Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
183
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
9
Accounts exposed · 30d
36.8MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 153 | 401 | 401 | active | no public figure | |
| 2 | qilin | 23 | ▲9 | 117 | 361 | 361 | active | no public figure | |
| 3 | krybit | 13 | ▲13 | 47 | 96 | 96 | active | no public figure | |
| 4 | storm | 4 | ▼36 | 44 | 56 | 56 | active | no public figure | |
| 5 | akira | 9 | = | 43 | 86 | 86 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 41 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 8 | ▲3 | 36 | 112 | 112 | active | no public figure | |
| 9 | lockbit5 | 4 | ▼4 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 11 | ▲2 | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▼1 | 21 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 4 | ▼5 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | ▼1 | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 22 | dragonforce | 3 | ▲1 | 12 | 71 | 71 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | = | 12 | 23 | 23 | active | no public figure | |
| 25 | rhysida | 3 | ▲1 | 12 | 14 | 14 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Leak-site victims19 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
zenithtechnology.co.nz tracker page ↗ | zawoofilter this group | · 17d ago | country: New Zealand | fileSize: 72009692411 | PUBLISHED | Zenith Technology Corporation Limited (ZenTech) is a New Zealand-based Contract Research Organisation (CRO) headquartered in Dunedin, New Zealand. The company was incorporated in 1987 and specializes in clinical research and pharmaceutical analytical services for the international pharmaceutical industry. |
fes-sport.de tracker page ↗ | zawoofilter this group | · 17d ago | country: German | fileSize: 49760098079 | PUBLISHED | FES Sport (fes-sport.de) is the Institut für Forschung und Entwicklung von Sportgeräten (FES), a German institute specializing in research, engineering, and development of high-performance sports equipment and technology. It is based in Berlin, Germany, with an additional facility in Oberhof. |
esopartnerscpa.com tracker page ↗ | zawoofilter this group | · 17d ago | country: USA | fileSize: 90147829401 | PUBLISHED | ESOP Partners appears to be a specialized professional-services firm focused on Employee Stock Ownership Plans (ESOPs) rather than a general-purpose CPA firm. |
Company ID : mtfszhtggfdsg tracker page ↗ | zawoofilter this group | · 18d ago | country: New Zealand | fileSize: 72009692411 | UNPUBLISHED |
Company ID : htrfdrghbtnyr tracker page ↗ | zawoofilter this group | · 18d ago | country: German | fileSize: 49760098079 | UNPUBLISHED |
Company ID : vrfdeyhnbyuki tracker page ↗ | zawoofilter this group | · 18d ago | country: USA | fileSize: 90147829401 | UNPUBLISHED |
vectorsoft.de tracker page ↗ | zawoofilter this group | · 18d ago | country: German | fileSize: 17073414449 | PUBLISHED | vectorsoft is Vectorsoft AG, a German software-development company headquartered in Heusenstamm, Hesse, near Frankfurt am Main, Germany. |
winterdienst-berlin.com tracker page ↗ | zawoofilter this group | · 18d ago | country: Germany | fileSize: 35134085775 | PUBLISHED | The company is located at Boschweg 18–20, 12057 Berlin, and lists [email protected] and +49 30 684 083-6 as contact details. According to their company website, their services include:Snow and slush removal Clearing and gritting of sidewalks, roads, parking areas and public spaces Manual and machine-assisted winter maintenance Winter-service operations for businesses, private households and municipalities GPS-supported fleet and quality controls Environmentally conscious winter-service methods.Availability around the clock during winter conditions .The company says it combines around 30 years of experience with modern technology and environmentally friendly materials. |
hd-werkstaetten.de tracker page ↗ | zawoofilter this group | · 18d ago | country: Germany | fileSize: 37740752817 | PUBLISHED | hd-werkstaetten.de belongs to Heidelberger Werkstätten der Lebenshilfe Heidelberg e. V., a German social enterprise / sheltered workshop organization supporting people with disabilities through employment, vocational training, and workplace inclusion. Its main site is in Heidelberg, Baden-Württemberg, Germany. |
ng-engineering.de tracker page ↗ | zawoofilter this group | · 18d ago | country: German | fileSize: 4674304337 | PUBLISHED | NG Engineering Gruppe is a German engineering and technical-services group headquartered in Rödental, Bavaria. The group has been operating for more than 20 years and has locations in Germany, Poland and the Czech Republic. It provides engineering services throughout the product-development process and also offers personnel/recruitment services. |
berghotel-oberhof.de tracker page ↗ | zawoofilter this group | · 18d ago | country: Germany | fileSize: 4300776316 | PUBLISHED | Konsumhotel Berghotel Oberhof is a wellness and leisure hotel in Oberhof, Thuringia, Germany, located in the Thuringian Forest. It is operated by Berghotel Oberhof GmbH, with Markus Barth as managing director. |
rsk-immobilien.de tracker page ↗ | zawoofilter this group | · 18d ago | country: German | fileSize: 34483870629 | PUBLISHED | RSK Immobilien GmbH is a German real-estate project developer and property company headquartered in Weißenfels, Saxony-Anhalt. Its core activities are the development, realization, renovation and marketing of residential and commercial properties, with a strong current focus on residential projects. |
montronix.de tracker page ↗ | zawoofilter this group | · 18d ago | country: German | fileSize: 14756317234 | PUBLISHED | MONTRONIX GmbH is a German industrial technology company specializing in machine-tool monitoring, process monitoring, machine protection, and condition monitoring. The company was founded in 1990 as a spin-off of Kennametal, Inc. and focuses primarily on monitoring solutions for metal-cutting and machining operations. |
kdynium.cz tracker page ↗ | zawoofilter this group | · 18d ago | country: Kdyně, Czech Republic | fileSize: 22341828166 | PUBLISHED | KDYNIUM a. s. is a Czech precision foundry based in Kdyně, Plzeň Region, specializing in precision castings made using the lost-wax (investment casting) process. The company says its foundry has been operating since 1954, while the current joint-stock company was incorporated in 1992. |
frm.ind.br tracker page ↗ | zawoofilter this group | · 18d ago | country: Brazil | fileSize: 41747673590 | PUBLISHED | FRM - Fábrica de Rolamentos e Mancais Ltda is a Brazilian industrial manufacturer specializing in bearings, bearing housings, and industrial movement solutions. The company is based in Curitiba, Paraná, Brazil and has been operating since 1980. |
acqbuilt.com tracker page ↗ | zawoofilter this group | · 18d ago | country: Canada | fileSize: 34895272422 | PUBLISHED | company based in Edmonton, Alberta, Canada. It specializes in using factory-based construction methods to build residential homes faster, with more precision, and with reduced waste compared with traditional on-site building. |
BOTEC-CZ tracker page ↗ | zawoofilter this group | · 18d ago | country: German | fileSize: 29524637347 | PUBLISHED | boTec helps companies in process and production industries improve efficiency, manage data, and optimize business operations using software solutions, consulting, and integration services. |
n-tree.com tracker page ↗ | zawoofilter this group | · 18d ago | country: Austria | fileSize: 70788003456 | PUBLISHED | They develop software and hardware solutions mainly for visitor management and ticketing systems used by: swimming pools and wellness centers, museums and exhibitions, leisure parks, climbing gyms and fitness facilities, mountain railways and ski lifts, industrial visitor systems. Their main locations include: Bregenz, Austria (head office), Delitzsch, Germany, Heimberg, Switzerland, Riazzino, Switzerland/Italian region. |
Company ID : adscynfdkjuih tracker page ↗ | zawoofilter this group | · 18d ago | country: Germany | fileSize: 18677604120 | UNPUBLISHED |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.