Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
188
Leak-site victims · 30d
1K
Active groups · 30d
778 new
Most active · 7d
qilin
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 152 | 400 | 400 | active | no public figure | |
| 2 | qilin | 30 | ▲16 | 124 | 365 | 365 | active | no public figure | |
| 3 | krybit | 15 | ▲15 | 49 | 95 | 95 | active | no public figure | |
| 4 | storm | 9 | ▼31 | 49 | 61 | 61 | active | no public figure | |
| 5 | akira | 9 | = | 43 | 86 | 86 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 37 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 8 | ▲4 | 36 | 112 | 112 | active | no public figure | |
| 9 | lockbit5 | 4 | ▼4 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 9 | = | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 3 | ▼7 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | ▼1 | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 22 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 23 | pear | 1 | = | 12 | 23 | 23 | active | no public figure | |
| 24 | rhysida | 1 | ▼3 | 12 | 14 | 14 | active | no public figure | |
| 25 | cyberleek | 0 | = | 12 | 12 | 12 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents2,834 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
STADLER Sensorik CNC-Technik tracker page ↗ | qilinfilter this group | · Aug 5, 2026 | Industrial Machinery & Equipment |
tomorrowsoffice.com tracker page ↗ | chaosfilter this group | · Aug 5, 2026 | URGENT DATA LEAK NOTICE: TOMORROW'S OFFICE Target: Tomorrow’s Office (tomorrowsoffice.com) Status: Ongoing Data Publication Countdown Security researchers have successfully exfiltrated 125 GB of critical and confidential data from the internal infrastructure of Tomorrow’s Office (tomorrowsoff… |
Henshaw Law tracker page ↗ | triple xfilter this group | · Aug 5, 2026 | 1 terabytes of people's data https://henshawlawak.com/ Henshaw Law, Despite repeated recommendations, no action was taken. The problem remains unresolved, the system is full of bugs, people's documents are at risk, and they won't take any responsibility. Multiple people could commit suicide, what important information has been leaked about them, and who is responsible for why the recommendations weren't taken seriously. what data will leak ? -Personal family files -Passports and licenses -Court ruling and public complaint forms -Documents scans -Forms and emails scans sample : Full download data link : Download |
Stade Francais tracker page ↗ | qilinfilter this group | · Aug 5, 2026 | Business Services |
nuv******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Project, Soft Total size: 89.8Gb Revenue: $5,000,000 |
ipm******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: PDF files, Cad-files, Soft Total size: 253Gb Revenue: $5,000,000 |
ecc******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: DBF files, Cad-files, Project, Soft, Backups Total size: 241Gb Revenue: $5,000,000 |
st******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project Total size: 13.2Gb Revenue: $5,000,000 |
qc******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project Total size: 501Gb Revenue: $5,000,000 |
flu******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project,Cad-files Total size: 26.4Gb Revenue: $5,000,000 |
mid******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project Total size: 0.5Gb Revenue: $5,000,000 |
itk******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects Total size: 40,7Gb Revenue: $1,700,000,000 |
G3A******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects Total size: 319Gb Revenue: $1,000,000 |
arc******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects Total size: 1,84Gb Revenue: <$5,000,000 |
omn******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects, SQL Backups, Soft installers, Jpeg, Png, PDF - files Total size: 83Gb Revenue: $10,000,000 |
lif******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects, Backups, Logs, Soft installers, PDF, TXT, XML - files Total size: 168Gb Revenue: $200,000,000 |
sp******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects Total size: 581Gb Revenue: $7,600,000 |
iva******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects, Backups Total size: 109Gb Revenue: $8,100,000 |
nuo******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects, Soft installers Total size: 279Gb Revenue: $6,600,000 |
the******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects, Soft installers Total size: 285Gb Revenue: $9,000,000 |
wat******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects, Project Backups, SQL Database Backup Total size: 382Gb Revenue: $5,800,000 |
9al******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects, Project Backups, SQL Database Backup Total size: 382Gb Revenue: $15,000,000 |
int******** tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Projects, Backups, Soft installers, Updates, XML - files Total size: 271Gb Revenue: $27,000,000 |
int******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project, PDF, XLSX, XLS, DOCX - files Total size: 261Gb Revenue: $31,000,000 |
hon******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 1,588Gb Revenue: $470,000,000 |
ato******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 980Gb Revenue: $68,000,000 |
clo******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 651Gb Revenue: $400,000,000 |
jpm******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 75,4Gb Revenue: $400,000,000 |
bri******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 22,4Gb Revenue: $100,000,000 |
suu******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 1470Gb Revenue: $111,000,000 |
sma******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 6,08Gb Revenue: $113,000,000 |
tri******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 1579,9Gb Revenue: $1,000,000,000 |
mam******** tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project - files Total size: 1,18Gb Revenue: $131,000,000 |
cor******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project, PDF, TXT, DOC - files Total size: 3684Gb Revenue: $269,800,000 |
mam******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: .png files, files Windchil Total size: 136Gb Revenue: $281,000,000 |
par******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project, Cad-files, Backups Total size: 24Gb Revenue: $475,700,000 |
sta******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Database, Project Total size: 3030Gb Revenue: $939,200,000 |
lar******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Project, Soft Total size: 56Gb Revenue: $1,700,000,000 |
toa******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: project, backup database, logs Total size: 215Gb Revenue: $6,400,000,000 |
ir****** tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Cad-files, PDF drawings, diagrams, product presentations, specifications, manuals and instructions Total size: 5564Gb Revenue: $7,800,000,000 |
ald******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: TSV files, soft, Projects, Cad-files Total size: 424Gb Revenue: $14,800,000,000 |
phi******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: PDF drawings, diagrams, blueprints Total size: 13.5Gb Revenue: $20,700,000,000 |
fis******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Projects, Cad-files, files Windchil, Soft Total size: 874Gb Revenue: $21,200,000,000 |
g******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Software backups, system files, projects Total size: 391Gb Revenue: $113,000,000,000 |
sh******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Engineering drawings, photos of the facilities, scans of facility testing reports, project plans Total size: 89Gb Revenue: $2,673,000,000,000 |
net******* tracker page ↗ | clopfilter this group | · Aug 5, 2026 | Data exfiltrated included the following: Projects, Cad-files, Backup files Windchil Total size: 230Gb Revenue: $370,900,000 |
eSysTech tracker page ↗ | orovafilter this group | · Aug 5, 2026 | Software Company URL Open https://www.esystech.com.br/ in a new tab| May 24, 2026 19,321 files| 32.20 GB| Watch Data Open watch data link for eSysTech in a new tab The company offers customized software solutions and develops new modules and platforms to enhance IT asset management. Its main product, ADOTI, provides comprehensive tools for tracking and managing IT resources, serving clients across various sectors, including Votorantim Cimentos and Unimed. eSysTech has established partnerships with multiple companies to deliver |
ADG Healthcare tracker page ↗ | orovafilter this group | · Aug 5, 2026 | ADG Healthcare is a company that operates in the Medical Specialists industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in Cairo, Cairo, Egypt. |
Ultra Fame tracker page ↗ | orovafilter this group | · Aug 5, 2026 | As PCB design continues to evolve in complexity and customization, we believe that outstanding circuit layouts are built on a strong engineering foundation and a deep understanding of our clients’ needs. From simple double-layer boards to advanced multi-layer high-speed signal boards, we approach every project with professionalism and deliver reliable, high-quality layouts our clients can count on. |
DBM Reflex tracker page ↗ | orovafilter this group | · Aug 5, 2026 | DBM Technology Co., Ltd. is a leading brand in electroforming mold cores in Asia, established in 1999. With a team of over 70 professionals, the company specializes in mold core design and high-quality electroformed mold production, having produced more than 9,000 sets to date. Their services include feasibility assessments, optical design, mold core structure design, product testing, and light distribution testing, making them a preferred choice in the automotive industry. |
Agricultural Chemical Solutions tracker page ↗ | orovafilter this group | · Aug 5, 2026 | Agricultural Chemical Solutions, Inc. provides high-quality agricultural chemicals and a comprehensive marketplace aimed at enhancing farming operations. They offer a wide range of products including pesticides, herbicides, fungicides, and micro nutrients, with competitive pricing and expert recommendations. |
SBI Manufacturing tracker page ↗ | orovafilter this group | · Aug 5, 2026 | SBI Manufacturing is a family-owned company based in Sioux Falls, SD, specializing in metal fabrication and machine welding. They provide services primarily to the agricultural, industrial, and transportation sectors. |
Northeastern Communications & ElectricalNortheastern Communications & Electrical tracker page ↗ | orovafilter this group | · Aug 5, 2026 | Northeastern Communications & Electrical LLC, based in Middletown, Connecticut, specializes in the installation of voice, data, and video systems for various building types, including small, medium, and large-scale projects. The company prides itself on delivering high-quality and professional services, backed by years of technical expertise. |
Apollo Office System tracker page ↗ | orovafilter this group | · Aug 5, 2026 | Since our establishment in May 1970 as an office equipment sales company, we have provided one-stop services to propose office rationalization and a more comfortable office environment. View image 1 of 2View image 2 of 2 |
Texas Medical Screening tracker page ↗ | orovafilter this group | · Aug 5, 2026 | Texas Medical has helped organizations deliver health screenings without the overhead. Our self-service kiosks are trusted in workplaces, pharmacies, and community spaces across the country. |
EMPYREAN INT’L TECHNO DEVICES tracker page ↗ | orovafilter this group | · Aug 5, 2026 | Taiwan-based telecom and electronics accessories company. They specialize in wearable accessories, such as digital watches and related gear. |
Sc Regional Housing Authority tracker page ↗ | orovafilter this group | · Aug 5, 2026 | Government Company URL Open https://www.scrha.net in a new tab| Jun 29, 2026 20,407 files| 10.90 GB| Watch Data Open watch data link for Sc Regional Housing Authority in a new tab SCRHA3 provides affordable housing solutions across South Carolina, focusing on public housing, homeownership, and rental assistance programs. With over 15 years of experience, they offer subsidized housing assistance to qualified families and help low-income families access the private rental market through the Section 8 program. |
FixIT Tek tracker page ↗ | orovafilter this group | · Aug 5, 2026 | Security Company URL Open https://fixittek.com/ in a new tab| Aug 5, 2026 150.00 GB| Watch Data Open watch data link for FixIT Tek in a new tab Providing the best possible IT services to businesses of all sizes in Central Florida and Surrounding Areas. ##### FixIT Tek's Syncro MSP panel has been hacked and data of many clients has been encrypted and stolen from their network. ##### |
Thermo King tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Festina Group tracker page ↗ | panzerfilter this group | · Aug 5, 2026 | Festina Group is a major watch and jewelry company that owns six different brands: Festina, Lotus, Lotus Style, Calypso, Candino, and Jaguar. They blend Swiss watchmaking traditions with modern design, creating timepieces that mix classic craftsmanship with contemporary style. Each brand offers something unique, from sporty watches to elegant jewelry, giving customers plenty of choices for different tastes and occasions. |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.