ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Incidents

Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups

Leak-site victims · 7d
205
Leak-site victims · 30d
1K
Active groups · 30d
8011 new
Most active · 7d
the gentlemen
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP

Ransomware & extortion groups · activity

#Group7dtrend30d90dall-time*Last postStatusEstimated earnings (public reporting)
1the gentlemen30▲8152400400activeno public figure
2qilin29▲16113364364activeno public figure
3storm9▼31496161activeno public figure
4krybit15▲15449595activeno public figure
5akira10▲3438787activeApproximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since.
6direwolf2▼9376262activeno public figure
7coinbase cartel0=355656activeno public figure
8inc ransom10▲634113113activeno public figure
9lockbit55=275454activeOver US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit…
10audit team10▲1242626activeno public figure
11safepay10=226767activeno public figure
12leakeddata1▲1203939activeno public figure
13orova0=194444activeno public figure
14zawoo0=191919activeno public figure
15emperador4▼1182222activeno public figure
16kazu0▼17171717activeno public figure
17vexy3▼4151515activeno public figure
18shinyhunters2=143232activeno public figure
19panzer7▲5142525activeno public figure
20black nevas1▼12141414activeno public figure
21play3▼1134747activeno public figure
22chaos3▼1133535activeno public figure
23rhysida2▼2131515activeno public figure
24everest0▼3123434activeno public figure
25pear0▼1122323activeno public figure

*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.

TypeAllRansomware leak sitesBreaches (HIBP)Window7d30d90dAllgroup: dataleak ✕

Leak-site victims5 records · full details

VictimGroup / typeDiscoveredDetails
<h2 id="about">ABOUT</h2> <p>Nissin Foods Do Brasil Ltda is a company that operates in the
tracker page ↗		 dataleakfilter this group · Jul 8, 2026Nissin Foods Do Brasil Ltda is a company that operates in the Food & Beverages industry. It employs 251-500 people and has $100M-$250M of revenue
<h2 id="about">ABOUT</h2> <p>The RKW Group is an independent private company headquartered
tracker page ↗		 dataleakfilter this group · Jul 8, 2026The RKW Group is an independent private company headquartered in Mannheim, Germany, and is one of the world's leading manufacturers of excellent film solutions. RKW is the market leader in the areas of hygiene and agricultural films, films for the beverage industry and packaging for powdery goods. Moreover, the company also supplies films and nonwovens for medical applications, for the chemical and processing industries as well as for the construction sector. The RKW Group's sustainable plastic-based films enable its customers to improve the daily life of consumers worldwide.
<h2 id="about">ABOUT</h2> <ul> <li></li> </ul> <h2 id="target">TARGET</h2> <p>ni*usa.com</
tracker page ↗		 dataleakfilter this group · Jul 8, 2026ni*usa.com
<h2 id="about">ABOUT</h2> <p>SCHERDELWiesauplast ist ein international tätiger Hersteller
tracker page ↗		 dataleakfilter this group · Jul 8, 2026SCHERDELWiesauplast ist ein international tätiger Hersteller für Baugruppen und Komponenten aus Kunststoff. Der Hauptsitz des Unternehmens ist in Wiesau, weitere Niederlassungen befinden sich in den USA, sowie ein eigenes Produktionswerk in Mexiko. Seit mehr als 50 Jahren steht der Name Wiesauplast für Erfahrung, Kompetenz und Innovation in Sachen Kunststofftechnik, eines der ersten Produkte war die Blinkerleuchte für den legendären VW Käfer. SCHERDELWiesauplast fertigt in Deutschland und Mexiko eine Vielzahl technischer Komponenten und Systeme, welche sicherheitsrelevante Funktionen With over 35 years of experience since our inception, GRANT & WEBER has established a reputation as a leading authority in all revenue solutions & receivables management services for healthcare, Credit Union & Financial, as well as, Insurance industries. Our services are delivered nationwide and including: Consulting, Insurance Billing & Follow-Up, Self Pay Billing & Customer Service Follow-Up, Self Pay Collections, Third Party Liability Recovery, Workers’ Compensation Recovery, Pre-Charge Off Account Management, Third Party Late Stage Collection Services, and Arbitration.
<h2 id="about">ABOUT</h2> <p>The Beacon Insurance Company Limited is ranked as the fourth
tracker page ↗		 dataleakfilter this group · Jul 8, 2026The Beacon Insurance Company Limited is ranked as the fourth largest insurer in Trinidad and Tobago. Our roots go back to 1972 when Mr Aziz Hadeed founded The Caribbean Insurance Company, passing the proverbial baton to his son, Gerald Hadeed, who sits at the helm today. The company was rebranded as The Beacon Insurance Company in 1996. The early years of the company were characterised by direct personal relationships between Aziz and his clients, rather than through Brokers and after 45 years of cumulative growth, Beacon is now a regional player with Branch Offices and an Agency network that spans Trinidad & Tobago, Barbados, Grenada, St Lucia, St Vincent & The Grenadines, St Kitts & Nevis, and Dominica. Beacon therefore enjoys a reputation as an emerging giant in the regional insurance industry.

Breach & ransomware newsAll →

Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.