Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
208
Leak-site victims · 30d
1K
Active groups · 30d
8011 new
Most active · 7d
qilin
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲8 | 152 | 400 | 400 | active | no public figure | |
| 2 | qilin | 30 | ▲18 | 114 | 364 | 364 | active | no public figure | |
| 3 | storm | 9 | ▼31 | 49 | 61 | 61 | active | no public figure | |
| 4 | krybit | 15 | ▲15 | 44 | 95 | 95 | active | no public figure | |
| 5 | akira | 10 | ▲3 | 43 | 87 | 87 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼7 | 37 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 35 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 10 | ▲6 | 34 | 113 | 113 | active | no public figure | |
| 9 | lockbit5 | 5 | = | 28 | 54 | 54 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 10 | ▲1 | 24 | 26 | 26 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 3 | ▼4 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | = | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | play | 3 | ▼1 | 13 | 47 | 47 | active | no public figure | |
| 22 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 23 | rhysida | 2 | ▼2 | 13 | 15 | 15 | active | no public figure | |
| 24 | everest | 0 | ▼3 | 12 | 34 | 34 | active | no public figure | |
| 25 | pear | 0 | ▼1 | 12 | 23 | 23 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Leak-site victims2,818 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
Evosys Laser GmbH tracker page ↗ | aurorafilter this group | · Jul 30, 2026 | Evosys Laser GmbH — an Erlangen-based industrial laser welding systems manufacturer with ~130 employees, subsidiaries in the US, China, and a string of Tier 1 automotive customers. The dataset is the complete corporate repository, spanning every business function: 130 employees' complete HR files — employment contracts, salary histories, bank IBANs, tax IDs, social insurance numbers, pension records, medical examinations, disciplinary warnings, and two confirmed minors' health records. Complete server infrastructure map via mRemoteNG XML — 7 servers named, domain admin credentials, internal IPs. The Citrix admin password is Password1. 326 GB of customer project data — laser welding process parameters, CAD files, robot control software, and the award-winning AQW process know-how. Complete financial history — Jahresabschlüsse (2015–2025), P&L forecasts through 2028, cash positions, investor documents, executive compensation. Attorney-client privileged communications (230 MB) and whistleblower reports under HinSchG. Industrial control data — robot SRS source code, PLC programs, nginx private keys for laser system web interfaces, VPN configurations for customer site remote access. |
Pyramid Analytics B.V. tracker page ↗ | aurorafilter this group | · Jul 30, 2026 | Pyramid Analytics B.V. — a decision-intelligence platform company headquartered in Amsterdam, acquired by ServiceNow (NYSE: NOW) for hundreds of millions of dollars just four months earlier. We obtained the complete source code of the Pyramid Decision Intelligence Platform along with: 10+ copies of the platform source code with full Git history, revealing every feature, algorithm, security module, and AI integration ever built. 22 GB of SQL Server production database backups likely containing user accounts, credentials, and business data. Customer data from publicly traded companies — Shufersal (TASE: SAE) retail sales data and ABB (NYSE: ABB) OLAP cube backups. |
Yue Ki Industrial tracker page ↗ | morpheusfilter this group | · Jul 30, 2026 | Website: yueki.com.tw Revenue: $21 Million Yue Ki Industrial is a manufacturing company that creates high-quality industrial products for businesses. They work with metal, plastic, and other materials to build custom parts and components. Data: Human Resources (HR) & Personal Identifiable Information (PII) NDA, Client Penalties & Quality Defect Records Intellectual Property (IP) & Engineering CAD Data Supply Chain, Procurement & Manufacturing Secrets IT Infrastructure & Database Backups The volume of retrieved data is 177 GB |
Angel Hotel tracker page ↗ | the gentlemenfilter this group | · Jul 29, 2026 | angelpershore.co.uk zoominfo.com/c/angel-hotel/1153643926 The Angel, Pershore is a historic Tudor-origin hotel and restaurant located in the heart of the market town of Pershore, Worcestershire, near the River Avon. It serves as a premier venue offering farm-to-table dining with locally sourced produce, comfortable accommodation, and a charming atmosphere. Beyond hospitality, the establishment is a vibrant community hub, regularly hosting live music, festivals, and popular annual events like Bonfire Night fireworks. |
The Garfield County Sheriff Office tracker page ↗ | the gentlemenfilter this group | · Jul 29, 2026 | garcosheriff.com The Garfield County Sheriff's Office is the primary law enforcement agency serving Garfield County, Colorado. Its mission is to deliver exceptional service and problem-solving solutions to the community through professional, ethical, and compassionate conduct. The office provides comprehensive public safety services, including patrol, detentions, criminal investigations, and community outreach programs like "Shop with a Cop" and emergency mass notifications |
ETA Technology Pvt tracker page ↗ | the gentlemenfilter this group | · Jul 29, 2026 | etatechnology.in zoominfo.com/c/eta-technology-pvt-ltd/432054929 ETA Technology is a Bangalore-based manufacturing company founded in 1991, specializing in the design and production of advanced welding and forging equipment. They build rotary friction welders, friction stir welding systems, electrical upsetters, and custom test rigs for critical industries like automotive, aerospace, and e-mobility. With over 1,300 machines delivered to more than 20 countries, the company is known for its engineering precision, minimal rejection rates, and reliable global support |
Kontact Consortium India Pvt tracker page ↗ | the gentlemenfilter this group | · Jul 29, 2026 | kontact.in zoominfo.com/c/kontact-consortium-india-pvt-ltd/437934184 Kontact is an Indian engineering company with over 50 years of experience, specializing in electrical and mechanical solutions for the railway, infrastructure, and industrial sectors. They provide end-to-end services, including railway rolling stock supplies, LV/MV power distribution panels, and electrical contracting, backed by a 40,000+ sq. ft. manufacturing facility. The company is recognized for its reliability and quality, holding key international certifications such as ISO 9001, IRIS, and EN 15085-2 |
Upanal CNC Solutions tracker page ↗ | the gentlemenfilter this group | · Jul 29, 2026 | upanalcnc.com zoominfo.com/c/upanal-cnc-solutions/370526030 Upanal CNC Solutions is an Indian company specializing in advanced metal cutting and metal forming technologies, particularly CNC machinery. Beyond supplying equipment, they provide comprehensive services including machine modernization, 24/7 technical support, and structured training programs for operators and engineers. Headquartered in Bangalore with a technical center in Chennai and an international office in Bahrain, the company serves a trusted network of over 500 clients across various manufacturing industries |
Indus Protech Solutions tracker page ↗ | the gentlemenfilter this group | · Jul 29, 2026 | indusprotech.com zoominfo.com/c/indus-protech-solutions-ltd/1323287130 Indus Protech Solutions is a Chennai-based company specializing in comprehensive bulk MRO (Maintenance, Repair, and Operations) and supply chain services for global trade. Acting as a one-stop sourcing partner, they provide access to over 1.5 million products across 50+ categories, serving diverse sectors like defense, energy, agriculture, and pharmaceuticals. The company connects businesses with global manufacturers, ensuring assured quality, competitive pricing, and streamlined procurement for Fortune 500 companies and large corporate networks |
Promatrix tracker page ↗ | the gentlemenfilter this group | · Jul 29, 2026 | promatrixcorp.com zoominfo.com/c/promatrix-corp/347777611 Promatrix Corp is a rapidly growing IT consulting and outsourcing company based in New Jersey, USA. They deliver comprehensive global technology solutions, including web application development, managed IT services, and staff augmentation. The company also specializes in enterprise resource planning (SAP) support and HR outsourcing to help businesses optimize their operations and scale efficiently |
Malaysian Nuclear Agency tracker page ↗ | the gentlemenfilter this group | · Jul 29, 2026 | nuclearmalaysia.gov.my zoominfo.com/c/malaysian-nuclear-agency/459120141 The Malaysian Nuclear Agency (Nuklear Malaysia) is the leading government research and development organization in nuclear science and technology. It focuses on the peaceful application of nuclear innovations to support national development, including medical radiopharmaceuticals, food security, and industrial safety. Additionally, the agency plays a key role in radiation safety, human resource development, and the responsible management of radioactive waste in the country |
Delkart Industries Pvt tracker page ↗ | the gentlemenfilter this group | · Jul 29, 2026 | delkartindustries.com zoominfo.com/c/delkart-industries-pvt-ltd/471455561 Delkart Industries is an Indian manufacturing company established in 2017, specializing in custom felts, automobile carpets, and noise and thermal insulation parts. The company serves the automotive, home appliance, robotics, and industrial sectors with high-quality, customized solutions. With multiple manufacturing plants across India and IATF 16949 / ISO 9001 certifications, it ensures reliability, innovation, and trusted partnerships with leading global brands |
NYC Health + Hospitals: Over 12 Million Patients. Lie to the Senate. Hospital and Mayor's tracker page ↗ | leaknetfilter this group | · Jul 29, 2026 | #NYCHealthHospitals #HealthcareBreach #DataLeak #HIPAA #SenateHELP #Cassidy #Mamdani #CyberSecurity #DataBreach #PatientPrivacy #HIV #MedicalRecords #12MillionNot1Point8 #HealthcareSecurity #2026Breach #NYC #PublicHealth #SenateInvestigation #FalseStatemen |
harwal.net tracker page ↗ | inc ransomfilter this group | · Jul 29, 2026 | No details on the leak post beyond the victim name. |
Sky Solutions tracker page ↗ | insomniafilter this group | · Jul 29, 2026 | Sky Solutions is a leading distribution company for Telecommunication products and services in Panamá. Currently serving 4 regions in Panama covering +4,000 points of sales; retail chains and supermarkets. |
Northwood Country Club tracker page ↗ | akirafilter this group | · Jul 29, 2026 | Northwood Country Club is a private club located in Meridian, Mississippi, known for its beautiful facilities and convenient city location. The club offers a range of amenities including championship golf, clubhouse dining, swimming pool, tennis, and fitness services.We will upload corporate data soon. Employee information (name, home addresses, contacts (emergency ones) and so on), financials, contracts and agreements, etc. |
StellarRAD Systems tracker page ↗ | space bearsfilter this group | · Jul 29, 2026 | Since 1981, StellarRAD Systems exists to solve the critical issues facing our clients, both large and small. We provide a broad range of services and solutions to help telecommunications providers around the world facilitate change and achieve their vision while optimizing performance and productivity. Our unique, customer focused approach ensures a level of service that you will quickly come to appreciate.Our family of GIS products and conversion services provides an industry leading toolset for engineers managing fiber and copper networks, including the ability to import GPS data, manipulate coordinate systems, identify network components with physical and logical connectivity and much more. Do you need all of this information plus the associated subscriber data available to every employee in your organization via desktop, notebook, tablet and smartphone? Done. -SQL Data-DWG plan-Personal information of employees and clients-Financial documents-APP files https://www.stellarrad.com/ |
Tong Kong E & E Sdn Bhd (95907X) tracker page ↗ | black xfilter this group | · Jul 29, 2026 | It contains sensitive data, including customers and banking records. |
Bretford Manufacturing tracker page ↗ | aurorafilter this group | · Jul 29, 2026 | Bretford Manufacturing, Inc. is a privately held manufacturer of charging solutions for mobile devices, founded in 1948 and headquartered in Franklin Park, Illinois. With ~60 employees and ~$10M annual revenue, it serves education, healthcare, retail, and government sectors. The exposed material includes: Social Security Numbers for the entire workforce (current + 200–400 historical employees + dependents) via ACA Census files, 1099 forms, and payroll records spanning 2010–2026. Corporate and vendor bank accounts — Bretford's own checking account (routing + account number) plus 26+ vendor bank accounts from NACHA ACH batch files. Complete network architecture — VPN gateway IP, internal topology diagram, IP allocation tables, infrastructure inventory, disaster recovery plan, and Active Directory domain name. 20 years of HR records including medical leave, disability accommodations, drug tests, garnishments, pension, 401(k), insurance enrollment, and termination records. Complete product engineering library — SolidWorks CAD files for all products, CNC/laser programs, and manufacturing process documentation. |
AHENK lab tracker page ↗ | deadlockfilter this group | · Jul 29, 2026 | Ahenk Laboratuvarı is an ISO 15189-accredited medical laboratory in Turkey, founded in 1998 and located in Istanbul-Şişli. The company offers services in clinical biochemistry, microbiology, pathology, and genetics, and collaborates with Limbach Laboratories in Germany. |
Hoc tracker page ↗ | qilinfilter this group | · Jul 29, 2026 | Freight & Logistics Services |
Accesso NEW tracker page ↗ | coinbase cartelfilter this group | · Jul 28, 2026 | Financial Software - $152.3 Million |
thecranewaregroup.com tracker page ↗ | chaosfilter this group | · Jul 28, 2026 | Craneware’s Public Deception: The Reality Behind the 'Non-Sensitive' Data Breach Recent public statements and regulatory filings by UK health-tech firm Craneware claim that the massive cyber-attack they suffered only exposed "non-sensitive or already public regulatory data." They would have the s… |
Buck Knives tracker page ↗ | the gentlemenfilter this group | · Jul 28, 2026 | buckknives.com zoominfo.com/c/buck-knives-inc/16223110 Buck Knives is a historic American knife manufacturer founded in 1947 by Hoyt Buck, originating from a family blacksmith business dedicated to superior steel tempering. The brand revolutionized the knife industry in 1964 with the introduction of the iconic Model 110 Folding Hunter. Now headquartered in Post Falls, Idaho, this four-generation family company is renowned for its rugged durability, traditional American craftsmanship, and a lifetime "Forever Warranty" |
Gran valle negocios tracker page ↗ | qilinfilter this group | · Jul 28, 2026 | Real Estate |
Della Casa Group AG tracker page ↗ | inc ransomfilter this group | · Jul 28, 2026 | No details on the leak post beyond the victim name. |
https://eclmn.com/ tracker page ↗ | inc ransomfilter this group | · Jul 28, 2026 | No details on the leak post beyond the victim name. |
Takis srl tracker page ↗ | deadlockfilter this group | · Jul 28, 2026 | Takis Biotech is an Italian biotechnology company founded in 2009 and headquartered in Rome. The company specializes in contract research (R&D services), preclinical immunology, and the development of genetic vaccines and therapeutic antibodies. |
DIATER tracker page ↗ | deadlockfilter this group | · Jul 28, 2026 | (Laboratorio de Diagnóstico y Aplicaciones Terapéuticas, SA), a Spanish biopharmaceutical company founded in 1999 and headquartered in Madrid.The company specializes in the research, development and manufacture of products for allergy diagnostics and allergen immunotherapy (ASIT). |
Pasello tracker page ↗ | deadlockfilter this group | · Jul 28, 2026 | Pasello Trattamenti Termici Srl , an Italian specialist company for the heat treatment of metal alloys. |
B-K Tool & Design tracker page ↗ | cmd organizationfilter this group | · Jul 28, 2026 | Founded in 1981, B-K Tool & Design has transformed from a small machine shop into a turn-key automation solutions provider, operating from an 80,000 square foot facility in Kalida, Ohio. The company specializes in designing and building cost-effective equipment to replace inefficient processes, offering a range of services including electrical and mechanical engineering, control integration, and custom machine fabrication. Their product lines feature hot plate welding, high-speed projection welding, and other custom machines tailored to client needs. B-K Tool & Design serves a diverse customer base that relies on their expertise for both new and existing designs. |
Franz Krause artworksgroup tracker page ↗ | akirafilter this group | · Jul 28, 2026 | Franz Krause artworksgroup is a streamlined agency that leverages extensive experience in mediaand event management to deliver high-quality services while maintaining budget efficiency. Thecompany emphasizes strong relationships and a commitment to client satisfaction. We will upload 81gb of corporate data soon. Employee information, detailed client information, financials, contracts and agreements, NDAs, confidential files, etc. |
https://affiniahealthcare.org/ tracker page ↗ | termitefilter this group | · Jul 28, 2026 | Affinia Healthcare |
minigrip.com.mx tracker page ↗ | inc ransomfilter this group | · Jul 28, 2026 | No details on the leak post beyond the victim name. |
DUCON tracker page ↗ | inc ransomfilter this group | · Jul 28, 2026 | No details on the leak post beyond the victim name. |
greenecountyga.gov tracker page ↗ | inc ransomfilter this group | · Jul 28, 2026 | No details on the leak post beyond the victim name. |
foundationstofreedom.org tracker page ↗ | inc ransomfilter this group | · Jul 28, 2026 | No details on the leak post beyond the victim name. |
Prelys Courtage tracker page ↗ | anubisfilter this group | · Jul 28, 2026 | Client data breach at a major mortgage brokerage franchise. |
https://www.jdyoung.com/ tracker page ↗ | termitefilter this group | · Jul 28, 2026 | JD Young |
Coca-Cola / Fairlife tracker page ↗ | anubisfilter this group | · Jul 27, 2026 | Major data breach at company owned by Coca Cola. |
haugbuersten.de tracker page ↗ | safepayfilter this group | · Jul 27, 2026 | Although the company in its current industrial form was founded in 1962, its family-owned brush-making tradition dates back to 1836, … |
landesmuseum.de tracker page ↗ | safepayfilter this group | · Jul 27, 2026 | Established in 1919, the museum preserves and presents more than 50,000 years of human cultural history, ranging from prehistoric artifacts … |
hst.eu tracker page ↗ | safepayfilter this group | · Jul 27, 2026 | Headquartered in Kressbronn am Bodensee, Germany, the company traces its mechanical engineering heritage back to 1950, while the original tea … |
braywoodschool.co.uk tracker page ↗ | safepayfilter this group | · Jul 27, 2026 | Founded in 1858, the school has more than 165 years of educational history and serves children from early years through … |
weier.org tracker page ↗ | safepayfilter this group | · Jul 27, 2026 | The company specializes in representing manufacturers of plumbing, heating, water treatment, pumping, drainage, and building services equipment throughout western Germany. … |
bnpdist.com tracker page ↗ | safepayfilter this group | · Jul 27, 2026 | Headquartered in New York City, the company has been operating since 1979 and supplies restaurants, hotels, retailers, and wine merchants … |
vit-best.com tracker page ↗ | chaosfilter this group | · Jul 27, 2026 | DATA BREACH NOTICE: VIT-BEST.COM Status: The first 3% of the total data (100%) has been published Countdown: 48 hours until the remaining 97% is published Situation Overview We have successfully breached VIT-BEST’s infrastructure and extracted a complete set of critical data. At this t… |
zinorm.de tracker page ↗ | safepayfilter this group | · Jul 27, 2026 | Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, the family-owned company has more than seventy years of experience serving customers … |
moebelmayer.de tracker page ↗ | safepayfilter this group | · Jul 27, 2026 | Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, the family-owned company has more than seventy years of experience serving customers … |
paritaet-nrw.org tracker page ↗ | safepayfilter this group | · Jul 27, 2026 | Headquartered in Wuppertal, the organization represents approximately 3,100 legally independent member organizations operating more than 7,000 social institutions and services … |
The Mountain tracker page ↗ | nightspirefilter this group | · Jul 27, 2026 | No details on the leak post beyond the victim name. |
Kates Nussman Ellis Earle & Landolfi LLP tracker page ↗ | nightspirefilter this group | · Jul 27, 2026 | No details on the leak post beyond the victim name. |
Akribis Systems Pte Ltd tracker page ↗ | nightspirefilter this group | · Jul 27, 2026 | No details on the leak post beyond the victim name. |
Thai Seng International Co. Ltd tracker page ↗ | nightspirefilter this group | · Jul 27, 2026 | No details on the leak post beyond the victim name. |
MKS Transformator tracker page ↗ | nightspirefilter this group | · Jul 27, 2026 | No details on the leak post beyond the victim name. |
OPTIDEA GmbH tracker page ↗ | nightspirefilter this group | · Jul 27, 2026 | No details on the leak post beyond the victim name. |
Furama Bukit Bintang tracker page ↗ | nightspirefilter this group | · Jul 27, 2026 | No details on the leak post beyond the victim name. |
K. Venkatesh, Co tracker page ↗ | nightspirefilter this group | · Jul 27, 2026 | No details on the leak post beyond the victim name. |
Wings Argo Private Limited tracker page ↗ | nightspirefilter this group | · Jul 27, 2026 | No details on the leak post beyond the victim name. |
KSL Dirtworks LLC tracker page ↗ | nightspirefilter this group | · Jul 27, 2026 | No details on the leak post beyond the victim name. |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.