Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
178
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 156 | 401 | 401 | active | no public figure | |
| 2 | qilin | 21 | ▲7 | 116 | 359 | 359 | active | no public figure | |
| 3 | krybit | 13 | ▲11 | 47 | 96 | 96 | active | no public figure | |
| 4 | storm | 4 | ▼36 | 44 | 56 | 56 | active | no public figure | |
| 5 | akira | 9 | ▲3 | 41 | 83 | 83 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 41 | 62 | 62 | active | no public figure | |
| 7 | inc ransom | 6 | ▲2 | 39 | 109 | 109 | active | no public figure | |
| 8 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 9 | lockbit5 | 5 | ▼2 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 11 | ▲2 | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 0 | ▼4 | 20 | 38 | 38 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 4 | ▼1 | 17 | 21 | 21 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 4 | ▼6 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 1 | ▼2 | 14 | 31 | 31 | active | no public figure | |
| 19 | panzer | 7 | ▲4 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | dragonforce | 3 | ▲1 | 12 | 71 | 71 | active | no public figure | |
| 22 | chaos | 4 | ▲2 | 12 | 34 | 34 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | ▼1 | 12 | 24 | 24 | active | no public figure | |
| 25 | rhysida | 3 | ▲1 | 12 | 14 | 14 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents359 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
Reddrop Group tracker page ↗ | qilinfilter this group | · 19h ago | Grocery Retail |
In The Company of Huskies tracker page ↗ | qilinfilter this group | · 19h ago | Advertising & Marketing |
Thorndale Foundation tracker page ↗ | qilinfilter this group | · 20h ago | Non-Profit & Charitable Organizations |
Thema Foundries tracker page ↗ | qilinfilter this group | · 21h ago | Business Services |
Aarsleff tracker page ↗ | qilinfilter this group | · 1d ago | Construction |
Montana Civil Contractors tracker page ↗ | qilinfilter this group | · 1d ago | Civil Engineering Construction |
Taurus Ibérica tracker page ↗ | qilinfilter this group | · 1d ago | Real Estate |
ADM tracker page ↗ | qilinfilter this group | · 1d ago | Food & Beverage |
Resolve Law Group tracker page ↗ | qilinfilter this group | · 1d ago | Law Firms & Legal Services |
Incrys tracker page ↗ | qilinfilter this group | · 2d ago | Business Services |
Bravo Group tracker page ↗ | qilinfilter this group | · 2d ago | Freight & Logistics Services |
Geieg tracker page ↗ | qilinfilter this group | · 2d ago | Fitness & Dance Facilities |
RoadEx America tracker page ↗ | qilinfilter this group | · 2d ago | Freight & Logistics Services |
Foremost Mfg tracker page ↗ | qilinfilter this group | · 2d ago | Building Materials |
Winston Contracting, LLC tracker page ↗ | qilinfilter this group | · 2d ago | Business Services |
Minmer Global tracker page ↗ | qilinfilter this group | · 2d ago | Freight & Logistics Services |
Vitar Group tracker page ↗ | qilinfilter this group | · 2d ago | Electronics |
Alicotrans tracker page ↗ | qilinfilter this group | · 3d ago | Freight & Logistics Services |
Gilco Scaffolding tracker page ↗ | qilinfilter this group | · 3d ago | Construction |
CARIDRO VAL DE LOIRE tracker page ↗ | qilinfilter this group | · 3d ago | Business Services |
Imperial Healthcare Solutions tracker page ↗ | qilinfilter this group | · 5d ago | Healthcare Services |
Mitsuwa Trading Co., Ltd tracker page ↗ | qilinfilter this group | · 7d ago | Business Services |
Jet Specialty tracker page ↗ | qilinfilter this group | · 7d ago | Industrial Machinery & Equipment |
Alaska Electrical Apprenticeship tracker page ↗ | qilinfilter this group | · 8d ago | Education |
Partners Group SK tracker page ↗ | qilinfilter this group | · 9d ago | Finance |
Jbc tracker page ↗ | qilinfilter this group | · 9d ago | Hand, Power & Lawn-care Tools |
Philippine Ports Authority tracker page ↗ | qilinfilter this group | · 11d ago | Business Services |
Bauman Law Group tracker page ↗ | qilinfilter this group | · 11d ago | Law Firms & Legal Services |
Jouvet SAS tracker page ↗ | qilinfilter this group | · 12d ago | Construction |
G&S Technologies tracker page ↗ | qilinfilter this group | · 12d ago | Energy, Utilities & Waste |
Nolan Consulting Group tracker page ↗ | qilinfilter this group | · 12d ago | Business Services |
Colonial Hyundai tracker page ↗ | qilinfilter this group | · 12d ago | Automotive Parts |
The Big Table tracker page ↗ | qilinfilter this group | · 12d ago | Hospitality |
AP CAPITAL PARTNERS LIMITED tracker page ↗ | qilinfilter this group | · 12d ago | Business Services |
Commission de la construction du Quebec (CCQ) tracker page ↗ | qilinfilter this group | · 13d ago | Government |
Complete Packaging Solutions tracker page ↗ | qilinfilter this group | · 14d ago | Business Services |
Tanner tracker page ↗ | qilinfilter this group | · 14d ago | Finance |
Uak University tracker page ↗ | qilinfilter this group | · 14d ago | Education |
Grayson Rural Electric Cooperative tracker page ↗ | qilinfilter this group | · 15d ago | Electricity, Oil & Gas |
Commission de la construction du Quebec tracker page ↗ | qilinfilter this group | · 16d ago | Government |
Inmac tracker page ↗ | qilinfilter this group | · 16d ago | Architecture, Engineering & Design |
Allied Recycling tracker page ↗ | qilinfilter this group | · 16d ago | Energy, Utilities & Waste |
AFSARD tracker page ↗ | qilinfilter this group | · 17d ago | Finance |
Crystalpharmatech tracker page ↗ | qilinfilter this group | · 17d ago | Business Services |
Absolute Consultancy Services tracker page ↗ | qilinfilter this group | · 17d ago | Business Services |
Black Cat Engineering Construction Wll tracker page ↗ | qilinfilter this group | · 17d ago | Civil Engineering Construction |
Bandit Industries tracker page ↗ | qilinfilter this group | · 18d ago | Accounting Services |
LAPoco Architects tracker page ↗ | qilinfilter this group | · 18d ago | Architecture, Engineering & Design |
Neumaticos Corral S.A. tracker page ↗ | qilinfilter this group | · 18d ago | Automotive Parts |
AUM Construction tracker page ↗ | qilinfilter this group | · 18d ago | Electricity, Oil & Gas |
The Frame Group tracker page ↗ | qilinfilter this group | · 18d ago | Business Services |
La Maison Des Travaux tracker page ↗ | qilinfilter this group | · 18d ago | Business Services |
BLISS 1041 tracker page ↗ | qilinfilter this group | · 18d ago | Accounting Services |
CareClinics tracker page ↗ | qilinfilter this group | · 18d ago | 0 |
Alter Consultores Legales tracker page ↗ | qilinfilter this group | · 19d ago | Law Firms & Legal Services |
Newton County School System tracker page ↗ | qilinfilter this group | · 19d ago | Education |
DigiGround tracker page ↗ | qilinfilter this group | · 19d ago | Business Services |
Tramigo tracker page ↗ | qilinfilter this group | · 19d ago | Software |
Cosmocolor SA de CV tracker page ↗ | qilinfilter this group | · 19d ago | Business Services |
Infinnium tracker page ↗ | qilinfilter this group | · 20d ago | Law Firms & Legal Services |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.