02T09:30:02.149Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "parkdental.com listed by chaos", "ref": "cGFya2RlbnRhbC5jb21AY2hhb3M=", "url": "https://www.ransomware.live/id/cGFya2RlbnRhbC5jb21AY2hhb3M=" }, { "ts": "2026-10-13T23:59:59.000Z", "seen": "2026-10-14T09:30:01.687Z", "source_class": "filing", "source": "sec-8k-105", "kind": "8k-cyber", "label": "Park Dental Partners, Inc. filed an 8-K disclosing a cybersecurity incident (Items 1.05)", "ref": "0001104659-26-115541", "url": "https://www.sec.gov/Archives/edgar/data/2069604/000110465926115541/park-20261007x8k.htm" }, { "ts": "2026-11-06T23:59:59.000Z", "seen": "2026-11-07T11:04:58.886Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Park Dental Partners, Inc. filed a breach notice with the Texas Attorney General, 2,481 affected", "ref": "tx-ag:BR-0005494", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "sheppard mullin richter and hampton", "name": "Sheppard, Mullin, Richter & Hampton LLP", "first_as_of": "2026-10-06", "last_as_of": "2026-10-20", "classes": [ "leak", "litigation", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-10-02T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "ca-ag", "kind": "breach-notice-backfill", "label": "Sheppard, Mullin, Richter & Hampton LLP filed a breach notice with the California Attorney General", "ref": "ca-ag:sb24-630779", "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-630779" }, { "ts": "2026-10-02T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "or-doj", "kind": "breach-notice-backfill", "label": "Sheppard, Mullin, Richter & Hampton LLP filed a breach notice with the Oregon Department of Justice, 204,001 affected", "ref": "or-doj:040b60d0559cd178", "url": "https://justice.oregon.gov/consumer/DataBreach/" }, { "ts": "2026-10-05T19:25:07.895Z", "seen": "2026-10-06T09:30:09.754Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Sheppard, Mullin, Richter & Hampton listed by SilentRansomGroup", "ref": "U2hlcHBhcmQsIE11bGxpbiwgUmljaHRlciAmIEhhbXB0b25AU2lsZW50UmFuc29tR3JvdXA", "url": "https://www.ransomware.live/id/U2hlcHBhcmQsIE11bGxpbiwgUmljaHRlciAmIEhhbXB0b25AU2lsZW50UmFuc29tR3JvdXA" }, { "ts": "2026-10-06T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Sheppard, Mullin, Richter & Hampton LLP filed a breach notice with the Texas Attorney General, 2,326 affected", "ref": "tx-ag:BR-0005397", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" }, { "ts": "2026-10-07T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Pena Emilia Williams v. Sheppard, Mullin, Richter & Hampton LLP (District Court, C.D. California)", "ref": "https://www.courtlistener.com/docket/74934896/1/williams-v-sheppard-mullin-richter-hampton-llp/", "url": "https://www.courtlistener.com/docket/74934896/1/williams-v-sheppard-mullin-richter-hampton-llp/" } ] }, { "entity_key": "goldston oil", "name": "Goldston Oil Corporation", "first_as_of": "2026-10-03", "last_as_of": "2026-10-16", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-09-10T13:56:00.028Z", "seen": "2026-09-11T09:30:04.299Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Goldston Oil Corporation listed by Wallstreet", "ref": "R29sZHN0b24gT2lsIENvcnBvcmF0aW9uQFdhbGxzdHJlZXQ=", "url": "https://www.ransomware.live/id/R29sZHN0b24gT2lsIENvcnBvcmF0aW9uQFdhbGxzdHJlZXQ=" }, { "ts": "2026-10-02T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Goldston Oil Corporation filed a breach notice with the Texas Attorney General, 412 affected", "ref": "tx-ag:BR-0005383", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "cazinvestments", "name": "CAZ Investments LP", "first_as_of": "2026-09-30", "last_as_of": "2026-10-13", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-08-21T08:26:36.533Z", "seen": "2026-08-21T09:30:07.710Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "CAZ Investments listed by thegentlemen", "ref": "Q0FaIEludmVzdG1lbnRzQHRoZWdlbnRsZW1lbg==", "url": "https://www.ransomware.live/id/Q0FaIEludmVzdG1lbnRzQHRoZWdlbnRsZW1lbg==" }, { "ts": "2026-09-29T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "CAZ Investments LP filed a breach notice with the Texas Attorney General, 3,824 affected", "ref": "tx-ag:BR-0005372", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "kenaitze", "name": "The Kenaitze Indian Tribe", "first_as_of": "2026-09-26", "last_as_of": "2026-10-09", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-07-31T18:30:19.495Z", "seen": "2026-08-01T09:30:04.059Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Kenaitze Indian Tribe listed by thegentlemen", "ref": "S2VuYWl0emUgSW5kaWFuIFRyaWJlQHRoZWdlbnRsZW1lbg==", "url": "https://www.ransomware.live/id/S2VuYWl0emUgSW5kaWFuIFRyaWJlQHRoZWdlbnRsZW1lbg==" }, { "ts": "2026-09-25T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "hhs-ocr", "kind": "breach-notice-backfill", "label": "The Kenaitze Indian Tribe filed a breach notice with HHS OCR, 9,319 affected", "ref": "hhs-ocr:1496382", "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf" } ] }, { "entity_key": "accela", "name": "Accela, Inc.", "first_as_of": "2026-09-19", "last_as_of": "2026-10-02", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-09-14T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "ca-ag", "kind": "breach-notice-backfill", "label": "Accela, Inc. filed a breach notice with the California Attorney General", "ref": "ca-ag:sb24-629676", "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-629676" }, { "ts": "2026-09-18T07:06:41.424Z", "seen": "2026-09-18T09:30:03.637Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Accela.com listed by EndZone", "ref": "QWNjZWxhLmNvbUBFbmRab25l", "url": "https://www.ransomware.live/id/QWNjZWxhLmNvbUBFbmRab25l" } ] }, { "entity_key": "opportune", "name": "Opportune LLP", "first_as_of": "2026-09-19", "last_as_of": "2026-11-05", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-07-08T07:22:55.747Z", "seen": "2026-07-08T09:30:02.207Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "opportune.com listed by chaos", "ref": "b3Bwb3J0dW5lLmNvbUBjaGFvcw==", "url": "https://www.ransomware.live/id/b3Bwb3J0dW5lLmNvbUBjaGFvcw==" }, { "ts": "2026-09-18T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "ca-ag", "kind": "breach-notice-backfill", "label": "Opportune LLP filed a breach notice with the California Attorney General", "ref": "ca-ag:sb24-629948", "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-629948" }, { "ts": "2026-10-22T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "ca-ag", "kind": "breach-notice-backfill", "label": "Opportune LLP filed a breach notice with the California Attorney General", "ref": "ca-ag:sb24-631707", "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-631707" }, { "ts": "2026-10-23T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Opportune LLP filed a breach notice with the Texas Attorney General, 38,068 affected", "ref": "tx-ag:BR-0005444", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "windrosehealth", "name": "WindRose Health Network", "first_as_of": "2026-09-17", "last_as_of": "2026-09-30", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-08-18T04:20:54.078Z", "seen": "2026-08-18T09:30:03.752Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "WindRose Health Network listed by Storm", "ref": "V2luZFJvc2UgSGVhbHRoIE5ldHdvcmtAU3Rvcm0=", "url": "https://www.ransomware.live/id/V2luZFJvc2UgSGVhbHRoIE5ldHdvcmtAU3Rvcm0=" }, { "ts": "2026-09-16T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "hhs-ocr", "kind": "breach-notice-backfill", "label": "WindRose Health Network filed a breach notice with HHS OCR, 33,158 affected", "ref": "hhs-ocr:1489519", "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf" } ] }, { "entity_key": "interim healthcare", "name": "Interim HealthCare Inc.", "first_as_of": "2026-09-11", "last_as_of": "2026-09-24", "classes": [ "leak", "litigation", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-08-11T00:00:43.048Z", "seen": "2026-08-11T09:30:03.104Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Interim HealthCare listed by genesis", "ref": "SW50ZXJpbSBIZWFsdGhDYXJlQGdlbmVzaXM=", "url": "https://www.ransomware.live/id/SW50ZXJpbSBIZWFsdGhDYXJlQGdlbmVzaXM=" }, { "ts": "2026-08-15T04:22:13.780Z", "seen": "2026-08-15T09:30:04.522Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Interim HealthCare listed by anubis", "ref": "SW50ZXJpbSBIZWFsdGhDYXJlQGFudWJpcw==", "url": "https://www.ransomware.live/id/SW50ZXJpbSBIZWFsdGhDYXJlQGFudWJpcw==" }, { "ts": "2026-08-28T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Hilton v. Interim Healthcare Inc. (District Court, S.D. Florida)", "ref": "https://www.courtlistener.com/docket/74717478/1/hilton-v-interim-healthcare-inc/", "url": "https://www.courtlistener.com/docket/74717478/1/hilton-v-interim-healthcare-inc/" }, { "ts": "2026-09-02T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: McFall v. Interim Healthcare Inc. (District Court, S.D. Florida)", "ref": "https://www.courtlistener.com/docket/74740741/1/mcfall-v-interim-healthcare-inc/", "url": "https://www.courtlistener.com/docket/74740741/1/mcfall-v-interim-healthcare-inc/" }, { "ts": "2026-09-10T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "hhs-ocr", "kind": "breach-notice-backfill", "label": "Interim HealthCare Inc. filed a breach notice with HHS OCR, 1,283 affected", "ref": "hhs-ocr:1489386", "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf" } ] }, { "entity_key": "next level medical", "name": "Next Level Medical, LLC", "first_as_of": "2026-09-10", "last_as_of": "2026-09-23", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-08-26T22:28:12.933Z", "seen": "2026-08-27T09:30:03.243Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "NEXT LEVEL MEDICAL, LLC listed by pear", "ref": "TkVYVCBMRVZFTCBNRURJQ0FMLCBMTENAcGVhcg==", "url": "https://www.ransomware.live/id/TkVYVCBMRVZFTCBNRURJQ0FMLCBMTENAcGVhcg==" }, { "ts": "2026-09-09T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "hhs-ocr", "kind": "breach-notice-backfill", "label": "Next Level Medical, LLC filed a breach notice with HHS OCR, 501 affected", "ref": "hhs-ocr:1488657", "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf" } ] }, { "entity_key": "veradigm", "name": "Veradigm Inc.", "first_as_of": "2026-09-09", "last_as_of": "2026-09-19", "classes": [ "filing", "leak", "litigation" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-09-05T18:29:58.376Z", "seen": "2026-09-06T09:30:03.013Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Veradigm listed by thegentlemen", "ref": "VmVyYWRpZ21AdGhlZ2VudGxlbWVu", "url": "https://www.ransomware.live/id/VmVyYWRpZ21AdGhlZ2VudGxlbWVu" }, { "ts": "2026-09-08T23:59:59.000Z", "seen": "2026-10-23T21:57:29.922Z", "source_class": "filing", "source": "sec-8k-cyber", "kind": "8k-cyber", "label": "Veradigm Inc. filed an 8-K disclosing a cybersecurity incident (Items 8.01)", "ref": "0001193125-26-385249", "url": "https://www.sec.gov/Archives/edgar/data/1124804/000119312526385249/mdrx-20260908.htm" }, { "ts": "2026-09-08T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Clay v. Veradigm, Inc. (District Court, N.D. Illinois)", "ref": "https://www.courtlistener.com/docket/74760713/1/clay-v-veradigm-inc/", "url": "https://www.courtlistener.com/docket/74760713/1/clay-v-veradigm-inc/" }, { "ts": "2026-09-09T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Walker v. Veradigm, Inc. (District Court, N.D. Illinois)", "ref": "https://www.courtlistener.com/docket/74763514/1/walker-v-veradigm-inc/", "url": "https://www.courtlistener.com/docket/74763514/1/walker-v-veradigm-inc/" } ] }, { "entity_key": "comhar", "name": "COMHAR, Inc.", "first_as_of": "2026-09-05", "last_as_of": "2026-09-18", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-07-01T14:06:44.644Z", "seen": "2026-07-02T09:30:07.172Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "COMHAR listed by worldleaks", "ref": "Q09NSEFSQHdvcmxkbGVha3M=", "url": "https://www.ransomware.live/id/Q09NSEFSQHdvcmxkbGVha3M=" }, { "ts": "2026-09-04T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "hhs-ocr", "kind": "breach-notice-backfill", "label": "COMHAR, Inc. filed a breach notice with HHS OCR, 501 affected", "ref": "hhs-ocr:1488350", "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf" } ] }, { "entity_key": "fcci group", "name": "FCCI Insurance Group", "first_as_of": "2026-09-04", "last_as_of": "2026-09-17", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-06-28T08:37:44.886Z", "seen": "2026-06-29T09:30:06.256Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "FCCI Insurance Group listed by Redact", "ref": "RkNDSSBJbnN1cmFuY2UgR3JvdXBAUmVkYWN0", "url": "https://www.ransomware.live/id/RkNDSSBJbnN1cmFuY2UgR3JvdXBAUmVkYWN0" }, { "ts": "2026-09-03T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "FCCI Insurance Group filed a breach notice with the Texas Attorney General, 376 affected", "ref": "tx-ag:BR-0005300", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "mgrlaw", "name": "Mogren, Glessner & Ahrens, P.S.", "first_as_of": "2026-09-04", "last_as_of": "2026-09-17", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-06-12T19:59:43.419Z", "seen": "2026-06-13T09:30:04.809Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "mgrlaw.com listed by threeam", "ref": "bWdybGF3LmNvbUB0aHJlZWFt", "url": "https://www.ransomware.live/id/bWdybGF3LmNvbUB0aHJlZWFt" }, { "ts": "2026-08-22T07:57:08.921Z", "seen": "2026-08-22T09:30:03.318Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Mogren, Glessner & Ahrens, P.S. listed by pear", "ref": "TW9ncmVuLCBHbGVzc25lciAmIEFocmVucywgUC5TLkBwZWFy", "url": "https://www.ransomware.live/id/TW9ncmVuLCBHbGVzc25lciAmIEFocmVucywgUC5TLkBwZWFy" }, { "ts": "2026-09-03T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "wa-ag", "kind": "breach-notice-backfill", "label": "Mogren, Glessner & Ahrens, P.S. filed a breach notice with the Washington Attorney General, 1,379 affected", "ref": "wa-ag:25379", "url": "https://www.atg.wa.gov/data-breach-notifications" } ] }, { "entity_key": "novocure", "name": "NovoCure Ltd", "first_as_of": "2026-09-02", "last_as_of": "2026-09-23", "classes": [ "filing", "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-08-22T14:13:59.045Z", "seen": "2026-08-23T09:30:02.640Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "NovoCure Limited listed by shinyhunters", "ref": "Tm92b0N1cmUgTGltaXRlZEBzaGlueWh1bnRlcnM=", "url": "https://www.ransomware.live/id/Tm92b0N1cmUgTGltaXRlZEBzaGlueWh1bnRlcnM=" }, { "ts": "2026-09-01T23:59:59.000Z", "seen": "2026-09-02T09:30:01.851Z", "source_class": "filing", "source": "sec-8k-105", "kind": "8k-cyber", "label": "NovoCure Ltd filed an 8-K disclosing a cybersecurity incident (Items 1.05)", "ref": "0001645113-26-000065", "url": "https://www.sec.gov/Archives/edgar/data/1645113/000164511326000065/nvcr-20260901.htm" }, { "ts": "2026-09-09T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "hhs-ocr", "kind": "breach-notice-backfill", "label": "Novocure Inc. filed a breach notice with HHS OCR, 1,464 affected", "ref": "hhs-ocr:1489387", "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf" } ] }, { "entity_key": "nutexhealth", "name": "Nutex Health Inc.", "first_as_of": "2026-09-02", "last_as_of": "2026-09-15", "classes": [ "filing", "leak", "litigation" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-08-31T23:59:59.000Z", "seen": "2026-09-01T09:30:01.087Z", "source_class": "filing", "source": "sec-8k-105", "kind": "8k-cyber", "label": "Nutex Health Inc. filed an 8-K disclosing a cybersecurity incident (Items 1.05)", "ref": "0001628280-26-059602", "url": "https://www.sec.gov/Archives/edgar/data/1479681/000162828026059602/nutx-20260831.htm" }, { "ts": "2026-08-31T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Flowers v. Nutex Health Inc. (District Court, S.D. Texas)", "ref": "https://www.courtlistener.com/docket/74724398/1/flowers-v-nutex-health-inc/", "url": "https://www.courtlistener.com/docket/74724398/1/flowers-v-nutex-health-inc/" }, { "ts": "2026-09-01T12:14:08.598Z", "seen": "2026-09-02T09:30:02.615Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Nutex Health listed by thegentlemen", "ref": "TnV0ZXggSGVhbHRoQHRoZWdlbnRsZW1lbg==", "url": "https://www.ransomware.live/id/TnV0ZXggSGVhbHRoQHRoZWdlbnRsZW1lbg==" }, { "ts": "2026-09-11T23:59:59.000Z", "seen": "2026-09-12T09:30:01.346Z", "source_class": "filing", "source": "sec-8k-105", "kind": "8k-cyber", "label": "Nutex Health Inc. filed an 8-K disclosing a cybersecurity incident (Items 1.05)", "ref": "0001628280-26-061432", "url": "https://www.sec.gov/Archives/edgar/data/1479681/000162828026061432/materiality_assessmentxupd.htm" } ] }, { "entity_key": "mckesson", "name": "McKesson Corporation", "first_as_of": "2026-08-29", "last_as_of": "2026-09-11", "classes": [ "filing", "leak", "litigation", "press", "report" ], "parties": [ "analyst", "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-08-28T23:57:50.569Z", "seen": "2026-08-29T09:30:04.592Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "McKesson Corporation listed by shinyhunters", "ref": "TWNLZXNzb24gQ29ycG9yYXRpb25Ac2hpbnlodW50ZXJz", "url": "https://www.ransomware.live/id/TWNLZXNzb24gQ29ycG9yYXRpb25Ac2hpbnlodW50ZXJz" }, { "ts": "2026-08-28T23:59:59.000Z", "seen": "2026-10-23T21:57:29.922Z", "source_class": "filing", "source": "sec-8k-cyber", "kind": "8k-cyber", "label": "MCKESSON CORP filed an 8-K disclosing a cybersecurity incident (Items 7.01,9.01)", "ref": "0000927653-26-000247", "url": "https://www.sec.gov/Archives/edgar/data/927653/000092765326000247/mck-20260825.htm" }, { "ts": "2026-08-31T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Polaniec v. McKesson Corporation (District Court, N.D. Texas)", "ref": "https://www.courtlistener.com/docket/74728064/1/polaniec-v-mckesson-corporation/", "url": "https://www.courtlistener.com/docket/74728064/1/polaniec-v-mckesson-corporation/" }, { "ts": "2026-08-31T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Murchison v. McKesson Corporation (District Court, N.D. Texas)", "ref": "https://www.courtlistener.com/docket/74730450/1/murchison-v-mckesson-corporation/", "url": "https://www.courtlistener.com/docket/74730450/1/murchison-v-mckesson-corporation/" }, { "ts": "2026-09-01T12:00:00.000Z", "seen": "2026-10-23T21:20:04.404Z", "source_class": "press", "source": "Mind", "kind": "press-mention-manual", "label": "Mind: McKesson breach: the risk of sensitive unstructured data", "ref": "https://mind.io/blog/mckesson-breach-sensitive-unstructured-data-risk", "url": "https://mind.io/blog/mckesson-breach-sensitive-unstructured-data-risk" }, { "ts": "2026-09-02T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Willahan v. McKesson Corporation (District Court, N.D. Texas)", "ref": "https://www.courtlistener.com/docket/74742155/1/willahan-v-mckesson-corporation/", "url": "https://www.courtlistener.com/docket/74742155/1/willahan-v-mckesson-corporation/" }, { "ts": "2026-09-03T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Balderrama v. McKesson Corporation (District Court, N.D. Texas)", "ref": "https://www.courtlistener.com/docket/74746359/1/balderrama-v-mckesson-corporation/", "url": "https://www.courtlistener.com/docket/74746359/1/balderrama-v-mckesson-corporation/" }, { "ts": "2026-09-03T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Burns v. McKesson Corporation (District Court, N.D. Texas)", "ref": "https://www.courtlistener.com/docket/74747894/1/burns-v-mckesson-corporation/", "url": "https://www.courtlistener.com/docket/74747894/1/burns-v-mckesson-corporation/" }, { "ts": "2026-09-04T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Eubank v. McKesson Corporation (District Court, N.D. Texas)", "ref": "https://www.courtlistener.com/docket/74752533/1/eubank-v-mckesson-corporation/", "url": "https://www.courtlistener.com/docket/74752533/1/eubank-v-mckesson-corporation/" }, { "ts": "2026-09-09T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Wells v. McKesson Corporation (District Court, N.D. Texas)", "ref": "https://www.courtlistener.com/docket/74767979/1/wells-v-mckesson-corporation/", "url": "https://www.courtlistener.com/docket/74767979/1/wells-v-mckesson-corporation/" }, { "ts": "2026-09-10T13:00:00.000Z", "seen": "2026-10-23T21:20:06.193Z", "source_class": "report", "source": "MirageSec", "kind": "report-mention-manual", "label": "MirageSec: Inside the ShinyHunters vishing playbook: two captured Okta clones and a passkey bypass", "ref": "https://www.miragesecurity.ai/blog/shinyhunters-vishing-playbook", "url": "https://www.miragesecurity.ai/blog/shinyhunters-vishing-playbook" } ] }, { "entity_key": "cascadecoffee", "name": "Cascade Coffee, LLC", "first_as_of": "2026-08-27", "last_as_of": "2026-09-09", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-08-20T14:21:22.360Z", "seen": "2026-08-21T09:30:07.710Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Cascade Coffee listed by akira", "ref": "Q2FzY2FkZSBDb2ZmZWVAYWtpcmE=", "url": "https://www.ransomware.live/id/Q2FzY2FkZSBDb2ZmZWVAYWtpcmE=" }, { "ts": "2026-08-26T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "wa-ag", "kind": "breach-notice-backfill", "label": "Cascade Coffee, LLC filed a breach notice with the Washington Attorney General, 610 affected", "ref": "wa-ag:25274", "url": "https://www.atg.wa.gov/data-breach-notifications" } ] }, { "entity_key": "advantagehhc", "name": "Advantage Home Health Care", "first_as_of": "2026-08-26", "last_as_of": "2026-09-08", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-07-17T19:19:39.947Z", "seen": "2026-07-18T09:30:02.375Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Advantage Home Health Care listed by thegentlemen", "ref": "QWR2YW50YWdlIEhvbWUgSGVhbHRoIENhcmVAdGhlZ2VudGxlbWVu", "url": "https://www.ransomware.live/id/QWR2YW50YWdlIEhvbWUgSGVhbHRoIENhcmVAdGhlZ2VudGxlbWVu" }, { "ts": "2026-08-25T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "hhs-ocr", "kind": "breach-notice-backfill", "label": "Advantage Home Health Care filed a breach notice with HHS OCR, 19,851 affected", "ref": "hhs-ocr:1489373", "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf" } ] }, { "entity_key": "adt", "name": "ADT, Inc.", "first_as_of": "2026-08-24", "last_as_of": "2026-09-06", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-07-28T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "or-doj", "kind": "breach-notice-backfill", "label": "ADT, Inc. filed a breach notice with the Oregon Department of Justice, 331,536 affected", "ref": "or-doj:c95d3facb7cafbcf", "url": "https://justice.oregon.gov/consumer/DataBreach/" }, { "ts": "2026-07-28T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "ADT, Inc. filed a breach notice with the Texas Attorney General, 32,546 affected", "ref": "tx-ag:BR-0005212", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" }, { "ts": "2026-07-28T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "wa-ag", "kind": "breach-notice-backfill", "label": "ADT, Inc. filed a breach notice with the Washington Attorney General, 5,129 affected", "ref": "wa-ag:24888", "url": "https://www.atg.wa.gov/data-breach-notifications" }, { "ts": "2026-08-23T18:13:35.006Z", "seen": "2026-08-24T09:30:02.073Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "adt.com listed by lockbit5", "ref": "YWR0LmNvbUBsb2NrYml0NQ==", "url": "https://www.ransomware.live/id/YWR0LmNvbUBsb2NrYml0NQ==" } ] }, { "entity_key": "bcmh", "name": "Baraga County Memorial Hospital", "first_as_of": "2026-08-22", "last_as_of": "2026-09-04", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-07-04T20:50:32.613Z", "seen": "2026-07-05T09:30:15.423Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Baraga County Memorial Hospital listed by Wallstreet", "ref": "QmFyYWdhIENvdW50eSBNZW1vcmlhbCBIb3NwaXRhbEBXYWxsc3RyZWV0", "url": "https://www.ransomware.live/id/QmFyYWdhIENvdW50eSBNZW1vcmlhbCBIb3NwaXRhbEBXYWxsc3RyZWV0" }, { "ts": "2026-08-21T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "hhs-ocr", "kind": "breach-notice-backfill", "label": "Baraga County Memorial Hospital filed a breach notice with HHS OCR, 501 affected", "ref": "hhs-ocr:1482054", "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf" } ] }, { "entity_key": "life bridges", "name": "Life Bridges, Inc.", "first_as_of": "2026-08-21", "last_as_of": "2026-09-03", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-06-25T23:23:37.065Z", "seen": "2026-06-26T09:30:05.558Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Life Bridges listed by incransom", "ref": "TGlmZSBCcmlkZ2VzQGluY3JhbnNvbQ==", "url": "https://www.ransomware.live/id/TGlmZSBCcmlkZ2VzQGluY3JhbnNvbQ==" }, { "ts": "2026-08-20T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "hhs-ocr", "kind": "breach-notice-backfill", "label": "Life Bridges, Inc. filed a breach notice with HHS OCR, 5,194 affected", "ref": "hhs-ocr:1482656", "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf" } ] }, { "entity_key": "gardinerfamilychiropractic", "name": "Gardiner Family Chiropractic, PC", "first_as_of": "2026-08-15", "last_as_of": "2026-08-28", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-07-31T14:56:09.554Z", "seen": "2026-08-01T09:30:04.059Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Gardiner Family Chiropractic listed by interlock", "ref": "R2FyZGluZXIgRmFtaWx5IENoaXJvcHJhY3RpY0BpbnRlcmxvY2s=", "url": "https://www.ransomware.live/id/R2FyZGluZXIgRmFtaWx5IENoaXJvcHJhY3RpY0BpbnRlcmxvY2s=" }, { "ts": "2026-08-14T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "hhs-ocr", "kind": "breach-notice-backfill", "label": "Gardiner Family Chiropractic, PC filed a breach notice with HHS OCR, 5,000 affected", "ref": "hhs-ocr:1480769", "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf" } ] }, { "entity_key": "metabase", "name": "Metabase", "first_as_of": "2026-08-15", "last_as_of": "2026-08-24", "classes": [ "leak", "report" ], "parties": [ "analyst", "attacker" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-08-10T12:30:17.000Z", "seen": "2026-10-29T10:46:50.509Z", "source_class": "report", "source": "Wiz Research", "kind": "report-mention", "label": "Wiz Research: Inside the Metabase SQLi: Exploited in the Wild", "ref": "https://www.wiz.io/blog/inside-the-metabase-sqli-exploited-in-the-wild", "url": "https://www.wiz.io/blog/inside-the-metabase-sqli-exploited-in-the-wild" }, { "ts": "2026-08-14T06:01:01.633Z", "seen": "2026-08-14T09:30:02.340Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Metabase listed by shinyhunters", "ref": "TWV0YWJhc2VAc2hpbnlodW50ZXJz", "url": "https://www.ransomware.live/id/TWV0YWJhc2VAc2hpbnlodW50ZXJz" } ] }, { "entity_key": "rusindustrial", "name": "RUS Industrial, LLC", "first_as_of": "2026-08-08", "last_as_of": "2026-08-21", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-07-31T13:28:29.827Z", "seen": "2026-08-01T09:30:04.059Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "RUS Industrial listed by dragonforce", "ref": "UlVTIEluZHVzdHJpYWxAZHJhZ29uZm9yY2U=", "url": "https://www.ransomware.live/id/UlVTIEluZHVzdHJpYWxAZHJhZ29uZm9yY2U=" }, { "ts": "2026-08-07T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "RUS Industrial, LLC filed a breach notice with the Texas Attorney General, 4,343 affected", "ref": "tx-ag:BR-0005229", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "ringcentral", "name": "RingCentral, Inc.", "first_as_of": "2026-07-30", "last_as_of": "2026-08-10", "classes": [ "leak", "litigation", "report" ], "parties": [ "analyst", "attacker" ], "curated": false, "hand_picked": true, "backfilled": false, "signals": [ { "ts": "2026-07-27T12:59:16.314Z", "seen": "2026-07-28T09:30:02.158Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "RingCentral, Inc. listed by shinyhunters", "ref": "UmluZ0NlbnRyYWwsIEluYy5Ac2hpbnlodW50ZXJz", "url": "https://www.ransomware.live/id/UmluZ0NlbnRyYWwsIEluYy5Ac2hpbnlodW50ZXJz" }, { "ts": "2026-07-29T23:00:00.000Z", "seen": "2026-10-23T21:20:05.989Z", "source_class": "report", "source": "Bridewell", "kind": "report-mention-manual", "label": "Bridewell: From a Vishing Call to a Shared Shared Com Ecosystem Kit | BCON Collective by Bridewell", "ref": "https://www.bridewell.com/insights/blogs/detail/vishing-call-to-a-shared-com-ecosystem", "url": "https://www.bridewell.com/insights/blogs/detail/vishing-call-to-a-shared-com-ecosystem" }, { "ts": "2026-08-05T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Searle v. RingCentral, Inc. (District Court, N.D. California)", "ref": "https://www.courtlistener.com/docket/73726227/1/searle-v-ringcentral-inc/", "url": "https://www.courtlistener.com/docket/73726227/1/searle-v-ringcentral-inc/" } ] }, { "entity_key": "ernst and young", "name": "Ernst & Young LLP", "first_as_of": "2026-07-28", "last_as_of": "2026-08-10", "classes": [ "leak", "litigation", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-07-15T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "ca-ag", "kind": "breach-notice-backfill", "label": "Ernst & Young LLP filed a breach notice with the California Attorney General", "ref": "ca-ag:sb24-626542", "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-626542" }, { "ts": "2026-07-17T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Ernst & Young LLP filed a breach notice with the Texas Attorney General, 873 affected", "ref": "tx-ag:BR-0005180", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" }, { "ts": "2026-07-19T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Martinez v. Ernst & Young, LLP (District Court, S.D. New York)", "ref": "https://www.courtlistener.com/docket/73638692/1/martinez-v-ernst-young-llp/", "url": "https://www.courtlistener.com/docket/73638692/1/martinez-v-ernst-young-llp/" }, { "ts": "2026-07-19T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Hughes v. Ernst & Young LLP (District Court, S.D. New York)", "ref": "https://www.courtlistener.com/docket/73639032/1/hughes/", "url": "https://www.courtlistener.com/docket/73639032/1/hughes/" }, { "ts": "2026-07-20T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Wyatt v. Ernst & Young LLP (District Court, S.D. New York)", "ref": "https://www.courtlistener.com/docket/73639388/1/wyatt-v-ernst-young-llp/", "url": "https://www.courtlistener.com/docket/73639388/1/wyatt-v-ernst-young-llp/" }, { "ts": "2026-07-20T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Clarke v. Ernst & Young LLP (District Court, S.D. New York)", "ref": "https://www.courtlistener.com/docket/73642600/1/clarke-v-ernst-young-llp/", "url": "https://www.courtlistener.com/docket/73642600/1/clarke-v-ernst-young-llp/" }, { "ts": "2026-07-22T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Mara v. Ernst & Young LLP (District Court, S.D. New York)", "ref": "https://www.courtlistener.com/docket/73656766/1/mara-v-ernst-young-llp/", "url": "https://www.courtlistener.com/docket/73656766/1/mara-v-ernst-young-llp/" }, { "ts": "2026-07-27T12:58:56.004Z", "seen": "2026-07-28T09:30:02.158Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Ernst & Young listed by shinyhunters", "ref": "RXJuc3QgJiBZb3VuZ0BzaGlueWh1bnRlcnM=", "url": "https://www.ransomware.live/id/RXJuc3QgJiBZb3VuZ0BzaGlueWh1bnRlcnM=" }, { "ts": "2026-07-27T23:59:59.000Z", "seen": "2026-10-28T21:19:31.021Z", "source_class": "litigation", "source": "courtlistener", "kind": "class-action", "label": "Data-breach class action filed: Cai v. Ernst & Young LLP (District Court, S.D. New York)", "ref": "https://www.courtlistener.com/docket/73676345/1/cai-v-ernst-young-llp/", "url": "https://www.courtlistener.com/docket/73676345/1/cai-v-ernst-young-llp/" } ] }, { "entity_key": "lawson roofing", "name": "The Lawson Roofing Co Inc.", "first_as_of": "2026-07-23", "last_as_of": "2026-08-05", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-06-18T14:29:21.254Z", "seen": "2026-06-19T09:30:05.346Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Lawson Roofing listed by rhysida", "ref": "TGF3c29uIFJvb2ZpbmdAcmh5c2lkYQ==", "url": "https://www.ransomware.live/id/TGF3c29uIFJvb2ZpbmdAcmh5c2lkYQ==" }, { "ts": "2026-07-22T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "ca-ag", "kind": "breach-notice-backfill", "label": "The Lawson Roofing Co Inc. filed a breach notice with the California Attorney General", "ref": "ca-ag:sb24-626880", "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-626880" } ] }, { "entity_key": "fluke", "name": "Fluke Corporation", "first_as_of": "2026-07-11", "last_as_of": "2026-07-24", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": false, "signals": [ { "ts": "2026-07-01T10:29:35.641Z", "seen": "2026-07-02T09:30:07.172Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Fluke Corporation listed by shinyhunters", "ref": "Rmx1a2UgQ29ycG9yYXRpb25Ac2hpbnlodW50ZXJz", "url": "https://www.ransomware.live/id/Rmx1a2UgQ29ycG9yYXRpb25Ac2hpbnlodW50ZXJz" }, { "ts": "2026-07-10T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "tx-ag", "kind": "breach-notice", "label": "Fluke Corporation filed a breach notice with the Texas Attorney General, 495 affected", "ref": "tx-ag:BR-0005167", "url": "https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage" } ] }, { "entity_key": "michigansurgicalcenter", "name": "Michigan Surgical Center, LLC", "first_as_of": "2026-06-10", "last_as_of": "2026-06-23", "classes": [ "leak", "notice" ], "parties": [ "attacker", "victim" ], "curated": false, "hand_picked": false, "backfilled": true, "signals": [ { "ts": "2026-06-04T09:09:11.221Z", "seen": "2026-06-09T03:45:01.595Z", "source_class": "leak", "source": "ransomware.live", "kind": "leak-listing", "label": "Michigan Surgical Center listed by thegentlemen", "ref": "TWljaGlnYW4gU3VyZ2ljYWwgQ2VudGVyQHRoZWdlbnRsZW1lbg==", "url": "https://www.ransomware.live/id/TWljaGlnYW4gU3VyZ2ljYWwgQ2VudGVyQHRoZWdlbnRsZW1lbg==" }, { "ts": "2026-06-09T23:59:59.000Z", "seen": "2026-10-28T21:19:00.359Z", "source_class": "notice", "source": "hhs-ocr", "kind": "breach-notice-backfill", "label": "Michigan Surgical Center, LLC filed a breach notice with HHS OCR, 7,578 affected", "ref": "hhs-ocr:1485021", "url": "https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf" } ] } ] } }