Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
189
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 155 | 401 | 401 | active | no public figure | |
| 2 | qilin | 23 | ▲9 | 117 | 361 | 361 | active | no public figure | |
| 3 | krybit | 13 | ▲13 | 47 | 96 | 96 | active | no public figure | |
| 4 | akira | 12 | ▲6 | 44 | 86 | 86 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 5 | storm | 4 | ▼36 | 44 | 56 | 56 | active | no public figure | |
| 6 | direwolf | 3 | ▼8 | 41 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 9 | ▲5 | 36 | 112 | 112 | active | no public figure | |
| 9 | lockbit5 | 5 | ▼2 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 11 | ▲2 | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 0 | ▼4 | 20 | 38 | 38 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | shinyhunters | 2 | ▼1 | 15 | 32 | 32 | active | no public figure | |
| 18 | vexy | 4 | ▼5 | 15 | 15 | 15 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | dragonforce | 3 | ▲1 | 12 | 71 | 71 | active | no public figure | |
| 22 | chaos | 4 | ▲2 | 12 | 34 | 34 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | = | 12 | 23 | 23 | active | no public figure | |
| 25 | rhysida | 3 | ▲1 | 12 | 14 | 14 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents361 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
ABM Enviro tracker page ↗ | qilinfilter this group | · Jul 23, 2026 | Industrial Machinery & Equipment |
WellPerf tracker page ↗ | qilinfilter this group | · Jul 23, 2026 | Energy, Utilities & Waste |
Assos Pharmaceuticals tracker page ↗ | qilinfilter this group | · Jul 23, 2026 | Manufacturing |
Cano Industrial tracker page ↗ | qilinfilter this group | · Jul 23, 2026 | Chemicals & Related Products |
Triton Trading tracker page ↗ | qilinfilter this group | · Jul 23, 2026 | Industrial Machinery & Equipment |
AppleOne Properties tracker page ↗ | qilinfilter this group | · Jul 23, 2026 | Construction |
Corporate 360 Business Solutions tracker page ↗ | qilinfilter this group | · Jul 23, 2026 | Business Services |
Sunway Berhad tracker page ↗ | qilinfilter this group | · Jul 23, 2026 | Real Estate |
P & A Construction tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Civil Engineering Construction |
Primeline Logistics tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Freight & Logistics Services |
Recsa tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Business Services |
Salida Union School District tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Education |
RehaVital Gesundheitsservice GmbH tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | 0 |
Evergreen Title tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Insurance |
Cpcg tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Business Services |
EFU Life Assurance tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Insurance |
Infina Health tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Ambulance Services |
Postres Reina tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Food & Beverage |
PP+K tracker page ↗ | qilinfilter this group | · Jul 20, 2026 | Advertising & Marketing |
Eana tracker page ↗ | qilinfilter this group | · Jul 20, 2026 | Business Services |
Synergy Products tracker page ↗ | qilinfilter this group | · Jul 20, 2026 | Home Improvement & Hardware Retail |
Bolt & Nut Manufacturing tracker page ↗ | qilinfilter this group | · Jul 20, 2026 | Industrial Machinery & Equipment |
Associated Theatrical Contractors tracker page ↗ | qilinfilter this group | · Jul 19, 2026 | Hospitality |
Don Tortaco Mexican Grill tracker page ↗ | qilinfilter this group | · Jul 19, 2026 | Hospitality |
City Ambulance Service tracker page ↗ | qilinfilter this group | · Jul 19, 2026 | Healthcare Services |
Famesa tracker page ↗ | qilinfilter this group | · Jul 19, 2026 | Business Services |
The Nueva School tracker page ↗ | qilinfilter this group | · Jul 18, 2026 | Education |
KLD Labs tracker page ↗ | qilinfilter this group | · Jul 18, 2026 | Manufacturing |
Armara tracker page ↗ | qilinfilter this group | · Jul 18, 2026 | Grocery Retail |
Heartland Catfish tracker page ↗ | qilinfilter this group | · Jul 18, 2026 | Agriculture |
Salina Supply tracker page ↗ | qilinfilter this group | · Jul 18, 2026 | Home Improvement & Hardware Retail |
St Martha Catholic Church tracker page ↗ | qilinfilter this group | · Jul 18, 2026 | Non-Profit & Charitable Organizations |
AK Preparedness tracker page ↗ | qilinfilter this group | · Jul 18, 2026 | Building Materials |
Sicc tracker page ↗ | qilinfilter this group | · Jul 18, 2026 | Building Materials |
Droguería Martorani tracker page ↗ | qilinfilter this group | · Jul 18, 2026 | Drug Stores & Pharmacies |
Powder River Heating & Air Conditioning tracker page ↗ | qilinfilter this group | · Jul 17, 2026 | Construction |
Cafar tracker page ↗ | qilinfilter this group | · Jul 17, 2026 | Insurance |
Acosol tracker page ↗ | qilinfilter this group | · Jul 17, 2026 | Energy, Utilities & Waste |
Danone (International Delights) tracker page ↗ | qilinfilter this group | · Jul 15, 2026 | Food & Beverage |
Feliubadaló tracker page ↗ | qilinfilter this group | · Jul 15, 2026 | Grocery Retail |
Levin Furniture tracker page ↗ | qilinfilter this group | · Jul 15, 2026 | Furniture |
THL tracker page ↗ | qilinfilter this group | · Jul 14, 2026 | Finance |
Sedemi tracker page ↗ | qilinfilter this group | · Jul 14, 2026 | Civil Engineering Construction |
Busscar de Colombia tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | Manufacturing |
Counts & Dobyns tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | Civil Engineering Construction |
Centro Científico e Cultural de Macau tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | Hospitality |
Jakub A.S. tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | Business Services |
Cemoi tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | Food & Beverage |
URH Hoteliers tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | Hospitality |
Hillebrand Home Health tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | 0 |
TitanTV, Inc. tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | Business Services |
Century Equities tracker page ↗ | qilinfilter this group | · Jul 11, 2026 | Finance |
Retelit SpA PIVA tracker page ↗ | qilinfilter this group | · Jul 11, 2026 | Business Services |
Carolina Agri-Power tracker page ↗ | qilinfilter this group | · Jul 11, 2026 | Industrial Machinery & Equipment |
Allied Plumbing & Heating tracker page ↗ | qilinfilter this group | · Jul 11, 2026 | Construction |
Eurodefi tracker page ↗ | qilinfilter this group | · Jul 10, 2026 | Business Services |
SPACElogic tracker page ↗ | qilinfilter this group | · Jul 10, 2026 | Hospitality |
Global Strategic Business Process Solutions tracker page ↗ | qilinfilter this group | · Jul 10, 2026 | Business Services |
CRZ Construcciones tracker page ↗ | qilinfilter this group | · Jul 10, 2026 | Civil Engineering Construction |
Red Planet Hotels tracker page ↗ | qilinfilter this group | · Jul 10, 2026 | Hospitality |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.