Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
204
Leak-site victims · 30d
1K
Active groups · 30d
8011 new
Most active · 7d
the gentlemen
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲8 | 152 | 400 | 400 | active | no public figure | |
| 2 | qilin | 29 | ▲16 | 113 | 364 | 364 | active | no public figure | |
| 3 | storm | 9 | ▼31 | 49 | 61 | 61 | active | no public figure | |
| 4 | krybit | 15 | ▲15 | 44 | 95 | 95 | active | no public figure | |
| 5 | akira | 10 | ▲3 | 43 | 87 | 87 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 2 | ▼9 | 37 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 35 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 10 | ▲6 | 34 | 113 | 113 | active | no public figure | |
| 9 | lockbit5 | 5 | = | 27 | 54 | 54 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 10 | ▲1 | 24 | 26 | 26 | active | no public figure | |
| 11 | safepay | 9 | ▼2 | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 15 | emperador | 4 | ▼1 | 18 | 22 | 22 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 3 | ▼4 | 15 | 15 | 15 | active | no public figure | |
| 18 | shinyhunters | 2 | = | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲6 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | play | 3 | ▼1 | 13 | 47 | 47 | active | no public figure | |
| 22 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 23 | rhysida | 2 | ▼2 | 13 | 15 | 15 | active | no public figure | |
| 24 | pear | 0 | ▼1 | 12 | 23 | 23 | active | no public figure | |
| 25 | cyberleek | 0 | = | 12 | 12 | 12 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents2,842 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
Northeast Pediatrics & Adolescent Medicine tracker page ↗ | anubisfilter this group | · Jul 2, 2026 | Data breach exposes employees and patients of a pediatric clinic. |
Colorado Rehabilitation and Occupational Medicine tracker page ↗ | inc ransomfilter this group | · Jul 2, 2026 | No details on the leak post beyond the victim name. |
BN: higuchi-inc Report Error & Data Leak Warning tracker page ↗ | stormousfilter this group | · Jul 2, 2026 | www.higuchi-inc.co.jp/newsrelease/company/doc/unauthorized_access_incident.pdf // We have reviewed the report issued by HIGUCHI INC. To correct their mistake: the breach did not affect just one branch, but rather 3 different branches across various regions.Your data has not been leaked yet, as you are currently within an 8-day grace period. Before we publish any of your commercial or personal data, be aware that we possess 102 GB of Sage software backups, alongside numerous commercial documents.We await your reply to our messages. Follow the correct path to ensure nothing is leaked. We are waiting for you. |
Notice tracker page ↗ | stormousfilter this group | · Jul 2, 2026 | We will soon terminate our operations and services. All hosted data is scheduled for complete erasure within 60 days, before this blog goes offline permanently. |
awo-suedost.de tracker page ↗ | safepayfilter this group | · Jul 2, 2026 | Established in 1994, it is one of the regional branches of the Arbeiterwohlfahrt (AWO), one of Germany's six largest independent … |
dia179.com tracker page ↗ | safepayfilter this group | · Jul 2, 2026 | Founded in 2007, the firm specializes in industrial architecture, logistics facilities, research centers, production plants, and corporate office buildings. Unlike … |
eaglecrestlife.org tracker page ↗ | safepayfilter this group | · Jul 2, 2026 | Operating under Bethany Lutheran Homes, Inc., the organization has served the region since 1946 and is recognized as the largest … |
https://www.roundshield.com/ tracker page ↗ | inc ransomfilter this group | · Jul 2, 2026 | No details on the leak post beyond the victim name. |
KT RESTAURANT tracker page ↗ | majinahanashifilter this group | · Jul 2, 2026 | TARGET: ktr.co.th REVENUE: ~$55M USD EMPLOYEES: ~ Package: 777 MiB / 1853 files |
BONJOUR GROUP tracker page ↗ | majinahanashifilter this group | · Jul 2, 2026 | TARGET: bonjourgroup.net, bonjourretail.com REVENUE: $57.8 Million EMPLOYEES: 501-1,000 employees Package: 3.1 GiB / 5620 files |
Starpool tracker page ↗ | worldleaksfilter this group | · Jul 1, 2026 | No details on the leak post beyond the victim name. |
COMHAR tracker page ↗ | worldleaksfilter this group | · Jul 1, 2026 | No details on the leak post beyond the victim name. |
digitaldynamics.com tracker page ↗ | brain cipherfilter this group | · Jul 1, 2026 | Details later. If you think you are here by mistake, please contact us at [email protected] |
goldenstateortho.com tracker page ↗ | brain cipherfilter this group | · Jul 1, 2026 | We have about 150k documents and files of this company, with a total size of more than 150 GB. If you think you are here by mistake, please contact us at [email protected]... |
printronix.com tracker page ↗ | brain cipherfilter this group | · Jul 1, 2026 | We have about 110k documents and files of this company, with a total size of more than 100 GB. If you think you are here by mistake, please contact us at [email protected]... |
blaofood.com tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | B'Laofood Joint Stock Company (formerly B'Laofood Company Limited until March 25, 2026) is a Vietnamese leading manufact... |
jaws.com.tw tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | JAWS Co., Ltd. (兆旭公司) is a Taiwanese manufacturer of electronic connectors and cable assemblies, founded in May ... |
gsp.es tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | Global Software Partner S.L. (GSP) is a Spanish IT consulting and software company with over 30 years of experience in e... |
www.diss.com tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | DISS Analytics is the digital solutions and statistical reporting division of DISS Corporation (Digital Imaging & Soluti... |
gitmea.com tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | German Imaging Technologies (GIT) Dubai LLC is a German-founded company established in 1999, headquartered in Dubai, UAE... |
TRANSPORTES Y LOGISTICA BRAS, S.A tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | Transportes y Logistica Bras, S.A. is a Guatemalan company specializing in heavy land transport and logistics services, ... |
aai.com.tw tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | AeroVision Avionics, Inc. (AAI) (利翔航太電子股份有限公司) is a Taiwanese high-tech company incorporated in ... |
www.northern-access.com tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | Northern Access Transportation, Inc. is a locally owned American company founded in Duluth, Minnesota, USA, dedicated to... |
moscati.org tracker page ↗ | krybitfilter this group | · Jul 1, 2026 | Hôpital Catholique Saint Joseph Moscati (moscati.org) is a Catholic hospital operating under the motto "Foi et charité... |
Refinery Hotel tracker page ↗ | akirafilter this group | · Jul 1, 2026 | Refinery Hotel is a luxury hotel located near Bryant Park in New York City, offering a modern reinterpretation of a historic hat factory. The hotel features 197 stylish rooms with industrialaccents and modern amenities, alongside dining options such as the Parker & Quinn restaurant and the Refinery Rooftop bar.We will upload 15gb of corporate data soon. Employee personal information (passports, DLs, SSNs, w9 forms), guests information, financials, contracts and agreements, lots of NDAs, etc. |
Dennis Waters Rental Properties tracker page ↗ | qilinfilter this group | · Jul 1, 2026 | Business Services |
Mattatuck Industrial Scrap Metal tracker page ↗ | qilinfilter this group | · Jul 1, 2026 | Energy, Utilities & Waste |
Laughlin Nunnally Hood & Crum tracker page ↗ | qilinfilter this group | · Jul 1, 2026 | Law Firms & Legal Services |
Rossum Integration tracker page ↗ | qilinfilter this group | · Jul 1, 2026 | Industrial Machinery & Equipment |
Dynamic Laser Solutions Ltd. tracker page ↗ | qilinfilter this group | · Jul 1, 2026 | Industrial Machinery & Equipment |
Dixie Beverage tracker page ↗ | qilinfilter this group | · Jul 1, 2026 | Electricity, Oil & Gas |
Western Construction tracker page ↗ | playfilter this group | · Jun 30, 2026 | No details on the leak post beyond the victim name. |
Welldyne tracker page ↗ | payoutskingfilter this group | · Jun 30, 2026 | No details on the leak post beyond the victim name. |
universalplant.com tracker page ↗ | chaosfilter this group | · Jun 30, 2026 | FINAL NOTICE: UNIVERSAL PLANT SERVICES (UPS) We are in possession of 315 GB of your corporate, financial, and operational data. Our analysis confirms that this archive contains highly sensitive information, including: Financial & Accounting: Full audits, tax filings (ADP), payroll, bank transa… |
Primed Halberstadt Medizintechnik tracker page ↗ | aurorafilter this group | · Jun 30, 2026 | Primed Halberstadt Medizintechnik GmbH — a German manufacturer of medical devices founded in 1946 and now part of the PE-backed PP Medtech group (Wiesmann & Co. KG). The exfiltration captured four entire server volumes: Daten (883 GB) — File server: 289 employee home directories (547 GB), Czech subsidiary data (66 GB), production processes (162 GB), machine configurations (81 GB) EE (807 GB) — Enterprise system: Apollo ERP, VBANK banking (8 accounts), complete database backup (100.6 GB, dated June 3), product images WINDVSW1 (344 GB) — Windows server: DATEV accounting (115+ data directories including LODAS payroll), bank transfers, DMS exports dmsscan (12 GB) — Scanned documents from 51+ employee DMS mailboxes A database backup (spiel.zip.001–010, 100.6 GB) was created on 2026-06-03 |
SDEZ tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | sdez.fr SDEZ is a historic French family-owned company founded in 1816, specializing in the rental and maintenance of professional linen, workwear, and hygiene equipment.Operating a national network of industrial laundries across France and Belgium, it has become one of the leading textile service providers in the region.The company serves thousands of business clients and employs over 700 people to deliver comprehensive laundry and hygiene solution |
Brooklyn Defender Services tracker page ↗ | genesisfilter this group | · Jun 30, 2026 | A legal organization dedicated to safeguard the rights of its clients |
paipharma.com tracker page ↗ | brain cipherfilter this group | · Jun 30, 2026 | Large volume data breach. Total size 1,4 Terabytes. Coming soon. |
Pou Sheng International tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | pousheng.com zoominfo.com/c/pou-sheng-international/352458448 They serve as a key distributor and exclusive agent for major global sportswear brands like Nike, adidas, PUMA, and Under Armour. The company operates a comprehensive online and offline sales network across the country to provide a full sports and lifestyle experience. |
MakoLab tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | makolab.com zoominfo.com/c/makolab-sa/31278202 MakoLab, a prominent Polish IT consulting and software development company acting as a digital project house.The firm specializes in digital transformation, artificial intelligence, custom software engineering, and human-centric design.They provide comprehensive business and technology consulting, product design, and global 24/7 operations support to enterprise clients worldwide |
EMAS Group tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | emas.cz zoominfo.com/c/janča--emas-group-sro/532190785 JANCA & EMAS group s.r.o., one of the largest wholesale distributors of electrical equipment and materials in the Czech Republic. The company supplies a comprehensive range of electrical components, including switches, sockets, and smart home automation systems, primarily serving professional electricians and businesses. They operate an extensive network of physical branches across the country and offer a dedicated mobile app for quick ordering and inventory management. |
The City of Boyne City tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | cityofboynecity.com zoominfo.com/c/the-city-of-boyne-city/368244116 City of Boyne City, a community located in Charlevoix County, Michigan. It serves as a central hub for residents, providing essential information on local government, city departments, utility services, and community events. The portal also highlights the city's parks, recreation programs, and local initiatives, reflecting its vibrant lakeside lifestyle on Lake Charlevoix |
Oron Law Firm tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | zoominfo.com/c/eilon-oron-attorneys/1341420873 Oron Law Firm, a legal practice specializing in traffic law, traffic accidents, and torts. Founded by Adv. Ilon Oron,The team provides comprehensive legal representation for licensing issues, accident claims, and traffic violations, offering 24/7 customer support to assist their clients. |
Wacha Justen tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | nwohlaw.com zoominfo.com/c/wacha--justen-llc/357327144 Wacha & Justen, LLC, a dedicated law firm based in Napoleon, Ohio. The firm provides comprehensive legal services, including estate planning, personal injury, car accident claims, and general civil litigation. With a strong local presence, their experienced attorneys offer reliable representation to individuals and businesses throughout the region |
Melcor Developments Ltd tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | melcor.ca zoominfo.com/c/melcor-developments-ltd/65095259 Melcor Developments Ltd., a prominent Canadian real estate development and construction company founded in 1923 and headquartered in Edmonton, Alberta. The firm specializes in the full lifecycle of property development, creating residential communities, commercial spaces, and industrial parks across Western Canada. With nearly a century of experience, Melcor is recognized for building sustainable, high-quality neighborhoods and long-term investment properties |
FAC Logistique tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | fac-logistique.com FAC Logistique, a French company founded in 1996 that specializes in the outsourcing of purchasing and logistics. Operating as a central purchasing office, the firm helps businesses optimize their supplier base, manage inventory, and significantly reduce operational costs. Headquartered in Grand-Couronne with additional agencies across France, the company leverages expert buyers to simplify supply chain processes and act as a dedicated "center of savings" for its clients |
Comp Trading Co tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | ctc.co.th Comp Trading Co., Ltd. (CTC), a premier Thai IT solutions and services provider founded in 1985 by former IBM engineers. The company specializes in enterprise IT infrastructure, data center solutions, cybersecurity, and comprehensive system maintenance. Today, CTC serves as a strategic technology partner for businesses, delivering disaster recovery, network support, and IT consulting services |
Mondottica tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | mondottica.com zoominfo.com/c/mondottica-ltd/346397915 Mondottica, a leading global eyewear company specializing in the design, production, and worldwide distribution of premium sunglasses and optical frames. Headquartered in London, the firm is renowned for managing an extensive portfolio of prestigious international fashion and lifestyle brand licenses. They combine innovative design with high-quality craftsmanship to deliver luxury eyewear collections to global markets |
OSP HOLDING FRANCE tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | ospholding.com pappers.fr/entreprise/osp-holding-france-838877108 838877108 OSP HOLDING (FRANCE) is an active French company founded in 2018 and managed by APInvest France, with a substantial share capital of over €14.4 million. It specializes in the design and assembly of industrial process control equipment, as well as the development and maintenance of software for parking management systems. The company employs between 50 and 99 people and is headquartered in Boulogne-Billancourt |
NATURGHIACCIO tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | naturghiaccio.it dnb.com/business-directory/company-profiles.naturghiaccio_srl.eae47436d39ec78b7abc7007a3637507.html Naturghiaccio, an Italian company founded in 2013 that specializes in the production and distribution of high-quality, certified food-grade ice. Operating with a fully automated plant, they supply premium packaged ice to the Ho.Re.Ca. sector, supermarkets, and event organizers across Italy. The company is an official member of the European Packaged Ice Association (EPIA), ensuring strict quality and safety standards for their products |
Indra Group tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | indracompany.com zoominfo.com/c/indra-sistemas-sa/136495916 Indra, a leading Spanish multinational technology and consulting company. It specializes in innovative solutions for defense, aerospace, air traffic management, smart mobility, and digital transformation (via its Minsait brand). The company serves as a strategic technological partner for governments and major corporations worldwide, driving modernization and security across critical sectors |
Climax Technology tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | climax.com.tw zoominfo.com/c/climax-technology-co-ltd/440165694 Climax Technology Co., Ltd., a Taipei-based company founded in 1985 that specializes in smart security systems and telecare solutions. For over three decades, the firm has leveraged its telecommunications expertise to develop innovative hybrid security panels, emergency pendants, and long-term care alert technologies. Their comprehensive product line is designed to provide reliable safety, monitoring, and rapid emergency response for residential and healthcare environments globally |
Centre Ophtalmologique dErmont tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | ophtalmologie-ermont.com Centre Ophtalmologique d'Ermont, a specialized medical clinic in France dedicated to comprehensive eye care. The facility provides a full spectrum of ophthalmology services, including routine consultations, advanced diagnostics, and surgical treatments for various ocular conditions. The portal serves as a convenient hub where patients can access health information, manage their appointments, and connect with a team of expert specialists |
Immling tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | immling.de is the official website for the Immling Festival, a renowned classical music and opera event held annually at Gut Immling in Halfing, Germany. Running primarily from June to August since 1997, it features high-quality opera productions and symphony concerts in a picturesque setting. In 2026, the festival celebrates its 30th anniversary, remaining a major cultural highlight in the Chiemgau region |
DHC Corporation tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | dhc.co.jp zoominfo.com/c/dhc-corp/372590440 DHC Corporation, a major Japanese health and beauty company renowned for its dietary supplements, skincare, and cosmetics. The brand is especially famous for its olive oil-based beauty products and high-quality, affordable nutritional supplements. The site serves as a primary hub for consumers to purchase their popular health, wellness, and beauty essentials |
Steegaa Interior tracker page ↗ | the gentlemenfilter this group | · Jun 30, 2026 | steegaa.com zoominfo.com/c/steegaa/408684474 Steegaa Interior, a Dutch company based in Helmond specializing in high-end custom interior design and construction.Established in 2000, the firm focuses on designing, manufacturing, and installing bespoke interiors for both private and commercial clients.They are highly regarded for their exceptional craftsmanship, attention to detail, and ability to deliver complete, turnkey interior solutions.Additionally, the company operates as a recognized training center, offering apprenticeships to foster the next generation of skilled interior builders |
https://sza.it/ tracker page ↗ | inc ransomfilter this group | · Jun 30, 2026 | No details on the leak post beyond the victim name. |
Forces tracker page ↗ | bavacaifilter this group | · Jun 30, 2026 | Organization with 28 emails extracted. Domain: forces.gc.ca |
Spector and Lenz, PC tracker page ↗ | pearfilter this group | · Jun 30, 2026 | Firm provides legal representation to clients facing disability, injury, or serious illness |
ORA Group Information tracker page ↗ | pearfilter this group | · Jun 30, 2026 | Specializing in retail and the point-of-sale experience |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.