Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
184
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 153 | 401 | 401 | active | no public figure | |
| 2 | qilin | 23 | ▲9 | 117 | 361 | 361 | active | no public figure | |
| 3 | krybit | 13 | ▲13 | 47 | 96 | 96 | active | no public figure | |
| 4 | storm | 4 | ▼36 | 44 | 56 | 56 | active | no public figure | |
| 5 | akira | 9 | = | 43 | 86 | 86 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 41 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 8 | ▲3 | 36 | 112 | 112 | active | no public figure | |
| 9 | lockbit5 | 4 | ▼4 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 11 | ▲2 | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 0 | ▼4 | 20 | 38 | 38 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 4 | ▼5 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | ▼1 | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | dragonforce | 3 | ▲1 | 12 | 71 | 71 | active | no public figure | |
| 22 | chaos | 4 | ▲2 | 12 | 34 | 34 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | = | 12 | 23 | 23 | active | no public figure | |
| 25 | rhysida | 3 | ▲1 | 12 | 14 | 14 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents37 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
Westwing Group SE tracker page ↗ | coinbase cartelfilter this group | · 17d ago | Furniture - $465.5 Million |
Integrated Health Systems tracker page ↗ | coinbase cartelfilter this group | · 19d ago | Business Services - $9.3 Million |
RXPE Group tracker page ↗ | coinbase cartelfilter this group | · 19d ago | Electronics - $319 Million |
Tower Insurance tracker page ↗ | coinbase cartelfilter this group | · 19d ago | Insurance - $283.7 Million |
Flecha Bus tracker page ↗ | coinbase cartelfilter this group | · 19d ago | Transportation, Freight & Logistics Services - $366.3 Million |
OTEIS Conseil & Ingénierie tracker page ↗ | coinbase cartelfilter this group | · 19d ago | Architecture, Engineering & Design - $69.8 Million |
Longhorn Investments tracker page ↗ | coinbase cartelfilter this group | · 19d ago | Finance - $15.5 Million |
Kessler Creative tracker page ↗ | coinbase cartelfilter this group | · 19d ago | Advertising Networks - $17.1 Million |
Klasko Immigration Law Partners tracker page ↗ | coinbase cartelfilter this group | · 19d ago | Law Firms & Legal Services - $19.7 Million |
Patel tracker page ↗ | coinbase cartelfilter this group | · 19d ago | Accounting For Legal Practices - $5 Million |
Abacus Advisors tracker page ↗ | coinbase cartelfilter this group | · 19d ago | Accounting For Legal Practices - $5 Million |
LifeBank Microfinance Foundation tracker page ↗ | coinbase cartelfilter this group | · 19d ago | Finance - $5 Million |
PT Perusahaan Jamu Air Mancur tracker page ↗ | coinbase cartelfilter this group | · 19d ago | Pharmaceuticals & Healthcare - $100 Million |
PT. Bank Perekonomian Rakyat Bintan tracker page ↗ | coinbase cartelfilter this group | · 19d ago | Banking & Financial Services - $5 Million |
Crowe tracker page ↗ | coinbase cartelfilter this group | · 22d ago | Accounting For Legal Practices - $1.3 Billion |
Advanced Engineering Consultants tracker page ↗ | coinbase cartelfilter this group | · 22d ago | Architecture, Engineering & Design - $14.8 Million |
Westwing Group SE NEW tracker page ↗ | coinbase cartelfilter this group | · 24d ago | Furniture - $465.5 Million |
Integrated Health Systems NEW tracker page ↗ | coinbase cartelfilter this group | · 26d ago | Business Services - $9.3 Million |
RXPE Group NEW tracker page ↗ | coinbase cartelfilter this group | · 26d ago | Electronics - $319 Million |
Tower Insurance NEW tracker page ↗ | coinbase cartelfilter this group | · 26d ago | Insurance - $283.7 Million |
Flecha Bus NEW tracker page ↗ | coinbase cartelfilter this group | · 26d ago | Transportation, Freight & Logistics Services - $366.3 Million |
OTEIS Conseil & Ingénierie NEW tracker page ↗ | coinbase cartelfilter this group | · 26d ago | Architecture, Engineering & Design - $69.8 Million |
Longhorn Investments NEW tracker page ↗ | coinbase cartelfilter this group | · 26d ago | Finance - $15.5 Million |
Kessler Creative NEW tracker page ↗ | coinbase cartelfilter this group | · 26d ago | Advertising Networks - $17.1 Million |
Klasko Immigration Law Partners NEW tracker page ↗ | coinbase cartelfilter this group | · 26d ago | Law Firms & Legal Services - $19.7 Million |
Patel NEW tracker page ↗ | coinbase cartelfilter this group | · 26d ago | Accounting For Legal Practices - $5 Million |
Abacus Advisors NEW tracker page ↗ | coinbase cartelfilter this group | · 26d ago | Accounting For Legal Practices - $5 Million |
LifeBank Microfinance Foundation NEW tracker page ↗ | coinbase cartelfilter this group | · 26d ago | Finance - $5 Million |
PT Perusahaan Jamu Air Mancur NEW tracker page ↗ | coinbase cartelfilter this group | · 26d ago | Pharmaceuticals & Healthcare - $100 Million |
PT. Bank Perekonomian Rakyat Bintan NEW tracker page ↗ | coinbase cartelfilter this group | · 26d ago | Banking & Financial Services - $5 Million |
Sweet Water Holdings tracker page ↗ | coinbase cartelfilter this group | · 27d ago | Finance - Undisclosed |
Turner and Townsend tracker page ↗ | coinbase cartelfilter this group | · 27d ago | Engineering - $1,6 Billion |
Serruya private equity tracker page ↗ | coinbase cartelfilter this group | · 27d ago | Finance - $20 Million |
Accesso tracker page ↗ | coinbase cartelfilter this group | · 27d ago | Financial Software - $152 Million |
Hitachi High-Tech tracker page ↗ | coinbase cartelfilter this group | · 27d ago | Automation & Materials - $4.7 Billion |
Crowe NEW tracker page ↗ | coinbase cartelfilter this group | · 29d ago | Accounting For Legal Practices - $1.3 Billion |
Advanced Engineering Consultants NEW tracker page ↗ | coinbase cartelfilter this group | · 29d ago | Architecture, Engineering & Design - $14.8 Million |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.