ZeroHour

leakeddata

ransomware group · aka LeakedData (name used by this dashboard; no other public aliases widely reported) · unknown · active since unknown (dashboard first recorded leak-site activity on 2026-08-08)

Victims · 7d
0▼7
Victims · 30d
20active targets
Victims · 90d
38
All-time (tracked)
205since 2024-12-13
Last post
09-03 22:33UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

LeakedData is tracked by this dashboard as a data-extortion operation that publishes victim listings on a public leak site: 38 victims have been listed since tracking began on 2026-08-08, including 4 in the past 7 days and 25 in the past 30 days, with the most recent post on 2026-09-03. The victims publicly identified to date are prominent US law firms, indicating a focus on the legal and professional services sector. Whether the group deploys ransomware alongside extortion, or operates as an extortion-only brand, is not established in widely available public reporting. Attribution, country of origin, affiliate structure, and demand amounts are unknown, and no public earnings estimates have been published. Defenders in legal and professional services should treat LeakedData as an active extortion threat and monitor for victim disclosures.

Tactics & tooling
  • Publishes victim names and claimed stolen data on a public leak site as extortion leverage
  • Sustained posting cadence (25 listings in 30 days per dashboard tracking) indicating ongoing operations
  • Targets large US-based law firms and professional services organizations (inferred from named victims)
  • Ransomware deployment unconfirmed; extortion-only operation possible (unknown)
  • Initial access vectors, exfiltration methods, and attack infrastructure not widely reported (unknown)
Targeted sectors
Legal services (evident from named victims)Professional services (inferred)Other victim sectors unnamed; overall sector mix unknown
Notable public victims

Katten Muchin Rosenman, Greenberg Traurig, Holland & Knight

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
Fenwick · Apr 9, 2025
R...Q... · Apr 8, 2025
Liberty Tax · Apr 8, 2025
S...B... · Apr 6, 2025
McLaughlin & Stern · Apr 5, 2025
Roger Keith and Sons Insurance Agency · Apr 5, 2025
C...S... · Apr 4, 2025
S...F... · Apr 4, 2025
M...D... · Apr 4, 2025
Li... · Apr 3, 2025
H...B... · Mar 28, 2025
G...R... · Mar 27, 2025
Advantage Group GA · Mar 20, 2025
Cors & Bassett · Mar 20, 2025
IFG Companies · Mar 20, 2025
Kisling Nestico & Redick · Mar 20, 2025
NCheng · Mar 20, 2025
ADM LAW · Mar 20, 2025
McCague Borlack · Mar 20, 2025
First Financial Equity · Mar 20, 2025
Barst Mukamal & Kleiner · Mar 19, 2025
Olinsky Law Group · Mar 19, 2025
Pembrook Group · Mar 19, 2025
Colucci Law Group · Mar 19, 2025
GreatFlorida Insurance Holding Corp. · Mar 19, 2025
Paycor · Mar 19, 2025
Baxter Baker Sidle Conn & Jones · Mar 19, 2025
Chicago Atlantic Group · Mar 19, 2025
Mauldin & Jenkins · Mar 19, 2025
Miller Canfield · Mar 19, 2025
CRC Group · Mar 16, 2025
W...M... · Mar 7, 2025
Sh... · Mar 6, 2025
Ge... · Feb 27, 2025
S... · Feb 27, 2025
C... · Feb 24, 2025
G...F... · Feb 7, 2025
Ag... · Feb 7, 2025
44North · Feb 5, 2025
K...N... · Feb 3, 2025
F...F... · Feb 3, 2025
B...P... · Feb 1, 2025
O...L... · Jan 31, 2025
M...J... · Jan 30, 2025
B...L... · Jan 30, 2025
Col... · Jan 30, 2025
R...K... · Jan 30, 2025
P...W... · Jan 29, 2025
EW Smith Insurance Agency · Jan 23, 2025
Anders CPAs + Advisors · Jan 17, 2025

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .