Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
183
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 155 | 401 | 401 | active | no public figure | |
| 2 | qilin | 23 | ▲9 | 117 | 361 | 361 | active | no public figure | |
| 3 | krybit | 13 | ▲13 | 47 | 96 | 96 | active | no public figure | |
| 4 | storm | 4 | ▼36 | 44 | 56 | 56 | active | no public figure | |
| 5 | akira | 9 | = | 43 | 86 | 86 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 41 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 8 | ▲3 | 36 | 112 | 112 | active | no public figure | |
| 9 | lockbit5 | 4 | ▼4 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 11 | ▲2 | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 0 | ▼4 | 20 | 38 | 38 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | shinyhunters | 2 | ▼1 | 15 | 32 | 32 | active | no public figure | |
| 18 | vexy | 4 | ▼5 | 15 | 15 | 15 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | dragonforce | 3 | ▲1 | 12 | 71 | 71 | active | no public figure | |
| 22 | chaos | 4 | ▲2 | 12 | 34 | 34 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | = | 12 | 23 | 23 | active | no public figure | |
| 25 | rhysida | 3 | ▲1 | 12 | 14 | 14 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents28 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA tracker page ↗ | deadlockfilter this group | · 15d ago | Family law firm , established 1995 by Victor A. Shaheen (†2025 - the General Assembly of Virginia honored him with a resolution; google it, it is touching). Now run by his three sons. 48 employees across four offices: Richmond, Midlothian, Virginia Beach, Newport News. What do they do? They close 150+ real estate transactions EVERY MONTH for some of the largest corporate relocation programs in America. When a Fortune-500 moves an employee to Virginia, this firm holds that employee's Social Security Number, bank wiring details, home address, family identities, and sometimes their medical clearance. They hold everyone's future in a shared folder. We now hold the folder. |
JP Molyneux Studio tracker page ↗ | deadlockfilter this group | · 21d ago | JP Molyneux Studio Ltd showcases the exclusive work of internationally renowned interior designer Juan Pablo Molyneux. |
FBC tracker page ↗ | deadlockfilter this group | · 22d ago | Furniture Bargaining Council in South Africa. This is the tariff council for the furniture, mattress and upholstery industry.The platform serves employers and employees in the industry in regions such as Gauteng, North West, Mpumalanga, Limpopo and the Free State to handle legal and administrative processes. |
Global Terminal Services tracker page ↗ | deadlockfilter this group | · 22d ago | GTS legally registered as Global Terminal Hizmetleri A.Ş. It is the largest independent storage terminal for liquid fuels and oil in the entire Mediterranean region. |
KAMPH tracker page ↗ | deadlockfilter this group | · 28d ago | K&A Machmouchi Pharma Holding a leading Lebanese company in the field of pharmaceutical import, storage and distribution. https://kamph.co |
UFOC tracker page ↗ | deadlockfilter this group | · 28d ago | United Fiber Optic Communication Inc. (UFOC) is an established, publicly traded telecommunications company from Taiwan. The company acts as a total solution provider for communication networks and specializes in the manufacture of fiber optic cables and the provision of integrated technological systems. https://www.ufoc.com.tw/en/company |
LT Group / Fortune Tobacco Corp tracker page ↗ | deadlockfilter this group | · Aug 11, 2026 | No details on the leak post beyond the victim name. |
AHENK lab tracker page ↗ | deadlockfilter this group | · Jul 29, 2026 | Ahenk Laboratuvarı is an ISO 15189-accredited medical laboratory in Turkey, founded in 1998 and located in Istanbul-Şişli. The company offers services in clinical biochemistry, microbiology, pathology, and genetics, and collaborates with Limbach Laboratories in Germany. |
Takis srl tracker page ↗ | deadlockfilter this group | · Jul 28, 2026 | Takis Biotech is an Italian biotechnology company founded in 2009 and headquartered in Rome. The company specializes in contract research (R&D services), preclinical immunology, and the development of genetic vaccines and therapeutic antibodies. |
DIATER tracker page ↗ | deadlockfilter this group | · Jul 28, 2026 | (Laboratorio de Diagnóstico y Aplicaciones Terapéuticas, SA), a Spanish biopharmaceutical company founded in 1999 and headquartered in Madrid.The company specializes in the research, development and manufacture of products for allergy diagnostics and allergen immunotherapy (ASIT). |
Pasello tracker page ↗ | deadlockfilter this group | · Jul 28, 2026 | Pasello Trattamenti Termici Srl , an Italian specialist company for the heat treatment of metal alloys. |
Tesco Engineer tracker page ↗ | deadlockfilter this group | · Jul 27, 2026 | Tesco Engineer Co., Ltd. is a Thai construction and manufacturing company based in Bangkok, operating in civil engineering and industrial pipe manufacturing since 1976. |
Hardware Asesorias Software Ltda tracker page ↗ | deadlockfilter this group | · Jul 27, 2026 | Hardware Asesorías Software Ltda (HAS Ltda) is a technology provider based in Bucaramanga, Colombia, specializing in the distribution of hardware and software licenses . The company acts as an official partner for brands such as Apple, Adobe, and HP, serving business customers, government agencies, and engineering firms. |
High Class Car Limo tracker page ↗ | deadlockfilter this group | · Jul 26, 2026 | High Class Limousine & Car Service Corp. is a licensed private passenger transportation service in New York City, founded in 1995, specializing in non-emergency medical transportation . The company provides rides to medical appointments, dialysis sessions, and rehabilitation facilities, and has locations in Manhattan and the Bronx. |
West African Resources ltd tracker page ↗ | deadlockfilter this group | · Jul 26, 2026 | West African Resources Limited (ASX: WAF) isan Australia-based, mid-tier gold mining and exploration companywith its primary operations located in Burkina Faso, West Africa . Founded in 2006, the company is headquartered in Subiaco, Western Australia, and focuses on the acquisition, development, and mineral processing of high-grade gold assets. |
Caspian One tracker page ↗ | deadlockfilter this group | · Jul 26, 2026 | Caspian One is an international provider of IT services and specialist talent for industries such as FinTech investment banking and broadcasting. Based in England the company offers professional recruitment and managed technology solutions and operates in Europe and North America. |
Vinilon tracker page ↗ | deadlockfilter this group | · Jul 24, 2026 | Vinilon Group one of the leading manufacturers and distributors of pipe systems in Indonesia. |
La ville de Ouangani tracker page ↗ | deadlockfilter this group | · Jul 10, 2026 | French municipality of Ouangani on Mayotte https://ville-ouangani.yt/ |
Aldaco Avance 2022 S.L. tracker page ↗ | deadlockfilter this group | · Jul 10, 2026 | Aldaco is a Spanish company specializing in industrial engineering, construction materials, civil engineering, mining and labor security, with seats in Asturias, Galicia and Madrid. The company distributes machines and technical tools, offers specialized asesoramients and support for professional projects. https://aldacogrupoavance.es/ |
Schaad, Balass, Menzl and Partner AG tracker page ↗ | deadlockfilter this group | · Jul 10, 2026 | SBMP (Schaad Balass Menzl & Partner AG) is a specialized Swiss IP boutique with offices in Zurich and Winterthur, offering comprehensive services in patent law, trademark law, and design protection. With over 50 years of experience and a team of lawyers and technical experts, the firm supports companies across all industries, from filing to enforcement. https://sbmp.ch/ |
HİDROMEK tracker page ↗ | deadlockfilter this group | · Jul 10, 2026 | HİDROMEK is a leading Turkish manufacturer of heavy construction machinery recognized globally for its high-performance award-winning heavy equipment. Founded in Ankara in 1978 by mechanical engineer Hasan Basri Bozkurt the company operates six state-of-the-art production facilities across Turkey and Thailand. Its heavy machinery operates in more than 130 countries spanning six continents. https://www.hidromek.com/ Over 880 gigabytes of sensitive internal data were stolen from this company |
KEMEK tracker page ↗ | deadlockfilter this group | · Jul 10, 2026 | KEMEK Engineering a leading technology and automation company in the Baltics The company was founded in 1995 and develops customized solutions for industrial companies. https://www.kemek.eu/ |
KeNHA tracker page ↗ | deadlockfilter this group | · Jul 10, 2026 | The Kenya National Highways Authority (KeNHA) agency responsible for the construction, management, and maintenance of national highways (classes S, A, and B) in Kenya. https://kenha.co.ke/ |
BioResearch tracker page ↗ | deadlockfilter this group | · Jul 10, 2026 | BioResearch Group to Warsaw clinical research center specializing in early phases (I, FIH, SAD, MAD) and bioequivalence studiesThe company offers comprehensive services for the pharmaceutical and CRO sectors, with its own clinic and laboratory. https://www.bioresearch.pl/ |
Relesa tracker page ↗ | deadlockfilter this group | · Jul 10, 2026 | Grupo Relesa a multinacional Spanish company specializing in the fabrication and summary of rejillas metálicas (tramex). The main function is the digital platform and the client portal of Reginald Lee SA, one of the official distributors of more important products of Coca-Cola in Argentina. https://relesa.com.ar https://gruporelesa.com/ |
Carrier AB tracker page ↗ | deadlockfilter this group | · Jul 10, 2026 | Carrier Transport AB a Swedish transport and logistics company headquartered in Jordbro near Stockholm. https://carrier.se/ |
Enedo Power tracker page ↗ | deadlockfilter this group | · Jul 10, 2026 | Enedo Power (company renamed Inission Power) develops high-quality, intelligent power supply systems for critical infrastructure and industrial applications. The company, part of the Swedish Inission Group with Finnish roots, focuses on robust power supplies, power systems, and LED drivers for industries such as defense and railway technology. https://enedopower.com/ powernet.fi inissionpower.com |
CNA tracker page ↗ | deadlockfilter this group | · Jul 10, 2026 | CNA Toscana Centro a trade association that provides services and protection to artisans and businesses in the provinces of Prato and Pistoia. The portal manages union representation, tax services, the EPASA-ITACO welfare association, and supports business development and digitalization. https://toscanacentro.cna.it/ |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.