Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
179
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 156 | 401 | 401 | active | no public figure | |
| 2 | qilin | 21 | ▲7 | 115 | 359 | 359 | active | no public figure | |
| 3 | krybit | 13 | ▲12 | 47 | 96 | 96 | active | no public figure | |
| 4 | storm | 4 | ▼36 | 44 | 56 | 56 | active | no public figure | |
| 5 | akira | 9 | ▲3 | 41 | 83 | 83 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 41 | 62 | 62 | active | no public figure | |
| 7 | inc ransom | 6 | ▲2 | 39 | 109 | 109 | active | no public figure | |
| 8 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 9 | lockbit5 | 5 | ▼2 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 11 | ▲2 | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 0 | ▼4 | 20 | 38 | 38 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 4 | ▼5 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 1 | ▼2 | 14 | 31 | 31 | active | no public figure | |
| 19 | panzer | 7 | ▲4 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | dragonforce | 3 | ▲1 | 12 | 71 | 71 | active | no public figure | |
| 22 | chaos | 4 | ▲2 | 12 | 34 | 34 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | = | 12 | 23 | 23 | active | no public figure | |
| 25 | rhysida | 3 | ▲1 | 12 | 14 | 14 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents8 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
Leisure Coast Kitchens tracker page ↗ | kairosfilter this group | · 19h ago | Leisure Coast Kitchens specializes in designing and installing high-quality bespoke kitchens, laundries, and bathrooms tailored to individual styles and needs. They offer a full range of services including custom cabinetry, benchtops, and renovation solutions, ensuring a personalized approach for each project. The company is dedicated to helping homeowners create functional and beautiful spaces, believing that everyone deserves a dream kitchen. With competitive pricing and expert advice, they aim to transform homes into enjoyable and inspiring environments. |
Ville de Libercourt tracker page ↗ | kairosfilter this group | · 14d ago | Libercourt is a commune in the Pas-de-Calais department of the Hauts-de-France region in northern France. |
Ayuntamiento de Velilla de San Antonio tracker page ↗ | kairosfilter this group | · 27d ago | El Ayuntamiento de Velilla de San Antonio es el organismo oficial de gobierno local y administración del municipio de Velilla de San Antonio, situado en la Comunidad de Madrid, España. Gestiona los servicios públicos, el padrón, los impuestos locales y la vida ciudadana de la localidad. |
Hightech Signs tracker page ↗ | kairosfilter this group | · Aug 12, 2026 | Hightech Signs, Inc. is a full-service sign shop located in Charlottesville, Virginia, specializing in custom sign production and creative consultation. They offer a wide range of products including engraving services, banners, vehicle graphics, and window lettering. Their services cater to clients in Central Virginia, providing fast turnaround and excellent customer service. Hightech Signs aims to meet the diverse signage needs of businesses and organizations in the region. |
Warwick Fabrics tracker page ↗ | kairosfilter this group | · Jul 30, 2026 | As one of the world’s leading textile and soft furnishing wholesalers, Warwick is a family-owned company that has been committed to providing quality materials to New Zealanders since 1985. Warwick are driven to continuously meet the evolving needs of today’s global textile markets by constantly creating and updating collections with the latest trends and classic designs, pushing boundaries, and creating quality products that inspire creativity in the interior design world. We are passionate on being innovative and are committed to our promise of exceptional quality and service, now and into the future. |
Thermalex Inc tracker page ↗ | kairosfilter this group | · Jul 25, 2026 | Thermalex specializes in aluminum extrusion solutions, offering high-efficiency and corrosion-resistant products since 1985. Based in Montgomery, Alabama, the company serves various industries including HVAC, automotive, battery cooling, and industrial applications. With advanced manufacturing systems and a commitment to quality, Thermalex is recognized as a global leader in the aluminum extrusion industry. Their expertise includes the fabrication of microchannel tubes and complex extrusions tailored to meet diverse client needs. |
LR Reed tracker page ↗ | kairosfilter this group | · Jul 22, 2026 | LR Reed is a family-owned business with over 30 years of experience, specializing in Owners Corporation management and developer services. They provide a comprehensive range of management services, including asset management, legislative compliance, and financial accounting, ensuring a transparent and hands-on approach. Their client portfolio includes various property types such as residential, retail, industrial, recreational, and commercial, serving notable companies like Mirvac and Walker Corporation. Committed to excellence, LR Reed is the preferred choice for managing strata communities with care and responsibility. |
College O'Sullivan de Québec tracker page ↗ | kairosfilter this group | · Jul 20, 2026 | Collège O'Sullivan de Québec offers a variety of training programs both in-class and online, focusing on fields such as administration, insurance, office management, IT, web development, and marketing. The institution aims to equip students with the skills needed for the job market and higher education through quality resources and personalized services. Their target clients include secondary school students, international students, and businesses seeking tailored training solutions. With over 80 years of history, the college is committed to fostering professional and personal competencies among its graduates. |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.