Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
238
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
storm
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 32 | ▲9 | 157 | 413 | 413 | active | no public figure | |
| 2 | qilin | 18 | ▲2 | 117 | 359 | 359 | active | no public figure | |
| 3 | krybit | 13 | ▲11 | 47 | 96 | 96 | active | no public figure | |
| 4 | direwolf | 5 | ▼6 | 45 | 62 | 62 | active | no public figure | |
| 5 | storm | 44 | ▲44 | 44 | 56 | 56 | active | no public figure | |
| 6 | akira | 7 | ▼1 | 38 | 82 | 82 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 3 | ▼6 | 36 | 106 | 106 | active | no public figure | |
| 9 | lockbit5 | 5 | ▼1 | 27 | 86 | 86 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | shinyhunters | 1 | ▼2 | 24 | 34 | 34 | active | no public figure | |
| 11 | safepay | 20 | ▲20 | 22 | 72 | 72 | active | no public figure | |
| 12 | leakeddata | 0 | ▼8 | 20 | 38 | 38 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | audit team | 10 | ▲6 | 18 | 19 | 19 | active | no public figure | |
| 16 | emperador | 6 | ▲5 | 18 | 19 | 19 | active | no public figure | |
| 17 | panzer | 6 | ▲3 | 17 | 24 | 24 | active | no public figure | |
| 18 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 19 | play | 4 | ▲4 | 14 | 44 | 44 | active | no public figure | |
| 20 | vexy | 4 | ▼6 | 14 | 14 | 14 | active | no public figure | |
| 21 | black nevas | 13 | ▲13 | 13 | 13 | 13 | active | no public figure | |
| 22 | chaos | 5 | ▲4 | 12 | 34 | 34 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | ▼1 | 12 | 27 | 27 | active | no public figure | |
| 25 | rhysida | 3 | ▲1 | 12 | 15 | 15 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents117 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
Montana Civil Contractors tracker page ↗ | qilinfilter this group | · 4h ago | Civil Engineering Construction |
Taurus Ibérica tracker page ↗ | qilinfilter this group | · 4h ago | Real Estate |
ADM tracker page ↗ | qilinfilter this group | · 6h ago | Food & Beverage |
Resolve Law Group tracker page ↗ | qilinfilter this group | · 6h ago | Law Firms & Legal Services |
Incrys tracker page ↗ | qilinfilter this group | · 8h ago | Business Services |
Bravo Group tracker page ↗ | qilinfilter this group | · 8h ago | Freight & Logistics Services |
Geieg tracker page ↗ | qilinfilter this group | · 14h ago | Fitness & Dance Facilities |
RoadEx America tracker page ↗ | qilinfilter this group | · 1d ago | Freight & Logistics Services |
Foremost Mfg tracker page ↗ | qilinfilter this group | · 1d ago | Building Materials |
Winston Contracting, LLC tracker page ↗ | qilinfilter this group | · 1d ago | Business Services |
Minmer Global tracker page ↗ | qilinfilter this group | · 1d ago | Freight & Logistics Services |
Vitar Group tracker page ↗ | qilinfilter this group | · 1d ago | Electronics |
Alicotrans tracker page ↗ | qilinfilter this group | · 1d ago | Freight & Logistics Services |
Gilco Scaffolding tracker page ↗ | qilinfilter this group | · 2d ago | Construction |
CARIDRO VAL DE LOIRE tracker page ↗ | qilinfilter this group | · 2d ago | Business Services |
Imperial Healthcare Solutions tracker page ↗ | qilinfilter this group | · 3d ago | Healthcare Services |
Mitsuwa Trading Co., Ltd tracker page ↗ | qilinfilter this group | · 5d ago | Business Services |
Jet Specialty tracker page ↗ | qilinfilter this group | · 6d ago | Industrial Machinery & Equipment |
Alaska Electrical Apprenticeship tracker page ↗ | qilinfilter this group | · 7d ago | Education |
Partners Group SK tracker page ↗ | qilinfilter this group | · 7d ago | Finance |
Jbc tracker page ↗ | qilinfilter this group | · 8d ago | Hand, Power & Lawn-care Tools |
Philippine Ports Authority tracker page ↗ | qilinfilter this group | · 10d ago | Business Services |
Bauman Law Group tracker page ↗ | qilinfilter this group | · 10d ago | Law Firms & Legal Services |
Jouvet SAS tracker page ↗ | qilinfilter this group | · 10d ago | Construction |
G&S Technologies tracker page ↗ | qilinfilter this group | · 10d ago | Energy, Utilities & Waste |
Nolan Consulting Group tracker page ↗ | qilinfilter this group | · 10d ago | Business Services |
Colonial Hyundai tracker page ↗ | qilinfilter this group | · 10d ago | Automotive Parts |
The Big Table tracker page ↗ | qilinfilter this group | · 10d ago | Hospitality |
AP CAPITAL PARTNERS LIMITED tracker page ↗ | qilinfilter this group | · 11d ago | Business Services |
Commission de la construction du Quebec (CCQ) tracker page ↗ | qilinfilter this group | · 11d ago | Government |
Complete Packaging Solutions tracker page ↗ | qilinfilter this group | · 12d ago | Business Services |
Tanner tracker page ↗ | qilinfilter this group | · 12d ago | Finance |
Uak University tracker page ↗ | qilinfilter this group | · 13d ago | Education |
Grayson Rural Electric Cooperative tracker page ↗ | qilinfilter this group | · 13d ago | Electricity, Oil & Gas |
Commission de la construction du Quebec tracker page ↗ | qilinfilter this group | · 14d ago | Government |
Inmac tracker page ↗ | qilinfilter this group | · 14d ago | Architecture, Engineering & Design |
Allied Recycling tracker page ↗ | qilinfilter this group | · 15d ago | Energy, Utilities & Waste |
AFSARD tracker page ↗ | qilinfilter this group | · 16d ago | Finance |
Crystalpharmatech tracker page ↗ | qilinfilter this group | · 16d ago | Business Services |
Absolute Consultancy Services tracker page ↗ | qilinfilter this group | · 16d ago | Business Services |
Black Cat Engineering Construction Wll tracker page ↗ | qilinfilter this group | · 16d ago | Civil Engineering Construction |
Bandit Industries tracker page ↗ | qilinfilter this group | · 16d ago | Accounting Services |
LAPoco Architects tracker page ↗ | qilinfilter this group | · 17d ago | Architecture, Engineering & Design |
Neumaticos Corral S.A. tracker page ↗ | qilinfilter this group | · 17d ago | Automotive Parts |
AUM Construction tracker page ↗ | qilinfilter this group | · 17d ago | Electricity, Oil & Gas |
The Frame Group tracker page ↗ | qilinfilter this group | · 17d ago | Business Services |
La Maison Des Travaux tracker page ↗ | qilinfilter this group | · 17d ago | Business Services |
BLISS 1041 tracker page ↗ | qilinfilter this group | · 17d ago | Accounting Services |
CareClinics tracker page ↗ | qilinfilter this group | · 17d ago | 0 |
Alter Consultores Legales tracker page ↗ | qilinfilter this group | · 17d ago | Law Firms & Legal Services |
Newton County School System tracker page ↗ | qilinfilter this group | · 18d ago | Education |
DigiGround tracker page ↗ | qilinfilter this group | · 18d ago | Business Services |
Tramigo tracker page ↗ | qilinfilter this group | · 18d ago | Software |
Cosmocolor SA de CV tracker page ↗ | qilinfilter this group | · 18d ago | Business Services |
Infinnium tracker page ↗ | qilinfilter this group | · 18d ago | Law Firms & Legal Services |
Whitehouse tracker page ↗ | qilinfilter this group | · 18d ago | Accounting Services |
Kling Automaten tracker page ↗ | qilinfilter this group | · 19d ago | Gambling & Gaming |
Dotlines tracker page ↗ | qilinfilter this group | · 19d ago | Software |
Globalport Terminals tracker page ↗ | qilinfilter this group | · 19d ago | Business Services |
GPS Grothkopp und Partner tracker page ↗ | qilinfilter this group | · 19d ago | Business Services |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.