Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
232
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
storm
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 32 | ▲9 | 157 | 413 | 413 | active | no public figure | |
| 2 | qilin | 18 | ▲2 | 115 | 359 | 359 | active | no public figure | |
| 3 | krybit | 13 | ▲11 | 47 | 96 | 96 | active | no public figure | |
| 4 | direwolf | 5 | ▼6 | 45 | 62 | 62 | active | no public figure | |
| 5 | storm | 44 | ▲44 | 44 | 56 | 56 | active | no public figure | |
| 6 | akira | 7 | ▼1 | 38 | 82 | 82 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 3 | ▼6 | 36 | 106 | 106 | active | no public figure | |
| 9 | lockbit5 | 5 | ▼1 | 27 | 86 | 86 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | shinyhunters | 1 | ▼2 | 24 | 34 | 34 | active | no public figure | |
| 11 | safepay | 14 | ▲8 | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 0 | ▼7 | 20 | 38 | 38 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | audit team | 10 | ▲6 | 18 | 19 | 19 | active | no public figure | |
| 16 | panzer | 6 | ▲3 | 17 | 24 | 24 | active | no public figure | |
| 17 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 18 | emperador | 6 | ▲5 | 16 | 19 | 19 | active | no public figure | |
| 19 | play | 4 | ▲4 | 14 | 44 | 44 | active | no public figure | |
| 20 | vexy | 4 | ▼6 | 14 | 14 | 14 | active | no public figure | |
| 21 | black nevas | 13 | ▲13 | 13 | 13 | 13 | active | no public figure | |
| 22 | chaos | 5 | ▲4 | 12 | 34 | 34 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | ▼1 | 12 | 27 | 27 | active | no public figure | |
| 25 | rhysida | 3 | ▲1 | 12 | 15 | 15 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Leak-site victims47 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
www.kashkha.com tracker page ↗ | krybitfilter this group | · 2d ago | Kashkha is a multinational modest fashion brand founded three decades ago in Dubai, UAE, specializing in designing, manu... |
www.tiflispalace.ge tracker page ↗ | krybitfilter this group | · 3d ago | Tiflis Palace is a luxurious boutique hotel located in the heart of Tbilisi, Georgia, in the legendary place of the city... |
www.tender.mx tracker page ↗ | krybitfilter this group | · 3d ago | Tender (Carnicería Tender) is a Mexican premium butcher shop chain (carnicería) founded under the original brand Vigar... |
capricornlogistics.com tracker page ↗ | krybitfilter this group | · 3d ago | Capricorn Logistics Pvt. Ltd. is an Indian comprehensive supply chain and logistics company founded in 2001 in Mumbai, M... |
www.ibnsinatrust.com tracker page ↗ | krybitfilter this group | · 3d ago | The Ibn Sina Trust is a pioneering Bangladeshi non-profit welfare trust and major healthcare provider founded on June 30... |
lasultanahotels.com tracker page ↗ | krybitfilter this group | · 3d ago | La Sultana Hotel Group is a Moroccan luxury boutique hotel group created in the year 2000, targeting discerning traveler... |
eracm.fr tracker page ↗ | krybitfilter this group | · 3d ago | ERACM (École Régionale d'Acteurs de Cannes et Marseille) is a French non-profit association and regional drama school ... |
pss.ht tracker page ↗ | krybitfilter this group | · 3d ago | Professional Security Services S.A. (PSS) is a Haitian-owned private security services company established in 1995, head... |
www.metalware.ca tracker page ↗ | krybitfilter this group | · 3d ago | Metalware Corporation Inc. is Canada's leading industrial shelving manufacturer, founded in 1954, headquartered in Montr... |
intherpro.com tracker page ↗ | krybitfilter this group | · 3d ago | Intherpro LLC (International Thermal Insulation & Passive Fire Protection Company) is a UAE-based global leader in engin... |
meridian16.hr tracker page ↗ | krybitfilter this group | · 3d ago | Meridian 16 Business Park d.o.o. is a Croatian eco-industrial business zone developer and operator, established over the... |
www.eac-airports.com tracker page ↗ | krybitfilter this group | · 3d ago | Egyptian Airports Company (EAC) is an Egyptian state-owned public company incorporated in 2001, operating as a subsidiar... |
swadeshicipl.com tracker page ↗ | krybitfilter this group | · 3d ago | Swadeshi Civil Infrastructure Private Limited (SCIPL) is an Indian private limited company incorporated on March 11, 200... |
ligacancerguate.org tracker page ↗ | krybitfilter this group | · 12d ago | INCAN — Instituto de Cancerología y Hospital Dr. Bernardo del Valle S. is Guatemala's premier private cancer treatmen... |
incan.org.gt tracker page ↗ | krybitfilter this group | · 12d ago | INCAN — Instituto de Cancerología y Hospital Dr. Bernardo del Valle S. is Guatemala's premier private cancer treatmen... |
seashellhospital.com tracker page ↗ | krybitfilter this group | · 14d ago | Seashell Hospital is a comprehensive private Egyptian hospital located in New Cairo, Egypt, offering world-class multidi... |
uicc.org tracker page ↗ | krybitfilter this group | · 14d ago | The Union for International Cancer Control (UICC) is the world's largest international cancer membership non-profit orga... |
tum.com.mx tracker page ↗ | krybitfilter this group | · 14d ago | TUM Transportistas Unidos Mexicanos División Norte, S.A. de C.V. is the largest trucking company in Mexico, founded in ... |
www.alphaplantes.com tracker page ↗ | krybitfilter this group | · 14d ago | Alphaplantes (Service d'Entretien des Plantes Alpha Inc.) is a Canadian family-owned company founded in 1970, headquarte... |
reignwoodpark.com tracker page ↗ | krybitfilter this group | · 14d ago | Reignwood Park Thailand is a luxury real estate and integrated lifestyle development project by Reignwood Group — a le... |
orex.co.th tracker page ↗ | krybitfilter this group | · 14d ago | Orex Trading Co., Ltd. is a Thai trusted distributor and one-stop service provider of medical products, pharmaceuticals,... |
amptc.net tracker page ↗ | krybitfilter this group | · 14d ago | Arab Maritime Petroleum Transport Company (AMPTC) is a leading Arab maritime shipping company established in 1972 as a s... |
dmt-group.com tracker page ↗ | krybitfilter this group | · 14d ago | DMT Consulting Private Limited is an Indian private limited company incorporated on September 25, 1998, formerly known a... |
jswlaw.bt tracker page ↗ | krybitfilter this group | · 14d ago | Jigme Singye Wangchuck School of Law (JSW Law) is Bhutan's first and only law school, established by Royal Charter on Fe... |
vedantaainstitute.in tracker page ↗ | krybitfilter this group | · 14d ago | Vedantaa Institute of Medical Sciences (VIMS) is a private Indian medical education institution and hospital operated un... |
meccahighfeed.blogspot.com tracker page ↗ | krybitfilter this group | · 14d ago | مصنع مكة وهاي فيد للأعلاف (Mecca High Feed Factory) is an Egyptian animal feed manufacturing compan... |
transportesmontejo.com tracker page ↗ | krybitfilter this group | · 14d ago | Transportes Montejo S.A.S. is a Colombian specialized heavy transport and logistics company established on June 7, 1988,... |
southsign.in tracker page ↗ | krybitfilter this group | · 14d ago | Southsign Technologies is an Indian proprietor firm established in 2021, headquartered in Dindigul, Tamil Nadu, India, o... |
hccd-construction.com tracker page ↗ | krybitfilter this group | · 14d ago | The Holding Company for Construction and Development (HCCD) is an Egyptian public holding company (Egyptian Holding Stoc... |
sysconth.com tracker page ↗ | krybitfilter this group | · 20d ago | Syscon (Thailand) Co., Ltd. is a Thai company headquartered in Bang Khen District, Bangkok, Thailand, specializing in th... |
jindallifescience.com tracker page ↗ | krybitfilter this group | · 20d ago | Jindal Life Science Private Limited is an Indian full-service Contract Research Organization (CRO) established in 2023, ... |
mimafoods.net tracker page ↗ | krybitfilter this group | · 20d ago | Mima Foods is an Egyptian top producer and global exporter of IQF (Individually Quick Frozen) frozen vegetables and food... |
vascara.com tracker page ↗ | krybitfilter this group | · 20d ago | Vascara (Global Fashion One Member Company Limited) is a Vietnamese premium fashion brand specializing in stylish women'... |
www.neooftalmo.com.br tracker page ↗ | krybitfilter this group | · 20d ago | NEO — Núcleo de Excelência em Oftalmologia Ltda is a leading Brazilian ophthalmology hospital founded on May 13, 200... |
lemonfarm.com tracker page ↗ | krybitfilter this group | · 20d ago | Lemon Farm Co., Ltd. is a leading Thai organic supermarket chain and online platform for organic and healthy food produc... |
finodayacapital.com tracker page ↗ | krybitfilter this group | · 20d ago | Finodaya Capital Private Limited is an Indian tech-enabled Non-Banking Financial Company (NBFC) incorporated on Septembe... |
wmiemporium.com tracker page ↗ | krybitfilter this group | · 20d ago | WMI Emporium Co., Ltd. is a Thai manufacturer and distributor of metal sheet products established in 2002 as a joint ven... |
cgcgabon.com tracker page ↗ | krybitfilter this group | · 20d ago | Le Conseil Gabonais des Chargeurs (CGC) is a Gabonese public administrative institution (établissement public à caract... |
karkinos.in tracker page ↗ | krybitfilter this group | · 20d ago | Karkinos Healthcare Private Limited is an Indian comprehensive cancer care platform and healthcare technology company fo... |
ferretornillos.gt tracker page ↗ | krybitfilter this group | · 20d ago | Ferretornillos, S.A. is a Guatemalan company incorporated on March 14, 2016, specializing in the wholesale distribution ... |
www.sankovn.com tracker page ↗ | krybitfilter this group | · 20d ago | Sanko Fastem (Vietnam) Co., Ltd. is a Vietnamese subsidiary of Sanko Fastem (Thailand) under the Sanko Techno Group (Jap... |
resi.com tracker page ↗ | krybitfilter this group | · 22d ago | Resi is a UK-based online architectural and home renovation platform founded in 2017 by Alexandra Depledge and Jules Col... |
sunsea.co.th tracker page ↗ | krybitfilter this group | · 27d ago | Sunsea Plastics P.S. Co., Ltd. is a Thai family-owned company established in 1988, headquartered in Bang Na, Bangkok, Th... |
www.mestojilemnice.cz tracker page ↗ | krybitfilter this group | · 27d ago | Město Jilemnice (City of Jilemnice) is the official website of the municipality of Jilemnice, a historic town located i... |
automotoresrosedal.com.ar tracker page ↗ | krybitfilter this group | · 27d ago | Rosedal Automotores S.R.L. is an Argentine company incorporated on February 18, 2004, headquartered in the Las Cañitas ... |
sipresitalia.it tracker page ↗ | krybitfilter this group | · 27d ago | S.I.P.R.E.S. SRL (Società Italiana Progetti Ricerche e Sviluppo — Italian Research and Development Projects Company) ... |
www.hsi.info tracker page ↗ | krybitfilter this group | · 27d ago | hsi personaldienste hart & schenk GmbH is a German staffing and temporary employment services company founded in Februar... |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.