Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
178
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 153 | 400 | 400 | active | no public figure | |
| 2 | qilin | 25 | ▲11 | 119 | 360 | 360 | active | no public figure | |
| 3 | krybit | 13 | ▲13 | 47 | 93 | 93 | active | no public figure | |
| 4 | storm | 4 | ▼36 | 44 | 56 | 56 | active | no public figure | |
| 5 | akira | 9 | = | 43 | 86 | 86 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 41 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 8 | ▲4 | 36 | 112 | 112 | active | no public figure | |
| 9 | lockbit5 | 4 | ▼4 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 9 | ▼2 | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 4 | ▼5 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | ▼1 | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 22 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 23 | pear | 1 | = | 12 | 23 | 23 | active | no public figure | |
| 24 | rhysida | 1 | ▼3 | 12 | 14 | 14 | active | no public figure | |
| 25 | cyberleek | 0 | = | 12 | 12 | 12 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents28 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
compendiumusa.net tracker page ↗ | l groupfilter this group | · 25d ago | No details on the leak post beyond the victim name. |
cedarridge.org tracker page ↗ | l groupfilter this group | · 26d ago | No details on the leak post beyond the victim name. |
automobile-mueller.info tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
uva.edu.br tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Universidade Veiga de Almeida (Veiga de Almeida University, often abbreviated as UVA) is a private university with campuses located in Rio de Janeiro and Cabo Frio, Brazil. |
ausfec1.com.au tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | ausfec1.com.au |
rosekennedygreenway.org tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | The Rose Kennedy Greenway is a contemporary public park located in the heart of Boston, attracting millions of visitors who come to gather, unwind, and explore. |
jean-petit.lu tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Company that operates in the Architecture, Engineering & Design industry. |
atp.chaco.gob.ar tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | **Administración Tributaria Provincial is a company that operates in the Organizations industry. ** |
l-a.com.vn tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Founded in 2001, with twelve years operating in the field of developing high quality human resources in Vietnam, Le & Associates (L&A) is proud to be clients’ strategic HR partner in implementing the best investment solutions in businesses’ human capital |
laticrete.com.cn tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | LATICRETE International Inc is a company that operates in the Chemicals & Related Products industry |
mygoalseek.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | GoalSeek Shared Services Pvt Ltd is a company that operates in the Business Services industry. |
psec.com.ar tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | PSEC - provide share mediation, liquidation and trusteeship, corporate finance and financial advisory services. |
bouygues-es.fr tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Bouygues Energies & Services is a company that operates in the Industrial Machinery & Equipment industry. |
ferretornillos.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Ferretornillos SA is a company that operates in the Food & Beverage industry. |
ratnasagar.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Ratna Sagar was born in 1982. The objective of Ratna Sagar is to bring out books for children that will really constitute an ocean of gems |
brdigital.net.br tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | BRDigital’s website has a new responsive layout. Take advantage of our usual practicality and browse with us on the most different devices. |
daycohost.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Daycohost provides IT services and solutions that optimize business processes and facilitate decision-making for companies. |
venezolanadepinturas.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | CA Venezolana De Pinturas is a company that operates in the Watches & Jewelry industry. |
nokotapackers.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | NoKota Packers specializes in the production and distribution of high-quality red potatoes, serving the potato industry for over 40 years. |
immobilia.hu tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Immobilia Zrt. is a Budapest-based real estate development company that provides continuous and highest-quality development services in the city centre of Budapest. |
gslusa.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | GSL Graphic Solutions specializes in premedia and graphic imaging services, offering a range of solutions including photo retouching, image manipulation, video editing, and graphic design. |
www.racheljulien.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Established in 1994 at a time when condo projects were hard to find, Rachel Julien transformed Montreal’s urban scenery, and still continues to do so today. Our team makes every effort to bring together the best industry professionals for each one of our mandates. We work closely with these professionals to create quality housing projects that raise the bar even higher. |
coastproduce.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Coast Produce Company began nearly 60 years ago as one man’s hard work selling a small truckload of a single item every day. The Dunn family continues to own and operate the organization as it has grown to a $100MM company with 160 employees working across all aspects of produce procurement, mixing, transportation and retail support. |
zuckers.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Zuckers Gifts Inc is a company that operates in the Flowers, Gifts & Specialty Stores industry. It employs 20to49 people .Jomashop is owned by Zucker’s Gifts.Jomashop is a leading fashion retailer in watches, handbags, and sunglasses. The company also sells jewelry, crystal, fine writing instruments, apparel, and shoes. Jomashop’s incredible platform allows shoppers to quickly and easily find exactly what they want from over 650 world renowned brands and 75,000 unique items. Throughout the past three decades the company has been committed to innovation in both the fashion and technological landscape. Remember, all transactions are digitally encrypted using the latest technologies and personal information is not shared. Jomashop prides itself on its ability to deliver the best prices, most varied selection, and finest customer service. The state-of-the-art New York City fulfillment center is always capable of swiftly delivering products to over 150 countries. |
onsite-eng.ca tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Onsite Engineering Ltd. is a multidisciplinary firm that offers professional engineering, geotechnical, project management, and natural resource services across British Columbia. They specialize in providing full civil consulting services, geotechnical assessments, and municipal infrastructure projects. Their client base includes various organizations, from municipal authorities to private construction companies, seeking high-quality and timely engineering solutions. |
doclv.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Desert Orthopaedic Center,located in Las Vegas, NV, specializes in providing comprehensive orthopedic care, including treatment for various injuries and conditions affecting bones, joints, and muscles.Established in 1970, Desert Orthopaedic Center is committed to excellence and has been recognized as a leading provider in the region. |
www.upbrand.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | UPBrand Collaborative is a full-service branding, advertising, and digital agency that specializes in helping brands define their authentic position throughout the customer journey. They cater to clients in the food and beverage, health and wellness, and arts and entertainment sectors, providing services such as brand strategy, digital marketing, and content creation. The agency positions itself as a collaborative partner, working closely with clients to drive growth and inspire success. With a focus on purpose-driven collaboration, UPBrand aims to deliver results that resonate and elevate brands in a competitive landscape. |
cookieskids.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Cookie’s Kids specializes in a wide range of clothing and accessories for boys and girls, including school uniforms, casual wear, and seasonal attire. |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.