Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
178
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 153 | 400 | 400 | active | no public figure | |
| 2 | qilin | 25 | ▲11 | 119 | 360 | 360 | active | no public figure | |
| 3 | krybit | 15 | ▲15 | 49 | 95 | 95 | active | no public figure | |
| 4 | storm | 4 | ▼36 | 44 | 56 | 56 | active | no public figure | |
| 5 | akira | 9 | = | 43 | 86 | 86 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 37 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 8 | ▲4 | 36 | 112 | 112 | active | no public figure | |
| 9 | lockbit5 | 4 | ▼4 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 9 | = | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 3 | ▼7 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | ▼1 | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 22 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 23 | pear | 1 | = | 12 | 23 | 23 | active | no public figure | |
| 24 | rhysida | 1 | ▼3 | 12 | 14 | 14 | active | no public figure | |
| 25 | cyberleek | 0 | = | 12 | 12 | 12 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents2,825 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
PARTECH.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project, Cad-files, Backups Total size: 24Gb Revenue: $475,700,000 |
MAMMUT.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: .png files, files Windchil Total size: 136Gb Revenue: $281,000,000 |
CORNELIUS.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project, PDF, TXT, DOC - files Total size: 3684Gb Revenue: $269,800,000 |
MAMASANDPAPAS.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 1,18Gb Revenue: $131,000,000 |
TRISTAR.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 1579,9Gb Revenue: $1,000,000,000 |
SMAPCENTER.UAH.EDU tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 6,08Gb Revenue: $113,000,000 |
SUUNTO.CN (SUUNTO.COM) tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 1470Gb Revenue: $111,000,000 |
BRILLONCONSUMER.COM (BRILLONCONSUMER.COM) tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 22,4Gb Revenue: $100,000,000 |
JPMGROUP.CO.IN tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 75,4Gb Revenue: $400,000,000 |
CLOVER.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 651Gb Revenue: $400,000,000 |
ATOMBERG.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 980Gb Revenue: $68,000,000 |
HONGHE-TECH.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 1,588Gb Revenue: $470,000,000 |
INTELLIGENTGROWTHSOLUTIONS.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project, PDF, XLSX, XLS, DOCX - files Total size: 261Gb Revenue: $31,000,000 |
INTELLIHOT.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, Backups, Soft installers, Updates, XML - files Total size: 271Gb Revenue: $27,000,000 |
9ALTITUDES.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, Project Backups, SQL Database Backup Total size: 382Gb Revenue: $15,000,000 |
WATERLANDPE.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, Project Backups, SQL Database Backup Total size: 382Gb Revenue: $5,800,000 |
THERMOS.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, Soft installers Total size: 285Gb Revenue: $9,000,000 |
NUOVACMM.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, Soft installers Total size: 279Gb Revenue: $6,600,000 |
IVALUESYS.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, Backups Total size: 109Gb Revenue: $8,100,000 |
SPKAA.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects Total size: 581Gb Revenue: $7,600,000 |
LIFESTRAW.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, Backups, Logs, Soft installers, PDF, TXT, XML - files Total size: 168Gb Revenue: $200,000,000 |
OMNITANKER.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects, SQL Backups, Soft installers, Jpeg, Png, PDF - files Total size: 83Gb Revenue: $10,000,000 |
ARCHERGREY.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects Total size: 1,84Gb Revenue: <$5,000,000 |
G3AEROSPACE.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects Total size: 319Gb Revenue: $1,000,000 |
ITKHOLDING.HU tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Projects Total size: 40,7Gb Revenue: $1,700,000,000 |
MIDLANDIND.COM.AU tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project Total size: 0.5Gb Revenue: $5,000,000 |
FLUIDLOGIC.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project,Cad-files Total size: 26.4Gb Revenue: $5,000,000 |
QCPL.IN tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project Total size: 501Gb Revenue: $5,000,000 |
STNET.IT tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Database, Project Total size: 13.2Gb Revenue: $5,000,000 |
ECCELLENT.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: DBF files, Cad-files, Project, Soft, Backups Total size: 241Gb Revenue: $5,000,000 |
IPMSOLUTIONS.SK tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: PDF files, Cad-files, Soft Total size: 253Gb Revenue: $5,000,000 |
NUVITIA.COM tracker page ↗ | clopfilter this group | · Aug 12, 2026 | Data exfiltrated included the following: Project, Soft Total size: 89.8Gb Revenue: $5,000,000 |
hisstw.com tracker page ↗ | krybitfilter this group | · Aug 12, 2026 | HISS Taroko Door & Window Technologies, Inc. (喜室清展股份有限公司) is a Taiwanese innovative R&D manufacturer... |
labindia.com tracker page ↗ | krybitfilter this group | · Aug 12, 2026 | Labindia Instruments Pvt. Ltd. is an Indian private limited company founded in 1982 by a group of visionary technocrats ... |
lhyk.com.sg tracker page ↗ | krybitfilter this group | · Aug 12, 2026 | LHYK Marine Pte Ltd (Lee Huat Yap Kee) is a Singaporean marine logistics specialist company founded in 1959 and incorpor... |
Wanted tracker page ↗ | qilinfilter this group | · Aug 12, 2026 | Business Services |
Basso Fedele & Figli S.r.l. (Olio Basso) / Villa Raiano tracker page ↗ | space bearsfilter this group | · Aug 12, 2026 | Basso Fedele & Figli S.r.l. is a historic Italian family company founded in 1904 in San Michele di Serino, in the Irpinia region of Campania. For over a century, the Basso family has been dedicated to the production and bottling of high-quality olive oil. Today, the company is a leading name in the Italian olive oil sector, exporting its products under the Basso® brand to more than 90 countries worldwide. Combining tradition with modern technology, Basso offers a wide range of oils, including extra virgin olive oil, seed oils, and specialty blends. The company also produces private-label oils for major retail chains, maintaining a strong commitment to quality, traceability, and authenticity.https://www.villaraiano.com/Villa Raiano is the wine estate of the Basso family, established in 1996 as a natural extension of their agricultural heritage in Irpinia, Campania. The winery focuses on producing premium organic wines from indigenous grape varieties, particularly Fiano di Avellino, Greco di Tufo, and Aglianico. With approximately 27 hectares of certified organic vineyards, Villa Raiano combines traditional winemaking with modern techniques, including gravity-flow processing and minimal batonnage to preserve freshness and minerality. In 2018, the new generation of the Basso family took over management, and in 2024, a state-of-the-art underground cellar was opened for aging. Villa Raiano is now recognized as one of the most dynamic and respected wineries in southern Italy.-Personal information of employees and clients -Financial documents -Other files https://oliobasso.com/ |
**E*** tracker page ↗ | genesisfilter this group | · Aug 12, 2026 | A healthcare organization |
R...er tracker page ↗ | leakeddatafilter this group | · Aug 11, 2026 | To be announced... |
G.M.A. GRANDI MARCHE AUTOMOBILI - S.R.L tracker page ↗ | qilinfilter this group | · Aug 11, 2026 | Business Services |
Crown Group tracker page ↗ | qilinfilter this group | · Aug 11, 2026 | Business Services |
QPC Global tracker page ↗ | dragonforcefilter this group | · Aug 11, 2026 | Quest Personal Care Global Ltd is a global company specializing in affordable beauty and personal care products, with over 30 years of experience and a presence... |
AngMar Companies tracker page ↗ | interlockfilter this group | · Aug 11, 2026 | https://www.angmarcompanies.com/ AngMar is a private organization comprised of numerous corporate holdings, LLCs, and companies, operating a network of home health care facilities. They disregard the safety of their clients and the people they care for. As a result, 710 GB of confidential information about the companies they serve has been exposed. Most importantly, patient data has been leaked, including their medical records, medical histories, personal information such as Social Security numbers, home addresses and phone numbers, and much more. |
B&B Hydraulik tracker page ↗ | payloadfilter this group | · Aug 11, 2026 | B&B Hydraulik is a German company based in Hattingen that specializes in the development and manufacturing of hydraulic systems, power units, and specialized equipment. In cooperation with partner organizations, the enterprise supplies control blocks, valves, and components for both industrial and mobile hydraulics. Its engineering solutions are widely used across construction and agricultural machinery, lifting equipment, and shipbuilding. |
Stücheli Architekten tracker page ↗ | payloadfilter this group | · Aug 11, 2026 | Stücheli Architekten is a renowned Swiss architectural firm founded in Zurich back in 1946. The company specializes in the design and execution of complex architectural projects, including residential buildings, office complexes, and public spaces, combining innovation with tradition and sustainable construction. It provides a full range of architectural services and frequently acts as a general planner for major projects both in Switzerland and internationally. |
Baya Technologies tracker page ↗ | payloadfilter this group | · Aug 11, 2026 | Baya offers end-to-end solutions for complex challenges, specializing in technology and distribution services. The company operates under the brands baya-zicon technologies and baya-zicon EMS, providing a wide range of technological services and electronic manufacturing services (EMS). Their target audience includes companies seeking comprehensive solutions in technology and distribution. |
www.kilpi-koskinen.fi tracker page ↗ | krybitfilter this group | · Aug 11, 2026 | Kilpi-Koskinen Oy is a Finnish family-owned company founded on February 14, 1985, headquartered in Lahti, Finland, speci... |
www.apsanet.com.ar tracker page ↗ | krybitfilter this group | · Aug 11, 2026 | APSA Internacional S.A. is an Argentine company founded in 2001, part of Grupo Pintaluba (with Argentine and Spanish sha... |
oligo.de tracker page ↗ | settrafilter this group | · Aug 11, 2026 | Revenue: 12,500,000 Size: N/A | A group of companies whose luminaires illuminate Deutsche Bank, Burj Dubai, and Scout Motors' assembly lines failed to protect its own data. --- Prologue We hold an archive belonging to the OLIGO Lichttechnik GmbH and RSL Lichttechnik GmbH groups — two German lighting manufacturers based in Sankt Augustin, affiliated with TRILUX Group (Arnsberg). The archive spans more than 144 gigabytes of corporate documentation. Emails, spreadsheets, contracts, tax returns, technical drawings marked as trade secrets, passport data, employees' home addresses, their children's school documents, power of attorney records, credit insurance policies, dealer databases, and incoming quality control reports. The complete operational memory of two companies accumulated over 27 years of business. Inside: a contract with Scout Motors Inc. (USA) for $1,200,000 , signed on March 13, 2026 — two light tunnels for quality inspection on Scout Motors' American assembly line. Incoming inspection reports from April 2024 : one Turkish supplier managed to deliver a shipment in which 99.7% of glass items were rejected — 1,053 units out of 1,056. A database of home addresses for 20 employees — an open document sitting in the archive since 2014, unprotected. An executive employment contract containing a home address, salary, and the division's financial targets. An employee passport — expired back in 2019, still stored to this day. The IP address from which the CEO signed documents in 2025. The personal data of an employee's minor child stored within a corporate system. And above all of this — a January 2022 email chain in which a responsible employee suggested simply ignoring the mandatory energy audit required under EDL-G §8b. This article presents only a portion of the data selected for publication. The full archive is planned for release for download and independent review at a later date. --- Chapter 1. What This Company Actually Is "One company" is an illusion here.… |
flowco-inc.com tracker page ↗ | settrafilter this group | · Aug 11, 2026 | Revenue: 776,900,000 Size: 1200GB | DEEP WELL: Flowco Production Solutions Documents PROLOGUE Payroll records with employee names and positions. Executive bonus payments detailed to the cent. Complete customer database with order numbers, prices, and contacts. Supplier banking information. Tax returns for multiple years. Internal development plans by department. Asset purchase agreements worth millions of dollars. Trademarks and correspondence with law firms. Employee health insurance with detailed payment breakdowns. Medical insurance claims for hundreds of thousands of dollars with patient names and diagnoses. Accounts payable balances for 2025–2026. Details of employee fringe benefits broken down by department. Driver Qualification Files with Social Security numbers, photographs of SSN cards and CDLs, and medical certificates. All of this comprises documents from Flowco Production Solutions, LLC , an American company based in Houston, Texas, operating in the oil and gas equipment sector. The company specializes in artificial lift systems, gas lift equipment manufacturing, and related services for the oil and gas industry. The nature of Flowco's business makes this leak particularly damaging: the customer base includes the largest U.S. operators — Gulfport Energy, Devon Energy, and others. We have in our archive not only the company's internal data but also customer order details specifying field locations, well numbers, equipment specifications, and prices. In this article, you will be able to review only a portion of the data we have chosen to disclose. Everything else you can download and examine independently after the full archive is published. --- Part I. Who is Flowco Production Solutions Flowco Production Solutions, LLC (also known as Flowco ) is an American company registered in Texas. Primary mailing address: PO Box 690166, Houston, TX 77269 . Physical address: 18511 Imperial Valley Drive, Houston, Texas 77073 . Business model: manufacturing and supply… |
firstdigital.com tracker page ↗ | settrafilter this group | · Aug 11, 2026 | Revenue: 44,000,000 Size: N/A | The Digital Cartel: How a Telecom Empire Robs Its Own Customers and Employees A company that sells connectivity, trust, and quality service as its philosophy maintains an archive that tells a very different story — about systematic billing fraud totaling $2+ million annually, family vacations to Paris charged to corporate cards, 89 employees whose salaries and Social Security Numbers sit in unprotected folders, and tax schemes that defraud the US budget of nearly a million dollars every year. This article covers only a portion of the data we have chosen to release. Everything else will be available for download after full publication. Names of private individuals, Social Security numbers, exact salaries, dates of birth, and banking details have been intentionally redacted — the company failed to protect them, and you will be able to see everything after publication. --- Prologue. An Open Server In telecommunications, boundaries are always visible: contracts define prices, SLAs guarantee quality, the FCC sets the rules. The data we obtained had none of that. No encryption. No access controls. No audit trail. Customer invoices, dealer contracts, call detail records, HR files with salary information, insurance forms, corporate credit card statements, balance sheets through January 2026, legal documents — everything sitting in an unprotected archive. What we found: - Systematic price gouging worth millions annually : international calls at $0.48/minute instead of $0.05-0.15; Tollfree at $0.01/min instead of $0.001-0.003; IntraState at $0.011/min instead of $0.0005-0.001 - Phantom customers with contractual MRC of $0 but actual monthly charges of $600-900 - Family vacation to Paris for 4 people on corporate American Express — Wesley McDougal, his wife, and two children - Family trip to Los Angeles for 7 family members on the same card — Wesley, Nathan, Ellie, Anna, Amanda, Claire, Benjamin - ARIA Las Vegas casino on corporate card — twice… |
powdr.com tracker page ↗ | settrafilter this group | · Aug 11, 2026 | Revenue: 400,000,000 Size: 120GB | Point of No Return: What the Ski Empire Is Hiding A company that sells adventure, family memories, and mountain magic maintains an archive that tells a very different story—of undocumented deaths, workers punished for organizing, $8.3 million in financial maneuvers while retained earnings stood at minus $39, and medical records scattered across unprotected folders alongside accounting reports. This article covers only a portion of the data we obtained. The remainder will be available for download after full publication. Social security numbers, medical diagnoses, dates of birth, home addresses, and family details of injured workers and deceased guests have been intentionally redacted—the company failed to protect them. --- Prologue. The Open Archive In skiing, boundaries are always visible: a rope line, a closed trail sign, a fence marking an avalanche zone. The data we received had none of these. No encryption. No access control. No audit. Payroll files, worker's compensation claims, legal case summaries detailing injuries, FMLA medical certifications, NLRB settlement documents, SQL scripts that altered thousands of employee records, and balance sheets showing millions in payouts to owners—all of it was accessible without any authentication. What we found: - Eight deaths between 2013 and 2021, including a woman whose cause of death is completely absent from corporate files, despite a quarter-million-dollar life insurance payout; - Two cases of complete paralysis : one employee paralyzed from the waist down, one Olympic athlete paralyzed from the neck down; - Legal case summaries describing how victims died—"COLLIDED WITH TREE," "FOUND DEAD OFF-TRAIL," "CARDIAC ARREST ON SKY PEAK QUAD LIFT," featuring direct quotes from witness testimony recorded in insurance reserves; - Over 550 workplace injury files spanning more than a decade; - $8.3 million in payouts to owners in February 2017, while the company's retained earnings stood at… |
Service Evaluation Concepts tracker page ↗ | qilinfilter this group | · Aug 11, 2026 | Advertising & Marketing |
- tracker page ↗ | krakenfilter this group | · Aug 11, 2026 | GINGER CONSULTING Coming soon...... |
tommer construction tracker page ↗ | qilinfilter this group | · Aug 11, 2026 | Civil Engineering Construction |
advancedtaxsolutions.com tracker page ↗ | settrafilter this group | · Aug 11, 2026 | Revenue: 7,100,000 Size: N/A | Frank Rim & Associates: Archive of a Tax Consulting Practice PROLOGUE Every tax case. Initial client meetings. Letters containing full details. Financial calculations of IRS liabilities. Paycheck stubs. Social Security numbers. Home addresses and ZIP codes. Bank accounts and balances. Tax returns. All IRS correspondence. Court collection notices. Installment agreement plans with the federal tax authority. Medical insurance coverage. Family members. Dependents. Children. A contact management system (CRM) with the full history of meetings and negotiations. Automated export and backup processes. This article contains only a portion of the data. The full archive will be available to download and review independently once it is published. --- Part I. Frank Rim & Associates CPA PC Frank Rim & Associates CPA PC — a tax consulting practice in Denver, Colorado. Has operated for decades, serving thousands of taxpayers. Basic information: - Registered address: 1609 Gaylord Street, Denver, CO 80206 - Phone: (303) 753-6040 - Fax: (303) 753-6275 - Entity type: Professional Corporation (C-Corp) - Active since: at least 2003 Practice partners: | Name | Role | PTIN | Status | |------|------|------|--------| | Francis A. Rim | Founder/Senior Partner | P00392819 | Founder | | Glenn D. Robbins | Senior Partner | P00392819 | Active in current matters | | Dale K. Erickson | Partner | — | CPA | Frank Rim & Associates areas of practice: - Tax returns (1040, 941, 940, 1099, state returns) - Payroll taxes (FUTA, FICA, federal/state withholding) - IRS representation (Power of Attorney, direct representation) - Tax disputes (dispute resolution, negotiations) - Installment Agreements (payment plans for outstanding tax debt) - IRS Appeals (representation before the Appeals Office) - Medical insurance coverage (1095B/1095C consultations) - Payroll processing - Property tax (advisory services) Service model: Each client receives a full-cycle engagement: 1. First… |
profinrg.nl tracker page ↗ | settrafilter this group | · Aug 11, 2026 | Revenue: 6,200,000 Size: N/A | How Profinergy BV Lost Control of Thousands of Files PROLOGUE: Thousands of files. The complete digital archive of a group of companies building solar power plants across Europe. Consolidated financial statements totaling over €35 million in assets . A Tesla Energy commercial proposal — marked "Proprietary & Confidential | Disclosed under NDA" — with three pricing options for Megapack energy storage systems with a combined value ranging from €5.1 to €6.4 million . Credit documents for a 9.4 MW solar farm financed by BNG Bank. A power purchase agreement with ENGIE Energie Nederland NV . Insurance policies with exact coverage amounts. Confidential supplier technical manuals marked "CONFIDENTIAL/PROPRIETARY" . Court documents from a lawsuit against Profinergy — a summons seeking a penalty of €1,000 per violation . Personal customer data: names, addresses, phone numbers, and banking details for payments. A letter confirming "highly skilled migrant" status — an employee record complete with work authorization. All of it — in a single unprotected archive belonging to Profinergy BV (trade name ProfiNRG ), a Dutch solar energy developer and EPC contractor headquartered in Utrecht. This article presents only a portion of the data we have chosen to disclose. The rest will be available for download and review following publication of the full archive. --- Part I. Who Are Profinergy / ProfiNRG Profinergy BV (trade name ProfiNRG ) is a Dutch renewable energy project developer specializing in the design, construction, and operation of solar power plants. Registered address: Maarssenbroeksedijk 37, 3542 DM Utrecht, Netherlands . Phone: 030-2658512 / 030-341 09 03 . Corporate domain: @profinrg.nl . The group is structured through a network of specialized legal entities: | Company | Role | |---------|------| | Profinergy BV | Parent company and EPC contractor | | Sunvest BV / Sunvest Ontwikkeling BV | Development entities | | Vamat BV | Equipment… |
Leafwell tracker page ↗ | direwolffilter this group | · Aug 11, 2026 | No details on the leak post beyond the victim name. |
FREYWILLE tracker page ↗ | aurorafilter this group | · Aug 11, 2026 | FREYWILLE — the Austrian luxury fire-enamel jewelry house with 70+ boutiques across Europe, the Americas, Middle East, Russia/CIS, and Asia-Pacific. 142+ employee files with salary statements (2024–2026), social security numbers (ELDA), employment contracts across 24 countries, COVID vaccination records, passport copies, visa card statements spanning a decade, and personnel files. FREYWILLE's trade secrets — complete 2025 product costing for all lines (18ct gold, plated, textiles), and the crown jewels: enamel colour recipes from the Siebdruck department. FREYWILLE's fire-enamel technique is what makes the brand unique. The formulations for SPHINX, JOYB2, and Entwurf colour systems are in the dataset. Defence files from 40+ lawsuits across Austria, the US, China, France, Canada, Slovakia, Poland, and Belgium — including a criminal proceedings file (Strafsache Grgic, Mrsic & Co). Documentation of the 2018 webshop malware attack — DSB filings, customer notification drafts, incident reports. |
Cleaver-Brooks tracker page ↗ | anubisfilter this group | · Aug 11, 2026 | Major data breach at a leading industrial manufacturer. |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.