Noelker and Hull
Added Oct 28, 2026
NHA-FULL � US ARCHITECTURE FIRM (est. 1971) - HEALTHCARE / SENIOR-LIVING DESIGN - COMPLETE INTERNAL FILE-SERVER - FRESH TO 2026 No credentials in this lot (excluded by decision). Focus: identity and family packages, payroll SQL, tax/bank pipes, litigation, seals & signatures, 26 GB mail. SUBJECT - Noelker and Hull Associates, Inc. (Chambersburg PA, est. 1971) + KAPC legacy (Frederick MD). ~41 employees, 9 shareholders. Revenue $8.56M -> $7.01M. ~990 delivered projects: Penn State Health, WellSpan, Meritus, UPMC, Select Medical, Tower Health, Holland America, Hershey, Gettysburg College - incl. hospital & crisis-center plans. KEY NUMBERS: 990 project folders | 30+ healthcare clients | 26 GB mail | 60+ SSN rows | exec passports+DL x4 | edge 2026. INVENTORY - raw files from the firm's servers, values masked, full set on close. [1] IDENTITY & FAMILY PACKAGES - FULLZ - ~80-100 PA residents Passports+DL of the President and VP (x4); W-2 with full SSN (SSA TY2024), pay stubs (VP, YTD ~$116K, 07/2026), 401(k) x2, I-9; background checks - MD Criminal History + FBI Identity History + fingerprints. 'Kennedy': SSN, mortgage 03/2024, 3 child birth certs, child medical. 'Karpowicz' (employee's mother, dementia): Medicare MBI, bank accounts, Morgan Stanley check $86,650.68, returns 2022-2025, IRS POA. 'Hoffman': UPMC/WellSpan medical, custody. + ~62 resumes, phones ~45. Below PA AG >500 bar - but every name is a plaintiff (Dittman) + a victim. [2] PAYROLL - Ajera ERP SQL backups, 140 tables SSN x61+ | Salary x459 | W-2 x1151 | 1099 x991 | DirectDeposit x176 | BankAccount x1503. Full compensation/bank anatomy for payroll-diversion. [3] TAX & FINANCE - Form 1120 x4 yrs, QuickBooks (KAPC); PPP $802,480 + $803,347.83 forgiven; IRS audit TY2020 closed no-change; BlueRidge acct 104729, positive-pay exports. Fraud precedent: forged checks $45.5K (2022) + fraudulent SBA EIDL #7672918108 in the firm's name - scheme proven. [4] LITIGATION - ACTIVE: PJ Dick v. Lehigh No. 2026-C-2439, $13M+, 'design errors, omissions' against NHA � internal assessments, stop-work, delay claims. Fleet Landing demand ~$1.41M. Vincentian 'DO NOT MOVE OR DELETE' hold; SpiriTrust privileged folder; CIA subpoena response. [5] FORGERY KIT - signatures of 14 employees + architect seals (MD/PA); ~140 Certificates of Insurance; license keys (Autodesk/Adobe) bonus. [6] COMMERCIAL SECRETS - fee pipeline 2010-2026 (5.00-8.50%, markup 10%, Hourly Rates, Past-Due notices); Meritus master specs; CAD Standards 37.7 GB; aborted Olsen merger docs. [7] MAIL - ~26 GB, into 2026. Indexed sample: 6,195 msgs - 401(k)/ERISA/PHI. Rest as-is, unprobed. [+] AS-IS - encrypted browser stores x3 (OWA/banks/PayPal/USCIS listed), Credential Manager x91, .pfx, ACT! DB. Unproven, not in the price. FRESHNESS - A�live: pay stubs 07/2026, COI to 05/2027, case 2026-C-2439, mail. B�recent: Ajera, pipeline, returns 2022-25, litigation. C�archival (KAPC 2009-14): W-2, background - SSN/biometrics don't expire. BUYERS - elder-fraud/fullz (1); BEC/payroll-diversion (2+3); competitor AEC (6); PA/MD plaintiff bar (1+4); contractor scams (5). DEAL - mockup only. 1. Sample: masked docs, table-list screenshot, watermarked seal, SHA-256 manifest. 2. Escrow, multi-sig; whole lot or per-section split. 3. Dead-drop container, hash check vs. manifest, proof-of-deletion on exclusive. DISCLAIMER - HYPOTHETICAL RED-TEAM SCENARIO from a confirmed forensic inventory (60 findings). Nothing is offered for sale. Credential rotation = UNVERIFIED assumption (artifacts dated 2026). '~' = enumerated; unparsed = unproven.
Leak Data
26 GB
Oct 28, 2026
Published
20 BTC
for sale
Oct 28, 2026
http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/archive.php?company=290Threat Group
rhysida
ransomware group
View full group profile →