Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
205
Leak-site victims · 30d
1K
Active groups · 30d
8011 new
Most active · 7d
the gentlemen
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲8 | 152 | 400 | 400 | active | no public figure | |
| 2 | qilin | 29 | ▲16 | 113 | 364 | 364 | active | no public figure | |
| 3 | storm | 9 | ▼31 | 49 | 61 | 61 | active | no public figure | |
| 4 | krybit | 15 | ▲15 | 44 | 95 | 95 | active | no public figure | |
| 5 | akira | 10 | ▲3 | 43 | 87 | 87 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 2 | ▼9 | 37 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 35 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 10 | ▲6 | 34 | 113 | 113 | active | no public figure | |
| 9 | lockbit5 | 5 | = | 27 | 54 | 54 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 10 | ▲1 | 24 | 26 | 26 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 4 | ▼1 | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 3 | ▼4 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | = | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | play | 3 | ▼1 | 13 | 47 | 47 | active | no public figure | |
| 22 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 23 | rhysida | 2 | ▼2 | 13 | 15 | 15 | active | no public figure | |
| 24 | everest | 0 | ▼3 | 12 | 34 | 34 | active | no public figure | |
| 25 | pear | 0 | ▼1 | 12 | 23 | 23 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Leak-site victims2,817 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
Midal Cables tracker page ↗ | dragonforcefilter this group | · Jul 14, 2026 | Founded in 1977, Midal Cables manufactures alluminum rods and wires, overhead line conductors, aluminum clad steel and extruded products. Midal Cables has offic... |
Omax Autos tracker page ↗ | dragonforcefilter this group | · Jul 14, 2026 | OMAX Autos Limited is a leading manufacturer of sheet metal components, specializing in the production of auto and non-auto components. The company serves vario... |
Ifage tracker page ↗ | dragonforcefilter this group | · Jul 14, 2026 | Ifage is a foundation based in Geneva dedicated to the continuous education and professional development of adults. It offers a wide range of courses in languag... |
asimar.com tracker page ↗ | dragonforcefilter this group | · Jul 14, 2026 | Asimar | Asian Marine Service PCL is a leading shipyard in Thailand with over 35 years of experience in the shipbuilding and repair industry. The company specia... |
Target Energy Solutions tracker page ↗ | cmd organizationfilter this group | · Jul 14, 2026 | TARGET is a rapidly growing digital oilfield services and solutions company, providing advanced web-based visualization, collaboration and workflow tools to the petrotechnical community. The MEERA platform and its associated products set a new benchmark for the industry, giving teams the ability to work effectively together using the same data sources, regardless of their device, location or domain. |
Sedemi tracker page ↗ | qilinfilter this group | · Jul 14, 2026 | Civil Engineering Construction |
momenta.cn tracker page ↗ | dragonforcefilter this group | · Jul 14, 2026 | Momenta is an AI and autonomous-driving company. All source code, financial documents, configuration files, employee database, and more were stolen. Servers and... |
Cooperate consulting CZ s.r.o. tracker page ↗ | titanfilter this group | · Jul 13, 2026 | No details on the leak post beyond the victim name. |
DataOstrov s.r.o. tracker page ↗ | titanfilter this group | · Jul 13, 2026 | No details on the leak post beyond the victim name. |
Ozmit s.r.o. tracker page ↗ | titanfilter this group | · Jul 13, 2026 | No details on the leak post beyond the victim name. |
Busscar de Colombia tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | Manufacturing |
Counts & Dobyns tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | Civil Engineering Construction |
Centro Científico e Cultural de Macau tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | Hospitality |
Jakub A.S. tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | Business Services |
Cemoi tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | Food & Beverage |
Tangram Interiors tracker page ↗ | the gentlemenfilter this group | · Jul 13, 2026 | www.tangraminteriors.com Revenue $245.1 Million Founded in 1963, At Tangram Interiors, we've spent decades transforming spaces to inspire and empower. As industry leaders, our reputation stands on top-notch craftsmanship and innovative design. Tangram Interiors is a prominent commercial interior solutions provider and Steelcase dealer, specializing in integrated workspaces, including furniture, technology, and design. Serving Southern California, the Central Valley, and Texas, the firm offers comprehensive services ranging from space planning to custom, bespoke furniture solutions. Client pesonal data included. 400+gb |
URH Hoteliers tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | Hospitality |
Hillebrand Home Health tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | 0 |
TitanTV, Inc. tracker page ↗ | qilinfilter this group | · Jul 13, 2026 | Business Services |
shuttlemeadowcc.com tracker page ↗ | safepayfilter this group | · Jul 13, 2026 | Founded in 1917, the club is one of the oldest and most prestigious private golf clubs in New England. It … |
Casta Diva Group tracker page ↗ | payoutskingfilter this group | · Jul 13, 2026 | No details on the leak post beyond the victim name. |
Northeast Rescue Systems tracker page ↗ | dragonforcefilter this group | · Jul 13, 2026 | Northeast Rescue Systems is a dedicated provider of specialized rescue, safety, and protective equipment serving emergency services and industrial safety commun... |
Webosphere tracker page ↗ | nightspirefilter this group | · Jul 13, 2026 | No details on the leak post beyond the victim name. |
Nicholson y Cano Abogados tracker page ↗ | dragonforcefilter this group | · Jul 13, 2026 | Nicholson y Cano is a leading full-service law firm in Argentina, established in 1976, with a team of 29 partners and over 150 lawyers. The firm provides except... |
Turbosoft tracker page ↗ | space bearsfilter this group | · Jul 13, 2026 | We specialize in the design and construction of IT and management systems. With us, you manage your business efficiently. Whether for Payroll, Accounting, Human Resources, Finance or Health, many customers trust Turbosoft solutions in Cameroon.-Personal information of employees and clients -Financial documents -Other files https://turbosoft.cm/en/home/ |
Techpol-System tracker page ↗ | space bearsfilter this group | · Jul 13, 2026 | Techpol-System, based in Bieruń, Poland, is an engineering enterprise specializing in industrial power solutions, including traction battery maintenance, along with laser processing and steel structure fabrication. The company provides comprehensive, end-to-end services tailored to industrial clients through precision manufacturing and system integration.-Personal information of employees and clients -Financial documents -Other files https://techpolsystem.pl/ |
Faro Products Inc. tracker page ↗ | pearfilter this group | · Jul 13, 2026 | Leading manufacturer in the promotional products and souvenir |
New Tiles S.L. tracker page ↗ | gunrafilter this group | · Jul 13, 2026 | No details on the leak post beyond the victim name. |
degeremcia.com tracker page ↗ | dragonforcefilter this group | · Jul 13, 2026 | DEGEREMCIA is a food operator that is dedicated to the production, distribution and sale of prepared food. It operates mainly through its own chain of fast-food... |
www.twtci.com Trans World Trading tracker page ↗ | dragonforcefilter this group | · Jul 13, 2026 | Trans World Trading Company, Inc. is a leading business conglomerate in the Philippines, recognized for its trust and reliability since 1946. The company specia... |
Transworld Signs tracker page ↗ | akirafilter this group | · Jul 13, 2026 | Transworld Signs produces and sources a complete range of promotional and POP graphics. The company offers digital and standard menu boards, large scale graphics and any other interior graphics or signage to support the company's customers' needs.We will upload 17gb of corporate data soon. Employee personal information (names, DOB and so on), projects files, financials, client internal information, contracts and agreements and so on. |
Ironmark tracker page ↗ | akirafilter this group | · Jul 13, 2026 | Founded and headquartered in Annapolis Junction, Maryland, Ironmark is a provider of marketing,creative, printing and communications services. They specialize in marketing strategy, creative & web development, digital marketing, printing services, and more.We will upload 190gb of corporate data soon. Employee personal information (passports, DLs and other personal information), projects information, detailed financials, client internal information, contracts and agreements, NDAs and so on. |
NAYAX | FINTECH BREACH tracker page ↗ | syndicatefilter this group | · Jul 13, 2026 | NAYAX is an Israeli fintech company that specializes in payment and financial solutions for the vending and unattended retail sector. Founded in 2005, NAYAX develops cashless payment technologies, mobile payment systems, and cloud-based management software for vending machines, laundry facilities, parking meters, and other unmanned retail environments. The company processes billions of transactions annually and operates globally, serving operators in North America, Europe, Asia, and beyond. NAYAX is known for enabling secure, convenient digital payment options in self-service locations. The company is publicly traded on both the Tel Aviv Stock Exchange (TASE) and the Nasdaq Stock Exchange (NASDAQ: NYAX), with a current market capitalization of $2.69 billion USD. We have been inside their servers for almost an year |
Boston Orthotics, Inc. tracker page ↗ | anubisfilter this group | · Jul 13, 2026 | Patient data breach at yet another negligent clinic. |
Al - Saidi Factory tracker page ↗ | dragonforcefilter this group | · Jul 13, 2026 | Al Saidi Al Saidi Trading and Industry is a prominent group of companies providing tailored chemical and logistics solutions primarily for clients in the Middle... |
STEP Oiltools tracker page ↗ | dragonforcefilter this group | · Jul 13, 2026 | STEP Oiltools is a leading global provider of solids control and drilling waste management services, primarily serving the oil and gas and civil engineering ind... |
Casper Orthopedics tracker page ↗ | anubisfilter this group | · Jul 13, 2026 | Orthopedic clinic patients' data and medical records exposed. |
Surtifamiliar tracker page ↗ | anubisfilter this group | · Jul 13, 2026 | Passports of supermarket chain employees. |
Community Advocates tracker page ↗ | anubisfilter this group | · Jul 13, 2026 | Law firm clients' personal data exposed. |
Els for Autism tracker page ↗ | cmd organizationfilter this group | · Jul 12, 2026 | Els for Autism Foundation, founded by Liezl and Ernie Els, offers programs and resources for adults and children with autism spectrum disorder (ASD). The Els Center of Excellence campus is a world-class site hosting leading-edge programs and services for individuals with autism. Based in Jupiter, Florida, The Els Center of Excellence is on track to be a global leader in the field of autism and a leading example of what can be available to individuals on the spectrum. |
eclective.ie tracker page ↗ | m3rxfilter this group | · Jul 12, 2026 | Ireland, 41a Pleasants Saint Kevins St, D08 KR99 ,Eclective is Ireland's largest hospitality group, renowned for creating dynamic and diverse hospitality and lifestyle brands. They offer a variety of venues suitable for different occasions, including intimate dining, social gatherings, and family-friendly environments. Their commitment to exceptional experiences highlights their understanding of what makes an outing enjoyable while fostering community connections. Eclective also provides tailored event spaces with modern amenities for corporate and private events. Stolen: 857 GB 1,683,762 Files |
foreconinc.com tracker page ↗ | m3rxfilter this group | · Jul 12, 2026 | +1 (716) 664-5602 , FORECON Inc. specializes in custom-crafted forest management, due diligence, appraisal, analytics, and rural brokerage services across New York, Pennsylvania, and West Virginia. Established in 1954, the company focuses on balancing the needs of people and the environment through sustainable forestry practices. Their services include technical, advisory, and valuation support for forestry projects, land management, and conservation solutions. Additionally, FORECON offers a HuntLease program that connects landowners with hunters to promote wildlife management and forest health. Stolen: 860 Gb 437,048 Files |
wrtworld.com tracker page ↗ | m3rxfilter this group | · Jul 12, 2026 | +1 (305) 884-3700 , WRT World Enterprises is a leading provider of purchasing and logistics services tailored for major retailers in Latin America. The company specializes in streamlining supply chain management through services such as shipping, storage, purchasing, and vendor management. With a focus on innovative solutions, WRT helps its clients remain competitive by offering order purchasing technology and comprehensive logistics services. Their extensive network and established relationships with suppliers enable them to negotiate favorable prices, ensuring their clients have access to the best products in the market. Stolen: 377 GB 267,891 Files |
Bosch tracker page ↗ | d1rfilter this group | · Jul 12, 2026 | Again, thanks to database Synopsys provided us with After analyzing technical leaks by other groups and cross-referencing targets from TARGETLIST.txt A company access was found and in the archives, a $10,000 gem: Bosch CAN module implementation Now it is going for free for every engineer and car enthusiast, thanks to Synopsys providing us with neat roadmap to tech sector Sorry, Bosch, you got third-partied! Call the Synopsys CEO and thank them for letting us all know where the valuable data is! |
ARM tracker page ↗ | d1rfilter this group | · Jul 12, 2026 | Thanks to leaked database by Synopsys, a roadmap was provided Many other group leaks were cross-referenced and thoroughly analyzed One of the leaked companies gave our team access to ARM center Severely incapacitated by 2FA email/sms-code required by ARM on every step, we were still able to download an interesting tool: Athena Download Manager That requires an SSL certificate of a company that owns ARM products, and downloading by means of Athena allows to bypass multiple 2FA checks that are required when downloading same files from www.arm.com This is now free for download to any reverse engineer on Earth and beyond, thanks to Synopsys company data negligence: |
Synopsys tracker page ↗ | d1rfilter this group | · Jul 12, 2026 | No details on the leak post beyond the victim name. |
Cooperate service CZ s.r.o. tracker page ↗ | titanfilter this group | · Jul 12, 2026 | No details on the leak post beyond the victim name. |
Century Equities tracker page ↗ | qilinfilter this group | · Jul 11, 2026 | Finance |
Retelit SpA PIVA tracker page ↗ | qilinfilter this group | · Jul 11, 2026 | Business Services |
Carolina Agri-Power tracker page ↗ | qilinfilter this group | · Jul 11, 2026 | Industrial Machinery & Equipment |
Allied Plumbing & Heating tracker page ↗ | qilinfilter this group | · Jul 11, 2026 | Construction |
Access Equipment Hire tracker page ↗ | dragonforcefilter this group | · Jul 11, 2026 | Access Group International is a leading privately owned provider of access, material handling, power generation, and construction equipment. The company is dedi... |
The Schuett Companies tracker page ↗ | dragonforcefilter this group | · Jul 11, 2026 | The Schuett Companies, Inc. is a family-owned business with over 50 years of experience specializing in affordable housing for seniors, individuals with disabil... |
Golden Star Resources tracker page ↗ | cmd organizationfilter this group | · Jul 11, 2026 | Wassa is located in south-western Ghana. Golden Star commenced production from the surface operation at Wassa in 2005 and commercial production was achieved at Wassa Underground on January 1, 2017. In early 2018 Wassa transitioned into an underground-focused operation. Thanks to the scale of the historical open pit mining operation the processing plant has significant excess capacity and is currently only running at 70-80% (based on 2020 actuals) utilization. Development of the large inferred mineral resource which comprises the southern Extension zone, was the subject of a Preliminary Economic Assessment which was included in the March 2021 Technical Report. Given the scale of the resource at Wassa, the Company is exploring the potential to increase the mining rate in order to fill the mill. |
CARIBE / SUBRA tracker page ↗ | majinahanashifilter this group | · Jul 11, 2026 | TARGET: kalimancaribe.com & subra.bg. REVENUE: ~ EMPLOYEES: ~ Package: 19.7 GiB / 21311 files |
Eurodefi tracker page ↗ | qilinfilter this group | · Jul 10, 2026 | Business Services |
SPACElogic tracker page ↗ | qilinfilter this group | · Jul 10, 2026 | Hospitality |
Global Strategic Business Process Solutions tracker page ↗ | qilinfilter this group | · Jul 10, 2026 | Business Services |
CRZ Construcciones tracker page ↗ | qilinfilter this group | · Jul 10, 2026 | Civil Engineering Construction |
Red Planet Hotels tracker page ↗ | qilinfilter this group | · Jul 10, 2026 | Hospitality |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.