Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
203
Leak-site victims · 30d
1K
Active groups · 30d
8011 new
Most active · 7d
the gentlemen
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲8 | 152 | 400 | 400 | active | no public figure | |
| 2 | qilin | 29 | ▲16 | 113 | 364 | 364 | active | no public figure | |
| 3 | storm | 9 | ▼31 | 49 | 61 | 61 | active | no public figure | |
| 4 | krybit | 15 | ▲15 | 44 | 95 | 95 | active | no public figure | |
| 5 | akira | 10 | ▲3 | 43 | 87 | 87 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 2 | ▼9 | 37 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 35 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 10 | ▲6 | 34 | 113 | 113 | active | no public figure | |
| 9 | lockbit5 | 5 | = | 27 | 54 | 54 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 10 | ▲1 | 24 | 26 | 26 | active | no public figure | |
| 11 | safepay | 9 | ▼2 | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | emperador | 5 | = | 19 | 23 | 23 | active | no public figure | |
| 15 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 4 | ▼3 | 16 | 16 | 16 | active | no public figure | |
| 18 | shinyhunters | 2 | = | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲6 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | play | 3 | ▼1 | 13 | 47 | 47 | active | no public figure | |
| 22 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 23 | rhysida | 2 | ▼2 | 13 | 15 | 15 | active | no public figure | |
| 24 | pear | 0 | ▼1 | 12 | 23 | 23 | active | no public figure | |
| 25 | cyberleek | 0 | = | 12 | 12 | 12 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents2,844 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
Spector and Lenz, PC tracker page ↗ | pearfilter this group | · Jun 30, 2026 | Firm provides legal representation to clients facing disability, injury, or serious illness |
ORA Group Information tracker page ↗ | pearfilter this group | · Jun 30, 2026 | Specializing in retail and the point-of-sale experience |
Sociedad Latina tracker page ↗ | pearfilter this group | · Jun 30, 2026 | Support in education, civic engagement, workforce development, and arts and culture, specifically tailored for multilingual learners |
Penticton and District Society for Community Living tracker page ↗ | bavacaifilter this group | · Jun 30, 2026 | Canadian charity providing disability-related services. CRA Registration: 119090686RR0001 |
Advanced Business Systems tracker page ↗ | akirafilter this group | · Jun 30, 2026 | Advanced Business Systems, Inc. is a locally owned business serving the Quad Cities area, specializing in a wide range of office products and solutions including copiers, printers, IT services, phone systems, and furniture.We will upload 31gb of corporate data soon. Employee personal information (88 SSNs, passports and other docs), NDA, projects, contracts and agreements, customer information and so on. |
About Todd Hamaker & Johnson tracker page ↗ | akirafilter this group | · Jun 30, 2026 | Todd, Hamaker & Johnson, LLP is a professional tax and accounting firm based in Lufkin, Texas, dedicated to providing personalized services to both individuals and businesses. The firm offers a comprehensive range of services including tax, accounting, audit, and financial guidance.We will upload 40gb of corporate data soon. Lots of client and employee personal information (passports, SSNs, DLs and other information), detailed financials, client financials and other confidential client docs, contracts and agreements, etc. |
petradiamonds.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 207,000,000 Size: 50GB | THE DIAMOND ARCHIVE: Petra Diamonds Limited Documents PROLOGUE A complete employee directory with names, corporate emails, and direct phone numbers. The home address of the company's director. Contractor bank details. GPS coordinates of directors' travel routes. Official exploration licenses from South Africa's Department of Mineral Resources. Shaft hoist capacities and production data from the mines. A confidential JV agreement with a complete list of Petra's 54 licenses in Botswana and financial terms. A confidential letter regarding the closure and care-and-maintenance of the Helam mine. Confidential geological reports from competitors — Rio Tinto, De Beers, Firestone Diamonds. All of this comprises the internal documents of Petra Diamonds Limited , one of the world's leading diamond mining companies, listed on the London Stock Exchange (LSE). Petra Diamonds operates several of the world's largest kimberlite pipes, including the Cullinan mine, where the most famous diamonds in history were found. Its subsidiaries — Finsch Diamond Mine, Helam Mining, and Williamson Mine — operate in South Africa and Tanzania. In this article, you will be able to review only a portion of the data we have decided to disclose. Everything else will be available for download and independent review following the publication of the full archive. --- Part I. Who Is Petra Diamonds Petra Diamonds Limited is a publicly traded diamond mining company registered on the London Stock Exchange. Its operational headquarters are in South Africa: | Parameter | Value | |-----------|-------| | Registered Address | Block 3, Silver Point Office Park, 22 Ealing Crescent, Bryanston, Johannesburg | | Postal Address | P.O. Box 71007, Bryanston 2021 | | Telephone | +27 11 702 6900 | | Fax | +27 11 706 3064 / 3071 | | Website | www.petradiamonds.com | | Registration Number | 97/07770/07 | Assets and Mines: - Finsch Diamond Mine (Pty) Ltd — Barkly West, Northern Cape, South… |
orion4value.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 6,200,000 Size: 50GB | THE CERTIFICATE AS A VULNERABILITY: Documents of Orion Registrar Inc. PROLOGUE Financial reports and weekly cash flow statements. Company bank account details at First Citizens Bank. Payroll records and employee timesheets with names and hours worked. Audit reports with detailed vulnerability data from hundreds of clients. The complete contract with General Dynamics Mission Systems — one of the largest contractors of the U.S. Department of Defense — describing all 24 facilities and their headcounts. ISO certification requests from U.S. Army facilities. Internal correspondence with names, phone numbers, and corporate emails of all employees. Complaints about clients caught in fraud schemes who continued to carry the Orion stamp. All of this comprises the documents of Orion Registrar Inc. , a U.S.-based ISO accreditation body headquartered in Arvada, Colorado. The company is accredited by ANAB (American National Accreditation Board) and issues certificates of conformity to ISO 9001, AS9100, ISO 14001, ISO 45001, ISO 13485, and other standards — to enterprises throughout the United States and abroad. The nature of Orion's business makes this leak particularly dangerous: an auditor by definition gains access to the internal processes, vulnerabilities, and organizational structure of each client. Data from manufacturing companies, defense sector suppliers, Army facilities, and critical infrastructure sites. In this article, you will be able to review only a portion of the data we have decided to disclose. Everything else will be available for download and independent review following the publication of the full archive. --- Part I. Who Is Orion Registrar Inc. Orion Registrar, Inc. — a certification body (Registrar / Certification Body) accredited by ANAB. Physical office address: 7502 W. 80th Ave., Ste. 225, Arvada, CO 80003 . Mailing address: PO Box 745070, Arvada, Colorado 80006-5070 . Website: www.orion4value.com . Corporate email… |
clc-tn.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 6,300,000 Size: 99GB | City Lumber Company: Building Materials in Tennessee — What Lies Behind the Small Sign --- PROLOGUE In our possession — internal documents of City Lumber Company (CLC) , dated 2021–2026. An IT registry dated May 11, 2026: login credentials, workstation passwords, and Office 365 passwords for 22 employees and 4 service accounts — in a single table, in plain text. Corporate email addresses @clc-tn.com. A complete IP address map of the entire network. Printers by office. Medical documentation for employee Felipe Orozco: referral for left heart catheterization dated January 29, 2025, diagnosis, cardiologist's name, clinic name, SSN (last 4 digits), date of birth, home address. The document is stored in the corporate archive. BCBS documents for 2026 : rate sheets for 30 employees with full names and coverage parameters. Separate enrollment PDFs — containing SSNs, dates of birth, addresses, personal email addresses, and life insurance beneficiary names. Phone directory dated January 21, 2026: personal mobile numbers of 19 employees, including management. The same document contains a separate contact block for AMS , listing the VP Finance and another CLC top manager. Hot List dated June 15, 2026: approximately $120,000 in aged inventory at dealer cost — prices that suppliers do not permit to be published. Unbilled Spec Orders dated January 31, 2026: $259,195.66 in goods received from suppliers but not yet invoiced to customers. 358 line items. Subcontractor names. Key Custody Log dated April 2024: who has access to which premises. Including employees no longer on staff. Christmas gifts 2024 : customer list by salesperson — 40+ contractor names with clothing sizes. Co-op funding from suppliers totaling $7,875. All of this comprises the working documentation of a small building materials dealer in West Tennessee. 30 employees. Three locations: Jackson, Dyersburg, W. Lafayette Showroom. --- Part I. Who Is City Lumber Company City Lumber… |
wilfley.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 26,300,000 Size: 410GB | SEAL FAILURE A company that builds pumps for chemical and defense production — and undertakes to contain aggressive media under pressure — could not contain its own documentation. --- PROLOGUE We have the archive of A.R. Wilfley and Sons, Inc. — a privately held American manufacturer of centrifugal pumps for the mining, chemical, metallurgical, and defense industries, founded in 1919 and still operating today. Inside — commercial invoices and customs declarations, internal correspondence and technical specifications, HR documents with employees' medical data and Social Security numbers, banking details for international transfers, quality inspection records, environmental discharge permits, defense contracts, and export declarations. Banking details for international transfers , printed on every proforma invoice: ANB BANK, ABA 107001232, SWIFT AMNTUS51, Account 2000016785. Alongside them — the names of contact persons and payment amounts. This data set is sufficient for a Business Email Compromise attack. A letter from the Director of Engineering and Quality, Greg S. Highfill, PE , in which he states in writing that in-process inspection " does not work " — during a period when the company was supplying pumps for explosives manufacturing, defense facilities, and aggressive chemical media. TSA SENSITIVE SECURITY INFORMATION documents , stored in the same body of files as HR forms and commercial invoices. And credentials for the closed ThyssenKrupp / CF Industries procurement portal — transmitted in plain text by email and left sitting in the documentation. An invoice marked "DON'T SEND," whose END USER field reads: CONOCO PHILLIPS — ANZAC, AB . Alongside it — documents for pumps for CNOOC Petroleum (China's state oil company, an oil-sands site in Alberta), Nutrien (the world's largest potash producer), Glencore , and BAE Systems . Forms with employees' Social Security numbers , medical diagnoses including HIV status, addictions, and… |
Chamco tracker page ↗ | qilinfilter this group | · Jun 30, 2026 | Manufacturing |
Hemmersbach GmbH & Co. KG tracker page ↗ | qilinfilter this group | · Jun 30, 2026 | Software |
Medlink Georgia tracker page ↗ | cmd organizationfilter this group | · Jun 30, 2026 | We have proudly been serving northeast Georgia since 1976. As a federally qualified health center, we are able to offer uninsured and underinsured patients a sliding fee scale. No one is denied services due to lack of income or insurance status. At MedLink Georgia, we strive to provide comprehensive, coordinated, and continuous care to all our patients. We offer a broad array of primary and preventive care services for patients of all ages, including screening, diagnosis, and management of chronic illnesses. |
joyconstructionnyc.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 37,400,000 Size: 261GB | Joy Construction Corp: $1.3 Billion in Affordable Housing — and $8.7 Million to a Shareholder in Six Months --- PROLOGUE Joy Construction Corp. — a construction S-Corporation, 40 Fulton Street, 21st Floor, New York. Owners and officers — Amnon Shalhov and Nisan Lobel. The company builds affordable housing on government subsidies. The documents span the period from 2021 to May 2026: financial statements, statements for thirty-plus accounts, audited WIP reports, payroll registers, wire transfers to Israel, court cases, and closing documents for NYC HDC deals worth tens of millions of dollars. In this article you will be able to review only a portion of the data we have decided to make public. Everything else you will be able to download and examine for yourself once the full archive is published. --- Part I. Who Joy Construction Are Joy Construction Corp. — a construction S-Corporation. Address: 40 Fulton Street, 21st Floor, New York, NY 10038 . Specialty — residential and commercial construction in the New York metropolitan area. Predominantly affordable-housing program projects (LIHTC, HPD, HUD). Fixed-price contracts running more than a year. Owners and officers — from court documents: | Name | Role | |-----|------| | Amnon Shalhov | CEO and co-owner of Joy Construction Corp. | | Nisan Lobel | Co-owner and manager of Joy Construction Corp. | | Isaac Schwartzberg | Primary contact, [email protected] — contract author | | Priyanka Raul | Digital signatory of agreements, [email protected] | | Gina Gojcaj | Document preparation, PM | The Shalhov and Lobel names are established from a federal case, where both are named as defendants alongside Joy Construction Corp. Amnon Shalhov signed an agreement with OSHA as President. A money-market account tied to Amnon Shalhov. The company has separate bank accounts and LLCs under the names: Joy Management YYY Corp , Joy - Amnon MM , Joy Bank Leumi Brokerage , Joy FX , five certificates of… |
rcfassoc.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 5,000,000 Size: 39GB | R.C. FIELDS & ASSOCIATES: Client Data, Hidden Development Risks, and Uninvestigated Security Incidents PROLOGUE Inside: signed client contracts with full financial terms. Internal employee compensation rates. Geotechnical reports on soil conditions beneath development sites. Confidential plans for future residential projects before any public announcement. A complete ten-year personnel history with documented security incidents. Legal documents covering hundreds of properties dating back to 1944. This article covers only a portion of the data we have chosen to disclose. Everything else will be available for download and independent review once the full archive is published. --- Part I. Who R.C. Fields & Associates Are R.C. Fields & Associates, Inc. is a professional corporation specializing in engineering, surveying, and land development services. Address: 625 N. Washington Street, Suite 250, Alexandria, VA 22314 Phone: (703) 549-6422 Website: www.rcfassoc.com The firm is a member of the Engineers & Surveyors Institute, Inc. (ESI) — the organization that administers Fairfax County's expedited plan review program (Designated Plans Examiner, DPE). Clients include private developers, property owners, Fairfax County government agencies, and VDOT. Key individuals: - Andrea Spruch — Principal, signed client contracts - Wim J. De Sutter — Licensed surveyor, license no. 3462, signed survey certifications - Taylor Doyle, Vince McHale — Project managers --- Part II. A Hidden Soil Problem: What a Developer Would Rather Not Know Too Soon One of the most critical findings in the archive is not financial data or personnel records. It is a geotechnical report — the kind that typically stays strictly within the project team. This is a contract between TERRA Engineering Services, PLC and RCF client Patrick Kessler (Kessler Real Estate Group, LLC) for geotechnical investigation of the site at 8734 Lukens Lane, Alexandria, VA (Tax Map 110-1-((1))… |
ilex-paysages.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 5,000,000 Size: 116GB | LANDSCAPE ARCHIVE: How Ilex Paysages et Urbanisme Stores Its Own — and Others' — Secrets PROLOGUE Thousands of internal documents. Multi-million-euro contracts. Employee personal data including Social Security numbers and banking details. Payment records of private individuals. Internal server paths to French government systems. Internal correspondence. Cost estimates for contracts worth tens of millions of euros. Financial reports on projects in Marseille, Lyon, Nantes, Vénissieux, and more than a dozen other French cities. Budgets with employee hourly rates. Consolidated contract summaries with public-sector clients. Personal documents — including account numbers and insurance certificates. Scanned receipts of private individuals with full payment details. This article covers only a portion of the data we have chosen to disclose. Everything else will be available for download and independent review once the full archive is published. --- Part I. Who Ilex Paysages + Urbanisme Are Three words. One firm. Twenty years of public contracts. Ilex Paysages et Urbanisme is a French landscape architecture and urbanism agency, headquartered in Lyon, 69007, rue Garibaldi. Their specialty: designing public spaces, eco-districts, and concerted development zones (ZAC — Zones d'Aménagement Concerté) for municipalities and public-sector developers. Clients and partners: Établissement Public d'Aménagement Euroméditerranée (Marseille), Métropole de Lyon , Nantes Métropole , Euralille , and the municipal governments of dozens of French cities. Subcontractors include the firms Atelier Lion and François Kern , engineering company Egis , and scientific partner CNRS Montpellier . Their contract base is public procurement: negotiated procedures under Article 104-1-9 of the French Public Contracts Code (CMP), public works supervision contracts (MARCHÉ DE MAÎTRISE D'ŒUVRE), and ZAC contracts worth tens of millions of euros. One contract, one public-sector… |
owensborograin.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 35,600,000 Size: 171GB | PROCESSING: GRAIN IN SOMEONE ELSE'S MILL PROLOGUE Tax returns filed with the IRS under threat of "fine or imprisonment." A grounding audit commissioned by Cargill itself — marked confidential — documenting critical violations in a zone where n-hexane vapors are continuously present at working concentrations. Monthly grain position reports marked "Not subject to public disclosure," showing $38–44 million in open obligations without a single dollar of collateral. A complete biodiesel delivery history from the facility's internal ERP system: 10 million gallons over two months, eleven buyers — including Cargill's own trading division purchasing from its own subsidiary. Banking details: account number, ABA routing, SWIFT. Three separate legal entities filing taxes under one roof. A production permit issued in the name of one specific individual. Contracts marked "Cargill Confidential. No copying or distribution." This article contains only a portion of the data we have chosen to disclose. Everything else will be available for download and independent review after the full archive is published. --- Part I. Who Is Owensboro Grain Owensboro Grain Company LLC is a soybean processing complex in Owensboro, Kentucky. - Registered address: 822 E 2nd Street, Owensboro, KY 42302 (P.O. Box 1787) - Production facility: 1145 Ewing Road, Owensboro, KY 42301 - EIN: 61-1394346 | DUNS: 001947068 - Subsidiary/affiliated entity: Owensboro Grain Holding Company, Inc. , EIN: 61-0300050 Product line: soybean meal (HiPro and MidPro), lecithin, refined oils, biodiesel, glycerin. Key Personnel: | Title | Name | Contact | |-------|------|---------| | Project and Engineering Manager | Matt Thompson | [email protected], 270-686-6583 | | Operations Lead / VP | Brian Reid | [email protected] | | Edible Oils Facility Manager | Dustin Merritt | [email protected], 270-686-6681 | | Procurement Manager | Jeremy S. Coomes |… |
infinedi.net tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 17,900,000 Size: 86GB | Clearinghouse The company doctors pay to keep their patients' data safe. This article presents only a portion of the materials from the archive now in our possession. The full dataset — 86 GB — will be made available for independent review at a later date. --- Prologue There is a link in the American health insurance chain that most people never see and never name. Every time a doctor bills an insurance company — for a visit, physical therapy, a lab test, an X-ray — that bill travels somewhere before it reaches the insurer. It passes through a clearinghouse : a medical claims processing hub. The clearinghouse receives the bill, validates the format, assigns codes, and routes it forward. This work is invisible, but without it the system stops. A physician who uses a clearinghouse signs a Business Associate Agreement. That contract establishes one thing: the patients' names, diagnoses, policy numbers, and billed amounts — all of it passes into the clearinghouse's hands and must remain in a protected environment. The requirements come from HIPAA — the Health Insurance Portability and Accountability Act. Federal law defines Protected Health Information (PHI) and requires business associates to treat it as regulated data: segregated storage, access controls, encryption, audit trails, incident response plans. The penalties for violations run from $100 to $50,000 per documented incident, up to $1.9 million per year within a single violation category. When intent is proven, criminal liability applies: fines up to $250,000 and up to ten years in federal prison (42 USC 1320d-6). This article is about Infinedi, LLC of Tulsa, Oklahoma. Since 1986, the company has processed medical insurance claims for hundreds of medical practices across the country. Its website declares HIPAA compliance. In the archive now in our possession, it stored patient data alongside payroll records, corporate agreements, and the personal Social Security number of its… |
vcnyhome.com tracker page ↗ | settrafilter this group | · Jun 30, 2026 | Revenue: 176,000,000 Size: 1TB | THE VCNY HOME ARCHIVE The company that sells home comfort failed to protect its own home — its internal data. --- PROLOGUE We have an archive of data belonging to VCNY Home — Textiles From Europe, Inc. — a New Jersey textile importer supplying bedding, curtains, throws, and rugs to Walmart, Dollar General, Costco, and dozens of other American retailers. The archive totals 1.08 TB . Inside: emails, bank confirmations, invoices, Walmart settlement agreements, customs declarations, insurance policies, factoring contracts, and internal management correspondence. The complete digital archive of the company spanning more than two decades — from 2003 to 2026. Correspondence about deliberate price inflation for Sears. Certificates of origin issued retroactively . A company account at an Israeli bank that received $2,380,333.41 in IRS refunds in 2025. A wire transfer from the Bahamas. A wire transfer from Saudi Arabia to a non-standard account. A $6 million insurance policy. Fifteen settlement agreements with Walmart totaling over $4.6 million. This article presents only a portion of the data selected for publication. The full archive is planned for public release for download and independent review at a later date. --- Part I. Who They Are Corporate Structure The legal core — Textiles From Europe, Inc. Incorporated in New Jersey. EIN: 11-2852364 . Three names in the market, one tax ID: | Trade Name | Where Used | |---|---| | Textiles From Europe, Inc. | Walmart (US), Lowe's, customs, banks, insurers | | Victoria Classics | Kmart, Sears, Lowe's, JCPenney, invoices and W-9 | | VCNY Home | Costco, consumer market, vcnyhome.com | | Textiles From Europe DBA Victoria-Classics | Remittance: Box 347123, Pittsburgh PA 15251-7123 | Two addresses used simultaneously: - 5901 West Side Avenue, 6th Floor, North Bergen, NJ 07047 — in agreements with Wells Fargo, Coface, Israel Discount Bank, and the majority of customs documents - 2170 Route 27 (Lincoln… |
Port Angeles Composite tracker page ↗ | cmd organizationfilter this group | · Jun 30, 2026 | Port Angeles Composite LLC (PAC) is a leading supplier of advanced structural composite assemblies and components, serving the global commercial and business aerospace markets. Originally founded in 1996 as Angeles Composite Technologies, PAC was acquired by Honda Aircraft Company in October 2025. The company operates from a state-of-the-art manufacturing facility on Washington State’s Olympic Peninsula, supporting customers such as Boeing, Bombardier, and Honda Aircraft with high-quality composite structures for new aircraft systems. PAC's advanced manufacturing processes and technology ensure the highest quality composite products, offering tailored solutions to meet the unique requirements of each aerospace customer. |
www.maytrucking.com tracker page ↗ | embargofilter this group | · Jun 30, 2026 | May Trucking Company is a family-owned interstate transport carrier founded in 1945, headquartered in Brooks, Oregon. They provide dry freight and temperature-c... |
Kunert Fashion tracker page ↗ | qilinfilter this group | · Jun 29, 2026 | Manufacturing |
C****h tracker page ↗ | payoutskingfilter this group | · Jun 29, 2026 | No details on the leak post beyond the victim name. |
Musashino University tracker page ↗ | qilinfilter this group | · Jun 29, 2026 | Education |
Lørenskog kommune tracker page ↗ | cmd organizationfilter this group | · Jun 29, 2026 | Lørenskog kommune offers a range of services including education, health care, social services, and community development. Their intended clients include residents seeking information on property tax, childcare, and various cultural and recreational activities. The municipality also engages with the public through political meetings and community involvement initiatives. Additionally, Lørenskog kommune celebrates local events and milestones, fostering a sense of community among its residents. |
Bonacio tracker page ↗ | ransomhousefilter this group | · Jun 29, 2026 | No details on the leak post beyond the victim name. |
KALIACT ANCHETA et Associs tracker page ↗ | qilinfilter this group | · Jun 29, 2026 | Law Firms & Legal Services |
Metal Sur Famin tracker page ↗ | qilinfilter this group | · Jun 29, 2026 | Industrial Machinery & Equipment |
guardianbarrierservices.com tracker page ↗ | 3amfilter this group | · Jun 29, 2026 | Guardian Barrier Services provides a wide range of products and services for events, including crowd control barriers, cable ramps, truss structures, and temporary flooring. Their experienced team supports clients from the planning stage to the ex | PUBLISHED 0% | Views: 16 |
ESMS Global Limited tracker page ↗ | anubisfilter this group | · Jun 29, 2026 | Medical information services data breach. |
Boston Orthotics & Prosthetics tracker page ↗ | anubisfilter this group | · Jun 29, 2026 | Patient data breach at yet another negligent clinic. |
Lam Soon tracker page ↗ | qilinfilter this group | · Jun 29, 2026 | Food & Beverage |
Bristol Place tracker page ↗ | qilinfilter this group | · Jun 29, 2026 | 0 |
Gsma tracker page ↗ | qilinfilter this group | · Jun 29, 2026 | Architecture, Engineering & Design |
GDN AR(Dorinka) tracker page ↗ | inc ransomfilter this group | · Jun 29, 2026 | No details on the leak post beyond the victim name. |
medipakpharma.com tracker page ↗ | dragonforcefilter this group | · Jun 29, 2026 | The Pakistani pharmaceutical company Medipak Limited (medipakpharma.com) specializes in the manufacture of infusion solutions, medical devices, and pharmaceutic... |
hwaseng tracker page ↗ | dragonforcefilter this group | · Jun 29, 2026 | A Taiwanese manufacturer with forty years of experience, specializing in the high-precision production of metal fasteners, precision-machined parts, and compone... |
agroprime tracker page ↗ | dragonforcefilter this group | · Jun 29, 2026 | development of specialized software (SaaS) for automating agribusiness management and monitoring field personnel |
stni.co.kr tracker page ↗ | dragonforcefilter this group | · Jun 29, 2026 | Creating accurate virtual replicas involves production facilities, workshops, and equipment for modeling, testing, and optimizing technological processes. |
vipimaging tracker page ↗ | dragonforcefilter this group | · Jun 29, 2026 | VIP Imaging is the largest mobile nuclear imaging company in Southern California, specializing in cardiac PET/CT and SPECT studies for cardiologists. The compan... |
METCO Services, Metco Southeast tracker page ↗ | cmd organizationfilter this group | · Jun 29, 2026 | Metco Services is a multi-disciplined consulting firm specializing in engineering services for the water and wastewater industry. They provide study, design, and construction engineering services to publicly owned water and wastewater collection and treatment systems. With over 100 years of combined industry experience, their team focuses on efficient system utilization to optimize value. Their clientele includes municipalities in Michigan, Ohio, Pennsylvania, and Florida. |
viennaairport.com (SOLD TO 3RD PARTY) tracker page ↗ | eraleign (apt73)filter this group | · Jun 29, 2026 | SOLD TO 3RD Party! No DATA AVALIABLE! Vienna Airport (Flughafen Wien AG) is an Austrian company, ... |
Axionlog tracker page ↗ | qilinfilter this group | · Jun 29, 2026 | Freight & Logistics Services |
NASCO tracker page ↗ | qilinfilter this group | · Jun 29, 2026 | Healthcare Services |
Driving School Software tracker page ↗ | prinz eugenfilter this group | · Jun 28, 2026 | Hundreds of driving schools impacted. 16 Million rows of SQL, 8000 FULL credit cards, and more. Full leak post + data available on the new PRINZ EUGEN site. prinzkpn6d3itrgcytmsmlcpt5mgwn3ihpck2hsed5cezlbtbi3wklid.onion |
maglificioliliana.com UPDATE-FULL DATA DUMP FREE PART1 tracker page ↗ | stormousfilter this group | · Jun 28, 2026 | Over +10GB GB of data has been accessed and exfiltrated. This includes product designs, historical fashion lines, and technical specifications for garments. Furthermore, we have obtained customer databases from various parts of the world, financial records, commercial contracts, employee data, personal files for all staff members within the network, daily operational documents, and more. |
lorenzoni-store.com UPDATE-FULL DATA DUMP FREE PART1 tracker page ↗ | stormousfilter this group | · Jun 28, 2026 | Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains associated with the parent company: maglificioliliana.com/ |
montechiaro-store.com UPDATE-FULL DATA DUMP FREE PART1 tracker page ↗ | stormousfilter this group | · Jun 28, 2026 | Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains associated with the parent company: maglificioliliana.com/ |
impulso-store.com UPDATE-FULL DATA DUMP FREE PART1 tracker page ↗ | stormousfilter this group | · Jun 28, 2026 | Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains associated with the parent company: maglificioliliana.com/ |
higuchi-inc.co.jp tracker page ↗ | stormousfilter this group | · Jun 28, 2026 | (Dallas - HongKong - LosAngeles ) Comprehensive financial statements including Balance Sheets, Asset records, Liabilities, Capital, Accounts Receivable (A/R), and Accounts Payable (A/P) database backups from Sage 50 (formerly Peachtree Accounting software), indicated by the .ptb file extension Corporate data detailing domestic and international inventory tracking, trade checking, and business operations. |
HIGUCHI USA, INC tracker page ↗ | stormousfilter this group | · Jun 28, 2026 | (Dallas - HongKong - LosAngeles ) Comprehensive financial statements including Balance Sheets, Asset records, Liabilities, Capital, Accounts Receivable (A/R), and Accounts Payable (A/P) database backups from Sage 50 (formerly Peachtree Accounting software), indicated by the .ptb file extension Corporate data detailing domestic and international inventory tracking, trade checking, and business operations. |
eogb.co.uk tracker page ↗ | stormousfilter this group | · Jun 28, 2026 | Deep access to Microsoft Dynamics GP containing complete corporate accounting, invoices, vendor details, and commercial transactions.Access to internal legal documents, partnership agreements, and customer contracts (such as CBIF OSMO agreements).Exfiltration of operational spreadsheets, financial reports, and executive documents via corporate |
eshacloudqa.com tracker page ↗ | stormousfilter this group | · Jun 28, 2026 | We have breached ESHA Research / ESHA Cloud Services and compromised their core product development databases. The exfiltrated data includes highly confidential industry secrets and formulation data Complete intellectual property containing secret product designs, manufacturing blueprints, and recipes (SupplementFormula, PureFood, FoodGroup).Deep laboratory data, nutritional testing breakdowns, and allergen classification records (SupplementIngredient, Analysis, AllergenGroup, Sensitive registries containing client profiles, user metrics, and market consumer data (Consumer, Activity). |
monoprix.tn tracker page ↗ | stormousfilter this group | · Jun 28, 2026 | Data description: Pending update |
Official Statement: Protecting palatineschool.org Infrastructure tracker page ↗ | stormousfilter this group | · Jun 28, 2026 | During our routine network security audits, our team discovered critical structural vulnerabilities within Palatine School, which granted us full, unrestricted access to their central server (PALDC2020). We had the technical capacity to access every directory, including pupil databases ( StudentData NHS NO ) , Pupil Admin - Users -FocusIT) and staff records Personnel.We want to announce that we have locked down this operation and decided to leak absolutely nothing.This is an institution dedicated to children and special needs education. Unlike corporate thieves or ruthless threat actors, we operate with a strict code of ethics: we do not target children, schools, or healthcare facilities.Instead of destroying them, we have chosen to act as an uninvited security audit. We are using our platform to publicly invite the administration of Palatine School to contact us privately. We will provide them with the full technical details of the critical vulnerabilities we discovered and guide them on how to patch their system for free, ensuring they are protected from other ruthless cyber criminals. |
1-800-dentist tracker page ↗ | qilinfilter this group | · Jun 28, 2026 | Business Services |
Transcore tracker page ↗ | qilinfilter this group | · Jun 28, 2026 | Architecture, Engineering & Design |
ford.mx tracker page ↗ | krybitfilter this group | · Jun 28, 2026 | Ford Motor Company, S.A. de C.V. (Ford de Mexico) is the Mexican subsidiary of Ford Motor Company (USA), the first autom... |
Thyssenkrupp Marine Systems (TKMS) GmbH / Atlas Elektronik tracker page ↗ | the gentlemenfilter this group | · Jun 28, 2026 | https://www.zoominfo.com/c/atlas-elektronik-gmbh/22289599 https://www.zoominfo.com/c/atlas-north-america-llc/346681852 https://www.zoominfo.com/c/thyssenkrupp-marine-systems/559786010 www.atlas-elektronik.com na.atlas-elektronik.com https://www.tkmsgroup.com/atlas-elektronik/ ThyssenKrupp Marine Systems of Germany (often abbreviated TKMS) is a group and holding company of providers of naval vessels, surface ships and submarines. It was founded when large industrial conglomerate ThyssenKrupp acquired Howaldtswerke-Deutsche Werft on January 5, 2005 TKMS Group is a leading provider of integrated system solutions in maritime defense technologies, catering to the complex requirements of modern navies. The company specializes in surface vessels, submarines, and advan Atlas Elektronik, founded in 1902 and headquartered in Bremen, Germany, is a marine electronics and systems business. It is involved in the development of integrated sonar systems for submarines and heavyweight torpedoes. 1TB+ |
| Sysco sysco.com | breach | · Jun 28, 2026 | 2.7M accounts · breached 2026-06-15 · Customer feedback, Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses, Usernames · In June 2026, the food distribution company Sysco was targeted by a ShinyHunters "pay or leak" extortion campaign . Data was subsequently published containing 2.7M unique email addresses belonging to staff and customers. The data also contained largely corporate contact information including names, phone numbers, physical addresses, internal job titles, and customer feedback. |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.