Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
180
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 156 | 401 | 401 | active | no public figure | |
| 2 | qilin | 21 | ▲6 | 116 | 359 | 359 | active | no public figure | |
| 3 | krybit | 13 | ▲11 | 47 | 96 | 96 | active | no public figure | |
| 4 | storm | 4 | ▼36 | 44 | 56 | 56 | active | no public figure | |
| 5 | akira | 9 | ▲3 | 41 | 83 | 83 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 41 | 62 | 62 | active | no public figure | |
| 7 | inc ransom | 7 | ▲4 | 39 | 109 | 109 | active | no public figure | |
| 8 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 9 | lockbit5 | 5 | ▼1 | 26 | 52 | 52 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 11 | ▲2 | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 0 | ▼4 | 20 | 38 | 38 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | ▲1 | 17 | 21 | 21 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | shinyhunters | 1 | ▼2 | 14 | 31 | 31 | active | no public figure | |
| 18 | panzer | 7 | ▲4 | 14 | 25 | 25 | active | no public figure | |
| 19 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 20 | vexy | 3 | ▼8 | 14 | 14 | 14 | active | no public figure | |
| 21 | dragonforce | 3 | ▲1 | 12 | 71 | 71 | active | no public figure | |
| 22 | chaos | 4 | ▲2 | 12 | 34 | 34 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | ▼1 | 12 | 24 | 24 | active | no public figure | |
| 25 | rhysida | 3 | ▲1 | 12 | 14 | 14 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents96 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
www.buzztrading104.co.za tracker page ↗ | krybitfilter this group | · Aug 2, 2026 | Buzz Trading 104 (Pty) Ltd (also trading as Master Products) is a South African privately owned manufacturer and wholesa... |
www.ville-rinxent.fr tracker page ↗ | krybitfilter this group | · Aug 2, 2026 | Mairie de Rinxent (Municipality of Rinxent) is the official website of the town hall (mairie) of Rinxent, a small French... |
countrymotors.com.mx tracker page ↗ | krybitfilter this group | · Aug 2, 2026 | Country Motos S.A. de C.V. (also known as Country Motors or Country Honda) is a Mexican motorcycle dealership and multi-... |
www.dcpartner.co.za tracker page ↗ | krybitfilter this group | · Aug 2, 2026 | DC Partner (Pty) Ltd is a South African market-leading Payment Distribution Agency (PDA), one of only four NCR-accredite... |
nigeria.asa-international.com tracker page ↗ | krybitfilter this group | · Aug 2, 2026 | ASHA Microfinance Bank Limited (ASA Nigeria) is a Nigerian for-profit deposit-taking microfinance institution, a fully l... |
nilepet.com tracker page ↗ | krybitfilter this group | · Jul 23, 2026 | Nile Petroleum Corporation (NILEPET) is the state-owned national oil and gas company of the Republic of South Sudan, est... |
laxai.com tracker page ↗ | krybitfilter this group | · Jul 23, 2026 | LAXAI Life Sciences Pvt. Ltd. is an Indian Contract Research, Development, and Manufacturing Organization (CRDMO) founde... |
chkck.com tracker page ↗ | krybitfilter this group | · Jul 23, 2026 | CH. Karnchang Public Company Limited (บริษัท ช.การช่าง จำกัด (มหาชน)) is... |
dhli.in tracker page ↗ | krybitfilter this group | · Jul 22, 2026 | Delhi Heart & Lung Institute (DHLI) is a tertiary care 100-bedded super specialty hospital established in 2003 in New De... |
Vibonum Technologies Private Limited tracker page ↗ | krybitfilter this group | · Jul 22, 2026 | Vibonum Technologies Private Limited is a recently incorporated Indian private limited company established on March 27, ... |
eurohold.bg tracker page ↗ | krybitfilter this group | · Jul 20, 2026 | Eurohold Bulgaria AD (Еврохолд България АД) is a leading Bulgarian integrated holding company founded ... |
euroins.bg tracker page ↗ | krybitfilter this group | · Jul 18, 2026 | Euroins Insurance Company AD (Застрахователна компания Евроинс АД) is one of the first a... |
eitzchaim.com tracker page ↗ | krybitfilter this group | · Jul 17, 2026 | Eitz Chaim Schools (Hebrew: ישיבת עץ חיים — Yeshivas Eitz Chaim) is a private Orthodox Jewish elementary sc... |
formasuniversales.com tracker page ↗ | krybitfilter this group | · Jul 17, 2026 | Formas Universales, S.A. is a Panamanian company founded in 1985, specializing in the production and commercialization o... |
rehabmalaysia.com tracker page ↗ | krybitfilter this group | · Jul 17, 2026 | Pusat Rehabilitasi PERKESO Tun Abdul Razak (PERKESO Rehabilitation Centre Malaysia) is a Malaysian government-linked reh... |
www.lagus.cz tracker page ↗ | krybitfilter this group | · Jul 17, 2026 | LAGUS s.r.o. is a genuine Czech manufacturing company established on April 21, 1998, headquartered in Hruškové Dvory (... |
shelby.com.mx tracker page ↗ | krybitfilter this group | · Jul 8, 2026 | Shelby Manufacturing de México, S.A. de C.V. is a Mexican maquiladora company specializing in the manufacturing of sewi... |
xuerong.com tracker page ↗ | krybitfilter this group | · Jul 8, 2026 | Shanghai Xuerong Biotechnology Co., Ltd. (上海雪榕生物科技股份有限公司), formerly known as Shanghai Gaoron... |
seprec.gob.bo tracker page ↗ | krybitfilter this group | · Jul 7, 2026 | SEPREC (Servicio Plurinacional de Registro de Comercio / Plurinational Commercial Registry Service) is a Bolivian decent... |
duflosa.com tracker page ↗ | krybitfilter this group | · Jul 3, 2026 | DUFLO SAS (Duflo Servicios Integrales S.A.S.) is a Colombian company specializing in integrated facility management and ... |
majuhome.com.my tracker page ↗ | krybitfilter this group | · Jul 3, 2026 | MAJUHOME Concept (Maju Home Furnishing Sdn. Bhd.) is a Malaysian leading one-stop mega furniture mall and lifestyle bran... |
blaofood.com tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | B'Laofood Joint Stock Company (formerly B'Laofood Company Limited until March 25, 2026) is a Vietnamese leading manufact... |
jaws.com.tw tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | JAWS Co., Ltd. (兆旭公司) is a Taiwanese manufacturer of electronic connectors and cable assemblies, founded in May ... |
gsp.es tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | Global Software Partner S.L. (GSP) is a Spanish IT consulting and software company with over 30 years of experience in e... |
www.diss.com tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | DISS Analytics is the digital solutions and statistical reporting division of DISS Corporation (Digital Imaging & Soluti... |
gitmea.com tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | German Imaging Technologies (GIT) Dubai LLC is a German-founded company established in 1999, headquartered in Dubai, UAE... |
TRANSPORTES Y LOGISTICA BRAS, S.A tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | Transportes y Logistica Bras, S.A. is a Guatemalan company specializing in heavy land transport and logistics services, ... |
aai.com.tw tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | AeroVision Avionics, Inc. (AAI) (利翔航太電子股份有限公司) is a Taiwanese high-tech company incorporated in ... |
www.northern-access.com tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | Northern Access Transportation, Inc. is a locally owned American company founded in Duluth, Minnesota, USA, dedicated to... |
moscati.org tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | Hôpital Catholique Saint Joseph Moscati (moscati.org) is a Catholic hospital operating under the motto "Foi et charité... |
ford.mx tracker page ↗ | krybitfilter this group | · Jun 28, 2026 | Ford Motor Company, S.A. de C.V. (Ford de Mexico) is the Mexican subsidiary of Ford Motor Company (USA), the first autom... |
politur.gob.do tracker page ↗ | krybitfilter this group | · Jun 25, 2026 | POLITUR (Dirección Central de Policía de Turismo / Central Directorate of Tourism Police), now also known as CESTUR (C... |
sansilvestre.edu.pe tracker page ↗ | krybitfilter this group | · Jun 25, 2026 | San Silvestre School (Asociación Civil) is one of Peru's most prestigious private all-girls British schools, founded in... |
aasa.ae tracker page ↗ | krybitfilter this group | · Jun 19, 2026 | AASA CP Holding Company (AASA Group) is a multinational business headquartered in Dubai, UAE, with a proud legacy of exc... |
www.mupras.com tracker page ↗ | krybitfilter this group | · Jun 19, 2026 | MUPRAS RAM (Mutuelle de Prévoyance et d'Actions Sociales de Royal Air Maroc) is a Moroccan mutual aid and social welfar... |
coemi.com.br tracker page ↗ | krybitfilter this group | · Jun 19, 2026 | Coemi Imóveis is a Brazilian real estate company with 41 years of tradition in Brasília, Distrito Federal, Brazil, fou... |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.