Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
178
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 156 | 401 | 401 | active | no public figure | |
| 2 | qilin | 21 | ▲7 | 116 | 359 | 359 | active | no public figure | |
| 3 | krybit | 13 | ▲11 | 47 | 96 | 96 | active | no public figure | |
| 4 | storm | 4 | ▼36 | 44 | 56 | 56 | active | no public figure | |
| 5 | akira | 9 | ▲3 | 41 | 83 | 83 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 41 | 62 | 62 | active | no public figure | |
| 7 | inc ransom | 6 | ▲2 | 39 | 109 | 109 | active | no public figure | |
| 8 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 9 | lockbit5 | 5 | ▼2 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 11 | ▲2 | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 0 | ▼4 | 20 | 38 | 38 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 4 | ▼1 | 17 | 21 | 21 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 4 | ▼6 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 1 | ▼2 | 14 | 31 | 31 | active | no public figure | |
| 19 | panzer | 7 | ▲4 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | dragonforce | 3 | ▲1 | 12 | 71 | 71 | active | no public figure | |
| 22 | chaos | 4 | ▲2 | 12 | 34 | 34 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | ▼1 | 12 | 24 | 24 | active | no public figure | |
| 25 | rhysida | 3 | ▲1 | 12 | 14 | 14 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents359 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
Coface tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Insurance |
Spoonful of Comfort tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Grocery Retail |
Teikoku USA tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Manufacturing |
AGUNSA tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Freight & Logistics Services |
Mulino Padano tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Food & Beverage |
WEBA Meubelen tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Business Services |
MOSAID Technologies tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Finance |
Desatera Sdn Bhd tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Business Services |
Loescher editore Torino tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Advertising & Marketing |
Botek tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Industrial Machinery & Equipment |
Zanichelli tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Advertising & Marketing |
INVENSITY tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Business Services |
Megawide tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Construction |
Jone Précision tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Manufacturing |
Arnall Golden Gregory tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Law Firms & Legal Services |
ASCII Group tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Business Services |
DELTA WAYS tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Healthcare Services |
motorenmaier gmbh tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Business Services |
Double H Equipment tracker page ↗ | qilinfilter this group | · Aug 16, 2026 | Industrial Machinery & Equipment |
FERRARI MANGIMI SRL tracker page ↗ | qilinfilter this group | · Aug 14, 2026 | Business Services |
Connections tracker page ↗ | qilinfilter this group | · Aug 14, 2026 | Hospitality |
Radiant tracker page ↗ | qilinfilter this group | · Aug 14, 2026 | Software |
Aletex Group tracker page ↗ | qilinfilter this group | · Aug 14, 2026 | Manufacturing |
Urban Worldwide tracker page ↗ | qilinfilter this group | · Aug 14, 2026 | Business Services |
Lercher Werkzeugbau tracker page ↗ | qilinfilter this group | · Aug 14, 2026 | Industrial Machinery & Equipment |
3f tracker page ↗ | qilinfilter this group | · Aug 14, 2026 | Membership Organizations |
PenLink tracker page ↗ | qilinfilter this group | · Aug 14, 2026 | Software |
D & J Beverage Service tracker page ↗ | qilinfilter this group | · Aug 13, 2026 | Grocery Retail |
United Association Local Union 345 tracker page ↗ | qilinfilter this group | · Aug 12, 2026 | Membership Organizations |
Wanted tracker page ↗ | qilinfilter this group | · Aug 12, 2026 | Business Services |
G.M.A. GRANDI MARCHE AUTOMOBILI - S.R.L tracker page ↗ | qilinfilter this group | · Aug 11, 2026 | Business Services |
Crown Group tracker page ↗ | qilinfilter this group | · Aug 11, 2026 | Business Services |
Service Evaluation Concepts tracker page ↗ | qilinfilter this group | · Aug 11, 2026 | Advertising & Marketing |
tommer construction tracker page ↗ | qilinfilter this group | · Aug 11, 2026 | Civil Engineering Construction |
HIGEN MOTOR(critical data) tracker page ↗ | qilinfilter this group | · Aug 10, 2026 | Industrial Machinery & Equipment |
City of Winchester tracker page ↗ | qilinfilter this group | · Aug 10, 2026 | Government |
B Wright Drywall tracker page ↗ | qilinfilter this group | · Aug 10, 2026 | Construction |
Energetic Development Corp tracker page ↗ | qilinfilter this group | · Aug 9, 2026 | Manufacturing |
Panda Logistics Taichung Branch tracker page ↗ | qilinfilter this group | · Aug 9, 2026 | Freight & Logistics Services |
East Field Corporation tracker page ↗ | qilinfilter this group | · Aug 9, 2026 | Accounting Services |
Chun Tai Sing Chemical Industry tracker page ↗ | qilinfilter this group | · Aug 9, 2026 | Chemicals & Related Products |
Synergy Interactive tracker page ↗ | qilinfilter this group | · Aug 9, 2026 | Business Services |
pm-energy Die Solarexperten tracker page ↗ | qilinfilter this group | · Aug 9, 2026 | Business Services |
Harplast SRL tracker page ↗ | qilinfilter this group | · Aug 9, 2026 | Business Services |
Price Shoes tracker page ↗ | qilinfilter this group | · Aug 9, 2026 | Retail · Pennsylvania |
Naval Interior Team tracker page ↗ | qilinfilter this group | · Aug 9, 2026 | Business Services |
Phithan Phanich tracker page ↗ | qilinfilter this group | · Aug 9, 2026 | Automotive Parts |
Grupo Diestra tracker page ↗ | qilinfilter this group | · Aug 9, 2026 | Hospitality |
Université Libre de Bruxelles tracker page ↗ | qilinfilter this group | · Aug 9, 2026 | Education |
Service d'usinage 9002 tracker page ↗ | qilinfilter this group | · Aug 9, 2026 | Industrial Machinery & Equipment |
Impact Centre Chrétien tracker page ↗ | qilinfilter this group | · Aug 8, 2026 | Business Services |
Clausing tracker page ↗ | qilinfilter this group | · Aug 8, 2026 | Food & Beverage |
CLLS Co Ltd tracker page ↗ | qilinfilter this group | · Aug 8, 2026 | Industrial Machinery & Equipment |
Astro Electroplating tracker page ↗ | qilinfilter this group | · Aug 7, 2026 | Industrial Machinery & Equipment |
Filtronic tracker page ↗ | qilinfilter this group | · Aug 7, 2026 | Manufacturing |
EISNER ZT GMBH tracker page ↗ | qilinfilter this group | · Aug 7, 2026 | Construction |
John C Saunders, CPA tracker page ↗ | qilinfilter this group | · Aug 7, 2026 | Accounting Services |
Nikan Awasisak Agency tracker page ↗ | qilinfilter this group | · Aug 7, 2026 | Government |
Depona tracker page ↗ | qilinfilter this group | · Aug 7, 2026 | Hospitality |
Crystal Pharmatech tracker page ↗ | qilinfilter this group | · Aug 7, 2026 | Business Services |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.