Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
178
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
8
Accounts exposed · 30d
36.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 153 | 400 | 400 | active | no public figure | |
| 2 | qilin | 25 | ▲11 | 119 | 360 | 360 | active | no public figure | |
| 3 | krybit | 15 | ▲15 | 49 | 95 | 95 | active | no public figure | |
| 4 | storm | 4 | ▼36 | 44 | 56 | 56 | active | no public figure | |
| 5 | akira | 9 | = | 43 | 86 | 86 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 41 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 8 | ▲4 | 36 | 112 | 112 | active | no public figure | |
| 9 | lockbit5 | 4 | ▼4 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 9 | ▼2 | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 3 | ▼7 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | ▼1 | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 22 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 23 | pear | 1 | = | 12 | 23 | 23 | active | no public figure | |
| 24 | rhysida | 1 | ▼3 | 12 | 14 | 14 | active | no public figure | |
| 25 | cyberleek | 0 | = | 12 | 12 | 12 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents18 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
Qualiflex Datacenter | HWZ-Studiengnge (fh-hwz.ch), myenb.ch, etc tracker page ↗ | payloadfilter this group | · 28d ago | Qualiflex Datacenter - data from companies such as HWZ-Studiengänge (fh-hwz.ch), myenb.ch, schelling.ch, kaelteringag.ch & kaeltebucher.ch, cbmswiss.ch, vitabad.ch, ign8.ch, etc., was stolen |
Zara Investment Holding tracker page ↗ | payloadfilter this group | · Aug 13, 2026 | Zara Investment Holding (zaraholding.com) is a leading Jordanian investment group established in 1994. The company specializes in the tourism and hospitality sector, serving as the largest owner of five-star hotels and luxury resorts in key destinations across the country, including Amman, Petra, and the Dead Sea. Playing a vital role in Jordan's economy, the holding provides approximately 30% of the nation's total five-star hotel capacity. |
B&B Hydraulik tracker page ↗ | payloadfilter this group | · Aug 11, 2026 | B&B Hydraulik is a German company based in Hattingen that specializes in the development and manufacturing of hydraulic systems, power units, and specialized equipment. In cooperation with partner organizations, the enterprise supplies control blocks, valves, and components for both industrial and mobile hydraulics. Its engineering solutions are widely used across construction and agricultural machinery, lifting equipment, and shipbuilding. |
Stücheli Architekten tracker page ↗ | payloadfilter this group | · Aug 11, 2026 | Stücheli Architekten is a renowned Swiss architectural firm founded in Zurich back in 1946. The company specializes in the design and execution of complex architectural projects, including residential buildings, office complexes, and public spaces, combining innovation with tradition and sustainable construction. It provides a full range of architectural services and frequently acts as a general planner for major projects both in Switzerland and internationally. |
Baya Technologies tracker page ↗ | payloadfilter this group | · Aug 11, 2026 | Baya offers end-to-end solutions for complex challenges, specializing in technology and distribution services. The company operates under the brands baya-zicon technologies and baya-zicon EMS, providing a wide range of technological services and electronic manufacturing services (EMS). Their target audience includes companies seeking comprehensive solutions in technology and distribution. |
Hans & Jos. Kronenberg GmbH tracker page ↗ | payloadfilter this group | · Aug 3, 2026 | Hans & Jos. Kronenberg GmbH is a German company founded in 1932 and based in Bergisch Gladbach. It specializes in the development and manufacturing of high-quality components for the elevator industry and mechanical engineering, including door locks, switches, control panels, and LED lighting. |
CKR Consulting Engineers tracker page ↗ | payloadfilter this group | · Jul 20, 2026 | CKR Consulting Engineers is a prominent South African engineering consultancy firm headquartered in Johannesburg, established under its current name in 2001. The company provides comprehensive multi-disciplinary services, specializing in electrical, electronic, mechanical, renewable energy, and civil engineering. |
Roofinox tracker page ↗ | payloadfilter this group | · Jul 10, 2026 | Roofinox is an Austrian manufacturer of premium stainless steel specifically engineered for long-lasting roofing and facade systems. The company offers innovative materials with unique matte and textured surfaces that blend beautifully with architecture without creating harsh glare. Thanks to its exceptional corrosion resistance and durability in harsh climates, Roofinox products are recognized as an eco-friendly, virtually timeless architectural solution. |
The commune of Castries tracker page ↗ | payloadfilter this group | · Jul 9, 2026 | The commune of Castries is a picturesque, historic town in the south of France, renowned for its majestic 17th-century château and unique aqueduct. The city's official website (castries.fr) provides visitors and locals with the latest news, cultural event schedules, and tourism information. Additionally, the portal serves as a convenient digital platform for residents to access municipal services and connect with the town hall. |
Vela Film S.r.l. tracker page ↗ | payloadfilter this group | · Jul 5, 2026 | Vela Film S.r.l. is an Italian production company based in Rome, specializing in the cinema and television industry. The company is involved in creating and producing various media projects, including well-known Italian TV series like “La porta rossa” and “Volevo fare la rockstar”. It actively collaborates with local directors and regional film commissions to organize and execute shootings across Italy. |
Tofutown tracker page ↗ | payloadfilter this group | · Jul 2, 2026 | TOFUTOWN is a traditional organic manufacturer specializing in plant-based foods, founded in 1981. The company offers a diverse range of products including vegan spreads, tofu, and seitan, all made from high-quality organic ingredients. With a commitment to sustainability and natural ingredients, TOFUTOWN caters to health-conscious consumers looking for convenient and delicious plant-based meal options. |
Mosaic Partners tracker page ↗ | payloadfilter this group | · Jun 26, 2026 | The Swiss company Mosaic Partners specializes in providing IT services, software development, and systems engineering. It creates tailored digital solutions and applications to optimize business processes, covering areas such as CRM, cloud computing, and process management (e.g., in winemaking). The company's products are adapted to individual client needs, ensuring easy integration, data security, and rapid customization to meet market demands. |
Clínica La Sabana tracker page ↗ | payloadfilter this group | · Jun 26, 2026 | Clínica La Sabana (clinicalasabana.com) is a medical institution located in Bogotá, Colombia, specializing in the provision of comprehensive healthcare services. The company offers outpatient care, specialist consultations, surgical procedures, and physical therapy. Its primary areas of expertise include orthopedics, traumatology, otolaryngology, and diagnostic radiology. |
Software Arge tracker page ↗ | payloadfilter this group | · Jun 26, 2026 | Software Arge is a leading technology company established in 2016, specializing in data analytics, data integration, data management, and artificial intelligence solutions tailored for enterprises. They offer a range of products including Qlik Cloud Analytics, Qlik Sense, and various Talend solutions, aimed at enhancing data-driven decision-making for clients across sectors such as banking, finance, energy, and manufacturing. |
ENB Versicherungen | myenb.ch tracker page ↗ | payloadfilter this group | · Jun 20, 2026 | enb AG is an independent insurance broker that collaborates with leading insurance companies to provide tailored insurance solutions. They assist both private and corporate clients in navigating the complexities of insurance products, offering services such as health insurance, vehicle insurance, and liability insurance. The company emphasizes the importance of employee satisfaction and offers professional pension plans and collective accident insurance for businesses. |
Editora Irmãos Vitale tracker page ↗ | payloadfilter this group | · Jun 20, 2026 | Editora Irmãos Vitale is a traditional Brazilian music publisher specializing in music editions and printed music. They offer a range of products including musical works, archives, methods, songbooks, and e-books. Their services also encompass synchronization and licensing for artists and authors. |
Qualiflex Solutions | qualiflex.solutions tracker page ↗ | payloadfilter this group | · Jun 20, 2026 | Qualiflex Solutions AG specializes in automation and control technology, offering services in building automation, industrial automation, IT infrastructure, and managed services. Their intended clients include businesses seeking IT solutions, infrastructure renewal, and automation systems for various applications. The company has successfully completed projects for clients such as Vita Bad AG, Coop, and Stadttheater Bern. With a team of skilled professionals, Qualiflex Solutions AG aims to enhance operational efficiency and technological integration for their clients. |
Preferred Properties tracker page ↗ | payloadfilter this group | · Jun 20, 2026 | Preferred Properties, Inc. is a dynamic and progressive housing development and property management company based in Toledo, Ohio. We specialize in the development of affordable and accessible housing opportunities, and to create integrated housing options for persons living with disabilities. Our development program reflects where we are today with programs under management, and new projects in development. |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.