Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
189
Leak-site victims · 30d
1K
Active groups · 30d
789 new
Most active · 7d
qilin
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲6 | 152 | 400 | 400 | active | no public figure | |
| 2 | qilin | 30 | ▲16 | 123 | 365 | 365 | active | no public figure | |
| 3 | krybit | 15 | ▲15 | 49 | 95 | 95 | active | no public figure | |
| 4 | storm | 9 | ▼31 | 49 | 61 | 61 | active | no public figure | |
| 5 | akira | 9 | = | 43 | 86 | 86 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼8 | 37 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 37 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 8 | ▲4 | 36 | 112 | 112 | active | no public figure | |
| 9 | lockbit5 | 4 | ▼4 | 27 | 53 | 53 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 9 | = | 23 | 25 | 25 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 3 | ▼7 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | ▼1 | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 22 | everest | 0 | ▼4 | 12 | 34 | 34 | active | no public figure | |
| 23 | pear | 1 | ▲1 | 12 | 23 | 23 | active | no public figure | |
| 24 | rhysida | 1 | ▼3 | 12 | 14 | 14 | active | no public figure | |
| 25 | cyberleek | 0 | = | 12 | 12 | 12 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents2,836 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
Thermo King tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Festina Group tracker page ↗ | panzerfilter this group | · Aug 5, 2026 | Festina Group is a major watch and jewelry company that owns six different brands: Festina, Lotus, Lotus Style, Calypso, Candino, and Jaguar. They blend Swiss watchmaking traditions with modern design, creating timepieces that mix classic craftsmanship with contemporary style. Each brand offers something unique, from sporty watches to elegant jewelry, giving customers plenty of choices for different tastes and occasions. |
Surakarta University tracker page ↗ | panzerfilter this group | · Aug 5, 2026 | Universitas Surakarta (UNSA) is a technology-based university committed to excellence in education, business, and entrepreneurship, responsive to industry and community needs. It offers a range of programs including undergraduate, professional conversion, and postgraduate studies, aimed at developing competent and character-driven graduates. UNSA provides a flexible and collaborative learning environment, supported by experienced faculty and modern infrastructure. The university invites prospective students, partners, and the community to join in building a brighter and more meaningful future together. |
Mile Bluff Medical Center tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Ohio Living Home Health & Hospice tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Laurel Institutes tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Labpharma tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Genesis Engineering Group tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Ruhrpumpen tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
The Metropolitan Entertainment & Convention Authority tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Sutherland Packaging tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Mayco International tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Leviton tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Brainhunter Companies LLC. and Brainhunter Systems Ltd. tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
The Miller Group tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
TSC Logistics tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Reid Electric Service, Inc tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Storer Transportation and Storer Coachways tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Rocky Mount Recyclers tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
The Family Medicine Clinic tracker page ↗ | dark projectfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
PontoBR Sistemas tracker page ↗ | space bearsfilter this group | · Aug 5, 2026 | Founded in 2008 in Brazil, PontoBR Sistemas is an IT firm specializing in advanced call center technologies, including its proprietary Discador Tabulare, as well as public examination management systems. The company provides tailored software solutions and IT infrastructure services, having received recognition from the Brazilian federal innovation agency, FINEP.-SQL Data https://pontobrsistemas.com.br/ |
worldtube tracker page ↗ | gunrafilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
lantisnet.com tracker page ↗ | inc ransomfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Galvin Brothers tracker page ↗ | qilinfilter this group | · Aug 5, 2026 | Civil Engineering Construction |
RUPP Spritzguss tracker page ↗ | qilinfilter this group | · Aug 5, 2026 | Manufacturing |
First Tek tracker page ↗ | playfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
Preferred Financial Group tracker page ↗ | playfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
H****r tracker page ↗ | payoutskingfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
cesmac.edu.br tracker page ↗ | krybitfilter this group | · Aug 5, 2026 | Centro Universitário CESMAC (CESMAC University Center) is the largest private higher education institution in the state... |
Loyalist College tracker page ↗ | inc ransomfilter this group | · Aug 5, 2026 | No details on the leak post beyond the victim name. |
TRULITE GLASS & ALUMINUM SOLUTIONS tracker page ↗ | inc ransomfilter this group | · Aug 5, 2026 | Trulite Glass & Aluminum Solutions is one of the largest independent glass and aluminum fabricators in North America. Headquartered in Alpharetta, Georgia, the company operates 42 manufacturing and distribution facilities across the United States and Canada, employing approximately 1,700 people. Trulite is a portfolio company of Truelink Capital, a Los Angeles–based private equity firm that acquired the company from Sun Capital Partners in 2022. Annual Revenue: $693,500,000 (FY2025 audited) Total Assets: $651,000,000 Total Debt: $355,700,000 |
Keysight tracker page ↗ | everestfilter this group | · Aug 5, 2026 | 2 posts - 1h |
healthcarehighways.com tracker page ↗ | chaosfilter this group | · Aug 5, 2026 | WARNING / DATA LEAK NOTICE Target: Healthcare Highways (healthcarehighways.com) Countdown: 24 Hours If corporate representatives do not establish contact via chat within the next 24 hours, a massive internal data cache comprising 235 GB of sensitive company and client records will be p… |
TopMark Funding tracker page ↗ | the gentlemenfilter this group | · Aug 4, 2026 | topmarkfunding.com zoominfo.com/c/topmark-funding-llc/368696312 TopMark Funding is a nationwide commercial financing company specializing in fast funding solutions for semi-trucks, trailers, and heavy construction equipment. Headquartered in California, they help trucking and construction businesses acquire machinery ranging from $25,000 to $500,000. The company is recognized for providing quick approvals, flexible terms, and risk-free quotes without impacting the client's credit score |
Control Concepts Technology tracker page ↗ | the gentlemenfilter this group | · Aug 4, 2026 | controlconceptstexas.com zoominfo.com/c/control-concepts--technology/356919279 Control Concepts is a Texas-based industrial automation and electronics repair company established in 1984. They specialize in servicing, repairing, and installing AC/DC motor drives, PLCs, and industrial motor controls. Operating as a certified UL508a Panel Shop, the company also provides 24-hour emergency service, system upgrades, and custom automation solutions |
Bjs Insurance & Financial tracker page ↗ | orovafilter this group | · Aug 4, 2026 | BJS Insurance Services, Inc. was established upon two underlying principles that continue to define the company today.... Integrity and Stability. We're all about Service, we just do what we say we're going to do. We listen to our clients and suggest what plans fit your needs and budget. |
Wisdom Oral Surgery tracker page ↗ | orovafilter this group | · Aug 4, 2026 | Wisdom Oral Surgery, located in Fair Lawn, NJ, specializes in a wide range of oral surgery services including dental implants, wisdom teeth extractions, bone grafting, and facial trauma care. The clinic is dedicated to providing exceptional patient comfort and care, utilizing advanced technology for accurate diagnoses and treatments. |
SURE TRAVEL COMPANY tracker page ↗ | orovafilter this group | · Aug 4, 2026 | SURE TRAVEL COMPANY LIMITED was incorporated on 24-JAN-2000 as a Private company limited by shares registered in Hong Kong. |
Cardiology Associates tracker page ↗ | orovafilter this group | · Aug 4, 2026 | Serving the community for over 45 years, Cardiology Associates of Port Huron, P.C. offers the latest in cardiac procedures and technology, helping our qualified physicians to detect and provide comprehensive treatment for a wide variety of adult heart and artery conditions. |
Yost Home Improvements tracker page ↗ | orovafilter this group | · Aug 4, 2026 | Yost Home Improvements is a family-owned exterior remodeling and construction company based in Waterford, Connecticut, serving the southeastern CT region for over 50 years. They specialize in installing vinyl siding, windows, doors, gutters, roofing, and sunrooms. |
KINGSSON tracker page ↗ | orovafilter this group | · Aug 4, 2026 | Manufacturing Company URL Open https://www.kingsson.com.tw/ in a new tab| Jul 23, 2026 9,851 files| 12.30 GB| Watch Data Open watch data link for KINGSSON in a new tab KINGSSON primarily operates as an OEM/ODM manufacturer, supplying customized security sealing products under customers' own brands. The company markets mainly to distributors and industrial customers rather than retail consumers. |
SSI HOLDING (FAR EAST) LIMITED tracker page ↗ | orovafilter this group | · Aug 4, 2026 | AIMING at streamlining all aspects of business, procuring excellent quality of management and strengthening connexion of our well established affilated companies, S.S.I. Holding (Far East) Limited was found in November of 1995 with association of Simex Sport GmbH, a German base corporation of over 30 years experience in sport related business when inception. |
Sanrio Hong Kong Co., Ltd tracker page ↗ | orovafilter this group | · Aug 4, 2026 | Retail Company URL Open https://www.sanrio.com.hk/ in a new tab| Jul 29, 2026 19,610 files| 42.00 GB| Watch Data Open watch data link for Sanrio Hong Kong Co., Ltd in a new tab Sanrio is the global lifestyle brand best known for Hello Kitty who was created in 1974, and home to many other beloved character brands such as My Melody, Kuromi, Little Twin Stars, Cinnamoroll, Pompompurin, gudetama, Aggretsuko, Chococat, Bad Badtz-Maru and Kerokerokeroppi. |
Tat Fung Textile Co., Ltd. tracker page ↗ | orovafilter this group | · Aug 4, 2026 | Tat Fung Textile Co., Ltd. Manufacturing Company URL Open https://www.tatfung-tex.com/ in a new tab| Aug 1, 2026 110,238 files| 92.20 GB| Watch Data Open watch data link for Tat Fung Textile Co., Ltd. in a new tab Tat Fung & Panther Denim is a premium woven, denim, and print fabric mill established in 1986. The company specializes in producing high-quality denim and print fabrics, focusing on sustainability and innovation. |
Integrated Site Management tracker page ↗ | orovafilter this group | · Aug 4, 2026 | Real Estate Company URL Open https://www.ism-sc.com/ in a new tab| Aug 2, 2026 76,758 files| 15.90 GB| Watch Data Open watch data link for Integrated Site Management in a new tab Integrated Site Management is a full service site consulting company with our foundation reinforced by developing partnerships with clients, vendors & suppliers. Partnerships built from professionalism, honesty, integrity, respect, and open communication. Integrated Site Management listens, researches, identifies, and then provides solutions for our clients needs. |
Conceptual Designs, Inc. tracker page ↗ | orovafilter this group | · Aug 4, 2026 | No details on the leak post beyond the victim name. |
JK Capital Management Limited tracker page ↗ | orovafilter this group | · Aug 4, 2026 | No details on the leak post beyond the victim name. |
Global Friction Products, Inc tracker page ↗ | orovafilter this group | · Aug 4, 2026 | No details on the leak post beyond the victim name. |
WD Masonry & Concrete tracker page ↗ | qilinfilter this group | · Aug 4, 2026 | Construction |
US Installation Group, Inc. tracker page ↗ | aurorafilter this group | · Aug 4, 2026 | Founded by Bruce DeLuca in Boca Raton, Florida, USIG operates through 15+ legal entities under MRS Holdings, performing over 100,000 installations annually across 33 markets in 14 states. |
GILDE Handwerk Macrander GmbH & Co. KG tracker page ↗ | aurorafilter this group | · Aug 4, 2026 | GILDE Handwerk Macrander GmbH & Co. KG is a family-owned German Mittelstand group headquartered in Bocholt, Nordrhein-Westfalen. The GILDE Gruppe operates across wholesale trade in gifts, home accessories, and furniture through brands including GILDE Handwerk, Fink Living, and HAKU Möbel, with 50+ legal entities spanning Germany, Austria, the Netherlands, France, the UK, and Hong Kong. The exposed material includes: 148+ personal ID document scans — Personalausweise (national ID cards), Reispässe (passports), Führerscheine (driver's licences), and Heiratsurkunden (marriage certificates) for employees, directors, and family members. Names range from warehouse staff to the CEO. ELSTER tax certificates for 50+ entities — the digital keys for filing tax returns with the German Finanzamt, plus personal certificates for directors and family members. Enables fraudulent VAT returns and income tax filings. Full employee payroll records (2006–2025) — tax IDs (Steuer-IDs), social security numbers, bank accounts, salary details, sick notes (Krankmeldungen), and disciplinary records for an estimated 200–400 current and 200–500 former employees across all entities. 20 years of consolidated financial records — balance sheets, P&L statements, bank reconciliations, loan documentation, shareholder agreements, and capital contribution records for the entire group from 2004 to 2025. 1,800+ Access databases — inventory valuations, customer lists, supplier terms, product pricing, and order history spanning the entire commercial operation. |
clintonhealthaccess.org tracker page ↗ | inc ransomfilter this group | · Aug 4, 2026 | No details on the leak post beyond the victim name. |
pushidrosal.id tracker page ↗ | inc ransomfilter this group | · Aug 4, 2026 | No details on the leak post beyond the victim name. |
lccgroup.com tracker page ↗ | inc ransomfilter this group | · Aug 4, 2026 | No details on the leak post beyond the victim name. |
https://geleximco.vn/ tracker page ↗ | inc ransomfilter this group | · Aug 4, 2026 | No details on the leak post beyond the victim name. |
azn.co.jp tracker page ↗ | safepayfilter this group | · Aug 4, 2026 | Founded in 1991, the company specializes in comprehensive asset management, inheritance planning, business succession consulting, real estate advisory services, and … |
southshorerecycling.com tracker page ↗ | safepayfilter this group | · Aug 4, 2026 | The company specializes in metal recycling, concrete and asphalt recycling, aggregate production, and construction waste processing for commercial, industrial, and … |
cpu-ag.com tracker page ↗ | safepayfilter this group | · Aug 4, 2026 | Founded in 1981 and headquartered in Friedberg, Bavaria, the company has more than four decades of experience developing specialized software … |
multiaqua.com tracker page ↗ | safepayfilter this group | · Aug 4, 2026 | Founded in 1999, the company specializes in the design, engineering, and production of air-cooled water chillers, heat pump chillers, hydronic … |
pradotuylaw.com tracker page ↗ | safepayfilter this group | · Aug 4, 2026 | The firm focuses on practice areas including personal injury, wrongful death, workplace harassment, business litigation, civil settlements, and environmental litigation. … |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.