Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
183
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 32 | ▲9 | 157 | 413 | 413 | active | no public figure | |
| 2 | qilin | 19 | ▲4 | 116 | 360 | 360 | active | no public figure | |
| 3 | krybit | 13 | ▲11 | 47 | 96 | 96 | active | no public figure | |
| 4 | direwolf | 4 | ▼8 | 45 | 62 | 62 | active | no public figure | |
| 5 | storm | 4 | ▼36 | 44 | 56 | 56 | active | no public figure | |
| 6 | akira | 7 | ▼1 | 38 | 82 | 82 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 3 | ▼6 | 36 | 104 | 104 | active | no public figure | |
| 9 | lockbit5 | 5 | ▼1 | 27 | 86 | 86 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | shinyhunters | 1 | ▼2 | 24 | 32 | 32 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 0 | ▼7 | 20 | 38 | 38 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | audit team | 9 | ▲4 | 18 | 19 | 19 | active | no public figure | |
| 16 | panzer | 6 | ▲3 | 17 | 24 | 24 | active | no public figure | |
| 17 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 18 | emperador | 4 | ▲1 | 16 | 19 | 19 | active | no public figure | |
| 19 | play | 2 | = | 14 | 44 | 44 | active | no public figure | |
| 20 | vexy | 4 | ▼6 | 14 | 14 | 14 | active | no public figure | |
| 21 | dragonforce | 3 | ▲1 | 13 | 71 | 71 | active | no public figure | |
| 22 | black nevas | 13 | ▲13 | 13 | 13 | 13 | active | no public figure | |
| 23 | chaos | 4 | ▲2 | 12 | 34 | 34 | active | no public figure | |
| 24 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 25 | pear | 1 | ▼1 | 12 | 27 | 27 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents90 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
HENRYPRATT.COM tracker page ↗ | clopfilter this group | · 6d ago | No details on the leak post beyond the victim name. |
HARLEY-DAVIDSON.COM tracker page ↗ | clopfilter this group | · 6d ago | No details on the leak post beyond the victim name. |
ZEBRA.COM tracker page ↗ | clopfilter this group | · Aug 13, 2026 | Data exfiltrated included the following: Database, Project - files, CAD - files Total size: 8Tb Revenue: $5,600,000,000 |
NETPOWER.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Projects, Cad-files, Backup files Windchil Total size: 230Gb Revenue: $370,900,000 |
SHELL.COM (August 2026) tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Engineering drawings, photos of the facilities, scans of facility testing reports, project plans Total size: 89Gb Revenue: $2,673,000,000,000 |
GE.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Software backups, system files, projects Total size: 391Gb Revenue: $113,000,000,000 |
FISERV.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Projects, Cad-files, files Windchil, Soft Total size: 874Gb Revenue: $21,200,000,000 |
PHILIPS.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: PDF drawings, diagrams, blueprints Total size: 13.5Gb Revenue: $20,700,000,000 |
ALDOGROUP.COM (ALDOSHOES.COM) tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: TSV files, soft, Projects, Cad-files Total size: 424Gb Revenue: $14,800,000,000 |
IRCO.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Cad-files, PDF drawings, diagrams, product presentations, specifications, manuals and instructions Total size: 5564Gb Revenue: $7,800,000,000 |
TOASTTAB.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: project, backup database, logs Total size: 215Gb Revenue: $6,400,000,000 |
LARGAN.COM.TW tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Project, Soft Total size: 56Gb Revenue: $1,700,000,000 |
STARKEY.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project Total size: 3030Gb Revenue: $939,200,000 |
PARTECH.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project, Cad-files, Backups Total size: 24Gb Revenue: $475,700,000 |
MAMMUT.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: .png files, files Windchil Total size: 136Gb Revenue: $281,000,000 |
CORNELIUS.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project, PDF, TXT, DOC - files Total size: 3684Gb Revenue: $269,800,000 |
MAMASANDPAPAS.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 1,18Gb Revenue: $131,000,000 |
TRISTAR.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 1579,9Gb Revenue: $1,000,000,000 |
SMAPCENTER.UAH.EDU tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 6,08Gb Revenue: $113,000,000 |
SUUNTO.CN (SUUNTO.COM) tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 1470Gb Revenue: $111,000,000 |
BRILLONCONSUMER.COM (BRILLONCONSUMER.COM) tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 22,4Gb Revenue: $100,000,000 |
JPMGROUP.CO.IN tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 75,4Gb Revenue: $400,000,000 |
CLOVER.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 651Gb Revenue: $400,000,000 |
ATOMBERG.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 980Gb Revenue: $68,000,000 |
HONGHE-TECH.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 1,588Gb Revenue: $470,000,000 |
INTELLIGENTGROWTHSOLUTIONS.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project, PDF, XLSX, XLS, DOCX - files Total size: 261Gb Revenue: $31,000,000 |
INTELLIHOT.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, Backups, Soft installers, Updates, XML - files Total size: 271Gb Revenue: $27,000,000 |
9ALTITUDES.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, Project Backups, SQL Database Backup Total size: 382Gb Revenue: $15,000,000 |
WATERLANDPE.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, Project Backups, SQL Database Backup Total size: 382Gb Revenue: $5,800,000 |
THERMOS.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, Soft installers Total size: 285Gb Revenue: $9,000,000 |
NUOVACMM.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, Soft installers Total size: 279Gb Revenue: $6,600,000 |
IVALUESYS.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, Backups Total size: 109Gb Revenue: $8,100,000 |
SPKAA.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects Total size: 581Gb Revenue: $7,600,000 |
LIFESTRAW.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, Backups, Logs, Soft installers, PDF, TXT, XML - files Total size: 168Gb Revenue: $200,000,000 |
OMNITANKER.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, SQL Backups, Soft installers, Jpeg, Png, PDF - files Total size: 83Gb Revenue: $10,000,000 |
ARCHERGREY.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects Total size: 1,84Gb Revenue: <$5,000,000 |
G3AEROSPACE.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects Total size: 319Gb Revenue: $1,000,000 |
ITKHOLDING.HU tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects Total size: 40,7Gb Revenue: $1,700,000,000 |
MIDLANDIND.COM.AU tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project Total size: 0.5Gb Revenue: $5,000,000 |
FLUIDLOGIC.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project,Cad-files Total size: 26.4Gb Revenue: $5,000,000 |
QCPL.IN tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project Total size: 501Gb Revenue: $5,000,000 |
STNET.IT tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project Total size: 13.2Gb Revenue: $5,000,000 |
ECCELLENT.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: DBF files, Cad-files, Project, Soft, Backups Total size: 241Gb Revenue: $5,000,000 |
IPMSOLUTIONS.SK tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: PDF files, Cad-files, Soft Total size: 253Gb Revenue: $5,000,000 |
NUVITIA.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Project, Soft Total size: 89.8Gb Revenue: $5,000,000 |
CONTINENTAL.AERO tracker page ↗ | clopfilter this group | · Aug 7, 2026 | No details on the leak post beyond the victim name. |
MINDRAY.COM tracker page ↗ | clopfilter this group | · Aug 7, 2026 | No details on the leak post beyond the victim name. |
nuv******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Project, Soft Total size: 89.8Gb Revenue: $5,000,000 |
ipm******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: PDF files, Cad-files, Soft Total size: 253Gb Revenue: $5,000,000 |
ecc******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: DBF files, Cad-files, Project, Soft, Backups Total size: 241Gb Revenue: $5,000,000 |
st******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project Total size: 13.2Gb Revenue: $5,000,000 |
qc******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project Total size: 501Gb Revenue: $5,000,000 |
flu******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project,Cad-files Total size: 26.4Gb Revenue: $5,000,000 |
mid******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project Total size: 0.5Gb Revenue: $5,000,000 |
itk******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects Total size: 40,7Gb Revenue: $1,700,000,000 |
G3A******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects Total size: 319Gb Revenue: $1,000,000 |
arc******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects Total size: 1,84Gb Revenue: <$5,000,000 |
omn******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects, SQL Backups, Soft installers, Jpeg, Png, PDF - files Total size: 83Gb Revenue: $10,000,000 |
lif******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects, Backups, Logs, Soft installers, PDF, TXT, XML - files Total size: 168Gb Revenue: $200,000,000 |
sp******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects Total size: 581Gb Revenue: $7,600,000 |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.