Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
232
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
storm
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 32 | ▲9 | 157 | 413 | 413 | active | no public figure | |
| 2 | qilin | 18 | ▲2 | 115 | 359 | 359 | active | no public figure | |
| 3 | krybit | 13 | ▲11 | 47 | 96 | 96 | active | no public figure | |
| 4 | direwolf | 5 | ▼6 | 45 | 62 | 62 | active | no public figure | |
| 5 | storm | 44 | ▲44 | 44 | 56 | 56 | active | no public figure | |
| 6 | akira | 7 | ▼1 | 38 | 82 | 82 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 3 | ▼6 | 36 | 106 | 106 | active | no public figure | |
| 9 | lockbit5 | 5 | ▼1 | 27 | 86 | 86 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | shinyhunters | 1 | ▼2 | 24 | 34 | 34 | active | no public figure | |
| 11 | safepay | 14 | ▲8 | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 0 | ▼7 | 20 | 38 | 38 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | audit team | 10 | ▲6 | 18 | 19 | 19 | active | no public figure | |
| 16 | panzer | 6 | ▲3 | 17 | 24 | 24 | active | no public figure | |
| 17 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 18 | emperador | 6 | ▲5 | 16 | 19 | 19 | active | no public figure | |
| 19 | play | 4 | ▲4 | 14 | 44 | 44 | active | no public figure | |
| 20 | vexy | 4 | ▼6 | 14 | 14 | 14 | active | no public figure | |
| 21 | black nevas | 13 | ▲13 | 13 | 13 | 13 | active | no public figure | |
| 22 | chaos | 5 | ▲4 | 12 | 34 | 34 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | ▼1 | 12 | 27 | 27 | active | no public figure | |
| 25 | rhysida | 3 | ▲1 | 12 | 15 | 15 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents13 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
Cash and carry - COSAEN GRUP tracker page ↗ | black nevasfilter this group | · 6d ago | Cash and carry - COSAEN GRUPProfessionals in the food sectorюCosaen Grup SA has wholesale and retail warehouses offering a wide range of food and beverage products, as well as fresh and dry goods.https://www.zoominfo.com/c/cosaen-grup-sa/459229657In stock: 983158 filedata size: 243GBList of files, to confirm that we have all the files, you can request several files from the list and we will provide them to you.https://gofile.io/d/9w9WwWe ask all our partners, friends and clients to contact us to discuss the acquisition of this data. You know the contacts. For new members, please wait in the Contacts tab.Advertising:We are always ready to cooperate in any form, do you need specific data? We will try to provide it to you as soon as possible, we will receive and download your competitors' data, provide a list of what you are interested in. We are also ready to cooperate with law firms and data leak victims. We will provide all the information you need about the company that was negligent and provided access to data to its clients. |
Abans Group tracker page ↗ | black nevasfilter this group | · 6d ago | The Abans Group is a globally diversified organization engaged in Investment Management, Trading, Broking, Gold Refining, Non-Banking Financial Services, Agricultural Trading, Software Development, and Real Estate Development.We are globally diversified organisation engaged in Financial Services, Gold Refining, Jewellery, Commodities Trading, Agricultural Trading and Warehousing, Pharmaceuticals Distribution, Software Development and Real Estate. The group is founded by young entrepreneur - Mr. Abhishek Bansal who leads a global team of over 300 people operating growing businesses from multiple locations including India, United Kingdom, Dubai, Shanghai, Hong kong, Mauritius and Singapore.Our Company represents the financial services arm of the Abans Group. We operate a diversified global financial services business, headquartered in India, providing NBFC services, multi-asset global institutional trading in equities,Since the inception of our Company in 2009-10, we have grown from being a commodities trading company into a diversified multi-asset and multi-national financial services company having varied financial services businesses which are mainly organised under:NBFC Business: We are a Non Banking Financial Company registered with RBI and having a Total Loan Book of ₹ 35,263 lakhs as on March 31, 2021.Our NBFC business is primarily focused on lending to private traders and other small and medium businesses involved in the commodities trading market.Agency Business: We are SEBI registered Stock and Commodity Exchange Brokers with memberships across all the major stock exchanges in India, including BSE, NSE, MSEI, MCX, NCDEX, ICEX and IIEL and further we have memberships in various international exchanges like DGCX (Dubai), LME (London), INE (Shanghai) and DCE (China). We are also a SEBI Registered Portfolio Management company as well as a SEBI Registered Category-I FPI and Category-III AIF. We offer various client-based institutional trading services, wealth… |
Arkın Group / Arkın Casino, The Arkın Colony, The Arkın Iskele, and Arkın Palm Beach tracker page ↗ | black nevasfilter this group | · 6d ago | Arkın Group is a Turkish Cypriot company group primarily operating in Northern Cyprus (TRNC). It was founded by Erbil Arkin, who serves as Chairman. The group has around 25–30 years of experience, employs over 3,000 people, and maintains international offices.Main ActivitiesThe group began in the hospitality sector and expanded over time:The Arkın Colony Hotel (Kyrenia/Girne) — the group’s first hotel, marking its entry into hospitality.Arkın Palm Beach Hotel (Famagusta/Gazimağusa) — a hotel with an associated casino that contributed significantly to North Cyprus tourism.The Arkın Iskele Hotel (Iskele, opened in 2022) — a modern property featuring approximately 1 km of beach, restaurants, entertainment facilities, and a casino.Casinos operate alongside the group’s hotels (including Arkın Casino facilities).Beyond hospitality and gaming, the group is involved in:Yachting and boat building (Arkin Pruva Yachts, including eco-friendly models);Education — ARUCAD (Arkın University of Creative Arts and Design), opened in 2017 as a specialized university focused on art, design, and communication;Marina management — in 2024 the group assumed management of the luxury Karpaz Gate Marina resort on the Karpaz Peninsula.Arkın Group focuses on tourism, hotels, casinos, yachting, and related sectors. It also has business ventures in Europe, South America, and the Middle East. |
L'azurde tracker page ↗ | black nevasfilter this group | · 6d ago | L'azurdeL'azurde Company for Jewelry is a prominent Middle Eastern jewelry manufacturer and retailer, headquartered in Riyadh, Saudi Arabia.Founded in the 1980s, it designs, manufactures, and sells gold, diamond, and gemstone jewelry across the Kingdom, Egypt, the UAE, Kuwait, Oman, and Qatar.Core InformationBrands: Operates under several lines including L'azurde, Instyle, Miss L', and Waves.Business Segments: Focuses on both wholesale distribution to independent jewelers and direct-to-consumer retail.Public Listing: Listed on the Saudi Stock Exchange (Tadawul) under the symbol 4011.Accessibility: Offers both online shopping and a vast physical footprint of stores across the region. |
Speed Group tracker page ↗ | black nevasfilter this group | · 6d ago | Speed Group (speedgroupe.com / speedfrance.fr) is a global leader in the manufacture of synthetic monofilament lines. The company was founded in France over 40 years ago. Today, Speed Group operates four manufacturing plants located in France, the USA, Chile, and South Africa. It specializes in the extrusion of high-quality monofilaments—particularly trimmer lines—and ranks among the world's leading players in this sector. The company also produces technical monofilaments for other industries. Since 2004, it has been part of the Italian Emak Group (Tecomec). Speed Group is renowned for its high product quality, rigorous production controls, and excellent service.Cyber Attack on Speed Group (speedgroupe.com)World leader in monofilament lines manufacturing — Speed Group — has been hit by a cyber attack. Hackers breached the company’s systems and stole confidential data.More than 1 terabytes of information were exfiltrated, including technical documentation, customer databases and production data from factories in France, USA, Chile, and South Africa.The company has not issued an official statement yet. #SpeedGroup #CyberAttack #DataBreach |
OTEGROUP tracker page ↗ | black nevasfilter this group | · 6d ago | OTE Group, founded in 1991, is one of Oman's leading business groups and part of Saad Bahwan Holding — a family-run enterprise and one of the oldest and largest privately owned business houses in Oman, with interests in over 15 industries and 30+ companies across the Gulf region.Starting as a small, one-franchise business, OTE Group has grown into a diversified powerhouse operating in 14 industries across 4 countries — Oman, UAE, Saudi Arabia, and Algeria — with 200+ customer touchpoints, and continued expansion underway.The group's core business spans automotive (exclusive distributor for brands like Cadillac, Chevrolet, Hyundai, Isuzu, Subaru, and GWM), electronics and home appliances, and polymer color concentrates for the plastics industry, alongside historical interests in auto parts, lubricants, tires, batteries, vehicle leasing, and vocational training. The company credits its growth to collaboration, cross-cultural understanding, and talent development. |
ASCOM S.p.A. ascom-italy.it serviced by an IT company Emilcom S.r.l. www.emilcom.it tracker page ↗ | black nevasfilter this group | · 6d ago | ASCOM S.p.A. is an Italian manufacturer of heavy lifting equipment for the marine (marinas & shipyards) and industrial sectors. Founded in 1972 by Gian Franco Schedoni in Formigine (Modena), the company began with overhead cranes and expanded into boat hoists (travel lifts) around 1982.Today it is a global specialist in travel lifts, gantry cranes, overhead cranes, and fully customized lifting solutions, with thousands of machines operating in over 50 countries. Production is fully in-house (9,000 m² facility), supported by its own engineering team using FEM analysis and modern CAD tools.Key facts:Certified ISO 9001, 14001 & 45001; all equipment CE-markedFocus on quality, customization, and sustainabilityServes marinas, shipyards, infrastructure, steel mills, renewable energy, mining, and moreHeadquarters: Via Della Fornace 16, 41043 Formigine (MO), ItalyPhone: +39 059 558038Email: [email protected]: ascom-italy.it |
COMPUTER COUNTRY AND NETWORKS tracker page ↗ | black nevasfilter this group | · 6d ago | A local Canadian IT company based in Stratford, Ontario, operating since 1983. It provides services to small and medium-sized businesses as well as private clients in the Stratford–St. Marys–Mitchell region and surrounding areas. Core services:Computer and laptop repairNetwork setup and supportServer installation and maintenanceVirus removal and system optimizationPOS systems (point-of-sale equipment)On-site serviceA small local service company with over 40 years of experience. |
Westbrook Greenhouse Systems www.westbrooksystems.com serviced by an IT company Computer C tracker page ↗ | black nevasfilter this group | · 6d ago | A Canadian family-owned company (part of the Westbrook Group of Companies) founded over 50 years ago. It specializes in the design, manufacturing, and installation of commercial greenhouses and related equipment (structures, heating and ventilation systems, benches, and handling materials).Its headquarters and manufacturing facilities are located in the Niagara region (Beamsville, Ontario). It serves clients across North America and operates its own factory spanning approximately 80,000 square feet. |
Enteroptyx Ophthalmology Products www.enteroptyx.com serviced by an IT company Computer Co tracker page ↗ | black nevasfilter this group | · 6d ago | There is very little public information available about this company. Judging by its name, it is a small supplier or manufacturer of ophthalmology products (equipment, consumables, or instruments for eye care). There is virtually no detailed data regarding its operations, location, or history in open sources. |
Jack Rutherford Customs Brokers Ltd / The Rutherford Group www.therg.ca serviced by an IT tracker page ↗ | black nevasfilter this group | · 6d ago | Jack Rutherford Customs Brokers Ltd. is a Canadian customs brokerage company currently operating under the brand name The Rutherford Group. The company provides comprehensive logistics services, primarily: customs brokerage (import and export clearance, clearance through Canadian and US customs, compliance consulting, CARM, surety bonds, etc.). They have PIP (Partners in Protection) status.Transportation: shipping within Canada, the US, and internationally.Warehousing: bonded warehouses (including CBSA sufferance), pick & pack, storage, including FDA-certified warehouses in Port Huron, Michigan.The company was founded in 1974 by Jack Rutherford in Stratford, Ontario. Now a family-owned business (second generation – John Rutherford), it positions itself as a one-stop shop for cross-border logistics. |
Portable Intelligence Inc www.portable-intelligence.com serviced by an IT company Computer tracker page ↗ | black nevasfilter this group | · 6d ago | A Canadian IT company based in Markham, Ontario, founded in 2015. It develops software for warehouse management and automation (Warehouse Management Systems).Key products:RF Plus — a barcode scanning and inventory tracking system for ERPs (specifically Infor VISUAL)TED — a warehouse task management and tracking platformSolutions for forklift tracking, RTLS (Real-Time Locating Systems), and machine visionIt works primarily with manufacturers in North America. |
Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, Eco tracker page ↗ | black nevasfilter this group | · 6d ago | No details on the leak post beyond the victim name. |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.