Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
206
Leak-site victims · 30d
1K
Active groups · 30d
8011 new
Most active · 7d
qilin
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲8 | 152 | 400 | 400 | active | no public figure | |
| 2 | qilin | 30 | ▲18 | 113 | 364 | 364 | active | no public figure | |
| 3 | storm | 9 | ▼31 | 49 | 61 | 61 | active | no public figure | |
| 4 | krybit | 15 | ▲15 | 44 | 95 | 95 | active | no public figure | |
| 5 | akira | 10 | ▲3 | 43 | 87 | 87 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 2 | ▼9 | 37 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 35 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 10 | ▲6 | 34 | 113 | 113 | active | no public figure | |
| 9 | lockbit5 | 5 | = | 28 | 54 | 54 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 10 | ▲1 | 24 | 26 | 26 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 4 | ▼2 | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 3 | ▼4 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | = | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | play | 3 | ▼1 | 13 | 47 | 47 | active | no public figure | |
| 22 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 23 | rhysida | 2 | ▼2 | 13 | 15 | 15 | active | no public figure | |
| 24 | everest | 0 | ▼3 | 12 | 34 | 34 | active | no public figure | |
| 25 | pear | 0 | ▼1 | 12 | 23 | 23 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Leak-site victims2,818 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
West Sixth Law tracker page ↗ | global secret groupfilter this group | · Jul 26, 2026 | Overview Country: Columbus, Indiana, United States | Website: agslawyers.com | Revenue: $5 Million | Industry: Law Firms & Legal Services | Employees: 11-50 Employees | Properties: 328 GB (708,816 Files, 47,925 Folders) Detailed Analysis West Sixth Law is a law firm based in Madison, Indiana, specializing in personal injury, family law, criminal defense, estate planning, workers compensation, and social security disability. The company's employees didn't take their security seriously, and the password for all critical IT infrastructure was “Qwerty123” lol. Data from major high-profile cases—which had been presented in court and for which people had chosen to trust “West Sixth Law”—was compromised, but due to negligence, we were able to steal all of it. |
Farmers Mutual Fire Insurance tracker page ↗ | global secret groupfilter this group | · Jul 26, 2026 | Overview Country: Pennsylvania, United States | Website: farmersofmarble.com | Revenue: $5.2 Million | Industry: Insurance | Employees: 11-50 | Properties: 5.72 GB (18,699 Files, 2,631 Folders) Detailed Analysis Mutual Fire Insurance Company provides a range of insurance products including homeowners, mobile homeowners, farmowners, and commercial insurance tailored to meet the needs of Pennsylvania residents. |
hydraulic-components.net tracker page ↗ | m3rxfilter this group | · Jul 26, 2026 | +44 1142764430 , VHS Hydraulics is a prominent supplier of hydraulic components and power packs, featuring products from renowned brands like Rexroth, Walvoil, and Casappa. With over 25 years of experience, they specialize in engineering bespoke power packs for demanding applications. Based in Sheffield, they offer extensive stock and provide same-day and next-day delivery services across the UK. Their team is equipped to assist clients with both individual components and complete hydraulic system solutions tailored to specific requirements. Stolen: 215 GB 226,961 Files |
createinfor.pt tracker page ↗ | m3rxfilter this group | · Jul 26, 2026 | +351 262187684 , CreateInfor is a company that operates in the Repair Services industry. It employs 10to19 people and has 500Kto1M of revenue. The company is headquartered in Caldas da Rainha, Leiria, Portugal. Stolen: -- |
servicebypremier.com tracker page ↗ | m3rxfilter this group | · Jul 26, 2026 | +1(954) 646-0016 , This local HVAC and Refrigeration company, established in 2007, provides services across South Florida, from Florida City to Port St. Lucie. They specialize in commercial HVAC and refrigeration repairs, including maintenance for A/C and refrigeration equipment. The company prides itself on delivering honest service at reasonable prices, ensuring complete customer satisfaction. Their commitment to integrity and efficiency makes them a trusted choice for businesses in the region. Stolen: -- |
healthlawadvocates.org tracker page ↗ | inc ransomfilter this group | · Jul 26, 2026 | No details on the leak post beyond the victim name. |
Brazer Ingenierie tracker page ↗ | arcus mediafilter this group | · Jul 25, 2026 | No details on the leak post beyond the victim name. |
Power Moendas tracker page ↗ | arcus mediafilter this group | · Jul 25, 2026 | No details on the leak post beyond the victim name. |
Jubilee Jobs tracker page ↗ | qilinfilter this group | · Jul 25, 2026 | Non-Profit & Charitable Organizations |
Plitvička Jezera Nacionalni Park tracker page ↗ | qilinfilter this group | · Jul 25, 2026 | Advertising & Marketing |
The Myers Y Cooper tracker page ↗ | qilinfilter this group | · Jul 25, 2026 | Real Estate |
Thermalex Inc tracker page ↗ | kairosfilter this group | · Jul 25, 2026 | Thermalex specializes in aluminum extrusion solutions, offering high-efficiency and corrosion-resistant products since 1985. Based in Montgomery, Alabama, the company serves various industries including HVAC, automotive, battery cooling, and industrial applications. With advanced manufacturing systems and a commitment to quality, Thermalex is recognized as a global leader in the aluminum extrusion industry. Their expertise includes the fabrication of microchannel tubes and complex extrusions tailored to meet diverse client needs. |
A&A Safety 🇺🇸 tracker page ↗ | bravoxfilter this group | · Jul 25, 2026 | Traffic Control and Road Safety Services. |
msgas.com.br tracker page ↗ | blackwaterfilter this group | · Jul 25, 2026 | customers' personal data, contract information, internal company data: http://ucfhnoihzgx4wz4beyzfxnh46cs37r4zbq627xyctykpatruvmghbyqd.onion/s/7f89713825a4376e/ |
Principle Diagnostics Laboratory tracker page ↗ | qilinfilter this group | · Jul 25, 2026 | Healthcare Services |
Guntert & Zimmerman tracker page ↗ | qilinfilter this group | · Jul 25, 2026 | Industrial Machinery & Equipment |
Yourway Transportation tracker page ↗ | money messagefilter this group | · Jul 25, 2026 | No details on the leak post beyond the victim name. |
GURR Abdichtungstechnik GmbH tracker page ↗ | qilinfilter this group | · Jul 25, 2026 | Construction |
SistNet tracker page ↗ | novafilter this group | · Jul 25, 2026 | Sistnet, a division of Sistemi Tre s.r.l., offers comprehensive solutions in Information and Communication Technology, focusing on transforming products into services. Their offerings include advanced security solutions like EDR-X antivirus, networking, unified communication, and internet services such as cloud backup and email. They aim to protect small and medium-sized enterprises from cyber threats, emphasizing the importance of cybersecurity. With a commitment to high-quality service and innovative partnerships, Sistnet provides tailored support and monitoring for their clients - Nova Provide tree and samples from stolen data and decrypt sample to the company when its get in touch with support department. |
[cdn] Notification tracker page ↗ | shinyhuntersfilter this group | · Jul 25, 2026 | All CDN mirrors are currently experiencing a service disruption. All files are fully backed up and no data has been lost. At this time we do not have an estimated time of resolution.We are working to restore service promptly and will share updates as they become available. |
Advantage Sintered Metals tracker page ↗ | securotropfilter this group | · Jul 25, 2026 | If the company does not contact us before 02/08/2026, the data will be published. |
Center Of Information Technologies In Finance Public Institution tracker page ↗ | novafilter this group | · Jul 25, 2026 | Centrul de Tehnologii Informaționale în Finanțe (CTIF) offers a wide range of services and products aimed at legal entities such as public authorities, budget institutions, and economic agents, as well as individuals interested in financial information technology. Their services primarily focus on the management, development, and operation of automated information systems in public finance, accounting, taxation, customs, and public procurement. CTIF also provides training courses for professionals in the field of public procurement. The center is committed to transparency and communication with its clients - Data officially taken from Minister Private Information Cloud, Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
GOP tracker page ↗ | qilinfilter this group | · Jul 25, 2026 | Business Services |
upland.k12.ca.us tracker page ↗ | safepayfilter this group | · Jul 24, 2026 | The district provides comprehensive education from kindergarten through twelfth grade and operates 14 schools, including elementary, junior high, and high … |
gvsurgicalarts.com tracker page ↗ | safepayfilter this group | · Jul 24, 2026 | Founded in 2004 by Dr. Brian R. Chisdak, the practice has grown into one of Montana's leading surgical centers and … |
ausproof.com.au tracker page ↗ | m3rxfilter this group | · Jul 24, 2026 | +61 749784000 , AusProof is a leader in the design and manufacture of low and high voltage electrical cable couplers specifically for the mining and tunneling industries. Established in 1974, the company is committed to innovation and quality in its product offerings. AusProof serves clients globally, providing reliable solutions for electrical connectivity in challenging environments. Their extensive experience and dedication to research and development ensure that they meet the evolving needs of their customers. Stolen: 460 GB 373,495 Files |
Vinilon tracker page ↗ | deadlockfilter this group | · Jul 24, 2026 | Vinilon Group one of the leading manufacturers and distributors of pipe systems in Indonesia. |
T****r tracker page ↗ | payoutskingfilter this group | · Jul 24, 2026 | No details on the leak post beyond the victim name. |
Bank of Baroda bigest indian bank bankofbaroda.bank.in tracker page ↗ | triple xfilter this group | · Jul 24, 2026 | 1 terabytes of people's data https://bankofbaroda.bank.in/ Imagine I'm going to the bank to open an account. and due to the bank's weak password and mistake, my personal data should be leaked, and fraudsters should use my resources in scam people and verify exchangers shops and fraudulent schemes. How many years should I be held responsible to the police and for complaints? its fair ? Yes, approximately 100 to 300 thousand forms from people who had given their personal information/documents to the bank for opening accounts filled out forms and even photographs with their national ID cards all of it is downloadable for free. what data will leak ? -Personal Banking (Savings accounts, current accounts, etc.) -NetBanking (bob World Internet for corporate and retail users) -Loans (Personal, Home, Car, and Education loans) -NRI & Corporate Banking Services -Customer support and branch/ATM locator services. Sapmle data (check what you will download) : Download few sample pics: pic 1 pic 2 pic 3 pic 4 pic 5 pic 6 pic 7 ) Full download data link : Download |
Brooklyn Defender Services tracker page ↗ | insomniafilter this group | · Jul 24, 2026 | Brooklyn Defender Services is a public defense office providing free, client-centered representation and advocacy in and out of court, protecting people from loss of freedom, family separation, and serious legal harm by unjust, racist systems. |
Metropolitan Construction Systems tracker page ↗ | pearfilter this group | · Jul 24, 2026 | Leading commercial roofing company based in New York City |
Emerge2 Digital tracker page ↗ | akirafilter this group | · Jul 24, 2026 | Emerge2 Digital specializes in providing digital marketing solutions tailored for dealer groups, retailers, distributors, and manufacturers. Since 1980, the company has been dedicated to helping clients enhance their digital presence and connect with more customers through turnkey solutions and managed services.We will upload 30gb of corporate data soon. Employee information (passports and other docs), detailed client information, financials, contracts and agreements and so on. |
Advanced Marketing tracker page ↗ | the gentlemenfilter this group | · Jul 24, 2026 | advmkt.com.mx zoominfo.com/c/advanced-marketing/546978407 Advanced Marketing is one of Mexico's largest book distribution and publishing companies, founded in 1994. It partners with around 70 national and international publishing houses to supply major retail chains like Gandhi and Porrúa. Additionally, it operates "AMS Libros," an online store selling a wide variety of children's, art, culture, and health books. |
Ejército Argentino tracker page ↗ | qilinfilter this group | · Jul 24, 2026 | Government |
Kean University tracker page ↗ | qilinfilter this group | · Jul 24, 2026 | Education |
Highline Community College tracker page ↗ | qilinfilter this group | · Jul 24, 2026 | Education |
Stryker tracker page ↗ | qilinfilter this group | · Jul 24, 2026 | Manufacturing |
ID engineering tracker page ↗ | dragonforcefilter this group | · Jul 24, 2026 | ID Engineering & Automated Systems is a machine builder and integrator with over 50 years of combined experience, established in 2002. The company specializes i... |
metrabyte.cloud tracker page ↗ | eraleign (apt73)filter this group | · Jul 24, 2026 | metrabyte.cloud is the website of Metrabyte Cloud Co., Ltd., a cloud service provider from Thaila... |
autismuslink.ch tracker page ↗ | inc ransomfilter this group | · Jul 24, 2026 | No details on the leak post beyond the victim name. |
Digital Edge tracker page ↗ | novafilter this group | · Jul 24, 2026 | Digital Edge is a Managed Services Provider, skilled and accredited with a proven track record for over 20 years, operating exclusively within prime data center facilities enabling Digital Edges Information Security Management System to deliver Enterprise level IT Services conforming with ISO 27001 Information Technology Security Management System Requirements, certified since May 1, 1996. In addition, the company troubleshoot, consult, prepare the company's clients for NIST CSF 800, ISO 27001, SSAE16/SOC2, PCI DDS compliant frameworks and/or legal regulations such as NYS DFS 500, HIPPA, GDPR, PIPEDA or Californias Data Privacy Act, as well as other frameworks, regulations, or contractual requirements. Cloud Engineering services including design, implementation and support for Dedicated Private and Hybrid Cloud environment, Full spectrum IT Support and Outsourcing, 24/7 NOC and SOC Operation, Security Incident Response Team Operation, Business Continuity and Disaster Recovery. Digital - sensitive reports and clients data in risk, reach us, we left note in encrypted devices - Nova Provide tree and samples from stolen data and decrypt sample to the company when its get in touch with support department. |
Record Go Alquiler tracker page ↗ | playfilter this group | · Jul 23, 2026 | No details on the leak post beyond the victim name. |
Restaurant Depot tracker page ↗ | playfilter this group | · Jul 23, 2026 | No details on the leak post beyond the victim name. |
The DeBruler tracker page ↗ | playfilter this group | · Jul 23, 2026 | No details on the leak post beyond the victim name. |
cabincreekhealth.com tracker page ↗ | inc ransomfilter this group | · Jul 23, 2026 | No details on the leak post beyond the victim name. |
T Simon Jewelers tracker page ↗ | cmd organizationfilter this group | · Jul 23, 2026 | T. Simon Jewelers is Door County's premier jeweler, known for its extensive collection of diamonds and gemstones, offering both traditional and contemporary designs. The store features exclusive designer lines and custom pieces crafted by the owner, catering to clients looking for unique jewelry experiences. Their services include custom jewelry design, repairs, and personalized consultations to b ring clients' visions to life. With a focus on craftsmanship and attention to detail, T. Simon Jewelers aims to provide exceptional quality and service to all jewelry enthusiasts. |
Machinerie P&W tracker page ↗ | qilinfilter this group | · Jul 23, 2026 | Industrial Machinery & Equipment |
ABM Enviro tracker page ↗ | qilinfilter this group | · Jul 23, 2026 | Industrial Machinery & Equipment |
nilepet.com tracker page ↗ | krybitfilter this group | · Jul 23, 2026 | Nile Petroleum Corporation (NILEPET) is the state-owned national oil and gas company of the Republic of South Sudan, est... |
laxai.com tracker page ↗ | krybitfilter this group | · Jul 23, 2026 | LAXAI Life Sciences Pvt. Ltd. is an Indian Contract Research, Development, and Manufacturing Organization (CRDMO) founde... |
chkck.com tracker page ↗ | krybitfilter this group | · Jul 23, 2026 | CH. Karnchang Public Company Limited (บริษัท ช.การช่าง จำกัด (มหาชน)) is... |
cashcowboy tracker page ↗ | killsec3filter this group | · Jul 23, 2026 | No details on the leak post beyond the victim name. |
Bulwark Exterminating tracker page ↗ | killsec3filter this group | · Jul 23, 2026 | No details on the leak post beyond the victim name. |
origins ivf tracker page ↗ | killsec3filter this group | · Jul 23, 2026 | No details on the leak post beyond the victim name. |
Eagle Crest Communities tracker page ↗ | anubisfilter this group | · Jul 23, 2026 | Patient and employee data breach at elderly care service. |
Auto Royal Company tracker page ↗ | nightspirefilter this group | · Jul 23, 2026 | No details on the leak post beyond the victim name. |
Wunschkind Klinik Dr Brunbauer tracker page ↗ | the gentlemenfilter this group | · Jul 23, 2026 | wunschkind.at zoominfo.com/c/wunschkind-klinik-dr-brunbauer/1320140781 We have hundreds of gigabytes of your files, including database projects, client contracts, personal data and documents, medical data, medical histories, treatment records, medical reports, and more—all of which constitute critically important information. If you do not want to face the consequences of a data breach, please contact us; otherwise, everything will be published. fertility clinic in Vienna, Austria, led by Dr. Brunbauer. Located in the city center, the clinic specializes in fertility treatments including IVF, insemination, diagnostics, hormone therapy, egg donation, and cryopreservation. It is a recognized partner clinic of Austria's IVF-Fonds program. |
Indigo Energy tracker page ↗ | money messagefilter this group | · Jul 23, 2026 | No details on the leak post beyond the victim name. |
vpcgroup.com customfoam.com tracker page ↗ | the gentlemenfilter this group | · Jul 23, 2026 | customfoam.com vpcgroup.com zoominfo.com/c/custom-foam-systems-ltd/31526090 Custom Foam Systems (CFS) is a leading Canadian manufacturer of fabricated and molded custom polyurethane foam components, founded in 1973 and based in Kitchener, Ontario. The company specializes in serving the automotive, healthcare, and furniture industries across North America with over 45 years of manufacturing excellence. CFS operates under ISO 9001:2015 and FDA standards, utilizing advanced product development processes and lean manufacturing systems to deliver exceptional quality and on-time performance. As a family-owned business, they have built a strong reputation for innovation, reliability, and their commitment that "every component matters." |
Optiforms tracker page ↗ | the gentlemenfilter this group | · Jul 23, 2026 | optiforms.com zoominfo.com/c/optiforms-inc/67340558 Optiforms, Inc. is a precision manufacturing company based in Temecula, California, specializing in electroforming, CNC machining, and enhanced surface finishes. Founded in 1984, the company produces custom metal components and high-performance optical coatings for demanding applications. They primarily serve the aerospace, defense, medical, semiconductor, and specialty lighting sectors with advanced, vertically integrated manufacturing solutions. |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.