Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
202
Leak-site victims · 30d
1K
Active groups · 30d
8011 new
Most active · 7d
qilin
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 152 | 400 | 400 | active | no public figure | |
| 2 | qilin | 30 | ▲17 | 114 | 365 | 365 | active | no public figure | |
| 3 | storm | 9 | ▼31 | 49 | 61 | 61 | active | no public figure | |
| 4 | krybit | 15 | ▲15 | 45 | 95 | 95 | active | no public figure | |
| 5 | akira | 10 | ▲1 | 44 | 87 | 87 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 37 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 8 | ▲4 | 32 | 112 | 112 | active | no public figure | |
| 9 | lockbit5 | 5 | ▼2 | 28 | 54 | 54 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 9 | = | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 3 | ▼7 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | ▼1 | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 22 | rhysida | 2 | ▼2 | 13 | 15 | 15 | active | no public figure | |
| 23 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 24 | pear | 1 | ▲1 | 12 | 23 | 23 | active | no public figure | |
| 25 | cyberleek | 0 | = | 12 | 12 | 12 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Leak-site victims2,823 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
brdigital.net.br tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | BRDigital’s website has a new responsive layout. Take advantage of our usual practicality and browse with us on the most different devices. |
daycohost.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Daycohost provides IT services and solutions that optimize business processes and facilitate decision-making for companies. |
venezolanadepinturas.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | CA Venezolana De Pinturas is a company that operates in the Watches & Jewelry industry. |
nokotapackers.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | NoKota Packers specializes in the production and distribution of high-quality red potatoes, serving the potato industry for over 40 years. |
immobilia.hu tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Immobilia Zrt. is a Budapest-based real estate development company that provides continuous and highest-quality development services in the city centre of Budapest. |
gslusa.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | GSL Graphic Solutions specializes in premedia and graphic imaging services, offering a range of solutions including photo retouching, image manipulation, video editing, and graphic design. |
www.racheljulien.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Established in 1994 at a time when condo projects were hard to find, Rachel Julien transformed Montreal’s urban scenery, and still continues to do so today. Our team makes every effort to bring together the best industry professionals for each one of our mandates. We work closely with these professionals to create quality housing projects that raise the bar even higher. |
coastproduce.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Coast Produce Company began nearly 60 years ago as one man’s hard work selling a small truckload of a single item every day. The Dunn family continues to own and operate the organization as it has grown to a $100MM company with 160 employees working across all aspects of produce procurement, mixing, transportation and retail support. |
zuckers.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Zuckers Gifts Inc is a company that operates in the Flowers, Gifts & Specialty Stores industry. It employs 20to49 people .Jomashop is owned by Zucker’s Gifts.Jomashop is a leading fashion retailer in watches, handbags, and sunglasses. The company also sells jewelry, crystal, fine writing instruments, apparel, and shoes. Jomashop’s incredible platform allows shoppers to quickly and easily find exactly what they want from over 650 world renowned brands and 75,000 unique items. Throughout the past three decades the company has been committed to innovation in both the fashion and technological landscape. Remember, all transactions are digitally encrypted using the latest technologies and personal information is not shared. Jomashop prides itself on its ability to deliver the best prices, most varied selection, and finest customer service. The state-of-the-art New York City fulfillment center is always capable of swiftly delivering products to over 150 countries. |
onsite-eng.ca tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Onsite Engineering Ltd. is a multidisciplinary firm that offers professional engineering, geotechnical, project management, and natural resource services across British Columbia. They specialize in providing full civil consulting services, geotechnical assessments, and municipal infrastructure projects. Their client base includes various organizations, from municipal authorities to private construction companies, seeking high-quality and timely engineering solutions. |
doclv.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Desert Orthopaedic Center,located in Las Vegas, NV, specializes in providing comprehensive orthopedic care, including treatment for various injuries and conditions affecting bones, joints, and muscles.Established in 1970, Desert Orthopaedic Center is committed to excellence and has been recognized as a leading provider in the region. |
www.upbrand.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | UPBrand Collaborative is a full-service branding, advertising, and digital agency that specializes in helping brands define their authentic position throughout the customer journey. They cater to clients in the food and beverage, health and wellness, and arts and entertainment sectors, providing services such as brand strategy, digital marketing, and content creation. The agency positions itself as a collaborative partner, working closely with clients to drive growth and inspire success. With a focus on purpose-driven collaboration, UPBrand aims to deliver results that resonate and elevate brands in a competitive landscape. |
cookieskids.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Cookie’s Kids specializes in a wide range of clothing and accessories for boys and girls, including school uniforms, casual wear, and seasonal attire. |
Signature Services tracker page ↗ | playfilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
GCATS Investments tracker page ↗ | playfilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
Platinum Group tracker page ↗ | playfilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
Park Place Behavioral Health Care tracker page ↗ | insomniafilter this group | · Aug 6, 2026 | PPBHC provides mental health and substance use services in Osceola County, Florida, with 40+ years’ experience. They offer crisis intervention, therapy, recovery-oriented care, telehealth, and partner with GENOA for medication access. |
J&T Bank and Trust tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Banking |
AmSpec tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Business Services |
ALIZE (alize-sud.fr) tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Business Services |
Jakle & Alexander tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Law Firms & Legal Services |
www.jerryleigh.com tracker page ↗ | lynxfilter this group | · Aug 6, 2026 | Jerry Leigh is a family-owned women's, men's, and children's clothing manufactur... |
www.talbotdes.org tracker page ↗ | lynxfilter this group | · Aug 6, 2026 | Talbot County Department of Emergency Services provides essential emergency serv... |
NCA Alarms tracker page ↗ | stormfilter this group | · Aug 6, 2026 | NCA Alarms specializes in home and commercial security systems, offering a range of products including security cameras and alarm systems. The company prioritizes customer service and transparency, providing no long-term contracts and clear pricing for their services. Their intended clients include both residential and commercial customers in Nashville, Tennessee, looking for reliable security solutions. NCA Alarms also offers remote access options and system conversion services to enhance existing security setups. The company headquarters is located in 3304 Charlotte Ave, Nashville, TN 37209, United States. 11-50 Employees |
Nelson Manufacturing tracker page ↗ | stormfilter this group | · Aug 6, 2026 | Nelson Manufacturing Company specializes in the design and production of innovative trailers and crane attachments tailored for various industries, including aerospace. Their product range includes custom-made crane attachments, hydraulic goosenecks, and specialty trailers, ensuring efficient transportation solutions for heavy equipment. The company serves clients in the aerospace sector, providing transport trailers that meet stringent quality requirements for aircraft and spacecraft components. Founded in 1947, Nelson Manufacturing is recognized as a leading manufacturer of multi-axle trailers in the United States. The company headquarters is located in 6448 State Route 224, Ottawa, OH 45875, United States. 51-200 Employees |
Southern Indiana Radiological Associates tracker page ↗ | stormfilter this group | · Aug 6, 2026 | Southern Indiana Radiological Associates provides a comprehensive range of diagnostic imaging services including CT, MRI, PET scans, and various breast imaging procedures. Established in 1964, SIRA focuses on delivering high-quality medical imaging to diagnosis disease or injury while ensuring patient comfort and reassurance. Their target clients include individuals seeking imaging services in Bloomington and Southern Indiana, with a commitment to providing test results to healthcare providers within 48 hours. SIRA is recognized as a Breast Imaging Center of Excellence, emphasizing their dedication to women's health and advanced imaging technology. The company headquarters is located in 500 S Landmark Ave, Bloomington, IN 47403, United States. 51-200 Employees |
Liberty Healthcare Corporation tracker page ↗ | stormfilter this group | · Aug 6, 2026 | Liberty Healthcare Corporation is a prominent health and human services management company that has been addressing complex healthcare challenges for over 30 years. They specialize in health workforce outsourcing, program management, and population health management, focusing on supporting specialized and vulnerable populations. Their innovative, person-centered solutions aim to improve quality and performance in healthcare organizations. With expertise in behavioral health, aging, and intellectual developmental disabilities, Liberty Healthcare is dedicated to transforming challenges into opportunities for success. The company headquarters is located in 401 East City Avenue, Suite 820, Bala Cynwyd, PA 19004, United States. |
EvansPetree tracker page ↗ | stormfilter this group | · Aug 6, 2026 | Evans Petree has maintained a strong and effective dispute resolution/litigation practice for over 100 years. The company's dispute resolution/litigation attorneys are skilled at negotiation, mediation, arbitration and other dispute resolution mechanisms in hopes of resolving your disputes and issues quickly and economically. "Preventive maintenance" and early discussion about resolution can often lead to the success of your objectives. If litigation becomes unavoidable, Evans Petree can handle the most complex cases at all levels of the court systems, from administrative matters to federal and state court trials and appeals. The company's objective is to provide you with aggressive, value-conscious representation and work together to successfully advocate your position. The company headquarters is located in 1715 Aaron Brenner Drive, Suite 800, Memphis, TN 38120, United States. 51-200 Employees |
OVP Health tracker page ↗ | stormfilter this group | · Aug 6, 2026 | OVP Health is a physician-owned company with over 20 years of experience in healthcare, specializing in emergency department and hospitalist staffing and management. The company offers a wide range of services including addiction treatment, behavioral health care, primary care, and telemedicine across West Virginia, Kentucky, Ohio, and Virginia. OVP Health is dedicated to addressing the needs of patients suffering from severe drug and alcohol addiction, providing both inpatient and outpatient care. Their facilities are CARF-accredited, ensuring high-quality treatment and support for individuals and families in crisis |
TECHVENTURES BANK S.A. tracker page ↗ | ransomhousefilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
City of Beacon tracker page ↗ | ransomhousefilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
King International LLC tracker page ↗ | gammaxfilter this group | · Aug 6, 2026 | King International LLC (DL International) is a fresh-fruits-and-vegetables wholesaler/distributor that supplies produce for ongoing needs in retail an... |
Long-Lewis Automotive Group tracker page ↗ | dark projectfilter this group | · Aug 6, 2026 | Following a successful cyberattack on Long Lewis, more than 500 GB of confidential information was stolen. More than 15,000 records containing personal data of the organization’s customers and employees, important financial and banking documents, and other valuable company information were compromised. Currently, Long Lewis lost control of more than 650,000 files. |
MITC AG 🇨🇭 tracker page ↗ | bravoxfilter this group | · Aug 6, 2026 | Industrial Engineering, IT Solutions and Technical Services. |
Akuur Law Firm tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Law Firms & Legal Services |
lya Construtora tracker page ↗ | ransomhousefilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
Pharma Test Apparatebau AG tracker page ↗ | akirafilter this group | · Aug 6, 2026 | Pharma Test is an internationally leading manufacturer and household name for the development and production of high-value test devices and systems. They offer a complete product range from manual, physical testing instruments to fully automated, analytical test systems to analyze theactive chemical composition of a dosage form as well as its release rate.We will upload 46gb corporate data soon. Employee personal information (passports and so on), financials, contracts and agreements, NDA, clients information and so on. |
Basic Grain Products tracker page ↗ | akirafilter this group | · Aug 6, 2026 | TasteMorr is a culinary platform that offers a variety of gourmet food products and cooking services. The company aims to cater to food enthusiasts and home cooks looking for high-quality ingredients and unique recipes.We will upload 104gb corporate data soon. Employee personal information (passports and SSNs, w9forms and so on), detailed financials, contracts and agreements, NDA, clients information and so on. |
Namyang Industrial Co., Ltd. \ NAMYANG NEXMO tracker page ↗ | barracudafilter this group | · Aug 6, 2026 | Selling fresh full database dumps of company Namyang Industrial Co., Ltd. (renamed to Namyang Nexmo). Infrastructure dump, not website! There information about employers, manufacturing, parts, clients, partners and etc. Total lines (csv format): 17 641 181. |
RS Automation Co., Ltd. tracker page ↗ | barracudafilter this group | · Aug 6, 2026 | Full dump of all files from the servers and developers personal files and NAS. Legal documents, letters, drawings, assembly, C, and C++ source codes. Official manufacturer website: rsautomation.co.kr |
Ferrell \ Skyline Implants & Periodontics \ Dr. Scott Ferguson tracker page ↗ | barracudafilter this group | · Aug 6, 2026 | Full personal and servers files dumps from Skyline Implants & Periodontics company. The data files contain: medical documents of patients (including MRI scans of various parts of the body — files with the .dcm extension), personal photos, and the personal data of the doctor, Scott Ferguson, as well as documents from the company Skyline Implants & Periodontics — in particular, information on equipment and pharmaceutical procurement and other related materials. |
Micro-Comm Inc. tracker page ↗ | barracudafilter this group | · Aug 6, 2026 | Micro-Comm, Inc. is an industrial automation company based in Olathe, Kansas, that provides water and wastewater control systems, manufacturing control panels, micro-controllers, and SCADA software. [http://www.micro-comm-inc.com]. Tree of all files: https://www.filemail.com/d/vpqdvykqwssupsw. Files count: 894 963, documents type: maps, schemes, personal employers information, personal citizens information, work photos, emails, partners personal information |
Pro-Tuff | Decals tracker page ↗ | global secret groupfilter this group | · Aug 6, 2026 | Country: Crystal Lake, US | Website: protuffdecals.com | Revenue: $9.6 million | Industry: Business Services General, Business Services | Employees: 10-20 | Properties: 412 GB (589,623 Files, 40,081 Folders) |
Vernon & Waldrep tracker page ↗ | global secret groupfilter this group | · Aug 6, 2026 | Country: Texas, United States | Website: vernonwaldrep.com | Revenue: $5 Million | Industry: Physicians, Mental Health Specialists | Employees: 21–50 | Properties: 274 GB (56,006 Files, 3,421 Folders) |
Pavillon tracker page ↗ | global secret groupfilter this group | · Aug 6, 2026 | Country: Mill Spring, North Carolina, United States | Website: pavillon.org | Revenue: $8.5 Million | Industry: Alcoholism Treatment, Hospitals & Clinics, Healthcare | Employees: 100-200 | Properties: 646 GB (47,950 Files, 7,750 Folders) |
City of McMinnville OR tracker page ↗ | ransomhousefilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
Primary Eye Care tracker page ↗ | dragonforcefilter this group | · Aug 6, 2026 | We offer a full range of options to meet your eyecare needs. From advanced custom LASIK laser vision correction and cataract surgery to glasses, contact lens fi... |
EduSpa tracker page ↗ | dragonforcefilter this group | · Aug 6, 2026 | Parkmungak has been operating since 1972, providing a range of services and products tailored to meet the needs of its clients. The company focuses on deliverin... |
Hope's Windows tracker page ↗ | cry0filter this group | · Aug 6, 2026 | Coming soon.... |
Bloom Financials tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Accounting Services |
Pioneer Bank tracker page ↗ | stormfilter this group | · Aug 6, 2026 | FinTech | Albany, New York, United States | Pioneer Bank is a leading financial institution in New York's Capital Region, recognized as one of the 'Best Places to Work' by the Albany Business Review. The bank is committed to providing a world-class working environment and continually evolves to meet customer needs by offering new products, services, and leading technologies. Through the Pioneer Bank Charitable Foundation, the bank supports nonprofit organizations that enhance the quality of life for children in the Capital Region. The company headquarters is located in 652 Albany Shaker Road, Albany, NY 12211, United States. 201-500 Employees | Deadline: 2026-08-24T09:42:59.123Z |
PT All Cosmos Biotek tracker page ↗ | gunrafilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
Data Exfiltration Diaries: The Shocking Stories Inside NYC Health + Hospitals tracker page ↗ | leaknetfilter this group | · Aug 6, 2026 | #NYCHealthHospitals #HealthcareBreach #DataLeak #HIPAA #SenateHELP #Cassidy #Mamdani #CyberSecurity #DataBreach #PatientPrivacy #HIV #MedicalRecords #12MillionNot1Point8 #HealthcareSecurity #2026Breach #NYC #PublicHealth #SenateInvestigation #FalseStatemen |
vprj.org tracker page ↗ | inc ransomfilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
One Community FCU tracker page ↗ | dragonforcefilter this group | · Aug 5, 2026 | (UPD: Added additional internal documentation and longer-term customer data. Also included data showing low network security against breaches.) One Community FC... |
clubonecasino.com tracker page ↗ | 3amfilter this group | · Aug 5, 2026 | Club One Casino is the premier poker room in Central California, featuring 51 table games, a 24-hour restaurant, and extensive non-gaming entertainment options such as sporting events and e-Sports. Catering to both seasoned players and newcomers, | PUBLISHED 1% | Views: 18 |
Mera Metal tracker page ↗ | qilinfilter this group | · Aug 5, 2026 | Furniture |
https://www.nitrex.in tracker page ↗ | orionfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
briggsplc.com tracker page ↗ | lockbit5filter this group | · Aug 5, 2026 | Briggs began operations in 1740. As a well-known UK-based company in the engineering equipment indus... |
P. A. Inc. (Performance Alloys) tracker page ↗ | dragonforcefilter this group | · Aug 5, 2026 | P.A. Inc. is a leading distributor of high nickel alloy and specialty stainless steel piping products, based in Houston, Texas. The company offers a comprehensi... |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.