Incidents
Ransomware leak-site victims (RansomLook), confirmed breaches (Have I Been Pwned) and AI-written profiles of the most active groups
Leak-site victims · 7d
202
Leak-site victims · 30d
1K
Active groups · 30d
8011 new
Most active · 7d
the gentlemen
Breaches added · 30d
7
Accounts exposed · 30d
34.6MHIBP
Ransomware & extortion groups · activityleak-site posts · 90-day window · click a group for its profile
| # | Group | 7d | trend | 30d | 90d | all-time* | Last post | Status | Estimated earnings (public reporting) |
|---|---|---|---|---|---|---|---|---|---|
| 1 | the gentlemen | 30 | ▲8 | 152 | 400 | 400 | active | no public figure | |
| 2 | qilin | 29 | ▲16 | 110 | 364 | 364 | active | no public figure | |
| 3 | storm | 9 | ▼31 | 49 | 61 | 61 | active | no public figure | |
| 4 | krybit | 15 | ▲15 | 44 | 95 | 95 | active | no public figure | |
| 5 | akira | 10 | ▲3 | 43 | 87 | 87 | active | Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. | |
| 6 | direwolf | 2 | ▼9 | 37 | 62 | 62 | active | no public figure | |
| 7 | coinbase cartel | 0 | = | 35 | 56 | 56 | active | no public figure | |
| 8 | inc ransom | 10 | ▲6 | 34 | 113 | 113 | active | no public figure | |
| 9 | lockbit5 | 5 | = | 27 | 54 | 54 | active | Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… | |
| 10 | audit team | 10 | ▲1 | 24 | 26 | 26 | active | no public figure | |
| 11 | safepay | 9 | ▼2 | 22 | 67 | 67 | active | no public figure | |
| 12 | leakeddata | 1 | ▲1 | 20 | 39 | 39 | active | no public figure | |
| 13 | orova | 0 | = | 19 | 44 | 44 | active | no public figure | |
| 14 | emperador | 5 | = | 19 | 23 | 23 | active | no public figure | |
| 15 | zawoo | 0 | = | 19 | 19 | 19 | active | no public figure | |
| 16 | kazu | 0 | ▼17 | 17 | 17 | 17 | active | no public figure | |
| 17 | vexy | 4 | ▼3 | 16 | 16 | 16 | active | no public figure | |
| 18 | shinyhunters | 2 | = | 14 | 32 | 32 | active | no public figure | |
| 19 | panzer | 7 | ▲6 | 14 | 25 | 25 | active | no public figure | |
| 20 | black nevas | 1 | ▼12 | 14 | 14 | 14 | active | no public figure | |
| 21 | play | 3 | ▼1 | 13 | 47 | 47 | active | no public figure | |
| 22 | chaos | 3 | ▼1 | 13 | 35 | 35 | active | no public figure | |
| 23 | rhysida | 2 | ▼2 | 13 | 15 | 15 | active | no public figure | |
| 24 | pear | 0 | ▼1 | 12 | 23 | 23 | active | no public figure | |
| 25 | cyberleek | 0 | = | 12 | 12 | 12 | active | no public figure |
*all-time = since this tracker started collecting leak-site posts. Earnings are estimates from public reporting (law enforcement, blockchain analytics), compiled by the model; treat as indicative.
Incidents2,843 records · full details
| Victim | Group / type | Discovered | Details |
|---|---|---|---|
lpgroup tracker page ↗ | novafilter this group | · Jun 24, 2026 | LP Group, founded in 2006, has already completed approximately 1 million square meters of projects in commercial, logistics, and service areas. Highly complex projects. Compromised data profile given in sample. |
alejandria tracker page ↗ | novafilter this group | · Jun 24, 2026 | Alexandria is a platform that facilitates the development and implementation of well-designed teleinformation systems from the point of view of Information Architecture, which arises from the fusion of knowledge of information sciences (library science, archival science, document management, information networks, etc.) |
transvill tracker page ↗ | novafilter this group | · Jun 24, 2026 | Transvill SRL offers national and international road transport and logistics services for cargo shipments. Data profile is provided. |
horizoneye.com tracker page ↗ | inc ransomfilter this group | · Jun 24, 2026 | No details on the leak post beyond the victim name. |
Jit Ex tracker page ↗ | akirafilter this group | · Jun 24, 2026 | JIT-EX, LLC is a privately owned for-hire trucking fleet based in Memphis and Nashville, specializing in regional and local truckload services, dedicated fleets, and crossdock solutions. Thecompany offers a variety of services including transloading, dock services, and storage trailers, aiming to be a one-stop solution for transportation needs.We will upload 40gb of corporate data soon. Employee personal docs (passports, DL numbers of 317 persons, SSNs, w9s and so on), credit card details, payment details, lot of NDAs, projects, contracts and agreements, customer information, etc. |
transvill.com.pe tracker page ↗ | novafilter this group | · Jun 24, 2026 | Transvill SRL offers national and international road transport and logistics services for cargo shipments. Data profile will provided soon |
Miami Machine tracker page ↗ | akirafilter this group | · Jun 24, 2026 | Miami Machine Inc. specializes in machining, fabrication, and engineering services tailored forthe paper, power, steel, and OEM markets. With over 50 years of experience and a manufacturingspace of 86,000 sq. ft, they provide high-quality, custom machinery and equipment solutions.We will upload corporate data soon. Employee personal docs (passports and other docs, photos), NDAs, projects, contracts and agreements, client information, etc. |
Au Vieux Campeur tracker page ↗ | the gentlemenfilter this group | · Jun 24, 2026 | auvieuxcampeur.fr Au Vieux Campeur is a premier French retailer and the leading independent outdoor and sports equipment company in Europe.Founded in Paris in 1941, the brand has expanded from a single historic boutique in the Latin Quarter to nearly 50 stores across France and a robust e-commerce platform.They offer an extensive selection of over 1,500 premium brands, providing specialized clothing and gear for a wide variety of activities including mountaineering, diving, skiing, and trail running |
Cash Canada tracker page ↗ | qilinfilter this group | · Jun 24, 2026 | Business Services |
alejandria.biz tracker page ↗ | novafilter this group | · Jun 24, 2026 | Alexandria is a platform that facilitates the development and implementation of well-designed teleinformation systems from the point of view of Information Architecture, which arises from the fusion of knowledge of information sciences (library science, archival science, document management, information networks, etc.) |
Plateau Excavation tracker page ↗ | the gentlemenfilter this group | · Jun 24, 2026 | plateauexcavation.com zoominfo.com/c/plateau-excavation-inc/1163238690 Plateau Excavation is a leading site infrastructure contractor based in Georgia, providing complete sitework solutions for large-scale development projects across the Southeast.With over four decades of experience, the company specializes in mission-critical markets such as data centers, advanced manufacturing, and e-commerce.As a strategic infrastructure partner with over 1,000 employees, they deliver the critical groundwork required for massive industrial and commercial developments |
Bell Hardware tracker page ↗ | the gentlemenfilter this group | · Jun 24, 2026 | bellhardware.com zoominfo.com/c/bell-hardware/353995383 Bell Hardware is a premier supplier of premium commercial doors, frames, and architectural hardware, operating out of seven locations across Oregon and Northern California.They act as a comprehensive one-stop shop for contractors, providing high-quality building products alongside expert on-site installation and modification services.Furthermore, the company partners with design and construction teams during the early planning stages to evaluate project elements and streamline the building process |
CHIFENG GOLD SEPON tracker page ↗ | the gentlemenfilter this group | · Jun 24, 2026 | lxml.la zoominfo.com/c/lane-xang-minerals-ltd/1311794256 which operates the major Sepon open-pit and underground gold and copper mine in Savannakhet Province, Laos.As a significant regional employer, the company heavily invests in local workforce development, with 95% of its staff being Lao nationals |
Natren tracker page ↗ | the gentlemenfilter this group | · Jun 24, 2026 | natren.com zoominfo.com/c/natren-inc/26870087 Natren is a leading manufacturer of premium probiotic supplements with over 30 years of experience, dedicated to improving gut health and overall well-being.Based in California, the company offers a comprehensive range of natural, non-GMO formulas tailored for men, women, children, and even pets.They are highly regarded for their flagship "Healthy Trinity" 3-in-1 system and their strict cold-chain shipping process, which guarantees 100% potency through the expiration date |
Al Dhow Group tracker page ↗ | the gentlemenfilter this group | · Jun 24, 2026 | al-dhow.com zoominfo.com/c/al-dhow/345585723 Dhow International Holding is a diversified group of companies with a portfolio spanning high-growth and high-impact industries across the GCC region.Their extensive operations encompass a wide range of sectors, including engineering, architectural solutions, hospitality, food & beverage, logistics, healthcare, and venture capital. The group is committed to delivering integrated, end-to-end services while fostering long-term sustainable growth across all its businesses |
Beran Concrete tracker page ↗ | the gentlemenfilter this group | · Jun 24, 2026 | beranconcrete.com zoominfo.com/c/beran-concrete-inc/4424481 Beran Concrete is a premier concrete construction and ready-mix supplier serving commercial and residential projects across Wichita, Kansas, and the broader Midwest.Founded in 1980, the company is driven by a deep pride in quality workmanship and a proven ability to consistently meet strict client deadlines.To support its continued growth and better serve local communities, the business actively expands its regional footprint by integrating additional ready-mix plants |
BDS CZ tracker page ↗ | the gentlemenfilter this group | · Jun 24, 2026 | bds.cz BDS CZ is a Prague-based real estate agency that offers comprehensive property services, including Airbnb management, interior renovations, and investment consulting.The company's name originates from the Vietnamese abbreviation for real estate, indicating its strong focus on serving the local Vietnamese community and investors.Operating from its headquarters in Prague's historic Old Town, the agency assists clients in maximizing their property value and managing real estate portfolios |
Stadttheater Giessen tracker page ↗ | the gentlemenfilter this group | · Jun 24, 2026 | stadttheater-giessen.de rocketreach.co/stadttheater-giessen-gmbh-profile_b40b4590ff936dde Stadttheater Gießen is a prominent multi-genre municipal theatre in Germany, renowned for its striking Art Nouveau (Jugendstil) building constructed in 1907. As the cultural heart of the Mittelhessen region, it offers a diverse repertoire encompassing opera, musicals, drama, and classical concerts. The theatre is celebrated for its high-quality productions, blending traditional classics with innovative contemporary works for audiences of all ages |
Gegenbauer Elektrotechnik tracker page ↗ | the gentlemenfilter this group | · Jun 24, 2026 | gegenbauer-it.at Gegenbauer Elektrotechnik & IT GmbH is a Vienna-based service provider specializing in comprehensive electrical engineering and IT solutions for businesses.Evolving from a sole proprietorship with over 30 years of experience, the company was officially established in 2015 to offer end-to-end planning and implementation.They focus on delivering customized technical infrastructures, professional support, and employee training to meet the diverse needs of their clients |
Meccanica Gn tracker page ↗ | the gentlemenfilter this group | · Jun 24, 2026 | meccanicagn.com zoominfo.com/c/meccanica-gn/368731563 Meccanica GN is an Italian precision manufacturing company based in Carpi, specializing in high-accuracy machining like milling, turning, and grinding.With over two decades of experience, they produce critical components for demanding sectors, including Formula 1 motorsport, aerospace, automotive, and biomedical.The company is recognized for its advanced technology, strict quality assurance, and commitment to maximum performance |
| Madison Square Garden Sports msgsports.com | breach | · Jun 24, 2026 | 9.8M accounts · breached 2026-06-05 · Customer service records, Email addresses, Names, Phone numbers, Physical addresses · In June 2026, the sports and entertainment company Madison Square Garden Sports was the target of a ShinyHunters "pay or leak" extortion campaign . The group later published the alleged data, which included almost 10M unique email addresses spanning staff and customers, along with extensive personal, employment and customer relationship information. |
lpgroup.pt tracker page ↗ | novafilter this group | · Jun 24, 2026 | LP Group, founded in 2006, has already completed approximately 1 million square meters of projects in commercial, logistics, and service areas. Highly complex projects. Compromised data profile given in sample. |
Meta 🇧🇷 tracker page ↗ | bravoxfilter this group | · Jun 24, 2026 | Occupational health services, workplace safety, ergonomics, preventive healthcare. |
Lee International tracker page ↗ | qilinfilter this group | · Jun 23, 2026 | Law Firms & Legal Services |
Coldstat Refrigeration tracker page ↗ | cmd organizationfilter this group | · Jun 23, 2026 | Coldstat Refrigeration offers a full range of industry-proven refrigeration services. From large restaurant chains to individual stores and cafes—Coldstat is ready to meet all your needs. The company’s qualified staff will help you determine the best solution based on your individual needs. Coldstat’s refrigeration services include: sales of commercial refrigeration equipment, installation, maintenance and repair, layout planning, custom system design, and removal of old equipment. Translated with DeepL.com (free version) |
cloudquantum tracker page ↗ | novafilter this group | · Jun 23, 2026 | cloudquantum.co - software company that builds and delivers software solutions and products, such as an app for organizing activities and tools for automatically processing information from documents and media - Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Reynella East College tracker page ↗ | interlockfilter this group | · Jun 23, 2026 | https://www.reynellaec.sa.edu.au/ Reynella East College is an innovative educational institution offering a comprehensive curriculum for students from preschool to 12th grade. However, the school failed to adequately protect the privacy of its students and staff and made no attempt to do so, resulting in the leak of their sensitive personal data online. We are providing you with 600 GB of interesting files and documents, including contracts, financial reports, personal data, student and staff identification numbers, seating charts, and much more. |
gov.br tracker page ↗ | eraleign (apt73)filter this group | · Jun 23, 2026 | Gov.br — this is the official state digital platform and domain zone of the Brazilian Federal G... |
kliknklik.com tracker page ↗ | eraleign (apt73)filter this group | · Jun 23, 2026 | KliknKlik.com — a company from Indonesia, an online retailer and distributor of computer equipm... |
Leo International tracker page ↗ | akirafilter this group | · Jun 23, 2026 | Leo International, established in 1986, serves as a comprehensive source for the PVF, HVAC, andPlumbing Industry. The company specializes in manufacturing products through Forging, Casting,and Injection Molding processes.We will upload 10gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, medical information, phones, photos, doc scans, addresses and so on), confidential internal files and so on. |
IH Engineers tracker page ↗ | akirafilter this group | · Jun 23, 2026 | IH Engineers, P.C. is a consulting firm with over 25 years of experience, dedicated to providing innovative and technically excellent services in design, construction, and structural evaluation. The firm operates primarily in New Jersey, New York, and Pennsylvania, serving a diverse range of clients.We will upload 65gb of corporate data soon. Employee personal docs (passports, SSNs, DLs and other HR information), confidential internal files, NDAs, projects, contracts and agreements, drawings and so on. |
H* tracker page ↗ | icarusfilter this group | · Jun 23, 2026 | Salesforce data of H*. |
H** tracker page ↗ | icarusfilter this group | · Jun 23, 2026 | Salesforce data for this corp. |
G* tracker page ↗ | icarusfilter this group | · Jun 23, 2026 | Salesforce data for this corp. |
C* tracker page ↗ | icarusfilter this group | · Jun 23, 2026 | Salesforce data for this corp. |
viennaairport.com tracker page ↗ | eraleign (apt73)filter this group | · Jun 23, 2026 | Vienna Airport (Flughafen Wien AG) is an Austrian company, the operator of Vienna International A... |
FTL-Fast Transit Line tracker page ↗ | novafilter this group | · Jun 23, 2026 | FTL International N.V. specializes in shipping, consolidation, forwarding, and groupage services, with a strong presence in major Northern European ports and an office in Colombo, Sri Lanka. With over 25 years of experience, they offer cost-effective port-to-port and door-to-door logistics solutions, including air freight and cargo insurance. Their services cater to a wide range of clients looking for reliable shipping options across the globe. FTL is committed to exceptional personalized attention and efficient shipment handling, embodying their motto 'Experience the Difference - Data included sales data, invoices and costumers full names and phones etc; Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
Corporación Primax S.A. tracker page ↗ | aurorafilter this group | · Jun 23, 2026 | Corporación Primax S.A. is Peru's largest fuel distribution company, operating 2,185+ stations across Peru, Ecuador, Colombia, and Uruguay with annualised revenue of approximately USD 3.4 billion (Peru alone). The dataset spans every function of the business: Complete financial reporting — Monthly P&L, balance sheet, cash flow, and EBITDA through May 2025. GRIO (Grupo Romero Investment Office) management reporting packages. Budget 2025 vs. actuals. Employee identity data for 15,000–60,000 individuals — DNI national ID numbers, bank accounts, salary amounts, pension fund details, scanned identity documents. Live system credentials — Plaintext SQL database passwords, banking SFTP credentials (Banco Bolivariano Ecuador), AD encryption master key, OSINERGMIN fuel-control system credentials. Complete OT network map — IP addresses and identifiers for 137 fuel stations on the internal 10.55.40.x network, plus JD Edwards ERP production servers. 54 GB of POS transaction data — XML records of consumer fuel purchases across the entire station network. Legal and M&A documentation — Arbitration case files (PUCP/AMCHAM), UNO Corp acquisition materials (Dec 2025), bank covenant waivers. |
randa.net tracker page ↗ | chaosfilter this group | · Jun 23, 2026 | Randa Apparel & Accessories is a global powerhouse and one of the world's leading apparel and lifestyle accessories companies, headquartered in New York City at 417 Fifth Avenue, 11th Floor. Founded in 1910, with the founder's family having been in the neckwear business since that time and the curre… |
belpointeasset.com \ belpointe.com tracker page ↗ | inc ransomfilter this group | · Jun 23, 2026 | No details on the leak post beyond the victim name. |
[DISCLOSED]Karl Chevrolet tracker page ↗ | ransomhousefilter this group | · Jun 23, 2026 | No details on the leak post beyond the victim name. |
ehg.bayern tracker page ↗ | safepayfilter this group | · Jun 22, 2026 | Founded in 1991, the company has evolved from a regional waste management enterprise into a specialized provider of infrastructure operations, … |
Schumacher Homes tracker page ↗ | qilinfilter this group | · Jun 22, 2026 | Construction |
****** tracker page ↗ | payoutskingfilter this group | · Jun 22, 2026 | No details on the leak post beyond the victim name. |
Huntress tracker page ↗ | icarusfilter this group | · Jun 22, 2026 | Salesforce data of Huntress. |
HDS (Hdscorp) tracker page ↗ | icarusfilter this group | · Jun 22, 2026 | Salesforce data for this corp. |
Gms-net tracker page ↗ | icarusfilter this group | · Jun 22, 2026 | Salesforce data for this corp. |
Cqcrm tracker page ↗ | icarusfilter this group | · Jun 22, 2026 | Salesforce data for Cqcrm |
Cbassociations tracker page ↗ | icarusfilter this group | · Jun 22, 2026 | Salesforce data for this corp. |
EON Meditech Pvt tracker page ↗ | cmd organizationfilter this group | · Jun 22, 2026 | EON Meditech specializes in innovative medical technology solutions aimed at enhancing patient care and improving healthcare outcomes. Their product offerings include advanced medical devices and software solutions tailored for healthcare providers. The company primarily serves hospitals, clinics, and healthcare professionals looking for cutting-edge technology to streamline operations and enhance patient experiences. EON Meditech is committed to driving advancements in the medical field through research and development. |
graymont.com tracker page ↗ | chaosfilter this group | · Jun 22, 2026 | NOTICE: Graymont – Final Warning We have successfully gained full access to the corporate infrastructure of Graymont. Our team currently holds a massive volume of highly sensitive data. The scope of our access covers the entire core of your operations, from executive financial strategy to individ… |
sterlinggloballtd.com tracker page ↗ | brain cipherfilter this group | · Jun 22, 2026 | We have 100gb files and documents. If you think you are here by mistake, please contact us at [email protected] |
eggetttax.ca tracker page ↗ | brain cipherfilter this group | · Jun 22, 2026 | 330,000 documents and files of this company, with a total size of over 250 GB. If you think you are here by mistake, please contact us at [email protected] |
Ntd Apparel tracker page ↗ | akirafilter this group | · Jun 22, 2026 | NTD Apparel specializes in creating high-quality apparel that connects with pop culture, offering a range of licensed products and in-house labels. They provide comprehensive services including market analysis, price point management, and visual merchandising to retailers.We will upload 62gb of corporate data soon. Employee personal docs (passports, SSNs, DLs, medical information, phones, addresses and so on), projects, client information, confidential agreements and so on. |
NEW PRINZ EUGEN SITE [NOT A CASE FILE] tracker page ↗ | prinz eugenfilter this group | · Jun 22, 2026 | prinzkpn6d3itrgcytmsmlcpt5mgwn3ihpck2hsed5cezlbtbi3wklid.onion OLD SITE (this site) WILL BE TAKEN OFFLINE SHORTLY |
Aerospace & Advanced Composites GmbH tracker page ↗ | aurorafilter this group | · Jun 22, 2026 | Aerospace & Advanced Composites GmbH (AAC) — an Austrian space-materials R&D company headquartered in Wiener Neustadt, with deep ties to the European Space Agency. Obtained two complete NAS snapshots spanning 30+ years of operations: aacdata (31 December 2022) — 123 GB: the complete Testhouse, R&D, and engineering share, including the ESA thermal vacuum test archive, polymer composites formulations, and 22 Outlook PST email backups. aacdata1 (14 January 2025) — 86 GB: the administrative share, including managing director's full PC backup (browser credentials, passport scans), 15 years of financial statements, shareholder agreements, and the IT credentials master spreadsheet. BMD_DATA — 34 MB: the complete BMD business software accounting database with employee payroll, SEPA payments, and VAT declarations. done/ — Bitlocker recovery keys for 12 endpoints and WMI system dumps. The exposed material includes: 4 passport scans, 1 social security number, 25 employees' complete HR files, 50–100+ job applicant CVs — the full identity-theft toolkit for the workforce plus third-party data subjects. The IT credentials master spreadsheet (AAC CODES.xlsx) containing every system password, plus browser-stored logins for ESA SSO, the company's IT provider, and industrial suppliers. 12 Bitlocker recovery keys enabling full-disk decryption of 6 company laptops. 123 GB of ESA thermal vacuum test data — 30+ years of space-grade materials testing that represents the company's core competitive advantage and cannot be recreated. 137 executed NDAs with partners including Airbus, RUAG, Safran, Thales, ESA, BMW, Tesla, Google, Samsung SDI, CERN, DLR, and 126 others. 15 years of annual financial statements, bank records, insurance policies, and shareholder agreements — the company's entire financial anatomy laid bare. |
bits-pilani.ac.in tracker page ↗ | dragonforcefilter this group | · Jun 22, 2026 | BITS Pilani is a premier Indian private research university and "Institution of Eminence" known for elite engineering and science programs across five campuses.... |
mihana-v.com tracker page ↗ | dragonforcefilter this group | · Jun 22, 2026 | Here is the comprehensive corporate overview of MIHANA Seisakusho Co., Ltd. based on their official company profiles, technical catalogs, and industrial registr... |
Omax Autos tracker page ↗ | wallstreetfilter this group | · Jun 22, 2026 | OMAX Autos Limited is a leading manufacturer of sheet metal components, specializing in the production of auto and non-auto components. |
Central Bank of Libya tracker page ↗ | qilinfilter this group | · Jun 22, 2026 | Banking |
Breach & ransomware newsAll →
Leak-site posts are claims by criminals and can be false or duplicated; victim names are shown as posted. HIBP entries are verified breaches with the affected account count. Dates are when the post or breach was first observed, not when the intrusion happened.