ZeroHour

Incidents

Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups

Ransomware & extortion groups · activity

#Group7dtrend30d90dall-time*Last postStatusEstimated earnings (public reporting)
1the gentlemen30▲8152400400activeno public figure
2qilin30▲18113364364activeno public figure
3storm9▼31496161activeno public figure
4krybit15▲15449595activeno public figure
5akira10▲3438787activeApproximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since.
6direwolf2▼9376262activeno public figure
7coinbase cartel0=355656activeno public figure
8inc ransom10▲634113113activeno public figure
9lockbit55=275454activeOver US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit…
10audit team10▲1242626activeno public figure
11safepay10=226767activeno public figure
12leakeddata1▲1203939activeno public figure
13orova0=194444activeno public figure
14zawoo0=191919activeno public figure
15emperador4▼1182222activeno public figure
16kazu0▼17171717activeno public figure
17vexy3▼4151515activeno public figure
18shinyhunters2=143232activeno public figure
19panzer7▲5142525activeno public figure
20black nevas1▼12141414activeno public figure
21play3▼1134747activeno public figure
22chaos3▼1133535activeno public figure
23rhysida2▼2131515activeno public figure
24everest0▼3123434activeno public figure
25pear0▼1122323activeno public figure

*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.

Incidents2,843 records · full details

VictimGroup / typeDiscoveredDetails
eclective.ie
tracker page ↗
m3rxfilter this group · Jul 12, 2026Ireland, 41a Pleasants Saint Kevins St, D08 KR99 ,Eclective is Ireland's largest hospitality group, renowned for creating dynamic and diverse hospitality and lifestyle brands. They offer a variety of venues suitable for different occasions, including intimate dining, social gatherings, and family-friendly environments. Their commitment to exceptional experiences highlights their understanding of what makes an outing enjoyable while fostering community connections. Eclective also provides tailored event spaces with modern amenities for corporate and private events. Stolen: 857 GB 1,683,762 Files
foreconinc.com
tracker page ↗
m3rxfilter this group · Jul 12, 2026+1 (716) 664-5602 , FORECON Inc. specializes in custom-crafted forest management, due diligence, appraisal, analytics, and rural brokerage services across New York, Pennsylvania, and West Virginia. Established in 1954, the company focuses on balancing the needs of people and the environment through sustainable forestry practices. Their services include technical, advisory, and valuation support for forestry projects, land management, and conservation solutions. Additionally, FORECON offers a HuntLease program that connects landowners with hunters to promote wildlife management and forest health. Stolen: 860 Gb 437,048 Files
wrtworld.com
tracker page ↗
m3rxfilter this group · Jul 12, 2026+1 (305) 884-3700 , WRT World Enterprises is a leading provider of purchasing and logistics services tailored for major retailers in Latin America. The company specializes in streamlining supply chain management through services such as shipping, storage, purchasing, and vendor management. With a focus on innovative solutions, WRT helps its clients remain competitive by offering order purchasing technology and comprehensive logistics services. Their extensive network and established relationships with suppliers enable them to negotiate favorable prices, ensuring their clients have access to the best products in the market. Stolen: 377 GB 267,891 Files
Bosch
tracker page ↗
d1rfilter this group · Jul 12, 2026Again, thanks to database Synopsys provided us with After analyzing technical leaks by other groups and cross-referencing targets from TARGETLIST.txt A company access was found and in the archives, a $10,000 gem: Bosch CAN module implementation Now it is going for free for every engineer and car enthusiast, thanks to Synopsys providing us with neat roadmap to tech sector Sorry, Bosch, you got third-partied! Call the Synopsys CEO and thank them for letting us all know where the valuable data is!
ARM
tracker page ↗
d1rfilter this group · Jul 12, 2026Thanks to leaked database by Synopsys, a roadmap was provided Many other group leaks were cross-referenced and thoroughly analyzed One of the leaked companies gave our team access to ARM center Severely incapacitated by 2FA email/sms-code required by ARM on every step, we were still able to download an interesting tool: Athena Download Manager That requires an SSL certificate of a company that owns ARM products, and downloading by means of Athena allows to bypass multiple 2FA checks that are required when downloading same files from www.arm.com This is now free for download to any reverse engineer on Earth and beyond, thanks to Synopsys company data negligence:
Synopsys
tracker page ↗
d1rfilter this group · Jul 12, 2026No details on the leak post beyond the victim name.
Cooperate service CZ s.r.o.
tracker page ↗
titanfilter this group · Jul 12, 2026No details on the leak post beyond the victim name.
Century Equities
tracker page ↗
qilinfilter this group · Jul 11, 2026Finance
Retelit SpA PIVA
tracker page ↗
qilinfilter this group · Jul 11, 2026Business Services
Carolina Agri-Power
tracker page ↗
qilinfilter this group · Jul 11, 2026Industrial Machinery & Equipment
Allied Plumbing & Heating
tracker page ↗
qilinfilter this group · Jul 11, 2026Construction
Access Equipment Hire
tracker page ↗
dragonforcefilter this group · Jul 11, 2026Access Group International is a leading privately owned provider of access, material handling, power generation, and construction equipment. The company is dedi...
The Schuett Companies
tracker page ↗
dragonforcefilter this group · Jul 11, 2026The Schuett Companies, Inc. is a family-owned business with over 50 years of experience specializing in affordable housing for seniors, individuals with disabil...
Golden Star Resources
tracker page ↗
cmd organizationfilter this group · Jul 11, 2026Wassa is located in south-western Ghana. Golden Star commenced production from the surface operation at Wassa in 2005 and commercial production was achieved at Wassa Underground on January 1, 2017. In early 2018 Wassa transitioned into an underground-focused operation. Thanks to the scale of the historical open pit mining operation the processing plant has significant excess capacity and is currently only running at 70-80% (based on 2020 actuals) utilization. Development of the large inferred mineral resource which comprises the southern Extension zone, was the subject of a Preliminary Economic Assessment which was included in the March 2021 Technical Report. Given the scale of the resource at Wassa, the Company is exploring the potential to increase the mining rate in order to fill the mill.
Glendale Community College
glendale.edu
breach · Jul 11, 2026794K accounts · breached 2026-06-15 · Academic records, Dates of birth, Email addresses, Genders, Government issued IDs, Names, Phone numbers, Physical addresses · In June 2026, Glendale Community College was the target of a ShinyHunters "pay or leak" extortion campaign . Data allegedly obtained from Glendale was later published online and included almost 800k unique email addresses along with various other data fields, including names, addresses, phone numbers, Social Security numbers and other information relating to student enrolments. In its disclosure notice , the college advised that "the potentially impacted information may vary for each individual and may include all or just one of the above-listed types of information".
CARIBE / SUBRA
tracker page ↗
majinahanashifilter this group · Jul 11, 2026TARGET: kalimancaribe.com & subra.bg. REVENUE: ~ EMPLOYEES: ~ Package: 19.7 GiB / 21311 files
Eurodefi
tracker page ↗
qilinfilter this group · Jul 10, 2026Business Services
SPACElogic
tracker page ↗
qilinfilter this group · Jul 10, 2026Hospitality
Global Strategic Business Process Solutions
tracker page ↗
qilinfilter this group · Jul 10, 2026Business Services
CRZ Construcciones
tracker page ↗
qilinfilter this group · Jul 10, 2026Civil Engineering Construction
Red Planet Hotels
tracker page ↗
qilinfilter this group · Jul 10, 2026Hospitality
Hilo
tracker page ↗
qilinfilter this group · Jul 10, 2026Manufacturing
Promotora Zacapu
tracker page ↗
qilinfilter this group · Jul 10, 2026Manufacturing
Navana Real Estate
tracker page ↗
qilinfilter this group · Jul 10, 2026Construction
Roofinox
tracker page ↗
payloadfilter this group · Jul 10, 2026Roofinox is an Austrian manufacturer of premium stainless steel specifically engineered for long-lasting roofing and facade systems. The company offers innovative materials with unique matte and textured surfaces that blend beautifully with architecture without creating harsh glare. Thanks to its exceptional corrosion resistance and durability in harsh climates, Roofinox products are recognized as an eco-friendly, virtually timeless architectural solution.
Borger ISD
tracker page ↗
interlockfilter this group · Jul 10, 2026https://www.borgerisd.net/ Borger Independent School District serves approximately 2,500 students on six campuses in Hutchinson County, Texas. The district fails to foster a collaborative environment for students, parents, and the community. They are not responsible or committed to ensuring the security of your data. This is not the first time they have neglected their students, with confidential information about staff, students, and their parents, as well as all incidents, the district's financial situation, and other information they concealed, leaking online. We offer you 330 GB of this information.
Pirámide Seguros
tracker page ↗
gunrafilter this group · Jul 10, 2026No details on the leak post beyond the victim name.
on-us
tracker page ↗
gunrafilter this group · Jul 10, 2026No details on the leak post beyond the victim name.
Yuditec S.A.
tracker page ↗
gunrafilter this group · Jul 10, 2026No details on the leak post beyond the victim name.
txdkj.com
tracker page ↗
blackwaterfilter this group · Jul 10, 2026Confidential data will be released soon.
Vandalia Rental
tracker page ↗
akirafilter this group · Jul 10, 2026Vandalia Rental has served the Greater Dayton and Greater Cincinnati and Northern Kentucky markets since 1961. Vandalia Rental proudly services construction rental accounts ranging from small businesses to large publicly traded corporations, government agencies, and municipalities throughout the Ohio, Indiana, and Kentucky regions, and sales accounts throughout the country.We will upload 40gb of corporate data soon. Detailed employee and client personal information (SSN numbers, name, DOB and so on), projects files, financials, client internal information, contracts and agreements and so on.
La ville de Ouangani
tracker page ↗
deadlockfilter this group · Jul 10, 2026French municipality of Ouangani on Mayotte https://ville-ouangani.yt/
Aldaco Avance 2022 S.L.
tracker page ↗
deadlockfilter this group · Jul 10, 2026Aldaco is a Spanish company specializing in industrial engineering, construction materials, civil engineering, mining and labor security, with seats in Asturias, Galicia and Madrid. The company distributes machines and technical tools, offers specialized asesoramients and support for professional projects. https://aldacogrupoavance.es/
Schaad, Balass, Menzl and Partner AG
tracker page ↗
deadlockfilter this group · Jul 10, 2026SBMP (Schaad Balass Menzl & Partner AG) is a specialized Swiss IP boutique with offices in Zurich and Winterthur, offering comprehensive services in patent law, trademark law, and design protection. With over 50 years of experience and a team of lawyers and technical experts, the firm supports companies across all industries, from filing to enforcement. https://sbmp.ch/
HİDROMEK
tracker page ↗
deadlockfilter this group · Jul 10, 2026HİDROMEK is a leading Turkish manufacturer of heavy construction machinery recognized globally for its high-performance award-winning heavy equipment. Founded in Ankara in 1978 by mechanical engineer Hasan Basri Bozkurt the company operates six state-of-the-art production facilities across Turkey and Thailand. Its heavy machinery operates in more than 130 countries spanning six continents. https://www.hidromek.com/ Over 880 gigabytes of sensitive internal data were stolen from this company
KEMEK
tracker page ↗
deadlockfilter this group · Jul 10, 2026KEMEK Engineering a leading technology and automation company in the Baltics The company was founded in 1995 and develops customized solutions for industrial companies. https://www.kemek.eu/
KeNHA
tracker page ↗
deadlockfilter this group · Jul 10, 2026The Kenya National Highways Authority (KeNHA) agency responsible for the construction, management, and maintenance of national highways (classes S, A, and B) in Kenya. https://kenha.co.ke/
BioResearch
tracker page ↗
deadlockfilter this group · Jul 10, 2026BioResearch Group to Warsaw clinical research center specializing in early phases (I, FIH, SAD, MAD) and bioequivalence studiesThe company offers comprehensive services for the pharmaceutical and CRO sectors, with its own clinic and laboratory. https://www.bioresearch.pl/
Relesa
tracker page ↗
deadlockfilter this group · Jul 10, 2026Grupo Relesa a multinacional Spanish company specializing in the fabrication and summary of rejillas metálicas (tramex). The main function is the digital platform and the client portal of Reginald Lee SA, one of the official distributors of more important products of Coca-Cola in Argentina. https://relesa.com.ar https://gruporelesa.com/
Carrier AB
tracker page ↗
deadlockfilter this group · Jul 10, 2026Carrier Transport AB a Swedish transport and logistics company headquartered in Jordbro near Stockholm. https://carrier.se/
Enedo Power
tracker page ↗
deadlockfilter this group · Jul 10, 2026Enedo Power (company renamed Inission Power) develops high-quality, intelligent power supply systems for critical infrastructure and industrial applications. The company, part of the Swedish Inission Group with Finnish roots, focuses on robust power supplies, power systems, and LED drivers for industries such as defense and railway technology. https://enedopower.com/ powernet.fi inissionpower.com
CNA
tracker page ↗
deadlockfilter this group · Jul 10, 2026CNA Toscana Centro a trade association that provides services and protection to artisans and businesses in the provinces of Prato and Pistoia. The portal manages union representation, tax services, the EPASA-ITACO welfare association, and supports business development and digitalization. https://toscanacentro.cna.it/
Hospital Di Camp
tracker page ↗
doommageddonfilter this group · Jul 10, 2026upcoming | N/A | 0 files
Lopes Law
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026lopeslawllc.com zoominfo.com/c/lopes-law-llc/449811320 Lopes Law LLC is a Philadelphia-based law firm founded by Anthony Lopes that specializes in franchise law, representing both franchisees and franchisors nationwide. The firm provides comprehensive legal services including Franchise Disclosure Document (FDD) reviews, franchise agreement negotiations, and dispute resolution using transparent flat-fee pricing. In addition to franchise expertise, the practice acts as fractional general counsel for businesses and offers specialized tax law services to help companies navigate complex legal landscapes
Carita
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026carita.com zoominfo.com/c/carita/358348689 Carita is a prestigious French luxury skincare brand founded in 1945, renowned for its professional-grade beauty treatments and high-end cosmetics. Now part of L'Oréal's Luxury Division following its acquisition from Shiseido in 2022, the brand operates globally with a focus on exceptional skincare rituals and personalized beauty experiences. Available in over 130 countries, Carita combines innovative formulations with artisanal expertise, generating annual revenue in the range of $9-10 million for its core operations
BDO Greece
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026bdo.gr zoominfo.com/c/bdo-certified-public-accountants-sa/372555588 BDO Greece is a leading Athens-based accounting, tax, and advisory firm that operates as a member of the global BDO network. The company provides comprehensive audit, assurance, and business consulting services to a diverse range of industries, including real estate, hospitality, and the public sector. Employing between 50 and 200 professionals, the firm generates an estimated annual revenue of over $23 million while helping clients navigate complex financial and regulatory landscapes
Dash Door Glass
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026dashdoor.com Dash Door & Glass is a prominent commercial contractor and facility support specialist headquartered in Doral, Florida, with a rich history dating back to 1955. The company specializes in the supply, installation, and maintenance of commercial doors, glass, and architectural hardware for large-scale construction projects across South Florida. Operating with a dedicated team of professionals, the firm has established itself as a major industry player, generating an impressive annual revenue of approximately $113.3 million
Ferretería Scopazzo
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026scopazzo.com.ar rocketreach.co/ferreteria-scopazzo-profile_b7dd5f00c0ca3ccc Ferretería Scopazzo is a prominent family-owned hardware and industrial tools retailer based in Buenos Aires, Argentina, boasting over 60 years of market experience.They specialize in supplying electrical, pneumatic, and household equipment from major global brands like Makita, DeWalt, and Bosch to both individuals and businesses
Fortray
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026fortray.com zoominfo.com/c/fortray-global-services-ltd/446823730 Fortray Global Services Limited is a UK-based IT company founded in 2011 that operates across tech education, managed IT services, and global recruitment.They offer specialized Tech and AI bootcamps with 1:1 mentorship to help individuals build in-demand digital skills and launch successful tech careers.Furthermore, they act as a Managed Service Provider (MSP) delivering scalable cloud solutions and cybersecurity to businesses.Simultaneously, their recruitment division connects ambitious IT professionals with top job opportunities worldwide
Martin Cava
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026martincava.com zoominfo.com/c/martin-cava-sa/366183664 Martin Cava S.A. is a prominent Argentine supplier of equipment, specialty papers, and consumables for the graphic and printing industry, boasting nearly 90 years of market experience.Based in Buenos Aires, they distribute a wide array of products including HP plotters, inks, holographic vinyls, and offset printing materials.The company is highly regarded for offering innovative solutions that allow businesses to personalize garments, promotional items, and various surfaces
Aveiro Constructors Limited
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026aveiroconstructors.com Aveiro Constructors Limited is a Canadian general contractor established in 1976 and headquartered in Southwestern Ontario. The company specializes in the Industrial, Commercial, and Institutional (ICI) sectors, delivering design-build, new construction, and renovation projects both locally and internationally. Originally starting with pre-engineered steel buildings, they have grown over the decades into a comprehensive construction firm offering specialized services like HVAC and project management
Triquesta
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026triquesta.com zoominfo.com/c/triquesta-pte-ltd/346670373 Triquesta is a Singapore-based fintech company specializing in collateral, compliance, and risk management software for structured commodity finance.Founded by seasoned banking professionals, the firm provides cutting-edge technology that helps global banks and direct lenders reliably track assets and mitigate risks.With a strong international presence across Europe and Australia, their solutions empower financial institutions to navigate complex commodity markets efficiently
Vicenzi Group
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026vicenzi.it zoominfo.com/c/vicenzi-spa/1101977046 Vicenzi Group, founded in 1905 by Matilde Vicenzi, is a historic Italian confectionery company renowned for producing high-quality biscuits and traditional pastries. Based in Verona, the family-owned business has grown into a global brand dedicated to becoming the world leader in premium Italian sweet treats. The company employs hundreds of people and successfully combines authentic recipes with modern sustainable practices to deliver its products to international markets
Energon
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026energon.cz zoominfo.com/c/energon/430910504 ENERGON HOLDING is a prominent Czech group uniting various companies specialized in energy services, photovoltaics, and modern sustainable technologies. With over 25 years of industry experience, the group drives innovations that enhance the energy independence and competitiveness of the Czech Republic. They also actively invest in startups focused on renewable energy optimization, diagnostics, and the security of power infrastructure
Open Options
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026ooaccess.com Open Options was a prominent Texas-based software company specializing in open-architecture access control solutions, best known for its flagship enterprise platform, DNA Fusion. The company focused on delivering scalable physical security and identity management software tailored to complex organizational needs. Following a strategic acquisition, the company's technology and brand were integrated into Acre Security, where it continues to operate and evolve as DNA Fusion by acre security
INTERNET AG
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026inet.de zoominfo.com/c/inet/429716454 INTERNET AG is a professional German IT service provider specializing in reliable, sustainable, and flexible hosting and server solutions. The company delivers customized IT infrastructures, managed services, and global network connectivity tailored to complex business needs. Alongside its partner INTERNIC GmbH, it offers comprehensive enterprise software and secure digital operations for corporate clients
Crossroads Medical Management
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026crossroadsmedicalmgmt.com zoominfo.com/c/crossroads-medical-management-llc/354034077 Crossroads Medical Management is a healthcare management company headquartered in Perry, Georgia, specializing in full-service financial, clinical, and operations management for the senior community. As a legacy organization with three generations of experience, they focus on providing quality-oriented care and a home-like environment across multiple affiliated skilled nursing facilities. Operating primarily in states like Georgia, the company manages several senior care centers, generating an estimated annual revenue of over $12 million while expanding to meet the evolving needs of elderly residents
Pharma Wholesale
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026pharmawholesale.com zoominfo.com/c/pharma-wholesale/353577758 Pharma Wholesale Corp. is a licensed pharmaceutical wholesaler and distributor headquartered in Florida, USA, with over 24 years of industry experience. The company specializes in the global distribution of prescription and OTC medications, vitamins, supplements, and health and beauty products. Operating as a mid-sized enterprise, they supply affordable healthcare solutions to pharmacies and medical facilities both domestically and internationally
Welders Supply Equipment Rentals
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026wserentals.com zoominfo.com/c/welders-supply--equipment-rentals/355927450 WSE Rentals (Welders Supply & Equipment Rentals) is a specialized equipment rental company headquartered in Port Allen, Louisiana. They focus on providing a comprehensive range of high-quality, reliable welding tools and machinery from well-known industry brands for various industrial projects. The company serves contractors and businesses by offering tailored rental solutions and dedicated delivery services to support their operational needs
VASBE
tracker page ↗
the gentlemenfilter this group · Jul 10, 2026vasbe.com zoominfo.com/c/vigilantes-asociados-al-servicio-de-banca-y-empresas-vasbe-sl/458305259 VASBE Vigilantes Asociados Al Servicio De Banca Y Empresas Vasbe is a well-established Spanish private security and surveillance company with over 30 years of industry experience. Based primarily in the Salamanca region, they provide comprehensive protection solutions including physical guarding, 24/7 central alarm monitoring, and advanced video surveillance. The company specializes in designing customized security plans to safeguard businesses, financial institutions, and valuable assets around the clock.

Breach & ransomware newsAll →

Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.