Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
232
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
storm
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 32 | ▲9 | 157 | 413 | 413 | active | no public figure | |
| 2 | qilin | 18 | ▲2 | 115 | 359 | 359 | active | no public figure | |
| 3 | krybit | 13 | ▲11 | 47 | 96 | 96 | active | no public figure | |
| 4 | direwolf | 5 | ▼6 | 45 | 62 | 62 | active | no public figure | |
| 5 | storm | 44 | ▲44 | 44 | 56 | 56 | active | no public figure | |
| 6 | akira | 7 | ▼1 | 38 | 82 | 82 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 3 | ▼6 | 36 | 106 | 106 | active | no public figure | |
| 9 | lockbit5 | 5 | ▼1 | 27 | 86 | 86 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | shinyhunters | 1 | ▼2 | 24 | 34 | 34 | active | no public figure | |
| 11 | safepay | 14 | ▲8 | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 0 | ▼7 | 20 | 38 | 38 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | audit team | 10 | ▲6 | 18 | 19 | 19 | active | no public figure | |
| 16 | panzer | 6 | ▲3 | 17 | 24 | 24 | active | no public figure | |
| 17 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 18 | emperador | 6 | ▲5 | 16 | 19 | 19 | active | no public figure | |
| 19 | play | 4 | ▲4 | 14 | 44 | 44 | active | no public figure | |
| 20 | vexy | 4 | ▼6 | 14 | 14 | 14 | active | no public figure | |
| 21 | black nevas | 13 | ▲13 | 13 | 13 | 13 | active | no public figure | |
| 22 | chaos | 5 | ▲4 | 12 | 34 | 34 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | ▼1 | 12 | 27 | 27 | active | no public figure | |
| 25 | rhysida | 3 | ▲1 | 12 | 15 | 15 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents359 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
Providence Investments tracker page ↗ | qilinfilter this group | · 19d ago | Finance |
LGG Advisors tracker page ↗ | qilinfilter this group | · 19d ago | Business Services |
Open Sports tracker page ↗ | qilinfilter this group | · 19d ago | Retail · Pennsylvania |
DAB Investments tracker page ↗ | qilinfilter this group | · 19d ago | Construction |
Displaydata tracker page ↗ | qilinfilter this group | · 19d ago | Electronics |
Sanatorio Modelo de Caseros tracker page ↗ | qilinfilter this group | · 20d ago | 0 |
KenEp Resources tracker page ↗ | qilinfilter this group | · 20d ago | Architecture, Engineering & Design |
Metal Conversions tracker page ↗ | qilinfilter this group | · 20d ago | Building Materials |
California Truck Equipment tracker page ↗ | qilinfilter this group | · 20d ago | Business Services |
Northern Leasing Systems tracker page ↗ | qilinfilter this group | · 20d ago | Furniture |
ATF tracker page ↗ | qilinfilter this group | · 20d ago | Government |
WireCo tracker page ↗ | qilinfilter this group | · 20d ago | Manufacturing |
Integrex RCM tracker page ↗ | qilinfilter this group | · 20d ago | Healthcare Services |
Air International Thermal Systems tracker page ↗ | qilinfilter this group | · 20d ago | Automotive Parts |
Brazosport College tracker page ↗ | qilinfilter this group | · 20d ago | Education |
AGROLAND S.A. tracker page ↗ | qilinfilter this group | · 21d ago | Agriculture |
STRUCTURED SETTLEMENT CAPITAL LLC tracker page ↗ | qilinfilter this group | · 21d ago | Finance |
SC PaderTeG Cabluri Electrice tracker page ↗ | qilinfilter this group | · 21d ago | Manufacturing |
Consultores de Seguros tracker page ↗ | qilinfilter this group | · 21d ago | Insurance |
Coldfish Seafood tracker page ↗ | qilinfilter this group | · 22d ago | Food & Beverage |
A&E + SMA Design tracker page ↗ | qilinfilter this group | · 22d ago | Architecture, Engineering & Design |
S.E.M.P. s.r.l. tracker page ↗ | qilinfilter this group | · 23d ago | Business Services |
Studio BOLDRIN PAOLO tracker page ↗ | qilinfilter this group | · 23d ago | Real Estate |
Euroflora srl tracker page ↗ | qilinfilter this group | · 23d ago | Business Services |
Tecnici Associati STP tracker page ↗ | qilinfilter this group | · 23d ago | Architecture, Engineering & Design |
Aurore Development S.p.A. tracker page ↗ | qilinfilter this group | · 23d ago | Business Services |
Clear Align tracker page ↗ | qilinfilter this group | · 23d ago | Manufacturing |
Difor tracker page ↗ | qilinfilter this group | · 23d ago | Automotive Parts |
Black Cat Engineering & Construction WLL tracker page ↗ | qilinfilter this group | · 23d ago | Civil Engineering Construction |
iPic tracker page ↗ | qilinfilter this group | · 25d ago | Hospitality |
Quaker State Mexico tracker page ↗ | qilinfilter this group | · 25d ago | Chemicals & Related Products |
Cinépolis tracker page ↗ | qilinfilter this group | · 25d ago | Hospitality |
Gindre India tracker page ↗ | qilinfilter this group | · 25d ago | Manufacturing |
The Pendas Law Firm tracker page ↗ | qilinfilter this group | · 25d ago | Law Firms & Legal Services |
Blake Services tracker page ↗ | qilinfilter this group | · 25d ago | Accounting Services |
Professional tracker page ↗ | qilinfilter this group | · 25d ago | Accounting Services |
Questronix tracker page ↗ | qilinfilter this group | · 26d ago | Business Services |
Provite tracker page ↗ | qilinfilter this group | · 26d ago | Business Services |
Trends And Concepts tracker page ↗ | qilinfilter this group | · 26d ago | Construction |
Semana tracker page ↗ | qilinfilter this group | · 27d ago | Advertising & Marketing |
Medochemie tracker page ↗ | qilinfilter this group | · 27d ago | Manufacturing |
Smart Energies tracker page ↗ | qilinfilter this group | · 27d ago | Electricity, Oil & Gas |
WIS LOGISTICS tracker page ↗ | qilinfilter this group | · 27d ago | Freight & Logistics Services |
InVentry tracker page ↗ | qilinfilter this group | · 27d ago | Software |
Philippe Hottinguer Finance tracker page ↗ | qilinfilter this group | · 27d ago | Finance |
Thrifty Building Supply tracker page ↗ | qilinfilter this group | · 27d ago | Home Improvement & Hardware Retail |
Estech tracker page ↗ | qilinfilter this group | · 27d ago | Business Services |
Constructora Jimenez tracker page ↗ | qilinfilter this group | · 27d ago | Construction |
Movitecnica tracker page ↗ | qilinfilter this group | · 27d ago | Industrial Machinery & Equipment |
Integraduanas tracker page ↗ | qilinfilter this group | · 27d ago | Freight & Logistics Services |
Berlin Brandenburgische Wohnungsbaugenossenschaft tracker page ↗ | qilinfilter this group | · 28d ago | Real Estate |
GSW Gemeinschaftsstadtwerke GmbH tracker page ↗ | qilinfilter this group | · 28d ago | Electricity, Oil & Gas |
White-Daters & Associates, Inc tracker page ↗ | qilinfilter this group | · 28d ago | Construction |
The University of the West Indies tracker page ↗ | qilinfilter this group | · 28d ago | Education |
EmpireWorks tracker page ↗ | qilinfilter this group | · 28d ago | Construction |
Coface tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Insurance |
Spoonful of Comfort tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Grocery Retail |
Teikoku USA tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Manufacturing |
AGUNSA tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Freight & Logistics Services |
Mulino Padano tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Food & Beverage |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.