Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
208
Leak-site victims · 30d
1K
Active groups · 30d
8011 new
Most active · 7d
qilin
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲8 | 152 | 400 | 400 | active | no public figure | |
| 2 | qilin | 30 | ▲18 | 114 | 364 | 364 | active | no public figure | |
| 3 | storm | 9 | ▼31 | 49 | 61 | 61 | active | no public figure | |
| 4 | krybit | 15 | ▲15 | 44 | 95 | 95 | active | no public figure | |
| 5 | akira | 10 | ▲3 | 43 | 87 | 87 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 3 | ▼7 | 37 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 35 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 10 | ▲6 | 34 | 113 | 113 | active | no public figure | |
| 9 | lockbit5 | 5 | = | 28 | 54 | 54 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 10 | ▲1 | 24 | 26 | 26 | active | no public figure | |
| 11 | safepay | 10 | = | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 5 | = | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 3 | ▼4 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | = | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲5 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | play | 3 | ▼1 | 13 | 47 | 47 | active | no public figure | |
| 22 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 23 | rhysida | 2 | ▼2 | 13 | 15 | 15 | active | no public figure | |
| 24 | everest | 0 | ▼3 | 12 | 34 | 34 | active | no public figure | |
| 25 | pear | 0 | ▼1 | 12 | 23 | 23 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents2,843 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
Primeline Logistics tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Freight & Logistics Services |
Recsa tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Business Services |
Salida Union School District tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Education |
RehaVital Gesundheitsservice GmbH tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | 0 |
Evergreen Title tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Insurance |
Cpcg tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Business Services |
EFU Life Assurance tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Insurance |
Infina Health tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Ambulance Services |
Tax MT tracker page ↗ | playfilter this group | · Jul 22, 2026 | No details on the leak post beyond the victim name. |
Kreysler & Associates tracker page ↗ | playfilter this group | · Jul 22, 2026 | No details on the leak post beyond the victim name. |
Koperasi Karyawan PT Aplikanusa Lintasarta tracker page ↗ | novafilter this group | · Jul 22, 2026 | Kopkarla.org is the website of KOPKARLA (Koperasi Karyawan PT Aplikanusa Lintasarta), an Indonesian employee cooperative that provides savings, loans, telecommunications engineering, network installation, and related business services for its members and customers - Nova Provide Tree and samples and proofs only when company get in touch with support department in channels provided in recovery file. |
La Financière d'Orion (finorion) tracker page ↗ | novafilter this group | · Jul 22, 2026 | Since 2009, we have been helping to create a privileged relationship between wealth professionals and their clients. The wealth of our experience allows us to deploy innovative, coherent financial engineering levers that are perfectly tailored to your aspirations and objectives - Nova have 20GB of clients documents data and company finance informations, for example convestion ERES.pdf, secrets is here, Contact us for more details, Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Marpatech tracker page ↗ | novafilter this group | · Jul 22, 2026 | Marpatech specializes in providing instrumentation and control solutions across Latin America, with a focus on the mining and industrial sectors. The company offers a range of products from various manufacturers, including AMETEK, SOR, and JUMO, catering to clients in Peru, Argentina, and Colombia. With offices in major cities, Marpatech is committed to delivering technical and commercial support to its clients. The company actively participates in industry events to showcase its expertise and innovations - Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Canal 9 Litoral tracker page ↗ | novafilter this group | · Jul 22, 2026 | AHORA Entre Ríos is a news platform that provides the latest updates and urgent news from Entre Ríos, Santa Fe, and the Litoral region. The service covers a wide range of topics including society, politics, sports, economy, and health. It aims to keep its audience informed with minute-by-minute news coverage. The intended clients are residents and individuals interested in current events in the specified regions - MXF secret files at risk, Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
ubfreight.com tracker page ↗ | m3rxfilter this group | · Jul 22, 2026 | UB Freight is a leading provider of worldwide freight services, specializing in air and sea freight, customs clearance, and warehousing solutions. They cater to a diverse clientele, including large companies with complex shipping needs and individuals looking to send personal items overseas. With IATA authorization and a network covering over 140 countries, UB Freight ensures competitive pricing and dependable service for all shipments. Their in-house customs clearance team and dedicated staff facilitate efficient handling of various cargo types, including dangerous goods and oversized items. Stolen: -- |
FULL DATA of MagMutual Company: 1.1 TB Of Sensitive Information From Cybersecurity Experts tracker page ↗ | leaknetfilter this group | · Jul 22, 2026 | #Leaknet #Magmutual #SecurityCulture #DigitalPrivacy #PasswordSecurity #CyberDefense #IdentityProtection #Infosecurity #SensitiveData #Fulldata |
dhli.in tracker page ↗ | krybitfilter this group | · Jul 22, 2026 | Delhi Heart & Lung Institute (DHLI) is a tertiary care 100-bedded super specialty hospital established in 2003 in New De... |
Vibonum Technologies Private Limited tracker page ↗ | krybitfilter this group | · Jul 22, 2026 | Vibonum Technologies Private Limited is a recently incorporated Indian private limited company established on March 27, ... |
Koshkaryan Law Group tracker page ↗ | dragonforcefilter this group | · Jul 22, 2026 | Koshkaryan Law Group is a legal firm specializing in personal injury and criminal defense cases. They prioritize client service and provide personalized attenti... |
Axiom Global tracker page ↗ | coinbase cartelfilter this group | · Jul 22, 2026 | Business Services - $19.2 Million |
issvc.com tracker page ↗ | chaosfilter this group | · Jul 22, 2026 | issvc.com Official Notice to Management and Stakeholders The time window has expired. Exactly 24 hours remain until the final deadline. If an agreement is not reached by the end of this period, the complete confidential dataset totaling 262 GB will be published into the public domain. Compromised… |
argonautms.com tracker page ↗ | chaosfilter this group | · Jul 22, 2026 | Target Organization: argonautms.com (Argonaut Manufacturing Services) Status: Unauthorized Access & Data Exfiltration Confirmed Volume: 295 GB of Critical Corporate, Technical & Operational Data Countdown: 48 Hours to establish contact before public release. Executive Summary The internal infras… |
Kruse Construction tracker page ↗ | akirafilter this group | · Jul 22, 2026 | Kruse Construction is a mechanical contractor with over 50 years of experience in the petroleumand petrochemical industry, specializing in the construction and maintenance of liquid petroleum truck, rail, and pipeline terminals. The company also provides services for bulk plants, pipeline pump stations, lube oil plants, and underground pipelines.We will upload 10gb corporate data soon. Employee information (passports, lots of DLs), projects, contracts, financials, customer files and so on. |
University Sprinkler Systems tracker page ↗ | akirafilter this group | · Jul 22, 2026 | University Sprinklers is BC's largest irrigation company, specializing in the installation of irrigation sprinkler systems and landscape lighting for both residential and commercial clients.With over 40 years of experience, they provide tailored irrigation solutions that ensure healthy lawns and gardens while conserving water.We will upload corporate data soon. Employee information (DLs and other files), client information and and other internal files. |
PERTINENT HEALTHCARE BUSINESS SOLUTIONS PRIVATE LIMITED tracker page ↗ | titanfilter this group | · Jul 22, 2026 | No details on the leak post beyond the victim name. |
DoAllTech tracker page ↗ | space bearsfilter this group | · Jul 22, 2026 | The Company is leading the construction IT industry with the best technology and various experiences, and striving to grow with a various customers in pursuit of technology platform change and innovation through persistent research and development in introduction of Web Services, H/W Services, BIM Services, and new technologies.-Personal information of employees and clients -Financial documents -Other files https://doalltech.com/en/ |
Anpra SAS tracker page ↗ | space bearsfilter this group | · Jul 22, 2026 | With over a decade of experience in the auto parts sector, Anpra SAS has established a solid reputation for importing and distributing quality products. We are dedicated to supporting the growth and efficiency of wholesale businesses in Colombia, focusing on mechanical components for European and Japanese commercial vehicles.-Personal information of employees and clients -Financial documents -Other files https://anpra.co/ |
BiesSse Group tracker page ↗ | space bearsfilter this group | · Jul 22, 2026 | The BiesSse group, which has been operating on the global market for over 40 years, specializes in the production and conversion of highly performing technical adhesive tapes. The BiesSse Tape production plant covers a surface area of over 11,000 sq.mt. and is equipped with modern and advanced installations, in line with lean manufacturing practices. The BiesSse group operates worldwide through its subsidiaries in Austria, Brazil, China and Mexico, availing itself of a professional and strongly committed local workforce. The direct presence on the ground makes it possible to quickly and efficiently respond to customers’ demands and to ensure on-going assistance and support.-Personal information of employees and clients -Financial documents-SQL DB https://www.biessseworld.com/ |
Postres Reina tracker page ↗ | qilinfilter this group | · Jul 22, 2026 | Food & Beverage |
Tèrra Aventura tracker page ↗ | novafilter this group | · Jul 22, 2026 | Tèrra Aventura is a free, app-based outdoor treasure hunt in France's Nouvelle-Aquitaine region where players solve riddles, follow walking routes, and find hidden geocaches while exploring local heritage and nature - Nova Provide Tree and samples and proofs only when company get in touch with support department in channels provided in recovery file. |
Kyowa Singapore Pte Ltd tracker page ↗ | morpheusfilter this group | · Jul 22, 2026 | Website: kyowasingapore.com Revenue: $15 Million Founded in 1979 and headquartered at Benoi Road, Singapore, they primarily supply global consumer electronics, grooming, and automotive industries. Data: HR/Employee Data Client/Engineering Data Financial/Procurement Data Quality/Compliance Data Manufacturing/Process Data Administrative/Operational Data Immigration/Work Pass Data Tax/IRAS Compliance Data The volume of retrieved data is 143 GB |
sanaa hospital tracker page ↗ | black xfilter this group | · Jul 22, 2026 | No details on the leak post beyond the victim name. |
Finer & Finer tracker page ↗ | akirafilter this group | · Jul 22, 2026 | Finer & Finer CPA is a leading accounting firm based in Randolph, MA, offering a wide range of services including tax preparation, personal financial planning, and business accounting. They cater to business owners, executives, and independent professionals, providing personalized andprofessional attention to each client.We will upload 50gb corporate data soon. Employee information (personal docs and health information, tests and so on), contracts, client information and other internal information. |
Novasport s.r.o. tracker page ↗ | akirafilter this group | · Jul 22, 2026 | Novasport spol. s r.o. We are a global manufacturer of LEKI brand ski, hiking, and Nordic walking poles. Novasport was founded in 1992 by Klaus Lenhart, the owner of the LEKI brand. LEKI hasa long history of collaborating with the world’s top athletes.We will upload 17gb corporate data soon. Detailed employee information (passports and other information), projects, contracts, financials, clients information and so on. |
downies.com tracker page ↗ | settrafilter this group | · Jul 21, 2026 | Revenue: 16,000,000 Size: 550GB | Downies Collectables Pty Ltd: $1.4M per Month — and $78K in Rent Paid to Itself PROLOGUE We are in possession of internal documents from Downies Collectables Pty Ltd , dated 2007–2026. Consolidated financial statements for 2025–2026. Accounting journals with daily account payments. Personnel registers covering 25+ employees, including medical records. Client register (1,000+ active accounts) with addresses, phone numbers, and transaction amounts. Payroll records detailing payments to management and owners. Company bank statements for July 2025 – June 2026. Tax notices from the ATO (Australian Taxation Office). This article presents only a portion of the data we have chosen to disclose. The rest will be available for download and independent review following publication of the full archive. --- Part I. Who Is Downies Collectables Downies Collectables Pty Ltd is a numismatic and collectables dealer based in Australia. Registration: - ABN: 46 097 060 663 - WorkCover No.: 10505731 - WorkCover Insurance: 01/07/2025 – 30/06/2026 (active) - Status: Private company limited by shares Addresses: - Head office: 3 Redland Drive, Mitcham, VIC 3132 - PO Box: 3131, Nunawading, Victoria 3131 - Retail network: Jackson, Dyersburg (two stores); W. Lafayette Showroom Management and Owners (per documents): | Name | Role | |-----|------| | Kenneth Downie | Owner, CEO, dividend recipient | | Mark Lane / Lisa Lane | Owners — related entities, landlords | | Christopher Sealey | Operations Manager (start date: 01/07/2001) | | Jane Van Es | Administrator (start date: 03/10/2022) | Business Activities: - Buying and selling collectible coins and medals - Trading in collectibles (Biante brand) - Auction services (Gray's Auction, eBay) - Delivery logistics (UPS, DHL, Startrack, Australia Post) --- Part II. Financial Flows: $1.4M per Month Payment Registers: July 2025 – June 2026 The monthly income and expenditure structure is visible from the payment journals.… |
Ali-Monde tracker page ↗ | inc ransomfilter this group | · Jul 20, 2026 | No details on the leak post beyond the victim name. |
wdk.de tracker page ↗ | safepayfilter this group | · Jul 20, 2026 | Founded in 1950 and headquartered in Frankfurt am Main, the organization serves as the central voice of German manufacturers of … |
jaecklin-industrial.de tracker page ↗ | safepayfilter this group | · Jul 20, 2026 | Founded in 1935 by Julius Jäcklin, the company has developed from a regional machine repair workshop into a globally recognized … |
lbb-treuhand.de tracker page ↗ | safepayfilter this group | · Jul 20, 2026 | The company specializes in tax consulting, auditing, accounting, payroll administration, financial reporting, and business advisory services for private individuals, self-employed … |
timetex.de tracker page ↗ | safepayfilter this group | · Jul 20, 2026 | The company traces its origins to 1991, when the TimeTEX brand was acquired and expanded into a comprehensive supplier of … |
stroebel-gruppe.de tracker page ↗ | safepayfilter this group | · Jul 20, 2026 | Headquartered in Langenzenn, Bavaria, the company was founded in 1978 by Gerlinde and Gerhard Ströbel and has grown from a … |
industriesjaro.com tracker page ↗ | safepayfilter this group | · Jul 20, 2026 | Over several decades, Jaro has evolved from manufacturing telephone booths into a supplier of advanced outdoor enclosures, interactive kiosks, bus … |
cenesco.de tracker page ↗ | safepayfilter this group | · Jul 20, 2026 | Founded in 1998, the company provides comprehensive information technology solutions for small and medium-sized enterprises (SMEs), helping organizations modernize their … |
acsmallmaxwell.com.au tracker page ↗ | safepayfilter this group | · Jul 20, 2026 | Founded in 1916 by Ambrose Cecil Small, the firm has provided professional accounting and financial services to businesses and individuals … |
mende-grundbesitz.de tracker page ↗ | safepayfilter this group | · Jul 20, 2026 | Founded in 1994, the company specializes in the professional administration of residential, commercial, and mixed-use real estate throughout the Berlin … |
PP+K tracker page ↗ | qilinfilter this group | · Jul 20, 2026 | Advertising & Marketing |
Eana tracker page ↗ | qilinfilter this group | · Jul 20, 2026 | Business Services |
Synergy Products tracker page ↗ | qilinfilter this group | · Jul 20, 2026 | Home Improvement & Hardware Retail |
Bolt & Nut Manufacturing tracker page ↗ | qilinfilter this group | · Jul 20, 2026 | Industrial Machinery & Equipment |
CKR Consulting Engineers tracker page ↗ | payloadfilter this group | · Jul 20, 2026 | CKR Consulting Engineers is a prominent South African engineering consultancy firm headquartered in Johannesburg, established under its current name in 2001. The company provides comprehensive multi-disciplinary services, specializing in electrical, electronic, mechanical, renewable energy, and civil engineering. |
Jota Joias Premium tracker page ↗ | novafilter this group | · Jul 20, 2026 | Jota Joias Premium is a Brazilian online jewelry retailer specializing in 18K gold jewelry, wedding rings, watches, silver accessories, and luxury gifts - a whole bunch of marketing data in fire, Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Koplarla tracker page ↗ | novafilter this group | · Jul 20, 2026 | Koperasi Konsumen Karyawan PT Aplikanusa Lintasarta (KOPKARLA) was established in 1992 and at that time was focusing on saving and loan business. Since 1998, KOPKARLA has evolved and expanded its business to provide an installation services and solution of telecommunication network (datacomm) |
Jrd logistics tracker page ↗ | novafilter this group | · Jul 20, 2026 | Jrd logistics LTD is an India-based freight forwarding and supply chain company headquartered in Kolkata that provides international logistics, customs clearance, warehousing, and multimodal transport services - Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Rumah Sakit Universitas Indonesia (RSUI) tracker page ↗ | novafilter this group | · Jul 20, 2026 | Rumah Sakit Universitas Indonesia (RSUI) is the teaching hospital of the University of Indonesia, providing advanced medical care, education, and clinical research in Indonesia - medical data from drive at risk, Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Universidad Nacional de Mar del Plata tracker page ↗ | novafilter this group | · Jul 20, 2026 | The Universidad Nacional de Mar del Plata offers a wide range of academic programs, including undergraduate and postgraduate degrees, vocational training, and distance education. It serves students, faculty, and the broader community by promoting research, innovation, and cultural activities. The university is committed to sustainability and social responsibility, providing various scholarships and support for international mobility. Additionally, it engages in partnerships and projects that enhance academic and technological transfer, contributing to local and global knowledge - Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
eurohold.bg tracker page ↗ | krybitfilter this group | · Jul 20, 2026 | Eurohold Bulgaria AD (Еврохолд България АД) is a leading Bulgarian integrated holding company founded ... |
College O'Sullivan de Québec tracker page ↗ | kairosfilter this group | · Jul 20, 2026 | Collège O'Sullivan de Québec offers a variety of training programs both in-class and online, focusing on fields such as administration, insurance, office management, IT, web development, and marketing. The institution aims to equip students with the skills needed for the job market and higher education through quality resources and personalized services. Their target clients include secondary school students, international students, and businesses seeking tailored training solutions. With over 80 years of history, the college is committed to fostering professional and personal competencies among its graduates. |
Reni Farmácias Associadas tracker page ↗ | doommageddonfilter this group | · Jul 20, 2026 | upcoming | N/A | 0 files |
Colliers Real Estate NEW tracker page ↗ | coinbase cartelfilter this group | · Jul 20, 2026 | Real Estate - $5.7 Billion |
Caterpillar tracker page ↗ | coinbase cartelfilter this group | · Jul 20, 2026 | Manufacturing - $67 Billion |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.