Ransomware victim disclosure
← All victimsDon-Nan
Claimed by payload · listed 2 months ago
Status timeline
- Listed
Mar 28, 2026
- Data leaked
At a glance
- Group
- payload
- Status
- Data leaked
- Country
- United States
- Sector
- Manufacturing
- Listed on leak site
- Mar 28, 2026
About the victim
AI dossier — public-source company profileDon-Nan is a U.S.-based company operating in the manufacturing sector, widely known as a supplier of pump systems and oilfield equipment, primarily serving the oil and gas industry. The company is based in Texas and provides products and services supporting oil and gas production operations. No public site content was available to confirm further operational details.
- Industry
- Oilfield Services & Pump Manufacturing
Attack summary
Severity: high — Data has been published (data_published status confirmed), indicating confirmed exfiltration of business data from a U.S. manufacturing/oilfield services company. While the specific contents are not enumerated in the visible post excerpt, publication of stolen data from an industrial/energy-sector supplier warrants a high severity rating.The ransomware group 'payload' claims to have attacked Don-Nan and has disclosed the data (status: data_published), indicating exfiltration and/or encryption of company data. No specific data size, ransom amount, or detailed inventory was provided in the truncated post.
What the group claims
Q2 Artificial Lift Services specializes in the sales, service, engineering, and manufacturing of down hole rod pumps, positioning itself as a leader in artificial lift technology. The company operates from a state-of-the-art 118,000 sq. ft. facility and boasts over 40 service and repair locations across Canada and the USA. Q2 offers a comprehensive range of products, including API pumps, specialty tubing, and production tools, combined with supportive engineering and technical services. Their commitment to quality and innovation enables them to provide tailored solutions that maximize productivity for their clients in the oilfield sector.
The leak post
captured from the group's site[ Inteceng.com.my (+ Tsksynergy.com.my + Amemanufacturing.com.my + Woodnova.com.my) ``` These websites represent a synergistic group of Malaysian companies, such as AME Elite and TSK Synergy, specializing in integrated industrial construction and engineering solutions. They provide end-to-end services, including the design and fabrication of steel structures, mechanical engineering, and the development of large-scale industrial parks. Together, they leverage their combined expertise to deliver "turnkey" manufacturing facilities and infrastructure projects across the region. ``` ](http://payloadrz5yw227brtbvdqpnlhq3rdcdekdnn3rgucbcdeawq2v6vuyd.onion/posts/61827d93-eb95-42af-b264-9b84aeecefb7) [ ``` Gorey Community School is a co-educational, multi-denominational institution located in Gorey, Co. Wexford, under the joint patronage of the Loreto Sisters and Waterford and Wexford ETB ``` ](http://payloadrz5yw227brtbvdqpnlhq3rdcdekdnn3rgucbcdeawq2v6vuyd.onion/posts/c9049f7c-de08-4099-a2f7-d8ae8e421682) [ PROM (Peakside Ros Outlet Management) ``` PROM (Peakside Ros Outlet Management) is a joint venture established by the investment firm Peakside Capital and the operator Ros Retail t…
Sources
Source
Indexed 2 months agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
