Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
182
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 155 | 401 | 401 | active | no public figure | |
| 2 | qilin | 23 | ▲9 | 117 | 361 | 361 | active | no public figure | |
| 3 | krybit | 13 | ▲13 | 47 | 96 | 96 | active | no public figure | |
| 4 | akira | 9 | = | 44 | 86 | 86 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 5 | storm | 4 | ▼36 | 44 | 56 | 56 | active | no public figure | |
| 6 | direwolf | 3 | ▼8 | 41 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 9 | ▲5 | 36 | 112 | 112 | active | no public figure | |
| 9 | lockbit5 | 4 | ▼4 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 11 | ▲2 | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 0 | ▼4 | 20 | 38 | 38 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | shinyhunters | 2 | ▼1 | 15 | 32 | 32 | active | no public figure | |
| 18 | vexy | 4 | ▼5 | 15 | 15 | 15 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | dragonforce | 3 | ▲1 | 12 | 71 | 71 | active | no public figure | |
| 22 | chaos | 4 | ▲2 | 12 | 34 | 34 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | = | 12 | 23 | 23 | active | no public figure | |
| 25 | rhysida | 3 | ▲1 | 12 | 14 | 14 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents38 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
P... S... tracker page ↗ | leakeddatafilter this group | · 13d ago | To be announced... |
A...en tracker page ↗ | leakeddatafilter this group | · 13d ago | To be announced... |
Se... tracker page ↗ | leakeddatafilter this group | · 13d ago | To be announced... |
Katten Muchin Rosenman tracker page ↗ | leakeddatafilter this group | · 13d ago | To be announced... |
Greenberg Traurig tracker page ↗ | leakeddatafilter this group | · 14d ago | To be announced... |
G... ...g tracker page ↗ | leakeddatafilter this group | · 14d ago | To be announced... |
S... M... tracker page ↗ | leakeddatafilter this group | · 14d ago | To be announced... |
Holland & Knight tracker page ↗ | leakeddatafilter this group | · 15d ago | Holland & Knight, headquartered in Tampa, Florida, and established in 1968, is a law firm that offers … |
H... ...s tracker page ↗ | leakeddatafilter this group | · 15d ago | To be announced... |
Ne...n M... tracker page ↗ | leakeddatafilter this group | · 20d ago | To be announced... |
Q... E... tracker page ↗ | leakeddatafilter this group | · 21d ago | To be announced... |
N... M... tracker page ↗ | leakeddatafilter this group | · 21d ago | To be announced... |
S... P... tracker page ↗ | leakeddatafilter this group | · 21d ago | To be announced... |
K... M... tracker page ↗ | leakeddatafilter this group | · 21d ago | To be announced... |
H... K... tracker page ↗ | leakeddatafilter this group | · 21d ago | To be announced... |
H... L... tracker page ↗ | leakeddatafilter this group | · 21d ago | To be announced... |
C... O... tracker page ↗ | leakeddatafilter this group | · 21d ago | To be announced... |
A... tracker page ↗ | leakeddatafilter this group | · 21d ago | To be announced... |
D... tracker page ↗ | leakeddatafilter this group | · 27d ago | To be announced... |
Troutman Pepper Locke tracker page ↗ | leakeddatafilter this group | · 29d ago | The second time we attacked Troutman Pepper Locke in a year (first time through physical intrusion), w… |
Reminger tracker page ↗ | leakeddatafilter this group | · Aug 14, 2026 | Reminger Attorneys at Law is a law firm with a strong presence in Ohio, Kentucky, and Indiana, operati… |
Riker Danzig Scherer Hyland & Perretti tracker page ↗ | leakeddatafilter this group | · Aug 13, 2026 | Founded in 1882, Riker Danzig Scherer Hyland & Perretti is a law firm with practice areas such as Alte… |
Riker Danzig LLP tracker page ↗ | leakeddatafilter this group | · Aug 12, 2026 | To be announced... |
D...s tracker page ↗ | leakeddatafilter this group | · Aug 12, 2026 | To be announced... |
R...er tracker page ↗ | leakeddatafilter this group | · Aug 11, 2026 | To be announced... |
R... D... tracker page ↗ | leakeddatafilter this group | · Aug 10, 2026 | To be announced... |
T... P... L... tracker page ↗ | leakeddatafilter this group | · Aug 10, 2026 | To be announced... |
Rutan & Tucker, LLP tracker page ↗ | leakeddatafilter this group | · Aug 8, 2026 | Founded in 1909 and headquartered in Costa Mesa, California, Rutan & Tucker, LLP. is a law firm. The F… |
Floyd Skeren Manukian Langevin, LLP tracker page ↗ | leakeddatafilter this group | · Aug 8, 2026 | Floyd Skeren Manukian Langevin, LLP is a multi-service law firm with ten offices throughout California… |
Ropers Majeski PC tracker page ↗ | leakeddatafilter this group | · Aug 8, 2026 | For more than 75 years, Ropers Majeski has provided high-quality legal advice to a wide range of clien… |
Farella Braun + Martel LLP tracker page ↗ | leakeddatafilter this group | · Aug 8, 2026 | They offered $520,000 to keep the data from being published. Farella Braun + Martel LLP is a leading N… |
Sandberg Phoenix tracker page ↗ | leakeddatafilter this group | · Aug 8, 2026 | Over 45 years providing superior legal services to clients of every size throughout the Midwest and ac… |
Porter Wright tracker page ↗ | leakeddatafilter this group | · Aug 8, 2026 | Founded in 1846, Porter Wright is a full-service law firm offering legal helo for the community specia… |
Marshall Dennehey tracker page ↗ | leakeddatafilter this group | · Aug 8, 2026 | They offered $100,000 to keep the data from being published. Founded in 1962 and headquartered in Phil… |
Barclay Damon tracker page ↗ | leakeddatafilter this group | · Aug 8, 2026 | They are offering 325,000 for the safety of their clients' data. Barclay Damon LLP is a full-service, … |
Fox Rothschild LLP tracker page ↗ | leakeddatafilter this group | · Aug 8, 2026 | Fox Rothschild LLP is an AmLaw 100 full-service law firm built to serve businesses of all sizes as wel… |
Mayer Brown tracker page ↗ | leakeddatafilter this group | · Aug 8, 2026 | Mayer Brown is a distinctively global law firm, uniquely positioned to advise the world's leading comp… |
Moses & Singer tracker page ↗ | leakeddatafilter this group | · Aug 8, 2026 | They offered $250,000 to keep the data from being published........Moses & Singer LLP is a full-servic… |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.