Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
183
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
the gentlemen
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 152 | 400 | 400 | active | no public figure | |
| 2 | qilin | 25 | ▲11 | 119 | 360 | 360 | active | no public figure | |
| 3 | krybit | 15 | ▲15 | 49 | 95 | 95 | active | no public figure | |
| 4 | storm | 9 | ▼31 | 49 | 61 | 61 | active | no public figure | |
| 5 | akira | 9 | = | 43 | 86 | 86 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 37 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 8 | ▲4 | 36 | 112 | 112 | active | no public figure | |
| 9 | lockbit5 | 4 | ▼4 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 9 | = | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 3 | ▼7 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | ▼1 | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 22 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 23 | pear | 1 | = | 12 | 23 | 23 | active | no public figure | |
| 24 | rhysida | 1 | ▼3 | 12 | 14 | 14 | active | no public figure | |
| 25 | cyberleek | 0 | = | 12 | 12 | 12 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents2,830 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
coastproduce.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Coast Produce Company began nearly 60 years ago as one man’s hard work selling a small truckload of a single item every day. The Dunn family continues to own and operate the organization as it has grown to a $100MM company with 160 employees working across all aspects of produce procurement, mixing, transportation and retail support. |
zuckers.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Zuckers Gifts Inc is a company that operates in the Flowers, Gifts & Specialty Stores industry. It employs 20to49 people .Jomashop is owned by Zucker’s Gifts.Jomashop is a leading fashion retailer in watches, handbags, and sunglasses. The company also sells jewelry, crystal, fine writing instruments, apparel, and shoes. Jomashop’s incredible platform allows shoppers to quickly and easily find exactly what they want from over 650 world renowned brands and 75,000 unique items. Throughout the past three decades the company has been committed to innovation in both the fashion and technological landscape. Remember, all transactions are digitally encrypted using the latest technologies and personal information is not shared. Jomashop prides itself on its ability to deliver the best prices, most varied selection, and finest customer service. The state-of-the-art New York City fulfillment center is always capable of swiftly delivering products to over 150 countries. |
onsite-eng.ca tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Onsite Engineering Ltd. is a multidisciplinary firm that offers professional engineering, geotechnical, project management, and natural resource services across British Columbia. They specialize in providing full civil consulting services, geotechnical assessments, and municipal infrastructure projects. Their client base includes various organizations, from municipal authorities to private construction companies, seeking high-quality and timely engineering solutions. |
doclv.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Desert Orthopaedic Center,located in Las Vegas, NV, specializes in providing comprehensive orthopedic care, including treatment for various injuries and conditions affecting bones, joints, and muscles.Established in 1970, Desert Orthopaedic Center is committed to excellence and has been recognized as a leading provider in the region. |
www.upbrand.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | UPBrand Collaborative is a full-service branding, advertising, and digital agency that specializes in helping brands define their authentic position throughout the customer journey. They cater to clients in the food and beverage, health and wellness, and arts and entertainment sectors, providing services such as brand strategy, digital marketing, and content creation. The agency positions itself as a collaborative partner, working closely with clients to drive growth and inspire success. With a focus on purpose-driven collaboration, UPBrand aims to deliver results that resonate and elevate brands in a competitive landscape. |
cookieskids.com tracker page ↗ | l groupfilter this group | · Aug 6, 2026 | Cookie’s Kids specializes in a wide range of clothing and accessories for boys and girls, including school uniforms, casual wear, and seasonal attire. |
Signature Services tracker page ↗ | playfilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
GCATS Investments tracker page ↗ | playfilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
Platinum Group tracker page ↗ | playfilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
Park Place Behavioral Health Care tracker page ↗ | insomniafilter this group | · Aug 6, 2026 | PPBHC provides mental health and substance use services in Osceola County, Florida, with 40+ years’ experience. They offer crisis intervention, therapy, recovery-oriented care, telehealth, and partner with GENOA for medication access. |
J&T Bank and Trust tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Banking |
AmSpec tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Business Services |
ALIZE (alize-sud.fr) tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Business Services |
Jakle & Alexander tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Law Firms & Legal Services |
www.jerryleigh.com tracker page ↗ | lynxfilter this group | · Aug 6, 2026 | Jerry Leigh is a family-owned women's, men's, and children's clothing manufactur... |
www.talbotdes.org tracker page ↗ | lynxfilter this group | · Aug 6, 2026 | Talbot County Department of Emergency Services provides essential emergency serv... |
NCA Alarms tracker page ↗ | stormfilter this group | · Aug 6, 2026 | NCA Alarms specializes in home and commercial security systems, offering a range of products including security cameras and alarm systems. The company prioritizes customer service and transparency, providing no long-term contracts and clear pricing for their services. Their intended clients include both residential and commercial customers in Nashville, Tennessee, looking for reliable security solutions. NCA Alarms also offers remote access options and system conversion services to enhance existing security setups. The company headquarters is located in 3304 Charlotte Ave, Nashville, TN 37209, United States. 11-50 Employees |
Nelson Manufacturing tracker page ↗ | stormfilter this group | · Aug 6, 2026 | Nelson Manufacturing Company specializes in the design and production of innovative trailers and crane attachments tailored for various industries, including aerospace. Their product range includes custom-made crane attachments, hydraulic goosenecks, and specialty trailers, ensuring efficient transportation solutions for heavy equipment. The company serves clients in the aerospace sector, providing transport trailers that meet stringent quality requirements for aircraft and spacecraft components. Founded in 1947, Nelson Manufacturing is recognized as a leading manufacturer of multi-axle trailers in the United States. The company headquarters is located in 6448 State Route 224, Ottawa, OH 45875, United States. 51-200 Employees |
Southern Indiana Radiological Associates tracker page ↗ | stormfilter this group | · Aug 6, 2026 | Southern Indiana Radiological Associates provides a comprehensive range of diagnostic imaging services including CT, MRI, PET scans, and various breast imaging procedures. Established in 1964, SIRA focuses on delivering high-quality medical imaging to diagnosis disease or injury while ensuring patient comfort and reassurance. Their target clients include individuals seeking imaging services in Bloomington and Southern Indiana, with a commitment to providing test results to healthcare providers within 48 hours. SIRA is recognized as a Breast Imaging Center of Excellence, emphasizing their dedication to women's health and advanced imaging technology. The company headquarters is located in 500 S Landmark Ave, Bloomington, IN 47403, United States. 51-200 Employees |
Liberty Healthcare Corporation tracker page ↗ | stormfilter this group | · Aug 6, 2026 | Liberty Healthcare Corporation is a prominent health and human services management company that has been addressing complex healthcare challenges for over 30 years. They specialize in health workforce outsourcing, program management, and population health management, focusing on supporting specialized and vulnerable populations. Their innovative, person-centered solutions aim to improve quality and performance in healthcare organizations. With expertise in behavioral health, aging, and intellectual developmental disabilities, Liberty Healthcare is dedicated to transforming challenges into opportunities for success. The company headquarters is located in 401 East City Avenue, Suite 820, Bala Cynwyd, PA 19004, United States. |
EvansPetree tracker page ↗ | stormfilter this group | · Aug 6, 2026 | Evans Petree has maintained a strong and effective dispute resolution/litigation practice for over 100 years. The company's dispute resolution/litigation attorneys are skilled at negotiation, mediation, arbitration and other dispute resolution mechanisms in hopes of resolving your disputes and issues quickly and economically. "Preventive maintenance" and early discussion about resolution can often lead to the success of your objectives. If litigation becomes unavoidable, Evans Petree can handle the most complex cases at all levels of the court systems, from administrative matters to federal and state court trials and appeals. The company's objective is to provide you with aggressive, value-conscious representation and work together to successfully advocate your position. The company headquarters is located in 1715 Aaron Brenner Drive, Suite 800, Memphis, TN 38120, United States. 51-200 Employees |
OVP Health tracker page ↗ | stormfilter this group | · Aug 6, 2026 | OVP Health is a physician-owned company with over 20 years of experience in healthcare, specializing in emergency department and hospitalist staffing and management. The company offers a wide range of services including addiction treatment, behavioral health care, primary care, and telemedicine across West Virginia, Kentucky, Ohio, and Virginia. OVP Health is dedicated to addressing the needs of patients suffering from severe drug and alcohol addiction, providing both inpatient and outpatient care. Their facilities are CARF-accredited, ensuring high-quality treatment and support for individuals and families in crisis |
TECHVENTURES BANK S.A. tracker page ↗ | ransomhousefilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
City of Beacon tracker page ↗ | ransomhousefilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
King International LLC tracker page ↗ | gammaxfilter this group | · Aug 6, 2026 | King International LLC (DL International) is a fresh-fruits-and-vegetables wholesaler/distributor that supplies produce for ongoing needs in retail an... |
Long-Lewis Automotive Group tracker page ↗ | dark projectfilter this group | · Aug 6, 2026 | Following a successful cyberattack on Long Lewis, more than 500 GB of confidential information was stolen. More than 15,000 records containing personal data of the organization’s customers and employees, important financial and banking documents, and other valuable company information were compromised. Currently, Long Lewis lost control of more than 650,000 files. |
MITC AG 🇨🇭 tracker page ↗ | bravoxfilter this group | · Aug 6, 2026 | Industrial Engineering, IT Solutions and Technical Services. |
Akuur Law Firm tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Law Firms & Legal Services |
lya Construtora tracker page ↗ | ransomhousefilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
Pharma Test Apparatebau AG tracker page ↗ | akirafilter this group | · Aug 6, 2026 | Pharma Test is an internationally leading manufacturer and household name for the development and production of high-value test devices and systems. They offer a complete product range from manual, physical testing instruments to fully automated, analytical test systems to analyze theactive chemical composition of a dosage form as well as its release rate.We will upload 46gb corporate data soon. Employee personal information (passports and so on), financials, contracts and agreements, NDA, clients information and so on. |
Basic Grain Products tracker page ↗ | akirafilter this group | · Aug 6, 2026 | TasteMorr is a culinary platform that offers a variety of gourmet food products and cooking services. The company aims to cater to food enthusiasts and home cooks looking for high-quality ingredients and unique recipes.We will upload 104gb corporate data soon. Employee personal information (passports and SSNs, w9forms and so on), detailed financials, contracts and agreements, NDA, clients information and so on. |
Namyang Industrial Co., Ltd. \ NAMYANG NEXMO tracker page ↗ | barracudafilter this group | · Aug 6, 2026 | Selling fresh full database dumps of company Namyang Industrial Co., Ltd. (renamed to Namyang Nexmo). Infrastructure dump, not website! There information about employers, manufacturing, parts, clients, partners and etc. Total lines (csv format): 17 641 181. |
RS Automation Co., Ltd. tracker page ↗ | barracudafilter this group | · Aug 6, 2026 | Full dump of all files from the servers and developers personal files and NAS. Legal documents, letters, drawings, assembly, C, and C++ source codes. Official manufacturer website: rsautomation.co.kr |
Ferrell \ Skyline Implants & Periodontics \ Dr. Scott Ferguson tracker page ↗ | barracudafilter this group | · Aug 6, 2026 | Full personal and servers files dumps from Skyline Implants & Periodontics company. The data files contain: medical documents of patients (including MRI scans of various parts of the body — files with the .dcm extension), personal photos, and the personal data of the doctor, Scott Ferguson, as well as documents from the company Skyline Implants & Periodontics — in particular, information on equipment and pharmaceutical procurement and other related materials. |
Micro-Comm Inc. tracker page ↗ | barracudafilter this group | · Aug 6, 2026 | Micro-Comm, Inc. is an industrial automation company based in Olathe, Kansas, that provides water and wastewater control systems, manufacturing control panels, micro-controllers, and SCADA software. [http://www.micro-comm-inc.com]. Tree of all files: https://www.filemail.com/d/vpqdvykqwssupsw. Files count: 894 963, documents type: maps, schemes, personal employers information, personal citizens information, work photos, emails, partners personal information |
Pro-Tuff | Decals tracker page ↗ | global secret groupfilter this group | · Aug 6, 2026 | Country: Crystal Lake, US | Website: protuffdecals.com | Revenue: $9.6 million | Industry: Business Services General, Business Services | Employees: 10-20 | Properties: 412 GB (589,623 Files, 40,081 Folders) |
Vernon & Waldrep tracker page ↗ | global secret groupfilter this group | · Aug 6, 2026 | Country: Texas, United States | Website: vernonwaldrep.com | Revenue: $5 Million | Industry: Physicians, Mental Health Specialists | Employees: 21–50 | Properties: 274 GB (56,006 Files, 3,421 Folders) |
Pavillon tracker page ↗ | global secret groupfilter this group | · Aug 6, 2026 | Country: Mill Spring, North Carolina, United States | Website: pavillon.org | Revenue: $8.5 Million | Industry: Alcoholism Treatment, Hospitals & Clinics, Healthcare | Employees: 100-200 | Properties: 646 GB (47,950 Files, 7,750 Folders) |
City of McMinnville OR tracker page ↗ | ransomhousefilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
Primary Eye Care tracker page ↗ | dragonforcefilter this group | · Aug 6, 2026 | We offer a full range of options to meet your eyecare needs. From advanced custom LASIK laser vision correction and cataract surgery to glasses, contact lens fi... |
EduSpa tracker page ↗ | dragonforcefilter this group | · Aug 6, 2026 | Parkmungak has been operating since 1972, providing a range of services and products tailored to meet the needs of its clients. The company focuses on deliverin... |
Hope's Windows tracker page ↗ | cry0filter this group | · Aug 6, 2026 | Coming soon.... |
Bloom Financials tracker page ↗ | qilinfilter this group | · Aug 6, 2026 | Accounting Services |
Pioneer Bank tracker page ↗ | stormfilter this group | · Aug 6, 2026 | FinTech | Albany, New York, United States | Pioneer Bank is a leading financial institution in New York's Capital Region, recognized as one of the 'Best Places to Work' by the Albany Business Review. The bank is committed to providing a world-class working environment and continually evolves to meet customer needs by offering new products, services, and leading technologies. Through the Pioneer Bank Charitable Foundation, the bank supports nonprofit organizations that enhance the quality of life for children in the Capital Region. The company headquarters is located in 652 Albany Shaker Road, Albany, NY 12211, United States. 201-500 Employees | Deadline: 2026-08-24T09:42:59.123Z |
PT All Cosmos Biotek tracker page ↗ | gunrafilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
Data Exfiltration Diaries: The Shocking Stories Inside NYC Health + Hospitals tracker page ↗ | leaknetfilter this group | · Aug 6, 2026 | #NYCHealthHospitals #HealthcareBreach #DataLeak #HIPAA #SenateHELP #Cassidy #Mamdani #CyberSecurity #DataBreach #PatientPrivacy #HIV #MedicalRecords #12MillionNot1Point8 #HealthcareSecurity #2026Breach #NYC #PublicHealth #SenateInvestigation #FalseStatemen |
vprj.org tracker page ↗ | inc ransomfilter this group | · Aug 6, 2026 | No details on the leak post beyond the victim name. |
| Inter-Con Security icsecurity.com | breach | · Aug 5, 2026 | 276K accounts · breached 2026-06-18 · Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses · In June 2026, Inter-Con Security was targeted in a ShinyHunters “pay or leak” extortion campaign . The group subsequently published data it alleged was taken from the company, including 276k unique email addresses along with names, physical addresses, job titles and phone numbers. The data encompassed a combination of contacts, internal users and leads. |
One Community FCU tracker page ↗ | dragonforcefilter this group | · Aug 5, 2026 | (UPD: Added additional internal documentation and longer-term customer data. Also included data showing low network security against breaches.) One Community FC... |
clubonecasino.com tracker page ↗ | 3amfilter this group | · Aug 5, 2026 | Club One Casino is the premier poker room in Central California, featuring 51 table games, a 24-hour restaurant, and extensive non-gaming entertainment options such as sporting events and e-Sports. Catering to both seasoned players and newcomers, | PUBLISHED 1% | Views: 18 |
Mera Metal tracker page ↗ | qilinfilter this group | · Aug 5, 2026 | Furniture |
https://www.nitrex.in tracker page ↗ | orionfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
briggsplc.com tracker page ↗ | lockbit5filter this group | · Aug 5, 2026 | Briggs began operations in 1740. As a well-known UK-based company in the engineering equipment indus... |
P. A. Inc. (Performance Alloys) tracker page ↗ | dragonforcefilter this group | · Aug 5, 2026 | P.A. Inc. is a leading distributor of high nickel alloy and specialty stainless steel piping products, based in Houston, Texas. The company offers a comprehensi... |
Mike Graham Heating And Air Conditioning tracker page ↗ | dragonforcefilter this group | · Aug 5, 2026 | Mike Graham Heating, Air Conditioning & Plumbing is a trusted HVAC and plumbing service provider based in Wichita Falls, Texas, serving the local community sinc... |
STADLER Sensorik CNC-Technik tracker page ↗ | qilinfilter this group | · Aug 5, 2026 | Industrial Machinery & Equipment |
tomorrowsoffice.com tracker page ↗ | chaosfilter this group | · Aug 5, 2026 | URGENT DATA LEAK NOTICE: TOMORROW'S OFFICE Target: Tomorrow’s Office (tomorrowsoffice.com) Status: Ongoing Data Publication Countdown Security researchers have successfully exfiltrated 125 GB of critical and confidential data from the internal infrastructure of Tomorrow’s Office (tomorrowsoff… |
Henshaw Law tracker page ↗ | triple xfilter this group | · Aug 5, 2026 | 1 terabytes of people's data https://henshawlawak.com/ Henshaw Law, Despite repeated recommendations, no action was taken. The problem remains unresolved, the system is full of bugs, people's documents are at risk, and they won't take any responsibility. Multiple people could commit suicide, what important information has been leaked about them, and who is responsible for why the recommendations weren't taken seriously. what data will leak ? -Personal family files -Passports and licenses -Court ruling and public complaint forms -Documents scans -Forms and emails scans sample : Full download data link : Download |
Stade Francais tracker page ↗ | qilinfilter this group | · Aug 5, 2026 | Business Services |
nuv******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Project, Soft Total size: 89.8Gb Revenue: $5,000,000 |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.