Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
204
Leak-site victims · 30d
1K
Active groups · 30d
8011 new
Most active · 7d
qilin
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 152 | 400 | 400 | active | no public figure | |
| 2 | qilin | 30 | ▲18 | 114 | 364 | 364 | active | no public figure | |
| 3 | storm | 9 | ▼31 | 49 | 61 | 61 | active | no public figure | |
| 4 | krybit | 15 | ▲15 | 44 | 95 | 95 | active | no public figure | |
| 5 | akira | 10 | ▲3 | 43 | 87 | 87 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼7 | 37 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 35 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 10 | ▲6 | 34 | 114 | 114 | active | no public figure | |
| 9 | lockbit5 | 5 | = | 28 | 54 | 54 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 10 | ▲1 | 24 | 26 | 26 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 3 | ▼4 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | = | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 22 | rhysida | 2 | ▼2 | 13 | 15 | 15 | active | no public figure | |
| 23 | everest | 0 | ▼3 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 0 | ▼1 | 12 | 23 | 23 | active | no public figure | |
| 25 | cyberleek | 0 | = | 12 | 12 | 12 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents33 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
SistNet tracker page ↗ | novafilter this group | · Jul 25, 2026 | Sistnet, a division of Sistemi Tre s.r.l., offers comprehensive solutions in Information and Communication Technology, focusing on transforming products into services. Their offerings include advanced security solutions like EDR-X antivirus, networking, unified communication, and internet services such as cloud backup and email. They aim to protect small and medium-sized enterprises from cyber threats, emphasizing the importance of cybersecurity. With a commitment to high-quality service and innovative partnerships, Sistnet provides tailored support and monitoring for their clients - Nova Provide tree and samples from stolen data and decrypt sample to the company when its get in touch with support department. |
Center Of Information Technologies In Finance Public Institution tracker page ↗ | novafilter this group | · Jul 25, 2026 | Centrul de Tehnologii Informaționale în Finanțe (CTIF) offers a wide range of services and products aimed at legal entities such as public authorities, budget institutions, and economic agents, as well as individuals interested in financial information technology. Their services primarily focus on the management, development, and operation of automated information systems in public finance, accounting, taxation, customs, and public procurement. CTIF also provides training courses for professionals in the field of public procurement. The center is committed to transparency and communication with its clients - Data officially taken from Minister Private Information Cloud, Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Digital Edge tracker page ↗ | novafilter this group | · Jul 24, 2026 | Digital Edge is a Managed Services Provider, skilled and accredited with a proven track record for over 20 years, operating exclusively within prime data center facilities enabling Digital Edges Information Security Management System to deliver Enterprise level IT Services conforming with ISO 27001 Information Technology Security Management System Requirements, certified since May 1, 1996. In addition, the company troubleshoot, consult, prepare the company's clients for NIST CSF 800, ISO 27001, SSAE16/SOC2, PCI DDS compliant frameworks and/or legal regulations such as NYS DFS 500, HIPPA, GDPR, PIPEDA or Californias Data Privacy Act, as well as other frameworks, regulations, or contractual requirements. Cloud Engineering services including design, implementation and support for Dedicated Private and Hybrid Cloud environment, Full spectrum IT Support and Outsourcing, 24/7 NOC and SOC Operation, Security Incident Response Team Operation, Business Continuity and Disaster Recovery. Digital - sensitive reports and clients data in risk, reach us, we left note in encrypted devices - Nova Provide tree and samples from stolen data and decrypt sample to the company when its get in touch with support department. |
VNSO tracker page ↗ | novafilter this group | · Jul 22, 2026 | Công nghệ VNSO is a leading provider of cloud and server solutions in Vietnam, offering a wide range of services including hosting, VPS, cloud storage, private cloud, anti-DDoS, and CDN. Their products cater to various needs, from high-performance cloud servers to dedicated servers for gaming and AI applications. VNSO aims to support businesses of all sizes in their digital transformation journey with reliable and secure technology solutions. The company is committed to customer satisfaction, providing 24/7 technical support and a variety of flexible service options - all clients data taked, Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Koperasi Karyawan PT Aplikanusa Lintasarta tracker page ↗ | novafilter this group | · Jul 22, 2026 | Kopkarla.org is the website of KOPKARLA (Koperasi Karyawan PT Aplikanusa Lintasarta), an Indonesian employee cooperative that provides savings, loans, telecommunications engineering, network installation, and related business services for its members and customers - Nova Provide Tree and samples and proofs only when company get in touch with support department in channels provided in recovery file. |
La Financière d'Orion (finorion) tracker page ↗ | novafilter this group | · Jul 22, 2026 | Since 2009, we have been helping to create a privileged relationship between wealth professionals and their clients. The wealth of our experience allows us to deploy innovative, coherent financial engineering levers that are perfectly tailored to your aspirations and objectives - Nova have 20GB of clients documents data and company finance informations, for example convestion ERES.pdf, secrets is here, Contact us for more details, Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Marpatech tracker page ↗ | novafilter this group | · Jul 22, 2026 | Marpatech specializes in providing instrumentation and control solutions across Latin America, with a focus on the mining and industrial sectors. The company offers a range of products from various manufacturers, including AMETEK, SOR, and JUMO, catering to clients in Peru, Argentina, and Colombia. With offices in major cities, Marpatech is committed to delivering technical and commercial support to its clients. The company actively participates in industry events to showcase its expertise and innovations - Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Canal 9 Litoral tracker page ↗ | novafilter this group | · Jul 22, 2026 | AHORA Entre Ríos is a news platform that provides the latest updates and urgent news from Entre Ríos, Santa Fe, and the Litoral region. The service covers a wide range of topics including society, politics, sports, economy, and health. It aims to keep its audience informed with minute-by-minute news coverage. The intended clients are residents and individuals interested in current events in the specified regions - MXF secret files at risk, Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Tèrra Aventura tracker page ↗ | novafilter this group | · Jul 22, 2026 | Tèrra Aventura is a free, app-based outdoor treasure hunt in France's Nouvelle-Aquitaine region where players solve riddles, follow walking routes, and find hidden geocaches while exploring local heritage and nature - Nova Provide Tree and samples and proofs only when company get in touch with support department in channels provided in recovery file. |
Jota Joias Premium tracker page ↗ | novafilter this group | · Jul 20, 2026 | Jota Joias Premium is a Brazilian online jewelry retailer specializing in 18K gold jewelry, wedding rings, watches, silver accessories, and luxury gifts - a whole bunch of marketing data in fire, Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Koplarla tracker page ↗ | novafilter this group | · Jul 20, 2026 | Koperasi Konsumen Karyawan PT Aplikanusa Lintasarta (KOPKARLA) was established in 1992 and at that time was focusing on saving and loan business. Since 1998, KOPKARLA has evolved and expanded its business to provide an installation services and solution of telecommunication network (datacomm) |
Jrd logistics tracker page ↗ | novafilter this group | · Jul 20, 2026 | Jrd logistics LTD is an India-based freight forwarding and supply chain company headquartered in Kolkata that provides international logistics, customs clearance, warehousing, and multimodal transport services - Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Rumah Sakit Universitas Indonesia (RSUI) tracker page ↗ | novafilter this group | · Jul 20, 2026 | Rumah Sakit Universitas Indonesia (RSUI) is the teaching hospital of the University of Indonesia, providing advanced medical care, education, and clinical research in Indonesia - medical data from drive at risk, Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Universidad Nacional de Mar del Plata tracker page ↗ | novafilter this group | · Jul 20, 2026 | The Universidad Nacional de Mar del Plata offers a wide range of academic programs, including undergraduate and postgraduate degrees, vocational training, and distance education. It serves students, faculty, and the broader community by promoting research, innovation, and cultural activities. The university is committed to sustainability and social responsibility, providing various scholarships and support for international mobility. Additionally, it engages in partnerships and projects that enhance academic and technological transfer, contributing to local and global knowledge - Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Dephub tracker page ↗ | novafilter this group | · Jul 19, 2026 | Directorate of Shipping and Maritime Affairs Jl. Medan Merdeka Barat No. 8 Jakarta, Indonesia 10110 |
meralmanisa tracker page ↗ | novafilter this group | · Jul 19, 2026 | MER-AL was established in Turkey in 2005, but our experience in the automotive industry started in Germany in 1995. MER-AL started its activities with the production of cast filters, which are specifically used to produce aluminum wheels and components produced in low-pressure-casting. In addition, a significant part of the production department consists of “rim pallets” and “rim pallet covers.” As a result, MER-AL is now one of the world’s largest manufacturers of cast filters and rim pallet sets and a well-known brand in this field in many countries - 1.5 GB of sales data and secret documents, Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
FMZ Tecnologia em Sistemas tracker page ↗ | novafilter this group | · Jul 18, 2026 | FMZ Tecnologia em Sistemas is a Brazilian software company that develops solutions for the book industry. Its main product, HORUS, is an ERP system designed for publishers, bookstores, and distributors. The system helps manage inventory, sales, royalties, and consignment operations. The company has over 15 years of experience and is based in São Paulo, Brazil. |
Phi tracker page ↗ | novafilter this group | · Jul 17, 2026 | PHI Studio focuses its activities on the presentation and curation of immersive works in virtual reality (VR), augmented reality (AR) and extended reality (XR). Recognized locally and internationally for its innovative production approach, technical expertise and achievements in new forms of storytelling, PHI Studio collaborates with major global industry players and has worked on many award-winning projects, with international presentations in New York, Tokyo, Venice, Frankfurt, Luxembourg and Salt Lake City, among others. As a pioneer in interactive experiences, PHI Studio pushes the boundaries of immersive projects, with a focus on enhancing the visitor experience through a keen sense of detail and the elaboration of high-quality scenography. With a reputation for close collaborations with artists, creators, directors and producers from different backgrounds, PHI Studio aspires to be a catalyst of innovation, supporting the development of present and future talent - Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Digipro tracker page ↗ | novafilter this group | · Jul 17, 2026 | digipro.com.vn appears to be the website of DIGIPRO TECH JSC (Công ty Cổ phần Phát triển Công nghệ DIGIPRO), a Vietnamese IT company. According to its own website, the company was established in 2020 and is based in Hanoi, Vietnam - Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Integrated Marketing Services tracker page ↗ | novafilter this group | · Jul 17, 2026 | Integrated Marketing Services is a company that operates in the Commercial Printing industry. It employs 20to49 people and has 5Mto10M of revenue. The company is headquartered in Liverpool, New York - Nova Provide tree and samples from stolen data + decrypt sample to the company when its get in touch with support department. |
Hynet tracker page ↗ | novafilter this group | · Jul 10, 2026 | Hynet helps businesses protect and manage their most important asset: information. With a team of skilled tech experts, they solve complex IT challenges by providing smart data storage and network security services. Their remote team works closely with clients to improve productivity and keep company data safe from growing digital threats - Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
NSW Rural Fire Service tracker page ↗ | novafilter this group | · Jun 26, 2026 | Data Leaked, Updated from Nova Team by investigate Affiliate provided informations. |
vslmarine tracker page ↗ | novafilter this group | · Jun 26, 2026 | VSL Marine Technology Pvt. Ltd. is an ISO 9001:2015 certified company specializing in 3D scanning and engineering services, particularly in marine and offshore sectors. They offer a range of services including marine retrofits, engineering design, naval architecture, and e-learning training solutions. Data profile provided. |
lpgroup tracker page ↗ | novafilter this group | · Jun 24, 2026 | LP Group, founded in 2006, has already completed approximately 1 million square meters of projects in commercial, logistics, and service areas. Highly complex projects. Compromised data profile given in sample. |
alejandria tracker page ↗ | novafilter this group | · Jun 24, 2026 | Alexandria is a platform that facilitates the development and implementation of well-designed teleinformation systems from the point of view of Information Architecture, which arises from the fusion of knowledge of information sciences (library science, archival science, document management, information networks, etc.) |
transvill tracker page ↗ | novafilter this group | · Jun 24, 2026 | Transvill SRL offers national and international road transport and logistics services for cargo shipments. Data profile is provided. |
transvill.com.pe tracker page ↗ | novafilter this group | · Jun 24, 2026 | Transvill SRL offers national and international road transport and logistics services for cargo shipments. Data profile will provided soon |
alejandria.biz tracker page ↗ | novafilter this group | · Jun 24, 2026 | Alexandria is a platform that facilitates the development and implementation of well-designed teleinformation systems from the point of view of Information Architecture, which arises from the fusion of knowledge of information sciences (library science, archival science, document management, information networks, etc.) |
lpgroup.pt tracker page ↗ | novafilter this group | · Jun 24, 2026 | LP Group, founded in 2006, has already completed approximately 1 million square meters of projects in commercial, logistics, and service areas. Highly complex projects. Compromised data profile given in sample. |
cloudquantum tracker page ↗ | novafilter this group | · Jun 23, 2026 | cloudquantum.co - software company that builds and delivers software solutions and products, such as an app for organizing activities and tools for automatically processing information from documents and media - Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
FTL-Fast Transit Line tracker page ↗ | novafilter this group | · Jun 23, 2026 | FTL International N.V. specializes in shipping, consolidation, forwarding, and groupage services, with a strong presence in major Northern European ports and an office in Colombo, Sri Lanka. With over 25 years of experience, they offer cost-effective port-to-port and door-to-door logistics solutions, including air freight and cargo insurance. Their services cater to a wide range of clients looking for reliable shipping options across the globe. FTL is committed to exceptional personalized attention and efficient shipment handling, embodying their motto 'Experience the Difference - Data included sales data, invoices and costumers full names and phones etc; Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Lockers IT tracker page ↗ | novafilter this group | · Jun 21, 2026 | LockersIT is a self-owned Bangladeshi IT company founded in 2013, headquartered in Chandpur, that specializes in custom software development with a team of 11-50 employees - allcashdealer.com dealmart24.com dev1.lockersit.com erp.lockersit.com sales.lockersit.com brm.lockersit.com debnathashu.com dev2.lockersit.com eshop.lockersit.com cloud.debnathashu.com dev.allcashdealer.com dev3.lockersit.com lockersit.com cloud.lockersit.com dev.lockersit.com emailer.debnathashu.com project.debnathashu.com effected with the encryption, Data From the server has been taken, Nova Provide tree and samples from stolen data to the company with decrypt 1 file as sample when its get in touch with support department. |
Nhà Thành Phố tracker page ↗ | novafilter this group | · Jun 21, 2026 | nhathanhpho.com.vn is an Vietnamese real estate listing platform operated by an individual, Đoàn Vinh, which allowed users to buy, sell, and rent properties - Nova Provide tree and samples from stolen data to the company with decrypt 1 file as sample when its get in touch with support department. |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.