Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
179
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 156 | 401 | 401 | active | no public figure | |
| 2 | qilin | 21 | ▲7 | 115 | 359 | 359 | active | no public figure | |
| 3 | krybit | 13 | ▲12 | 47 | 96 | 96 | active | no public figure | |
| 4 | storm | 4 | ▼36 | 44 | 56 | 56 | active | no public figure | |
| 5 | akira | 9 | ▲3 | 41 | 83 | 83 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 41 | 62 | 62 | active | no public figure | |
| 7 | inc ransom | 6 | ▲2 | 39 | 109 | 109 | active | no public figure | |
| 8 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 9 | lockbit5 | 5 | ▼2 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 11 | ▲2 | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 0 | ▼4 | 20 | 38 | 38 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 4 | ▼5 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 1 | ▼2 | 14 | 31 | 31 | active | no public figure | |
| 19 | panzer | 7 | ▲4 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | dragonforce | 3 | ▲1 | 12 | 71 | 71 | active | no public figure | |
| 22 | chaos | 4 | ▲2 | 12 | 34 | 34 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | = | 12 | 23 | 23 | active | no public figure | |
| 25 | rhysida | 3 | ▲1 | 12 | 14 | 14 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents359 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
J&T Bank and Trust tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Banking |
AmSpec tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Business Services |
ALIZE (alize-sud.fr) tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Business Services |
Jakle & Alexander tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Law Firms & Legal Services |
Akuur Law Firm tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Law Firms & Legal Services |
Bloom Financials tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Accounting Services |
Mera Metal tracker page ↗ | qilinfilter this group | · Aug 5, 2026 | Furniture |
STADLER Sensorik CNC-Technik tracker page ↗ | qilinfilter this group | · Aug 5, 2026 | Industrial Machinery & Equipment |
Stade Francais tracker page ↗ | qilinfilter this group | · Aug 5, 2026 | Business Services |
Galvin Brothers tracker page ↗ | qilinfilter this group | · Aug 5, 2026 | Civil Engineering Construction |
RUPP Spritzguss tracker page ↗ | qilinfilter this group | · Aug 5, 2026 | Manufacturing |
WD Masonry & Concrete tracker page ↗ | qilinfilter this group | · Aug 4, 2026 | Construction |
Service Electric tracker page ↗ | qilinfilter this group | · Aug 4, 2026 | Software |
Universitatea De Vest Vasile Goldi Din Arad tracker page ↗ | qilinfilter this group | · Aug 4, 2026 | Education |
Freedom Claims Management tracker page ↗ | qilinfilter this group | · Aug 3, 2026 | Insurance |
INTERTRUST AUSTRALIA PTY LTD tracker page ↗ | qilinfilter this group | · Aug 2, 2026 | Real Estate |
Asset Flooring Group Australia tracker page ↗ | qilinfilter this group | · Aug 2, 2026 | Construction |
Mairie de Drancy tracker page ↗ | qilinfilter this group | · Aug 2, 2026 | Government |
The Saturday Evening Post tracker page ↗ | qilinfilter this group | · Aug 2, 2026 | Advertising & Marketing |
Commercial Furniture Interiors tracker page ↗ | qilinfilter this group | · Aug 2, 2026 | Architecture, Engineering & Design |
Dienst Pack Systems tracker page ↗ | qilinfilter this group | · Aug 2, 2026 | Industrial Machinery & Equipment |
Ceragres tracker page ↗ | qilinfilter this group | · Aug 2, 2026 | Home Improvement & Hardware Retail |
Pointe Property Group tracker page ↗ | qilinfilter this group | · Aug 2, 2026 | Real Estate |
Schreiner Trockenbau GmbH tracker page ↗ | qilinfilter this group | · Aug 2, 2026 | Home Improvement & Hardware Retail |
Wire Products tracker page ↗ | qilinfilter this group | · Aug 2, 2026 | Manufacturing |
Community Management Associates tracker page ↗ | qilinfilter this group | · Jul 31, 2026 | Real Estate |
Hawaii Family Dental tracker page ↗ | qilinfilter this group | · Jul 31, 2026 | Healthcare Services |
The Dcoop tracker page ↗ | qilinfilter this group | · Jul 31, 2026 | Agriculture |
Audio Precision, Inc tracker page ↗ | qilinfilter this group | · Jul 31, 2026 | Manufacturing |
Db Tarimsal Enerji tracker page ↗ | qilinfilter this group | · Jul 30, 2026 | Chemicals & Related Products |
TenSparrows tracker page ↗ | qilinfilter this group | · Jul 30, 2026 | Software |
Byonyks tracker page ↗ | qilinfilter this group | · Jul 30, 2026 | Manufacturing |
Prenisac tracker page ↗ | qilinfilter this group | · Jul 30, 2026 | Construction |
Excel Consultores tracker page ↗ | qilinfilter this group | · Jul 30, 2026 | Business Services |
Affinity Capital tracker page ↗ | qilinfilter this group | · Jul 30, 2026 | Finance |
Adpo tracker page ↗ | qilinfilter this group | · Jul 30, 2026 | Freight & Logistics Services |
servitelco tracker page ↗ | qilinfilter this group | · Jul 30, 2026 | Business Services |
Orimar tracker page ↗ | qilinfilter this group | · Jul 30, 2026 | Business Services |
Indian Motos Inmot tracker page ↗ | qilinfilter this group | · Jul 30, 2026 | Automotive Parts |
Hoc tracker page ↗ | qilinfilter this group | · Jul 29, 2026 | Freight & Logistics Services |
Gran valle negocios tracker page ↗ | qilinfilter this group | · Jul 28, 2026 | Real Estate |
Groupe Fenwick tracker page ↗ | qilinfilter this group | · Jul 27, 2026 | Business Services |
Savills France tracker page ↗ | qilinfilter this group | · Jul 27, 2026 | Construction |
Wilbert's tracker page ↗ | qilinfilter this group | · Jul 27, 2026 | Automotive Parts |
Universitatea de Vest „Vasile Goldiș” din Arad tracker page ↗ | qilinfilter this group | · Jul 26, 2026 | Education |
Contacto Garantido tracker page ↗ | qilinfilter this group | · Jul 26, 2026 | Finance |
Jubilee Jobs tracker page ↗ | qilinfilter this group | · Jul 25, 2026 | Non-Profit & Charitable Organizations |
Plitvička Jezera Nacionalni Park tracker page ↗ | qilinfilter this group | · Jul 25, 2026 | Advertising & Marketing |
The Myers Y Cooper tracker page ↗ | qilinfilter this group | · Jul 25, 2026 | Real Estate |
Principle Diagnostics Laboratory tracker page ↗ | qilinfilter this group | · Jul 25, 2026 | Healthcare Services |
Guntert & Zimmerman tracker page ↗ | qilinfilter this group | · Jul 25, 2026 | Industrial Machinery & Equipment |
GURR Abdichtungstechnik GmbH tracker page ↗ | qilinfilter this group | · Jul 25, 2026 | Construction |
GOP tracker page ↗ | qilinfilter this group | · Jul 25, 2026 | Business Services |
Ejército Argentino tracker page ↗ | qilinfilter this group | · Jul 24, 2026 | Government |
Kean University tracker page ↗ | qilinfilter this group | · Jul 24, 2026 | Education |
Highline Community College tracker page ↗ | qilinfilter this group | · Jul 24, 2026 | Education |
Stryker tracker page ↗ | qilinfilter this group | · Jul 24, 2026 | Manufacturing |
Machinerie P&W tracker page ↗ | qilinfilter this group | · Jul 23, 2026 | Industrial Machinery & Equipment |
ABM Enviro tracker page ↗ | qilinfilter this group | · Jul 23, 2026 | Industrial Machinery & Equipment |
WellPerf tracker page ↗ | qilinfilter this group | · Jul 23, 2026 | Energy, Utilities & Waste |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.