ZeroHour

Incidents

Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups

Ransomware & extortion groups · activity

#Group7dtrend30d90dall-time*Last postStatusEstimated earnings (public reporting)
1the gentlemen30▲6156401401activeno public figure
2qilin21▲7115359359activeno public figure
3krybit13▲12479696activeno public figure
4storm4▼36445656activeno public figure
5akira9▲3418383activeApproximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since.
6direwolf3▼8416262activeno public figure
7inc ransom6▲239109109activeno public figure
8coinbase cartel0=375656activeno public figure
9lockbit55▼2275353activeOver US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit…
10audit team11▲2232525activeno public figure
11safepay10=226767activeno public figure
12leakeddata0▼4203838activeno public figure
13orova0=194444activeno public figure
14zawoo0=191919activeno public figure
15emperador4▼1172121activeno public figure
16kazu0▼17171717activeno public figure
17vexy4▼5151515activeno public figure
18shinyhunters1▼2143131activeno public figure
19panzer7▲4142525activeno public figure
20black nevas1▼12141414activeno public figure
21dragonforce3▲1127171activeno public figure
22chaos4▲2123434activeno public figure
23everest0▼4123434activeno public figure
24pear1=122323activeno public figure
25rhysida3▲1121414activeno public figure

*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.

Incidents156 records · full details

VictimGroup / typeDiscoveredDetails
IMGURL
tracker page ↗
the gentlemenfilter this group · 26d ago.
IMGFILE
tracker page ↗
the gentlemenfilter this group · 26d ago.
IMGTRAV
tracker page ↗
the gentlemenfilter this group · 26d ago.
XSSPROBE
tracker page ↗
the gentlemenfilter this group · 26d agoTESTXSS
NLTEST
tracker page ↗
the gentlemenfilter this group · 26d agonl-test
PROBE999
tracker page ↗
the gentlemenfilter this group · 26d agotempel.com zoominfo.com/c/tempel/87867666 Tempel is a global manufacturer of precision electrical steel laminations for automotive and industrial electric motors. We exfiltrated 3.2 TB of intellectual property and confidential engineering specs:Proprietary Technology (Compacore): Automotive OEM CAD & Blueprints:Unrestricted access to core R&D directories. The dump contains granular 3D CAD models, engineering schematics, and tolerance specs for next-generation EV motor platforms: Porsche & Audi: Performance specifications and rotor engineering blueprints for upcoming EV platforms.Daimler / Mercedes-Benz: Precision engineering tolerances and prototype motor schematics.Rink: Technical specifications for specialized production equipment. Note to automotive OEMs: This marks the SECOND successful breach of this company's network in the past 18 months. Draw your own conclusions about how seriously your suppliers take TISAX compliance and the security of your future R&D.
PROBEIMG
tracker page ↗
the gentlemenfilter this group · 26d agoprobe
PROBEDIR
tracker page ↗
the gentlemenfilter this group · 26d agoprobe
PROBEABS
tracker page ↗
the gentlemenfilter this group · 26d agoprobe
Aquasea
tracker page ↗
the gentlemenfilter this group · 27d agoaquasea.com rocketreach.co/aquasea-inc-profile_b468216cfc5c9f6e Aquasea Inc. is a clothing and apparel manufacturing company headquartered in Compton, California, operating since 1995. The business specializes in full-package production, including cut and sew services, private label manufacturing, and screen printing. They also operate nearshore textile manufacturing facilities to support their comprehensive apparel production capabilities.
CAZ Investments
tracker page ↗
the gentlemenfilter this group · 27d agocazinvestments.com zoominfo.com/c/caz-investments-lp/16765398 CAZ Investments We have taken NDA files, HR data, user data, employee data, models, bank statements, tax and legal documents, confidential files, photos of your work and leisure time, screenshots, information about interactions with offshore accounts, your and your clients' dirty laundry, passport scans, VIP client data, and much more the total volume of data exceeds 478 GB. is a Houston-based wealth management and multi-family office firm founded in 2001. They manage over $10.3 billion in assets, providing exclusive access to alternative investments like private equity, credit, and sports ownership. The firm curates unique investment opportunities for a global network of individual investors, financial advisors, and institutions.
Oceanica Internacional
tracker page ↗
the gentlemenfilter this group · 27d agooceanica.ws Oceanica Internacional is a comprehensive logistics and freight forwarding company operating across Central America. They serve as a strategic logistics partner, providing international trade and supply chain solutions in countries like Costa Rica, Panama, and Guatemala. The company specializes in coordinating imports, exports, and cargo transportation to support businesses throughout the region.
Ariel Energia
tracker page ↗
the gentlemenfilter this group · 27d agoarielenergia.it zoominfo.com/c/gdl-spa/1311974459 Ariel Energia is a prominent Italian company based in Turin with over 40 years of experience in the home energy and comfort sector. They specialize in producing and distributing "Made in Italy" heating and cooling solutions, including pellet stoves, boilers, and air conditioners. The company also provides renewable energy systems like photovoltaics and advanced water purifiers to promote sustainability and energy efficiency.
AGS Cinemas
tracker page ↗
the gentlemenfilter this group · 27d agoagscinemas.com zoominfo.com/c/ags-cinemas-private-ltd/356074293 AGS Cinemas is a prominent multiplex chain and film exhibition company based in Chennai, India, operating under the AGS Entertainment brand. The theaters feature state-of-the-art technical facilities, including Dolby Atmos sound systems and 4K projection for a premium viewing experience. Their official platform allows customers to easily book tickets online and pre-order a wide variety of food and beverages for their visit.
Eyecare Center of Snohomish
tracker page ↗
the gentlemenfilter this group · 27d agoeyecarecenterofsnohomish.com zoominfo.com/c/eyecare-center-of-snohomish/442336650 Eyecare Center of Snohomish is a trusted optometry clinic in Snohomish, Washington, proudly serving its community since 1964. They offer comprehensive vision and medical eye exams, diagnosing and treating various eye diseases to ensure long-term ocular health. The clinic also features a full-service optical boutique offering custom-fitted contact lenses and designer eyewear frames from top global brands.
Gould Sherwood Consulting
tracker page ↗
the gentlemenfilter this group · 27d agogouldsherwood.com zoominfo.com/c/gould-sherwood-consulting-llc/347553210 Gould-Sherwood Consulting is a boutique IT support and services firm based in Lexington, Massachusetts, serving the Greater Boston area since 2005. They specialize in comprehensive computer and network support, including planning, maintenance, and troubleshooting for both Mac and PC environments. The company primarily caters to small-to-medium businesses, creative professionals, and home users, ensuring their technology infrastructure runs smoothly and securely.
Espac
tracker page ↗
the gentlemenfilter this group · 27d agoespac.cl zoominfo.com/c/espac/425816287 ESPAC Construcción is a leading Chilean company based in Santiago that manufactures and distributes specialized products for the building industry. They produce high-quality construction materials, including steel shores, heavy-duty pallets, scaffolding systems, and material handling carts. Additionally, the firm offers comprehensive rental services for formwork and structural support equipment to assist large-scale construction projects across the country.
Layher
tracker page ↗
the gentlemenfilter this group · 27d agolayher.cl zoominfo.com/c/layher-del-pacífico-sa--layher-chile/1319092699 Layher Chile is the local branch of the globally renowned German manufacturer specializing in scaffolding and access systems. They supply high-quality scaffolding solutions, safety equipment, and event structures for the construction, industrial, and infrastructure sectors. The company provides comprehensive services, including product sales, equipment rentals, custom engineering design, and technical support for complex projects across the country.
Volktek
tracker page ↗
the gentlemenfilter this group · 27d agovolktek.com zoominfo.com/c/volktek-corp/161873991 Volktek is a leading Taiwanese manufacturer established in 1994, specializing in high-performance industrial networking and Ethernet solutions. They design and produce a wide range of robust equipment, including industrial Ethernet switches, PoE devices, and fiber optic converters. With in-house production facilities, the company provides reliable connectivity and automation infrastructure for metro networks, surveillance, and harsh industrial environments.
Magdalena Grand Beach Golf Resort
tracker page ↗
the gentlemenfilter this group · 27d agomagdalenagrand.com zoominfo.com/c/magdalena-grand-beach--golf-resort/348187300 Magdalena Grand Beach & Golf Resort is a luxury hotel and resort located in Lowlands on the beautiful island of Tobago. It features premium oceanfront accommodations with access to a championship golf course, spa, pools, and tennis courts. The property is also a popular destination for weddings, offering guests a variety of dining options and vibrant nightlife.
Akatake Engineering
tracker page ↗
the gentlemenfilter this group · 27d agoakatake.co.jp crunchbase.com/organization/akatake-engineering-co-ltd Akatake Engineering Co., Ltd. is a Japanese manufacturing company based in Numazu, Shizuoka, established in 1971. They specialize in powder handling technology, providing comprehensive solutions for the storage, feeding, weighing, and transportation of bulk powders. The company designs and manufactures custom industrial equipment and container systems for various industries dealing with fine particulate materials.
ESCON Group
tracker page ↗
the gentlemenfilter this group · 27d agoescon.us zoominfo.com/c/escon-group/352605618 ESCON Group is a veteran-owned electrical contracting company based in Bay City, Michigan, with a history tracing back to 1907. They specialize in providing comprehensive commercial and residential electrical services, low voltage solutions, and fiber optics. The company also offers advanced security systems, smart integrations, and robust commercial generator installations to ensure reliable power.
Almeer
tracker page ↗
the gentlemenfilter this group · 27d agoal-meergroup.com zoominfo.com/c/almeer/1326290906 Almeer General Contracting Establishment is a Saudi-owned company established in 2010 and headquartered in Jubail, Saudi Arabia. They specialize in comprehensive electrical, civil construction, and mechanical erection services for industrial facilities. The firm primarily serves large-scale sectors, including oil refineries and fertilizer plants, utilizing a team of qualified engineers.
Geb Sas
tracker page ↗
the gentlemenfilter this group · 27d agogeb.fr zoominfo.com/c/geb-sas/372743980 GEB SAS is a historic French chemical manufacturing company established in 1860. They specialize in formulating and producing essential sealing solutions, adhesives, and PVC glues. The family-owned business primarily provides high-quality maintenance and installation products for plumbing and heating professionals.
ARBEITERKAMMERN
tracker page ↗
the gentlemenfilter this group · 27d agoarbeiterkammer.at The Austrian Chamber of Labour is a statutory public organization dedicated to representing the interests of employees and consumers across Austria. It provides its members with free legal advice on labor and social law, educational support, and strong consumer protection services. The organization actively advocates for workers' rights, fair wages, and social justice through extensive research and political lobbying.
UOLconsult
tracker page ↗
the gentlemenfilter this group · 27d agouol-consult.com UOLconsult GmbH is a boutique management consulting firm based in Vienna, Austria, founded in 2015. They specialize in strategic management, business development, and investment consulting.
dlp motive
tracker page ↗
the gentlemenfilter this group · 27d agodlp-motive.de dlp motive is a German full-service event technology provider founded in 2007, successfully realizing around 600 projects annually. They offer comprehensive technical solutions including lighting, audio, video, kinetics, and rigging for corporate, e-sports, and public events. The company handles the entire event lifecycle, providing everything from initial concept and design to logistics, on-site production, and equipment rental.
AWJ Holding
tracker page ↗
the gentlemenfilter this group · 27d agoawjholding.com zoominfo.com/c/awj-holding-co/448239448 AWJ Holding Company is a prominent Saudi-based single-family office and investment firm established in 2016. Headquartered in Riyadh, the company specializes in real estate development, property management, and strategic investment management. It focuses on high-impact developments and operates dynamic subsidiaries across retail, hospitality, and infrastructure sectors.
Lexacaucho
tracker page ↗
the gentlemenfilter this group · 27d agolexacaucho.com zoominfo.com/c/lexacaucho--laminados-y-extruidos-de-caucho-sac/457170004 Lexacaucho is a Peruvian manufacturing company based in Lima with over 25 years of experience in the rubber and polymer industry. They specialize in producing molded rubber sheets, profiles, linings, and custom parts using materials like natural rubber, SBR, and EPDM. The company primarily serves the mining, fishing, and general industrial sectors by providing durable elastomer solutions.
LOG Systems
tracker page ↗
the gentlemenfilter this group · 27d agologsystem.pl zoominfo.com/c/log-systems/372786485 LOG Systems is a Polish software company based in Wrocław that develops comprehensive IT management and Helpdesk solutions. Their flagship product, LOG Plus, is an advanced ITSM platform designed to streamline ticketing, incident management, and IT infrastructure monitoring. The software also includes powerful Software Asset Management features to help organizations optimize licensing and ensure data security.
BioPharma
tracker page ↗
the gentlemenfilter this group · 27d agoBioPharma is a global biopharmaceutical innovator founded in 2003 and headquartered in Taiwan. It specializes in developing best-in-class therapies and biologics for blood disorders, hematologic cancers, and other serious diseases. The company is fully integrated and operates internationally with a strong commercial and clinical presence in the U.S., Europe, and Japan.
P**** R*****
tracker page ↗
the gentlemenfilter this group · 28d agofull-service event rental company established in 1972, specializing in high-quality items and equipment for special events. They serve the Northeast and Mid-Atlantic regions along the East Coast, offering an extensive selection of furniture, linens, and decor. The company is dedicated to helping clients bring their unique event visions to life with professional customer care and design support. With its main facility in Teterboro, New Jersey, and a showroom in New York City, it remains a leading provider in the event services industry.
Babcock
tracker page ↗
the gentlemenfilter this group · 29d agobabcock.co.za rocketreach.co/babcock-international-group-africa-profile_b5cda591f42e0b42 Babcock Africa is a leading engineering and asset management company specializing in critical infrastructure and heavy equipment across the African continent. With over 130 years of experience, it provides lifetime engineering solutions, including industrial power systems, construction machinery, plant hire, and defense support. The company partners with demanding sectors such as energy, mining, transport, and manufacturing to ensure safe, reliable, and efficient operations. Its core focus is on designing, building, and sustaining complex assets through comprehensive maintenance and innovative technical services.
Senvest Capital
tracker page ↗
the gentlemenfilter this group · 29d agosenvest.com zoominfo.com/c/senvest-capital-inc/91423931 Senvest (including Senvest Capital and Senvest Management) is a major international investment firm and hedge fund sponsor managing billions of dollars in assets. Founded by Richard Mashaal, it specializes in contrarian value investing strategies across public equities, private markets, and real estate. Headquartered in New York and Montreal, the firm focuses on discretionary investment advisory services and direct capital deployment for institutional clients.
Roadvision Systems
tracker page ↗
the gentlemenfilter this group · 29d agoroadvision.com zoominfo.com/c/roadvision-systems-llc/358950436 Roadvision is a cloud-based trucking management software (TMS) designed to help logistics companies and carriers, particularly in the less-than-truckload (LTL) sector, operate more efficiently. Headquartered in Hanover, New Hampshire, it provides an all-in-one platform to automate workflows, reduce operational costs, and modernize fleet management.
CRASL
tracker page ↗
the gentlemenfilter this group · 29d agocrasl.co.uk zoominfo.com/c/crasl-accounting-services/355829364 CRASL Accounting Services is an approachable, user-friendly accounting firm based in Suffolk, UK, dedicated to supporting individuals, sole traders, and growing businesses. They combine traditional financial values with modern efficiency, offering personalized bookkeeping, tax planning, and strategic business advice. Their client-focused approach ensures you receive the clear insights and practical tools needed to make confident decisions and achieve your financial goals.

Breach & ransomware newsAll →

Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.