Incidents in sector:
A data leak targeting Delko, a French network of garages and car maintenance centres, is currently being claimed by the cybercriminal group LAPSUS$, known for its extortion operationsโฆ
The French high-tech refurbishment specialist Largo informs its customers that it was the victim of a security incident that affected part of
The Titan ransomware group claimed a double-extortion attack on Groupe CRIT's Tunisian subsidiary CRIT Tunisie, leaking payroll and administrative records, financial files and scanned identity documents and passports belonging to workers and employees.
On 13 May 2026, a threat actor using the alias lazasec123 advertised a database of roughly 2.3 million profiles tied to French motorcycle licences and FFMOTO.org, exposing names, dates of birth, postal addresses, emails and phone numbers, offered for sale at 150 euros.
The Anubis ransomware group claims to have compromised the systems of A.R.Ge.Co, a French company specializing in accounting services and
The Qilin ransomware group claims to have compromised the systems of Le Domaine des Tournels, an establishment located in the Gulf of Saint-Tropez. At this
A hacker going by the name TeamPCP claims to hold a significant quantity of internal data belonging to Mistral AI, the French startup
The hacker ChimeraZ claims to hold data linked to La Boรฎte Immo, a French company specialized in software and digital services for
In May 2026, France's La France Insoumise party had data from its Action Populaire activist platform stolen and posted on a hacking forum, exposing some 120,000 email addresses, 20,000 phone numbers, postal addresses and member activity spanning 2017-2026.
A database tied to Monservicederemplacement.fr, the platform run by France's agricultural replacement service (Service de Remplacement France), surfaced online in May 2026, exposing 213,477 records on about 184,724 people, including names, contact details, dates of birth and social security numbers.
On 7 May 2026, a hacker using the alias 'fuzzeddffmepg' claimed to have breached Action Populaire, the activist platform of France's La France Insoumise party, exposing roughly 120,000 email addresses, 20,000 phone numbers, private messages and payment data spanning 2017-2026.
A database attributed to Newdeal Institut, a language training centre, has been published on a cybercrime forum by a hacker posing as
Customers of Groupe GCA, a network of car dealerships, are reportedly affected by a claimed leak impacting nearly 67,500 people, according to the claim. The Dumpsec collective statesโฆ
In April 2026 the French Basketball Federation (FFBB) suffered a data breach after an attacker abused a compromised user account in its licensee-management tool, exposing identity and contact details of up to ~2 million licensees and ~900,000 legal representatives.
A threat actor known as Lagui published a database attributed to French recruitment firm Profil Search containing roughly 100,642 candidate records, exposing names, emails, phone numbers, postal addresses and professional details.
A database attributed to ADEMI, an agricultural weighing system, is currently circulating online, exposing sensitive information related to
A database attributed to AQUAES, a directory of French environmental consulting and engineering firms, surfaced online on 30 April 2026, exposing firm names, manager names, full postal addresses, phone numbers, email addresses, websites and GPS coordinates.
Arรฉli, a Lille-based social-housing association, disclosed via a letter to partner organizations that a 12 January 2026 cyberattack exposed partner contact details and bank account information (RIB), affecting less than 2% of the data held on its servers.
On 25 April 2026, a hacker using the alias ChimeraZ claimed to have stolen and published the database of French student-housing platform Adele.org, exposing roughly 261,000 rental application files (~560 MB) containing scanned ID cards, passports, health-insurance cards, bank details and tax documents.
The Agence de services et de paiement (ASP), the public body responsible for paying out many state benefits, has confirmed a security incident that
On 23 April 2026, a threat actor using the alias 'undef' claimed to be selling a database from French electrostimulation fitness chain Bodyhit, exposing the personal and banking details of more than 218,000 customers, including over 42,000 IBANs.
A hacker claims to have 6 GB of images related to several French nuclear power plants operated by EDF, following a claim published on a forum
On 21 April 2026, a database holding around 6,700 unique profiles tied to French real estate network Ledil Immobilier was posted for download on a cybercriminal forum, exposing names, contact details, internal CRM records and property/transaction data.
The Magasins U group (Super U) informs some customers that it has been the victim of an external and malicious cyberattack that led to unauthorised
On 17 April 2026, France's Basketball Federation (FFBB) disclosed that fraudulent access to a user account let an attacker (alias HexDex) extract identity, contact and licence data on up to 1.9 million members and roughly 800,000 parents.
On 15 April 2026, Pompes Funรจbres Musulmanes Toulouse, an Islamic funeral provider, suffered a data leak claimed by an actor known as "ntmpd" who posted a 1,178-record database dump plus working admin credentials on a hacker forum, exposing client and deceased records.
On 14 April 2026, the threat actor Lamashtu claimed to have stolen roughly 52.6 GB of data and about 41,000 files from France's wine appellations confederation CNAOC, spanning 1994-2025 and including financial, HR and governance records.
In April 2026, gym chain Basic-Fit disclosed that attackers breached its member check-in system, exposing the personal and banking details of roughly 1 million members across France, Belgium, Germany, Spain, Luxembourg and the Netherlands.
The online ticketing data of visitors to the Chรขteau royal de Blois / Maison de la Magie was exposed in the breach of its provider Vivaticket (Tickeasy), leaking names, email and postal addresses, dates of birth, phone and fax numbers and VAT numbers.
A security incident reportedly affected Booking.com, with unauthorised access to data related to customer reservations. According to initial
After the massive leak referencing EduConnect, a new alert is circulating around รcole Directe, a platform widely used in schools
The hacker ChimeraZ claims to have published a database linked to the Insei.fr site, containing sensitive personal information as well as
The hacker Cybernox claims to hold a database linked to ADMR (Aide ร Domicile en Milieu Rural), containing several thousand profiles. According to the
A hacker claims to hold a database tied to EduConnect, the official Ministry of Education system used to track schooling of
EasyLounge customers are affected by a data leak confirmed by the company, after a cybersecurity incident communicated to the people concerned. The company, Hi-Fi andโฆ
In April 2026 a threat actor known as HexDex advertised the sale of a database stolen from France's university sport federation (FFSU), exposing the identities, contact details and registration data of roughly 1.1 million students, licensees and staff.
Members of KFC France's Colonel Club loyalty program received an email informing them of a breach of their personal data. KFC France said in this message that the numberโฆ
Adobe is reportedly targeted by a massive data leak claimed by the hacker Mr. Raccoon, involving more than 13 million support tickets. The
On 2 April 2026, a database with the personal details of 1,048,991 members of France's National Hunters Federation (FNC) โ including names, postal addresses, phone numbers, emails and hunting-permit data โ was offered for sale on the dark web.
On 1 April 2026, French labour union Force Ouvriรจre (FO) was hit by a data breach claimed by an actor known as HexDex, who put up for sale a database of 161,343 member profiles including over 161,000 email addresses, 130,000 postal addresses and nearly 100,000 phone numbers.
On 31 March 2026, French tourist attraction La Mine Bleue notified customers that their personal data โ names, postal code/country, email and purchase history โ was exposed in the ransomware breach of its ticketing provider Vivaticket; no banking data was affected.
On 30 March 2026, the Fรฉdรฉration Franรงaise de Savate had a database of roughly 679,000 licence-holder profiles spanning 49 years (1977โ2026) stolen and put up for sale by an actor known as HexDex, exposing names, contact details and sports-licensing information.
On 28 March 2026, the Fรฉdรฉration Franรงaise Handisport disclosed a data breach exposing the records of 197,276 licensed members, including civil-identity, contact and sensitive health data such as disability type, with a database put up for sale by the actor 'HexDex'.
A major data leak is reportedly currently targeting the Mondial Tissus chain. According to information circulated on a hacker forum, 365
On 26 March 2026, a breach at Les Champs Libres โ the public cultural complex in Rennes โ exposed user account data including names, email addresses, phone numbers and plain-text passwords.
On 24 March 2026, the French Free Flight Federation (FFVL) was reported to have suffered a data leak exposing member records after unauthorized access to its systems; the volume of affected licence holders was not specified.
I-Cad, France's national dog, cat and ferret identification registry, disclosed in March 2026 that a September 2025 software vulnerability had allowed automated querying of its database, exposing users' email addresses and fuelling phishing campaigns against pet owners.
On 20 March 2026, a database of the Confรฉdรฉration Musicale de France (CMF) โ France's federation of amateur music ensembles and schools โ was put up for sale by the actor HexDex, allegedly exposing 109,302 members including many minors, with identities, contact details, school records and disability notes.
Disclosed on 18 March 2026, the Musรฉe des Arts et Mรฉtiers was caught up in the Vivaticket supply-chain ransomware breach, exposing online shop and ticketing customers' names, email addresses, account details and order history.
A March 2026 ransomware attack on the Bibliothรจque Nationale de France's third-party online ticketing provider exposed the names and email addresses of users who had booked cultural events; banking data, handled by a separate vendor, was not affected.
On 14 March 2026, a leak was claimed to expose roughly 594 phone numbers of Parisian Reconquรชte! members tied to Sarah Knafo's municipal campaign โ a follow-on to the earlier public exposure of her campaign website's contributor data.
In March 2026, the League of Legends custom skins service Divine Skins suffered a data breach. The incident was disclosed via the service's Discord server, where Divine Skins stated that an unauthorised third party accessed part of its systems, deleted all skins from the database and exposed emailโฆ
Students, staff and partners of Universitรฉ Paris-Est are affected by a confirmed leak affecting the establishment's administrative files. Approximately 315,000 lines ofโฆ
Members of the ASPTT Multi-Sports Federation may be affected by a claimed leak involving more than a million registrations, for the 2014-2026 period, according to the claim...
Members of FNATH are affected by a claimed leak involving nearly 75,000 people, according to the claim. The association supporting victims of life accidents is reportedly the subject of a...
SYNLAB France customers and partners are potentially affected, according to the claim by the HexDex collective. The group claims to hold 161 GB of internal data belonging to theโฆ
Systems linked to TAJ, used by the French Police and Gendarmerie, are allegedly affected by a claimed leak. According to the claim, a data package allegedly presents a complete system imageโฆ
On 5 March 2026, a database of 713,814 people who had submitted rental applications on the French student-housing platform ImmoJeune was offered for sale on a cybercrime forum, exposing names, emails, phone numbers, postal addresses and income details.
On 4 March 2026 the Fรฉdรฉration franรงaise des Banques Alimentaires confirmed a data breach exposing personal records of 659,658 aid-recipient families โ about 1,462,485 people โ including identity, contact, family-situation, income and aid-history details.
Bioserveur's patients are reportedly affected by a claimed leak involving approximately 2,200 PDF documents, according to the claim. These files are described as test result reportsโฆ
Customer data of the Oceanographic Museum of Monaco was exposed via a ransomware attack on its ticketing provider Vivaticket (subsidiary Irec SAS), disclosed 2 March 2026 and claimed by RansomHouse, leaking names, emails, phone numbers, postal locations and order/booking history.
On 2 March 2026, the Palais de la Porte Dorรฉe was among 40+ French cultural institutions affected by a ransomware attack on shared ticketing provider Vivaticket, potentially exposing visitors' names, contact details, dates of birth, purchase histories and encrypted passwords.
On 1 March 2026, a threat actor claimed to have stolen a database from BE ATEX, a French industrial safety-equipment distributor near Toulouse, allegedly exposing personal data on roughly 2,500 of the firm's clients and employees.
On 28 February 2026, the French Aeronautics Federation (FFA) disclosed unauthorised access to its SMILE member-management platform, exposing the names, dates of birth, emails and postal addresses of 343,734 members, with archives reaching back to 2002.
Licence holders of the French Rugby XIII Federation are affected by a confirmed leak involving photos and licence information. Nearly 37,000 of the exposed photos relate to...
On 28 February 2026, the group DumpSec claimed it had exfiltrated about 65 GB of data and roughly 1.5 million student identity photos from the French school sports federation UNSS, after breaching its OPUSS intranet; names, birth dates, schools and contact details were exposed.
On 25 February 2026, the LAPSUS$ group claimed a breach of NextSend, the file-transfer platform (edited by Hegyd) used internally by French construction group Eiffage, publishing 77 files exposing 175,942 employees and external contacts.
In late February 2026, France's gymnastics federation (FFGym) disclosed a breach of its FFGym Licence system via a phished club account, exposing data on roughly 2.9 million current and former licensees registered since 2004.
In late February 2026, a threat actor advertised a database of 203,179 members of the French Ski Federation (FFS), spanning records from 1999 to 2026 and exposing civil-status details, contact data and family information; the FFS confirmed the breach and notified the CNIL.
The records of nearly 15 million patients managed via software from publisher Cegedim are affected by a confirmed leak. The publicly released elements indicate that this data comes fromโฆ
The French Gymnastics Federation (FFGym) suffered a data breach disclosed in early 2026 in which attackers used a phishing-compromised club account on the FFGym Licence platform to access personal data of roughly 2.9 million current and former members licensed since 2004.
Licence holders and members of the French Karate Federation are affected by a claimed data leak, according to the claim. According to the announcement, a FFK database has been...
The Sports and Cultural Federation of France (FSCF) had the personal data of roughly 1.33 million members exposed after a third-party licence-management provider was compromised, leaking names, dates of birth, postal addresses, contact details and licence/membership records.
Customers and prospects of Santeo, a health insurance comparator, are reportedly affected by a claimed data leak impacting around 116,122 people, according to the claim published on 26โฆ
Members of the French Aikido, Aikibudo and Associated Federations (FFAAA) are affected by a claimed leak of their personal data. According to the claim, a corpus of 352,502โฆ
In late February 2026, a threat actor known as DumpSec advertised the sale of data allegedly stolen from French digital temp agency MyConnect โ around 125,000 records and 18 GB of files (ID scans, bank details, birth certificates) for some 16,000 people.
On 24 February 2026, a threat actor claimed to be selling a database of 728,732 members of the French Motor Sport Federation (FFSA), exposing names, dates of birth, postal and email addresses, phone numbers and licence details after a third-party provider was compromised.
In February 2026, a database of around 11.4 million records belonging to licensed athletes, officials and coaches of the French Athletics Federation (FFA) was put up for sale, exposing personal details and millions of passwords, including roughly 3 million in plain text.
Mondial Relay customers are affected by a confirmed data leak impacting approximately 5 million records. The published elements indicate this is a corpus aggregated fromโฆ
On 23 February 2026, the civic-service association Unis Citรฉ was hit by a data breach exposing roughly 80,000 people and around 40 GB of data, including national ID cards, photos, IBANs and other sensitive documents on young volunteers, claimed by the DumpSec group.
The French Badminton Federation disclosed that an unauthorized export from its internal Poona membership platform, traced to a compromised administrator account and discovered in September 2025, exposed personal data on roughly 300,000 licensed members, including names, dates of birth, contact details and parents' names.
On 20 February 2026, a threat actor claimed a data leak at Azaรฉ, the French home personal-services provider, allegedly exposing personal information on roughly 19,000 clients and employees; the claim remains unconfirmed by the company.
On 20 February 2026, a threat actor put up for sale on BreachForums a database claimed to belong to French gym chain KeepCool, affecting some 400,000 members across 270 clubs and exposing names, emails, phone numbers and some IBANs.
In February 2026, the French Canoe Kayak and Paddle Sports Federation (FFCK) had a member database covering decades of licence-holders leaked and offered for sale, exposing the names, dates of birth, postal addresses, phone numbers, emails and club/licence details of roughly 393,374 people.
On 19 February 2026, the Incransom ransomware group claimed to have stolen 279 GB of data (225,372 files) from French environmental-remediation firm Valgo SA, including contracts, NDAs, financial records and client data naming Renault Group and others.
On 18 February 2026, France's CFDT trade union confederation confirmed a data breach exposing the names, postal addresses and union-affiliation details of up to 1.4 million current and former members, after an attacker abused a hijacked regional manager's account.
On Air Fitness members and former members are reportedly affected, according to the claim, by a data leak impacting around 512,000 people. According to the announcement, the files coverโฆ
Axa France customers are affected, according to the claim, by an announced leak that would impact more than 8 million people. The claim indicates that 'data and access' wereโฆ
Adidas customers and partners are affected by a confirmed leak that exposes personal and commercial information. According to available information, around 1,617 people have beenโฆ
Permanent and non-permanent staff who worked at CNRS before 31 December 2006 are affected by a data leak confirmed by CNRS. The exact volume of exposed information has notโฆ
Customers of Socloz partner brands are affected, according to the claim, by the exfiltration of approximately 31 million booking lines in early 2026. Socloz is a platformโฆ
Chez Switch customers are, according to the claim, affected by a data leak that would impact nearly 19,300 people. Chez Switch presents itself as an energy supplier andโฆ
On 11 February 2026, French food-aid charity Les Restos du Cลur suffered a cyberattack on an internal system, exposing the personal data of its employees and volunteers, including names, roles, departments, email addresses and phone numbers.
In February 2026, the French Judo Federation (France Judo) suffered a breach of its federal extranet in which the group RavenSec stole and offered for sale roughly 2.4 million records covering 533,730 licence holders, including photos, 948 national ID cards, social security numbers and medical data.
Ciffreo Bona customers are affected by a claimed leak involving nearly 70,000 accounts, according to the claim. The announced file would cover 15 years of activity (2009-2024) andโฆ
A dataset of 4,198,129 rows tied to Groupe Atalian โ a global facility-services and cleaning company โ surfaced on BreachForums, exposing HR records including names, dates and places of birth, addresses, nationalities, contract and payroll details, and immigration-card numbers.
Maxance customers are, according to the claim, affected by the publication of 348,346 records containing personal and contractual information. The file is announced asโฆ
Customers who placed or attempted an order on PharmaShopi are affected by a confirmed leak. The site, an online pharmacy and parapharmacy, had payment information exposedโฆ
In February 2026, French company Prozon disclosed a data breach affecting its customers after an attacker gained unauthorised access to one of its infrastructure tools; the company confirmed the incident and notified France's data-protection regulator, the CNIL, though the volume of affected records was not specified.
On 8 February 2026, a threat actor claimed to have leaked data on roughly 28,000 customers and staff of Immo-pop, the French fixed-fee online real estate agency; the claim was logged by a French breach tracker and remains unverified by the company.
Participants registered via Rankfyt are affected by a data leak impacting 1,227 registrations, with details concerning more than 2,000 linked people (teammates). The filesโฆ
The French Table Tennis Federation (FFTT) disclosed a cyberattack in which a compromised account was used to bulk-extract licence-holder records โ names, dates and places of birth, nationality, licence numbers and contact details for an estimated 210,000โ254,000 members; no banking or health data was affected.
In early February 2026, France's national sailing federation (FFVoile) disclosed a data breach of its licence-management platform via a compromised club account, exposing personal data of several hundred thousand licensees including names, birthdates, addresses, emails, phone numbers and disability status.
Family Cinema customers would be affected by a data leak, according to the claim. The advertised batch would contain nearly 156,489 orders and 39,896 unique customers, covering the periodโฆ
On 5 February 2026, the French Hiking Federation (FFRandonnรฉe) was named in a claimed data leak said to expose the personal records of 813,983 members, part of the 2026 wave of breaches hitting French sports federations through shared licensee-management systems.
Flickr users residing in Europe are affected by a metadata exposure that hit the service in February 2026. According to the official announcement, approximately 228,000 European accounts...
On 4 February 2026, French equipment-rental group Loxam disclosed a breach of a third-party delivery-planning system that exposed roughly 60 GB of logistics data โ 94,735 delivery routes and about 828,000 geolocated stop-points covering 2020-2026, plus customer, driver and vehicle details.
On 30 January 2026 a 1.06 GB SQL database stolen from French first-aid non-profit ANPS was posted to BreachForums, exposing roughly 5,600 unique email addresses along with names, dates and places of birth traced back to a legacy system.
People with a ManoMano account are affected by a data leak hitting the online DIY and gardening site. Nearly 38 million accounts are reportedly involved, according toโฆ
In early 2026, data purportedly sourced from the recipe and meal planning service Provecho was alleged to have been obtained in a breach. The exposed data included 713k unique email address along with username and the creator account holders followed.
Customers of FranceCasse.fr are, according to the claim, affected by a leak exposing more than a million profiles. According to the claim, a 98 GB file structured via PrestaShop...
In late January 2026, a cybercriminal put up for sale on a hacking forum a 500 GB trove of more than 1.18 million files stolen from eleven French real estate agencies, exposing the personal, contractual and financial data of at least 20,000 owners, tenants, co-owners and suppliers.
On 28 January 2026, a leak of roughly 1.18 million files (500+ GB) affecting 11 French real estate agencies โ including Marteau Immobilier (Orpi), AFG Immobilier and Trenta Immobilier โ was put up for sale on a cybercrime forum, exposing IDs, IBANs, contracts and credentials of an estimated 20,000+ owners, tenants and co-owners.
Customers and contacts of AutoForever are affected by a confirmed data leak, with the volume remaining unspecified. The company states it does not know whether personal data was stolen followingโฆ
On 25 January 2026, the Fรฉdรฉration Franรงaise Sports pour Tous saw the personal data of 1,493 of its members exposed, including names, postal addresses, phone numbers, member status, affiliated club, qualifications and activities.
On 24 January 2026, France's underwater diving federation FFESSM disclosed a personal-data breach after unauthorised access to one of its IT systems exposed identity and contact details of members and licence holders, with roughly 950,000 people affected and data offered for sale on the dark web.
On 23 January 2026, the French Fencing Federation (FFE) had its licensee database leaked as part of a wave of attacks on French sports federations, exposing members' names, contact details, postal addresses, nationality and licence/club information.
On 23 Jan 2026 the Fรฉdรฉration Nationale des Chasseurs disclosed a breach of its hunting-permit validation portal, exposing names, dates of birth, postal/email addresses, phone numbers, federal IDs and licence details of roughly 1.4 million hunters.
The French Volleyball Federation (FFVolley) confirmed a breach of its membership database affecting roughly 1.2 million licensees, with about 23 GB of highly sensitive files โ including national ID cards, passports and birth certificates โ exfiltrated and offered for sale.
On 23 January 2026, the French Firefighters Federation suffered a data breach exposing the personal records of roughly 822,449 firefighters, including names, email addresses, phone numbers and postal addresses.
In January 2026, a database from the French real-estate network Orpi's owner/tenant extranet surfaced online, exposing names, postal addresses, IBANs, rent receipts and extranet logins with passwords stored in plain text.
On 23 January 2026, a data leak attributed to Too Easy was reported, exposing customer personal data including names, email addresses, phone numbers and IP addresses. The full scale of the incident has not been publicly confirmed.
Disclosed on 23 January 2026, a leak from Valorissimo โ the French B2B new-build real estate marketplace owned by Bouygues Immobilier โ exposed account data of platform users, including logins, email addresses, names, phone numbers, postal addresses and company affiliations.
Current and former licence holders of the French Golf Federation (ffgolf) are affected by a confirmed leak involving more than 1.2 million records. The leak comes from the central database of...
In January 2026, the French National Hunters Federation (FNC) and the French Office for Biodiversity (OFB) suffered linked data breaches exposing personal data of roughly 1.4 million hunting-permit holders, with a 27 GB dataset offered for sale on the dark web.
Around 822,499 members of France's National Firefighters Federation (FNSPF) had their personal data exposed in a January 2026 leak tied to a wider campaign of French federation breaches, with names, dates of birth, postal and email addresses and phone numbers harvested and resold on underground forums.
Customers of Babyvista, a maternity photography service, are affected by a data leak impacting nearly 3.7 million people. The leak, initially dated 15/03/2025, coversโฆ
The 46,506 people linked to Pix Orga are reportedly affected, according to the claim, mainly pupils and teaching team members. The Pix Orga service, used by institutionsโฆ
A January 2026 claim alleges that data on members of AAPPMA Le Bambou Castillonnais (Castillon-la-Bataille, Gironde) was exposed through the national Cartedepeche.fr angling platform, with around 9,599 records said to be affected following a breach the FNPF disclosed in early 2026.
On 15 January 2026, a leak exposed the personal data of 598 people linked to the Paris Departmental Union of the Force Ouvriรจre trade union (UD 75), reportedly stemming from an export batch pulled from the union's membership management system.
Employees of Groupe Fondasol are affected by a claimed data leak covering 888 profiles, according to the claim. The engineering firm in the construction sector works on projects inโฆ
Users of the adult sites nephael.net and chloesanchez.com are affected by a confirmed data leak involving around 65,000 accounts. According to the elements published, theโฆ
Customers and recipients who used Relais Colis are affected by a confirmed leak impacting nearly 9.5 million records. The volume announced is 9,526,266 rows, and a claimโฆ
A database from the cybercrime forum BreachForums leaked online, exposing roughly 324,000 user accounts โ email addresses, usernames, Argon2 password hashes, IP addresses, forum posts and private messages โ after a backup was left in an unsecured folder in August 2025.
Students and teachers of Euronature (School of Naturopathy) are affected by a confirmed data leak. According to the estimate, around 7,761 people would be exposed; the corpus releasedโฆ
On 9 January 2026, the campaign website of Paris mayoral candidate Sarah Knafo (Reconquรชte) publicly exposed the personal data of hundreds of contributors to its 'Paris ร cลur ouvert' forum, including names, emails, phone numbers and IP addresses, even for people who had asked to stay anonymous.
Young holders of the Carte Avantages Jeunes (CRIJ Bourgogne-Franche-Comtรฉ) are affected by a confirmed leak impacting nearly 283,000 people. The published elements include, according to theโฆ
In January 2026, the Casino de Paris music hall confirmed a data leak affecting roughly 111,000 customers, with names, email addresses and postal locations (city and zip code) exposed after a database appeared for sale on a hacker forum.
On 8 January 2026, a database of 262,925 licensed members of the French Bridge Federation (FFB) was claimed on a hacker forum, exposing names, dates of birth, postal and email addresses and phone numbers as part of a wider wave of attacks on French federations via a shared IT provider.
Licence holders of the French American Football Federation (FFFA) are affected by a claimed leak said to target 200,415 records. According to the claim, the corpus would contain...
In January 2026 the French Federation of Mountaineering and Climbing (FFME) disclosed a data breach in which a fraudulently used member account gave illegitimate access to contact data โ names, dates of birth, addresses, licence types โ for its licence holders, a leak tracked at 561,502 records.
In January 2026, the Fรฉdรฉration Sportive et Gymnique du Travail (FSGT), a French workers' multisport federation, was hit by a claimed data leak exposing the personal records of its licence holders, with the claim referencing a database of roughly 600,000 accounts.
On 7 January 2026, a database of the French Canoe-Kayak Federation (FFCK) holding 31 years of member records was leaked, exposing the personal data of 393,374 members, including 392,892 postal addresses, 212,342 phone numbers and 158,434 unique emails.
Roughly 600,000 licence holders of France's Roller and Skateboard Federation (FFRS) had their personal data exposed after the Rolskanet membership-management platform run by a shared third-party provider was breached, leaking names, contact details, and birth information.
On 7 January 2026 a leak claim surfaced alleging the theft of a 162,263-row database of French Squash Federation (FFSquash) licence holders, part of a wider wave of attacks on French sports federations exposing members' personal data.
On 8 January 2026 the French Microlight Federation (FFPLUM) disclosed that an attacker had fraudulently accessed an administrator account on its licence-management platform, exposing the personal data of roughly 78,000 members, including names, dates of birth, postal addresses, emails and phone numbers.
On 6 January 2026 a data leak claimed against the French Twirling Baton Federation (FFTwirl) exposed the personal records of around 52,785 licence holders, volunteers and officials, including names, postal and email addresses, phone numbers, birth dates and club affiliations.
In early January 2026, a member database of the Fondation des Lions de France (Lions Clubs of France) was published on BreachForums, exposing 133,297 deduplicated individuals โ including full civil status, home addresses, phone numbers and profile photos โ in a leak traced to the MyAssoc club-management platform.
Ledger customers are affected by a data leak confirmed by the Global-e provider. The number of impacted customers has not been publicly disclosed.
In early January 2026, staffing agency Adecco was hit by a data leak after a threat actor put a database of roughly 800,000 candidate profiles โ including about 750,000 CVs with names, contact details and work histories โ up for sale, claiming extraction from an internal Adecco tool.
On 31 December 2024 the French Speleology Federation (FFS) disclosed a data leak from its insurance-subscription portal, exposing members' identity, contact details, nationality, profession and licence numbers as part of a wider wave of attacks on French sports federations.
On 27 December 2025, data on roughly 200 members of Club de natation 95 was exposed after its service provider ACRV was compromised, leaking names, postal and email addresses, phone numbers and IP addresses.
In late December 2025, the French Kick Boxing Federation (FFKMDA) had its member database leaked on BreachForums, exposing 361,321 licensees' names, dates of birth, nationalities, contact details, postal addresses and licence records across 2015-2026 seasons.
Data on roughly 1.3 million members of the French Swimming Federation (FFN) was put up for sale on BreachForums on 23 December 2025 after its Extranat management platform was breached, exposing identity details, contact information and licence numbers.
On 22 December 2025, a database of roughly 240,000 users of French casting platform 123casting was published on BreachForums, exposing identities, contact details, MD5-hashed passwords, physical measurements, ethnic origin, photo/video books, private messages and payment data.
On 19 December 2025, a data leak at French anti-racism association La Licra (LICRA) exposed the email addresses and hashed passwords of 186 website subscribers and 8 administrators.
On 10 December 2025, the Fรฉdรฉration Franรงaise de Cyclisme detected an intrusion (via stolen credentials/infostealers, no MFA) exposing licensees' names, dates of birth, nationality, postal addresses, emails and phone numbers; group Dumpsec also claimed to hold ID documents.
On 10 December 2025, UFOLEP โ the French multi-sport federation โ disclosed that a compromised account on its third-party licence-management provider Exalto exposed at least 3,624 member records, including identity, contact and legal-guardian details.
In December 2025, the European Dragonica private server Dragonica Lunaris suffered a data breach. The incident exposed 126k email addresses, usernames, dates of birth and bcrypt password hashes. The service operator confirmed the breach and advised it has since been fixed.
In early December 2025, the French Handball Federation (FFHandball) disclosed that its GestHand administrative platform โ used by some 2,400 clubs, committees and leagues โ was breached via compromised credentials, exposing licensees' names, gender, dates of birth, emails and phone numbers.
In late November 2025, the French Football Federation disclosed that attackers used a compromised account to access its Footclubs club-management software and exfiltrate licensees' personal data, including names, dates and places of birth, addresses, contact details and license numbers.
In November 2025, the French Dance Federation (FFDanse) suffered a cyberattack on its extranet that damaged the server and exposed licence-holders' personal data, including names, dates of birth, contact details, licence numbers and hashed passwords; no medical or banking data was affected.
On 25 November 2025, a database belonging to French residential maintenance firm ProxiServe surfaced on a hacker forum, exposing personal and service data on 294,639 customers, including names, emails, postal addresses and details of home interventions.
Around 11 November 2025, the Fรฉdรฉration Franรงaise de Cardiologie disclosed that an unauthorized intrusion into its IT systems exposed members' personal data โ including names, postal and email addresses, phone numbers and passwords. No banking or medical data was compromised.
An intrusion into the French Shooting Federation's ITAC information system between 18-20 October 2025 exposed personal data of its licensees โ including licence numbers, civil status and contact details โ with up to around 274,000 members potentially affected.
On 19 September 2025, the French Table Tennis Federation (FFTT) disclosed a data breach in which an attacker used a compromised account to bulk-extract member records, exposing the personal data of as many as 254,000 licensees, though no banking or health data.
In August 2025, over 1M unique email addresses appeared in a breach allegedly obtained from Italian fashion designer Giglio. The data also included names, phone numbers and physical addresses. Giglio did not respond to repeated attempts to disclose the incident.
In July 2025, a vulnerability in the GiveWP WordPress plugin exposed the names and email addresses of approximately 30k donors to the Pi-hole network-wide ad blocking project. Pi-hole subsequently self-submitted the list of impacted donors to HIBP.
In July 2025, Allianz Life was the victim of a cyber attack which resulted in millions of records later being leaked online. Allianz attributed the attack to "a social engineering technique" which targeted data on Salesforce and resulted in the exposure of 1.1M unique email addresses, names,โฆ
CNPC USA was named on the Rhysida ransomware data-leak (extortion) site on 2025-06-16.
Jasper Products was named on the Play ransomware data-leak (extortion) site on 2025-06-16.
NF Stroth & Associates was named on the Play ransomware data-leak (extortion) site on 2025-06-16.
TBN Israel Hacked was named on the Handala ransomware data-leak (extortion) site on 2025-06-16.
Israelโs fuel supply system Data was named on the Handala ransomware data-leak (extortion) site on 2025-06-15.
S&H Express was named on the Play ransomware data-leak (extortion) site on 2025-06-15.
099 ISP Hacked was named on the Handala ransomware data-leak (extortion) site on 2025-06-14.
Aerodreams Hacked was named on the Handala ransomware data-leak (extortion) site on 2025-06-14.
Israel’s fuel supply system Hacked was named on the Handala ransomware data-leak (extortion) site on 2025-06-14.
Israelโs fuel supply system Hacked was named on the Handala ransomware data-leak (extortion) site on 2025-06-14.
NPD Products was named on the Play ransomware data-leak (extortion) site on 2025-06-14.
Project Partners was named on the Play ransomware data-leak (extortion) site on 2025-06-14.
Rollex was named on the Play ransomware data-leak (extortion) site on 2025-06-14.
Y.G. New Idan Hacked was named on the Handala ransomware data-leak (extortion) site on 2025-06-14.
Ajmanre.gov.ae was named on the Flocker ransomware data-leak (extortion) site on 2025-06-12.
alleray-labrouste was named on the Incransom ransomware data-leak (extortion) site on 2025-06-12.
AP Lettering was named on the Spacebears ransomware data-leak (extortion) site on 2025-06-11.
Mount Rogers Community Services was named on the Incransom ransomware data-leak (extortion) site on 2025-06-10.
In June 2025, spyware maker Catwatchful suffered a data breach that exposed over 60k customer records. The breach was due to a SQL injection vulnerability that enabled email addresses and plain text passwords to be extracted from the system.
Community Choice Credit Union was named on the Play ransomware data-leak (extortion) site on 2025-06-09.
EUC Sjlland was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-06-09.
Homestead Gardens was named on the Play ransomware data-leak (extortion) site on 2025-06-09.
Hudson River Housing was named on the Rhysida ransomware data-leak (extortion) site on 2025-06-07.
waiwhetu-medical-centre was named on the Incransom ransomware data-leak (extortion) site on 2025-06-07.
Kittery Police Department was named on the Incransom ransomware data-leak (extortion) site on 2025-06-06.
MTTEXPERTISES.COM was named on the Incransom ransomware data-leak (extortion) site on 2025-06-06.
Nunez Dental was named on the Incransom ransomware data-leak (extortion) site on 2025-06-06.
A*****e.gov.ae was named on the Flocker ransomware data-leak (extortion) site on 2025-06-05.
Ebac was named on the Play ransomware data-leak (extortion) site on 2025-06-05.
iscamen was named on the Incransom ransomware data-leak (extortion) site on 2025-06-05.
Lts.com.vn was named on the Flocker ransomware data-leak (extortion) site on 2025-06-05.
Triumph Construction was named on the Play ransomware data-leak (extortion) site on 2025-06-05.
cemeteries.local was named on the Incransom ransomware data-leak (extortion) site on 2025-06-04.
Funktel GmbH was named on the Incransom ransomware data-leak (extortion) site on 2025-06-04.
https://devimco.com/ was named on the Metaencryptor ransomware data-leak (extortion) site on 2025-06-04.
FLOE Internationa was named on the Play ransomware data-leak (extortion) site on 2025-06-03.
Jericho Fire Department was named on the Kairos ransomware data-leak (extortion) site on 2025-06-03.
Rochon was named on the Play ransomware data-leak (extortion) site on 2025-06-03.
Sandhills Medical Foundation was named on the Incransom ransomware data-leak (extortion) site on 2025-06-03.
Sorter Construction was named on the Play ransomware data-leak (extortion) site on 2025-06-03.
Capital Trade was named on the Play ransomware data-leak (extortion) site on 2025-06-02.
http://www.kcac.com was named on the BlackSuit ransomware data-leak (extortion) site on 2025-06-02.
Universidad Tรฉcnica del Norte Ecuador was named on the Incransom ransomware data-leak (extortion) site on 2025-06-02.
valuestoreit was named on the Incransom ransomware data-leak (extortion) site on 2025-06-02.
Vinda Group was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-06-02.
Dcsdev.org was named on the Flocker ransomware data-leak (extortion) site on 2025-06-01.
sitro.com.au was named on the Incransom ransomware data-leak (extortion) site on 2025-05-31.
Trustgrp.ae was named on the Flocker ransomware data-leak (extortion) site on 2025-05-31.
Acorn Sales was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-05-30.
Anchor Industries was named on the Play ransomware data-leak (extortion) site on 2025-05-30.
geruestba was named on the LockBit ransomware data-leak (extortion) site on 2025-05-30.
Jordan Drug was named on the Incransom ransomware data-leak (extortion) site on 2025-05-30.
M&H Electric Fabricators was named on the Embargo ransomware data-leak (extortion) site on 2025-05-30.
mysfa.org was named on the Incransom ransomware data-leak (extortion) site on 2025-05-30.
STANDBYTE was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-05-30.
Tri-Point Solutions was named on the Play ransomware data-leak (extortion) site on 2025-05-30.
UnigazJordan was named on the Ransomblog_noname ransomware data-leak (extortion) site on 2025-05-30.
W.E. Bowers was named on the Play ransomware data-leak (extortion) site on 2025-05-30.
http://metromont.com was named on the BlackSuit ransomware data-leak (extortion) site on 2025-05-29.
http://www.innsofaurora.com was named on the BlackSuit ransomware data-leak (extortion) site on 2025-05-29.
Mulia Raya was named on the Ransomblog_noname ransomware data-leak (extortion) site on 2025-05-29.
Cator Ruma & Associates was named on the Rhysida ransomware data-leak (extortion) site on 2025-05-28.
Eliel Cycling was named on the Play ransomware data-leak (extortion) site on 2025-05-28.
Fujipoly Ltd was named on the Spacebears ransomware data-leak (extortion) site on 2025-05-28.
KDV Label was named on the Play ransomware data-leak (extortion) site on 2025-05-28.
l*s.com.vn was named on the Flocker ransomware data-leak (extortion) site on 2025-05-28.
Corantioquia was named on the Hunters International ransomware data-leak (extortion) site on 2025-05-27.
Eight8Ate Holdings, Inc was named on the Hunters International ransomware data-leak (extortion) site on 2025-05-27.
http://www.iptelecom.at was named on the Ciphbit ransomware data-leak (extortion) site on 2025-05-27.
WAT Supplies was named on the Play ransomware data-leak (extortion) site on 2025-05-27.
Wrap & Send Services was named on the Hunters International ransomware data-leak (extortion) site on 2025-05-27.
allstarflooring.com was named on the Embargo ransomware data-leak (extortion) site on 2025-05-26.
Antea Luce was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-05-26.
Carrera Chevrolet was named on the Rhysida ransomware data-leak (extortion) site on 2025-05-26.
Frederick's Machine & Tool Shop was named on the Play ransomware data-leak (extortion) site on 2025-05-26.
Media Links was named on the Play ransomware data-leak (extortion) site on 2025-05-26.
D****v.org was named on the Flocker ransomware data-leak (extortion) site on 2025-05-25.
oxparkrec.org was named on the Incransom ransomware data-leak (extortion) site on 2025-05-25.
Seneca Gaming & Entertainment was named on the Nitrogen ransomware data-leak (extortion) site on 2025-05-25.
Coweta County School System was named on the Nitrogen ransomware data-leak (extortion) site on 2025-05-24.
T******p.ae was named on the Flocker ransomware data-leak (extortion) site on 2025-05-24.
Vernon Milling was named on the Play ransomware data-leak (extortion) site on 2025-05-24.
AKJ Energiteknik was named on the Play ransomware data-leak (extortion) site on 2025-05-23.
South Atlantic Federal Credit Union was named on the Play ransomware data-leak (extortion) site on 2025-05-23.
4Motive was named on the Spacebears ransomware data-leak (extortion) site on 2025-05-22.
CNHI LLC was named on the Play ransomware data-leak (extortion) site on 2025-05-22.
Curewell Pharmacy & Surgicals was named on the Spacebears ransomware data-leak (extortion) site on 2025-05-22.
Greater Seattle Concrete was named on the Play ransomware data-leak (extortion) site on 2025-05-22.
piercecountylibrary.org was named on the Incransom ransomware data-leak (extortion) site on 2025-05-22.
AttainX was named on the Play ransomware data-leak (extortion) site on 2025-05-21.
Neighborhood Development Services was named on the Kairos ransomware data-leak (extortion) site on 2025-05-21.
Rivers Academy West London was named on the Incransom ransomware data-leak (extortion) site on 2025-05-21.
Durham Arts Council was named on the Kairos ransomware data-leak (extortion) site on 2025-05-20.
Florida Lung was named on the Rhysida ransomware data-leak (extortion) site on 2025-05-20.
Runtec was named on the Lynx ransomware data-leak (extortion) site on 2025-05-20.
The Vascular Experts was named on the Incransom ransomware data-leak (extortion) site on 2025-05-20.
Tri State Electric was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-05-20.
K & K Fence was named on the Play ransomware data-leak (extortion) site on 2025-05-19.
Colegio de la Compania de Maria Vigo was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-05-18.
Fong Shann Printing Philippines was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-05-18.
Grupo Boulevard was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-05-18.
null was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-18.
RECI SYSTEMS was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-05-18.
Road Development Corporation was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-05-18.
Termolar was named on the Rhysida ransomware data-leak (extortion) site on 2025-05-18.
diyar.com was named on the Lynx ransomware data-leak (extortion) site on 2025-05-17.
Gearhiser Peters Elliott & Cannon was named on the Lynx ransomware data-leak (extortion) site on 2025-05-17.
Maruichi Leavitt Pipe & Tube was named on the Lynx ransomware data-leak (extortion) site on 2025-05-17.
nissi-beach.com was named on the Incransom ransomware data-leak (extortion) site on 2025-05-17.
npfy.org was named on the Incransom ransomware data-leak (extortion) site on 2025-05-17.
ros.eu was named on the Incransom ransomware data-leak (extortion) site on 2025-05-17.
www.davisdavisco.com was named on the Incransom ransomware data-leak (extortion) site on 2025-05-17.
alpha-steuer.de was named on the Incransom ransomware data-leak (extortion) site on 2025-05-16.
Carney Badley Spellman was named on the Play ransomware data-leak (extortion) site on 2025-05-16.
ccrcda.org was named on the Incransom ransomware data-leak (extortion) site on 2025-05-16.
finanzconsult-immobilien.de was named on the Incransom ransomware data-leak (extortion) site on 2025-05-16.
south african airways (flysaa.com) was named on the Incransom ransomware data-leak (extortion) site on 2025-05-16.
Triple Jump was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-05-16.
[DISCLOSED]OeTTINGER Brauerei was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-05-15.
GARDNER ORTHOPEDICS was named on the Incransom ransomware data-leak (extortion) site on 2025-05-15.
http://www.gloucesterva.gov was named on the BlackSuit ransomware data-leak (extortion) site on 2025-05-15.
Grafton Technologies was named on the Play ransomware data-leak (extortion) site on 2025-05-14.
Kingsmen Creatives Ltd. was named on the Embargo ransomware data-leak (extortion) site on 2025-05-14.
Redirecting... was named on the Hellcat ransomware data-leak (extortion) site on 2025-05-14.
Regal Ideas was named on the Play ransomware data-leak (extortion) site on 2025-05-14.
Royal Chemical was named on the Lynx ransomware data-leak (extortion) site on 2025-05-14.
Sao Camilo Cachoeiro de Itapemirim was named on the Rhysida ransomware data-leak (extortion) site on 2025-05-14.
architekturbuero-heller.de was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-13.
Dishaka was named on the Play ransomware data-leak (extortion) site on 2025-05-13.
First Choice Courier & Messenger was named on the Spacebears ransomware data-leak (extortion) site on 2025-05-13.
Looper Goodwine was named on the Kairos ransomware data-leak (extortion) site on 2025-05-13.
Nedved Architekti was named on the Spacebears ransomware data-leak (extortion) site on 2025-05-13.
Operative was named on the Play ransomware data-leak (extortion) site on 2025-05-13.
Overhead Door of Nova Scotia was named on the Play ransomware data-leak (extortion) site on 2025-05-13.
thaonlesvosges.fr was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-13.
www.colemanmaterials.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-13.
altara.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-12.
atlplasticsurgeon.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-12.
EIZO Rugged Solutions was named on the Play ransomware data-leak (extortion) site on 2025-05-12.
iacc.holdings was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-12.
industrialdynamics.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-12.
jtalleycorp.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-12.
Just Concrete & Masonry was named on the Play ransomware data-leak (extortion) site on 2025-05-12.
net-move.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-12.
southernavionics.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-12.
www.condista.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-12.
www.dermatologysolutions.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-12.
www.philsmithauto.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-12.
dac-law.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-11.
kraftkisarna.se was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-11.
millercaggiano.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-11.
ossman.co.uk was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-11.
pratthomes.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-11.
pryor-morrow.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-11.
stitaly.it was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-11.
www.harrissteelco.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-11.
www.irisid.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-11.
www.precisiontextiles-usa.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-11.
www.setpointsystems.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-11.
www.texlaenergy.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-11.
American Eagle Logistics - Full Leak was named on the Monti ransomware data-leak (extortion) site on 2025-05-10.
citrusmagic.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-10.
statesmanbiz.com was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-10.
Verrex was named on the Play ransomware data-leak (extortion) site on 2025-05-10.
www.cityofgroveok.gov was named on the Dragonforce ransomware data-leak (extortion) site on 2025-05-10.
EMX Enterprises was named on the Play ransomware data-leak (extortion) site on 2025-05-09.
Gistic Research was named on the Play ransomware data-leak (extortion) site on 2025-05-09.
hennessyfunds.com was named on the LockBit ransomware data-leak (extortion) site on 2025-05-09.
Mountain View Mushrooms was named on the Rhysida ransomware data-leak (extortion) site on 2025-05-09.
Sweet Shop USA was named on the Play ransomware data-leak (extortion) site on 2025-05-09.
UniTrak was named on the Play ransomware data-leak (extortion) site on 2025-05-08.
vzlom7may.omg was named on the LockBit ransomware data-leak (extortion) site on 2025-05-08.
Amtech Software was named on the Monti ransomware data-leak (extortion) site on 2025-05-07.
GPF Lewis was named on the Hunters International ransomware data-leak (extortion) site on 2025-05-07.
LGM was named on the Termite ransomware data-leak (extortion) site on 2025-05-07.
Sioux Chief was named on the Hunters International ransomware data-leak (extortion) site on 2025-05-07.
Transport Lutztulln was named on the Orca ransomware data-leak (extortion) site on 2025-05-07.
Breen Construction Services was named on the Play ransomware data-leak (extortion) site on 2025-05-06.
Commune de Jemeppe-sur-Sambre was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-05-06.
Downtown Travel was named on the Play ransomware data-leak (extortion) site on 2025-05-06.
ehlers-inc.com was named on the LockBit ransomware data-leak (extortion) site on 2025-05-06.
Marine Technical Surveyors was named on the Play ransomware data-leak (extortion) site on 2025-05-06.
Mediprobe Research was named on the Rhysida ransomware data-leak (extortion) site on 2025-05-06.
Novosit was named on the Play ransomware data-leak (extortion) site on 2025-05-06.
Rand Technology was named on the Play ransomware data-leak (extortion) site on 2025-05-06.
Sugar Lake Lodge was named on the Play ransomware data-leak (extortion) site on 2025-05-06.
Technical Die-Casting was named on the Play ransomware data-leak (extortion) site on 2025-05-06.
Trybus was named on the Play ransomware data-leak (extortion) site on 2025-05-06.
Webcor was named on the Play ransomware data-leak (extortion) site on 2025-05-06.
Alberta Construction Safety Association was named on the Play ransomware data-leak (extortion) site on 2025-05-05.
ATI Systems was named on the Play ransomware data-leak (extortion) site on 2025-05-05.
Hire Velocity (lan.hirevelocity.com) was named on the Lynx ransomware data-leak (extortion) site on 2025-05-05.
OeTTINGER Brauerei was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-05-05.
pbw- was named on the LockBit ransomware data-leak (extortion) site on 2025-05-05.
CabinC.com was named on the Lynx ransomware data-leak (extortion) site on 2025-05-04.
soundtransit.org was named on the Braincipher ransomware data-leak (extortion) site on 2025-05-04.
valedolobo.com was named on the Braincipher ransomware data-leak (extortion) site on 2025-05-04.
American Eagle Logistics - Press Release was named on the Monti ransomware data-leak (extortion) site on 2025-05-03.
ddecor.com was named on the Braincipher ransomware data-leak (extortion) site on 2025-05-03.
edisoft.es was named on the Braincipher ransomware data-leak (extortion) site on 2025-05-03.
iycsa.com.co was named on the Braincipher ransomware data-leak (extortion) site on 2025-05-03.
Kalin Hobeltechnik was named on the Rhysida ransomware data-leak (extortion) site on 2025-05-03.
ruizre.es was named on the Braincipher ransomware data-leak (extortion) site on 2025-05-03.
arc-com.com was named on the LockBit ransomware data-leak (extortion) site on 2025-05-02.
derichsukonertz.de was named on the Lynx ransomware data-leak (extortion) site on 2025-05-02.
[DISCLOSED]Imedexsa was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-05-02.
ECOM America was named on the Play ransomware data-leak (extortion) site on 2025-05-02.
Government of Peru was named on the Rhysida ransomware data-leak (extortion) site on 2025-05-02.
kll-law.com was named on the LockBit ransomware data-leak (extortion) site on 2025-05-02.
pdcm.com was named on the LockBit ransomware data-leak (extortion) site on 2025-05-02.
runtec.co.jp was named on the Lynx ransomware data-leak (extortion) site on 2025-05-02.
Southern Fidelity was named on the Play ransomware data-leak (extortion) site on 2025-05-02.
The Seydel Companies was named on the Play ransomware data-leak (extortion) site on 2025-05-02.
In May 2025, 160k records of customer data was allegedly obtained from Creams Cafe, "the UK's favourite dessert parlour". The data included email and physical addresses, names and phone numbers.
Custom Paper was named on the Play ransomware data-leak (extortion) site on 2025-05-01.
Defected Records was named on the Play ransomware data-leak (extortion) site on 2025-05-01.
maywdef was named on the Lynx ransomware data-leak (extortion) site on 2025-05-01.
StudioVaiani was named on the Incransom ransomware data-leak (extortion) site on 2025-05-01.
The Saint James Hospital Group was named on the Incransom ransomware data-leak (extortion) site on 2025-05-01.
WDEF-TV was named on the Lynx ransomware data-leak (extortion) site on 2025-05-01.
Coop UQAM was named on the Rhysida ransomware data-leak (extortion) site on 2025-04-30.
Digestive Specialists was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-30.
FCC was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-30.
Gorham Sand & Gravel was named on the Play ransomware data-leak (extortion) site on 2025-04-30.
Missouri Pipe Fittings was named on the Play ransomware data-leak (extortion) site on 2025-04-30.
National Steel City was named on the Play ransomware data-leak (extortion) site on 2025-04-30.
Penn Emblem (penn.local) was named on the Lynx ransomware data-leak (extortion) site on 2025-04-30.
PermaCold Engineering was named on the Play ransomware data-leak (extortion) site on 2025-04-30.
southernagllc.com was named on the Lynx ransomware data-leak (extortion) site on 2025-04-30.
Telco Intercontinental was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-30.
Ushio was named on the Termite ransomware data-leak (extortion) site on 2025-04-30.
BOLL Logistik was named on the Play ransomware data-leak (extortion) site on 2025-04-29.
Cooper Global Chauffeured was named on the Play ransomware data-leak (extortion) site on 2025-04-29.
David Mills CPA, LLC was named on the Lynx ransomware data-leak (extortion) site on 2025-04-29.
Haas & Associates was named on the Play ransomware data-leak (extortion) site on 2025-04-28.
Hpital Glengarry Memorial Hospital (clglen.local) was named on the Incransom ransomware data-leak (extortion) site on 2025-04-28.
LaBella Associates was named on the Rhysida ransomware data-leak (extortion) site on 2025-04-28.
Mantel Machine Products was named on the Play ransomware data-leak (extortion) site on 2025-04-28.
Minnesota Lawyers Mutual Insurance was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-28.
Scientel Solutions was named on the Play ransomware data-leak (extortion) site on 2025-04-28.
Crawford Door Sales was named on the Play ransomware data-leak (extortion) site on 2025-04-27.
FMT Consultants was named on the Play ransomware data-leak (extortion) site on 2025-04-27.
Global Media Group was named on the Nitrogen ransomware data-leak (extortion) site on 2025-04-26.
M'AR De AR Hotels was named on the Nitrogen ransomware data-leak (extortion) site on 2025-04-26.
MDB was named on the Rhysida ransomware data-leak (extortion) site on 2025-04-26.
Stadtwerke Schwerte GmbH was named on the Nitrogen ransomware data-leak (extortion) site on 2025-04-26.
AKTO was named on the Nitrogen ransomware data-leak (extortion) site on 2025-04-25.
corporateflight.com was named on the Lynx ransomware data-leak (extortion) site on 2025-04-25.
friscochamber.com was named on the Lynx ransomware data-leak (extortion) site on 2025-04-25.
greatplainstransport.com was named on the Lynx ransomware data-leak (extortion) site on 2025-04-25.
impactcanada.com was named on the Lynx ransomware data-leak (extortion) site on 2025-04-25.
Kasb Bank - K-Trade was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-25.
Kenworth Del Sur was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-25.
pay4freight.com was named on the Lynx ransomware data-leak (extortion) site on 2025-04-25.
shgcpa.com was named on the Lynx ransomware data-leak (extortion) site on 2025-04-25.
arkansasprimarycare.com was named on the Incransom ransomware data-leak (extortion) site on 2025-04-24.
buildingmaterialspecialties.com was named on the Lynx ransomware data-leak (extortion) site on 2025-04-24.
Colorado Pulmonary Intensivists was named on the Kairos ransomware data-leak (extortion) site on 2025-04-24.
end2endtechnologies was named on the Lynx ransomware data-leak (extortion) site on 2025-04-24.
https://fortunesociety.org/ was named on the BlackSuit ransomware data-leak (extortion) site on 2025-04-24.
https://www.pacmet.com was named on the BlackSuit ransomware data-leak (extortion) site on 2025-04-24.
Vicarage Court Solicitors was named on the Lynx ransomware data-leak (extortion) site on 2025-04-24.
amethystgroup.co.uk was named on the Lynx ransomware data-leak (extortion) site on 2025-04-23.
Farmo Res was named on the Lynx ransomware data-leak (extortion) site on 2025-04-23.
iaconnect was named on the LockBit ransomware data-leak (extortion) site on 2025-04-23.
Lantronix was named on the Play ransomware data-leak (extortion) site on 2025-04-23.
lemi-group was named on the Incransom ransomware data-leak (extortion) site on 2025-04-23.
Mafi was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-23.
Milicic was named on the Rhysida ransomware data-leak (extortion) site on 2025-04-23.
NESCTC was named on the Play ransomware data-leak (extortion) site on 2025-04-23.
Springer & Steinberg was named on the Lynx ransomware data-leak (extortion) site on 2025-04-23.
Suburban Carting was named on the Play ransomware data-leak (extortion) site on 2025-04-23.
The Derby High School was named on the Kairos ransomware data-leak (extortion) site on 2025-04-23.
The Human Bean was named on the Play ransomware data-leak (extortion) site on 2025-04-23.
Acos Favorit was named on the Rhysida ransomware data-leak (extortion) site on 2025-04-22.
All Book Covers was named on the Play ransomware data-leak (extortion) site on 2025-04-22.
Bacton Transport Services was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-04-22.
franklin nursing home was named on the Incransom ransomware data-leak (extortion) site on 2025-04-22.
Independent Financial Services was named on the Play ransomware data-leak (extortion) site on 2025-04-22.
Jet Ice was named on the Play ransomware data-leak (extortion) site on 2025-04-22.
R&N Manufacturing was named on the Lynx ransomware data-leak (extortion) site on 2025-04-22.
C-Mec was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-04-21.
Pharma Force was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-21.
tuttoperlufficio.eu was named on the LockBit ransomware data-leak (extortion) site on 2025-04-21.
Z****a.com was named on the Flocker ransomware data-leak (extortion) site on 2025-04-19.
dhsmithco.com was named on the Lynx ransomware data-leak (extortion) site on 2025-04-18.
[EVIDENCE PACK 2] Telecontrol was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-04-18.
The Tech Interactive was named on the Moneymessage ransomware data-leak (extortion) site on 2025-04-18.
d-line was named on the Kairos ransomware data-leak (extortion) site on 2025-04-17.
EVERTECH INSTRUMENTAL CO., LTD was named on the Spacebears ransomware data-leak (extortion) site on 2025-04-17.
Feldman & Lopez was named on the Lynx ransomware data-leak (extortion) site on 2025-04-17.
HOPI was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-17.
Hyalogic was named on the Lynx ransomware data-leak (extortion) site on 2025-04-17.
Koninklijke Ahold Delhaize N.V. was named on the Incransom ransomware data-leak (extortion) site on 2025-04-17.
Red Chamber was named on the Play ransomware data-leak (extortion) site on 2025-04-17.
Sally B Gold was named on the Lynx ransomware data-leak (extortion) site on 2025-04-17.
VIรUELAS ABOGADOS was named on the Spacebears ransomware data-leak (extortion) site on 2025-04-17.
aeamg.org.br was named on the LockBit ransomware data-leak (extortion) site on 2025-04-16.
aqhch.com.cn was named on the LockBit ransomware data-leak (extortion) site on 2025-04-16.
ende.bo was named on the LockBit ransomware data-leak (extortion) site on 2025-04-16.
iblinfo.de was named on the Incransom ransomware data-leak (extortion) site on 2025-04-16.
jackpotjunction.com was named on the LockBit ransomware data-leak (extortion) site on 2025-04-16.
McElwee Firm was named on the Lynx ransomware data-leak (extortion) site on 2025-04-16.
semex.com was named on the Underground ransomware data-leak (extortion) site on 2025-04-16.
spscompanies.com was named on the Lynx ransomware data-leak (extortion) site on 2025-04-16.
toolsign.com was named on the Lynx ransomware data-leak (extortion) site on 2025-04-16.
Astra Products was named on the Lynx ransomware data-leak (extortion) site on 2025-04-15.
Destination Toronto was named on the Play ransomware data-leak (extortion) site on 2025-04-15.
James & Sons Fine Jewelers was named on the Play ransomware data-leak (extortion) site on 2025-04-15.
Lake HVAC was named on the Lynx ransomware data-leak (extortion) site on 2025-04-15.
Merri-Makers was named on the Play ransomware data-leak (extortion) site on 2025-04-15.
Miller Boskus Lack Architects was named on the Play ransomware data-leak (extortion) site on 2025-04-15.
nevadareadymix.com was named on the Lynx ransomware data-leak (extortion) site on 2025-04-15.
O'Brien & Ryan was named on the Play ransomware data-leak (extortion) site on 2025-04-15.
Oregon Department of Environmental Quality was named on the Rhysida ransomware data-leak (extortion) site on 2025-04-15.
trocaire.edu was named on the Incransom ransomware data-leak (extortion) site on 2025-04-15.
Voigt-Abernathy Company was named on the Play ransomware data-leak (extortion) site on 2025-04-15.
Waller was named on the Play ransomware data-leak (extortion) site on 2025-04-15.
Calmont Group was named on the Play ransomware data-leak (extortion) site on 2025-04-14.
Comport Technology Solutions was named on the Play ransomware data-leak (extortion) site on 2025-04-14.
Cortez Resources was named on the Play ransomware data-leak (extortion) site on 2025-04-14.
MENTAL HEALTH was named on the Incransom ransomware data-leak (extortion) site on 2025-04-14.
Orthopaedic Specialists of Connecticut was named on the Incransom ransomware data-leak (extortion) site on 2025-04-14.
intelliloan.com was named on the LockBit ransomware data-leak (extortion) site on 2025-04-13.
acimfunds.com was named on the LockBit ransomware data-leak (extortion) site on 2025-04-12.
bilbie.com.au was named on the Lynx ransomware data-leak (extortion) site on 2025-04-12.
Bjรธrklund was named on the Termite ransomware data-leak (extortion) site on 2025-04-12.
Chickenshed was named on the Incransom ransomware data-leak (extortion) site on 2025-04-12.
Dimension Composite was named on the Rhysida ransomware data-leak (extortion) site on 2025-04-12.
On IT was named on the Termite ransomware data-leak (extortion) site on 2025-04-12.
Restaurant Associates was named on the Lynx ransomware data-leak (extortion) site on 2025-04-12.
visionproducts.llc was named on the LockBit ransomware data-leak (extortion) site on 2025-04-12.
C?l???t Group was named on the Play ransomware data-leak (extortion) site on 2025-04-11.
Codinter was named on the Play ransomware data-leak (extortion) site on 2025-04-11.
Colmar Industrial Supplies was named on the Lynx ransomware data-leak (extortion) site on 2025-04-11.
hotelemc2.c was named on the LockBit ransomware data-leak (extortion) site on 2025-04-11.
Imagineering Finishing Technologies was named on the Incransom ransomware data-leak (extortion) site on 2025-04-11.
KER Custom Molders was named on the Play ransomware data-leak (extortion) site on 2025-04-11.
mbmdubai.com was named on the Braincipher ransomware data-leak (extortion) site on 2025-04-11.
New York Sports Club was named on the Play ransomware data-leak (extortion) site on 2025-04-11.
Noyen Construction was named on the Play ransomware data-leak (extortion) site on 2025-04-11.
PAC Strapping Products was named on the Play ransomware data-leak (extortion) site on 2025-04-11.
Sfrent.net was named on the Play ransomware data-leak (extortion) site on 2025-04-11.
During 2025, the threat-intelligence firm Synthient aggregated 2 billion unique email addresses disclosed in credential-stuffing lists found across multiple malicious internet sources.
The Study was named on the Play ransomware data-leak (extortion) site on 2025-04-11.
3P Corporation was named on the Spacebears ransomware data-leak (extortion) site on 2025-04-10.
Bonick Landscaping was named on the Play ransomware data-leak (extortion) site on 2025-04-10.
Cane Creek Cycling Components was named on the Play ransomware data-leak (extortion) site on 2025-04-10.
chesterfieldtwp.org was named on the Incransom ransomware data-leak (extortion) site on 2025-04-10.
finetech.de was named on the Incransom ransomware data-leak (extortion) site on 2025-04-10.
inspec-international.com was named on the Incransom ransomware data-leak (extortion) site on 2025-04-10.
silocaf.com was named on the Incransom ransomware data-leak (extortion) site on 2025-04-10.
ccso2014.local(sheriffs) was named on the Incransom ransomware data-leak (extortion) site on 2025-04-09.
gramoll.com was named on the Lynx ransomware data-leak (extortion) site on 2025-04-09.
Coop57 was named on the Incransom ransomware data-leak (extortion) site on 2025-04-08.
crystal-d.com was named on the LockBit ransomware data-leak (extortion) site on 2025-04-08.
https://www.thirdave.com was named on the Metaencryptor ransomware data-leak (extortion) site on 2025-04-08.
physiciansmedicalbilling.net was named on the LockBit ransomware data-leak (extortion) site on 2025-04-08.
RFMS, Inc. was named on the Kairos ransomware data-leak (extortion) site on 2025-04-08.
shengyusteel.com was named on the Underground ransomware data-leak (extortion) site on 2025-04-08.
Thiekon Constructie was named on the Incransom ransomware data-leak (extortion) site on 2025-04-08.
[DISCLOSED]Cell C was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-04-07.
Galesburg Area Chamber of Commerce was named on the Kairos ransomware data-leak (extortion) site on 2025-04-07.
IDS Infotech was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-07.
Telecontrol was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-04-07.
asiapacificex.com was named on the LockBit ransomware data-leak (extortion) site on 2025-04-06.
graphiquedefrance.com was named on the LockBit ransomware data-leak (extortion) site on 2025-04-06.
Groupe Delcourt was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-06.
grupotersa.com.mx was named on the LockBit ransomware data-leak (extortion) site on 2025-04-06.
Hofmann Fรถrdertechnik GmbH was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-06.
Swiss Capitals Group was named on the Rhysida ransomware data-leak (extortion) site on 2025-04-06.
ABITL Finishing was named on the Play ransomware data-leak (extortion) site on 2025-04-05.
Baltimore Steel Erectors was named on the Play ransomware data-leak (extortion) site on 2025-04-05.
Blackmon Mooring was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-05.
Csm Engineering was named on the Play ransomware data-leak (extortion) site on 2025-04-05.
Hawk Technology was named on the Play ransomware data-leak (extortion) site on 2025-04-05.
https://www.mmwec.org was named on the BlackSuit ransomware data-leak (extortion) site on 2025-04-05.
Industrial Corona de Mรฉxico was named on the Spacebears ransomware data-leak (extortion) site on 2025-04-05.
L&S Mechanical (Reuploaded) was named on the Spacebears ransomware data-leak (extortion) site on 2025-04-05.
Nexia Poyiadjis IT was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-05.
TEDOM was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-05.
Fraser Trebilcock was named on the Play ransomware data-leak (extortion) site on 2025-04-04.
National Sign corp was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-04.
Royal Glass was named on the Play ransomware data-leak (extortion) site on 2025-04-04.
Sansone Group was named on the Hunters International ransomware data-leak (extortion) site on 2025-04-04.
Alton Steel was named on the Lynx ransomware data-leak (extortion) site on 2025-04-03.
Hop Industries was named on the Play ransomware data-leak (extortion) site on 2025-04-03.
Lifebreath was named on the Play ransomware data-leak (extortion) site on 2025-04-03.
OTA Management was named on the Play ransomware data-leak (extortion) site on 2025-04-03.
Parvin-Clauss Sign Company was named on the Play ransomware data-leak (extortion) site on 2025-04-03.
Regionale Verkehrsbetriebe was named on the Play ransomware data-leak (extortion) site on 2025-04-03.
A little gift of exclusive data for everyone was named on the Daixin ransomware data-leak (extortion) site on 2025-04-02.
Clarity Ventures was named on the Rhysida ransomware data-leak (extortion) site on 2025-04-02.
crownlaboratories.com was named on the Abyss ransomware data-leak (extortion) site on 2025-04-02.
Fulfillment Plus was named on the Play ransomware data-leak (extortion) site on 2025-04-02.
The Hoff Brand SL Data Leak was named on the Everest ransomware data-leak (extortion) site on 2025-04-02.
delta-life.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-04-01.
europtec.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-04-01.
intellioan.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-04-01.
State's Attorney Office was named on the Kairos ransomware data-leak (extortion) site on 2025-04-01.
The Loretto Hospital was named on the Incransom ransomware data-leak (extortion) site on 2025-04-01.
CMC Technology Group was named on the BianLian ransomware data-leak (extortion) site on 2025-03-31.
Meridian Senior was named on the BianLian ransomware data-leak (extortion) site on 2025-03-31.
Saunders and Saunders was named on the BianLian ransomware data-leak (extortion) site on 2025-03-31.
SIRIUS S.R.L. was named on the Nitrogen ransomware data-leak (extortion) site on 2025-03-31.
Sonrisas Dental Health was named on the BianLian ransomware data-leak (extortion) site on 2025-03-31.
test1234.com was named on the LockBit ransomware data-leak (extortion) site on 2025-03-31.
www.assisi.nl was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-30.
AJF Inspections & Engineering () was named on the Lynx ransomware data-leak (extortion) site on 2025-03-29.
Amatech was named on the Lynx ransomware data-leak (extortion) site on 2025-03-29.
bahnlog.com was named on the Incransom ransomware data-leak (extortion) site on 2025-03-29.
Commercial Concrete Systems was named on the Lynx ransomware data-leak (extortion) site on 2025-03-29.
Forrest City School District was named on the Rhysida ransomware data-leak (extortion) site on 2025-03-29.
importantsteps.com was named on the Incransom ransomware data-leak (extortion) site on 2025-03-29.
Martin Mechanical (martin.local) was named on the Lynx ransomware data-leak (extortion) site on 2025-03-29.
Pacific Residential Mortgage was named on the Lynx ransomware data-leak (extortion) site on 2025-03-29.
Senior Support Services was named on the Rhysida ransomware data-leak (extortion) site on 2025-03-29.
Solar Optimum was named on the Lynx ransomware data-leak (extortion) site on 2025-03-29.
solaroptimum.com was named on the Lynx ransomware data-leak (extortion) site on 2025-03-29.
amatechinc.com was named on the Lynx ransomware data-leak (extortion) site on 2025-03-28.
augustssons.se was named on the Incransom ransomware data-leak (extortion) site on 2025-03-28.
Direct Traffic Control was named on the Lynx ransomware data-leak (extortion) site on 2025-03-28.
entandallergy.com was named on the Abyss ransomware data-leak (extortion) site on 2025-03-28.
phaus.us&phakr.com&phabodysystems.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-28.
W*******w.com was named on the Flocker ransomware data-leak (extortion) site on 2025-03-28.
www.bassi.it was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-28.
www.solventacentroamerica.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-28.
brattenelectrictn.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-27.
City of Fort St. John (city.cityfsj.local) was named on the Incransom ransomware data-leak (extortion) site on 2025-03-27.
conterra.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-27.
NEW JERSEY CPA was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-03-27.
www.allmilmoe.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-27.
www.carolinaac.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-27.
www.DSelectrical.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-27.
www.garbinc.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-27.
www.hongthongrice.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-27.
www.s3s.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-27.
www.solidworld.it was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-27.
Concord Orthopaedics Data Leak was named on the Everest ransomware data-leak (extortion) site on 2025-03-26.
Genie Healthcare Data Leak was named on the Everest ransomware data-leak (extortion) site on 2025-03-26.
TriCity Family Services was named on the Incransom ransomware data-leak (extortion) site on 2025-03-26.
usCalibration was named on the Play ransomware data-leak (extortion) site on 2025-03-26.
www.afnigc.ca was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-26.
www.argentosc.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-26.
www.cormidom.com.do was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-26.
www.creativelogisticservices.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-26.
www.fkm-elemente.de was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-26.
www.lions-online.org was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-26.
www.mododoc.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-26.
www.ripplejunction.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-26.
B&C Industries was named on the Play ransomware data-leak (extortion) site on 2025-03-25.
bioclimaservice.it was named on the LockBit ransomware data-leak (extortion) site on 2025-03-25.
cisd.org was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-25.
fepasa.com.ar was named on the LockBit ransomware data-leak (extortion) site on 2025-03-25.
Kimco Steel was named on the Play ransomware data-leak (extortion) site on 2025-03-25.
mnm.hu was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-25.
Okeene Elementary School was named on the Rhysida ransomware data-leak (extortion) site on 2025-03-25.
OMLTD.CO.JP was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-25.
ossc.com.mx was named on the LockBit ransomware data-leak (extortion) site on 2025-03-25.
technicare.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-25.
texascompressionservices.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-25.
www.rivaldt.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-25.
allbiz.com was named on the Incransom ransomware data-leak (extortion) site on 2025-03-24.
Lupin Limited was named on the Killsecurity ransomware data-leak (extortion) site on 2025-03-24.
TMT Clam Dredger was named on the Incransom ransomware data-leak (extortion) site on 2025-03-24.
www.exemplar.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-24.
abeyor.fr was named on the Incransom ransomware data-leak (extortion) site on 2025-03-23.
Goshen Medical Center was named on the BianLian ransomware data-leak (extortion) site on 2025-03-23.
Precision Accounting Intl was named on the Killsecurity ransomware data-leak (extortion) site on 2025-03-23.
Doumen was named on the Lynx ransomware data-leak (extortion) site on 2025-03-22.
Innovative Surfaces was named on the Killsecurity ransomware data-leak (extortion) site on 2025-03-22.
REOC San Antonio was named on the Play ransomware data-leak (extortion) site on 2025-03-22.
SPARSH Hospital was named on the Killsecurity ransomware data-leak (extortion) site on 2025-03-22.
Zaveta Custom Homes was named on the Play ransomware data-leak (extortion) site on 2025-03-22.
Cayman National Bank was named on the Killsecurity ransomware data-leak (extortion) site on 2025-03-21.
gbsn.com.br was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
https://www.orangeville.ca was named on the BlackSuit ransomware data-leak (extortion) site on 2025-03-21.
Officio Medical was named on the Killsecurity ransomware data-leak (extortion) site on 2025-03-21.
www.abmenviro.ca was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.accessfinanceonline.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.ahmadiyya.ca was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.allstarhealthcaresolutions.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.avalonapparel.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.broadmoormethodist.org was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.core-1.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.elizajennings.org was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.engines.man.eu was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.esquirebrands.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.gcsnet.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.gestionquintessence.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.mslglobalexp.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.njcalwe.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.oneupinnovations.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.parklandmanufacturing.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.scpautomation.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.sinkdirect.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
www.solinst.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-21.
Cargills Bank was named on the Hunters International ransomware data-leak (extortion) site on 2025-03-20.
Instituto de Ojos was named on the Killsecurity ransomware data-leak (extortion) site on 2025-03-20.
interiseworld.com was named on the Killsecurity ransomware data-leak (extortion) site on 2025-03-20.
L&S Mechanical was named on the Spacebears ransomware data-leak (extortion) site on 2025-03-20.
Megacentro was named on the Hunters International ransomware data-leak (extortion) site on 2025-03-20.
Newtown Friends School (newtownfriends.org) was named on the FOG ransomware data-leak (extortion) site on 2025-03-20.
Obra Play was named on the Killsecurity ransomware data-leak (extortion) site on 2025-03-20.
Whittaker & Company was named on the Spacebears ransomware data-leak (extortion) site on 2025-03-20.
www.georgehay.co.uk was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-20.
www.janvier-labs.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-20.
yano.tokyo was named on the Blackout ransomware data-leak (extortion) site on 2025-03-20.
alphaoil.ca was named on the Incransom ransomware data-leak (extortion) site on 2025-03-19.
controlledair.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-19.
Coopertruni was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-19.
Kiribati Government was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-19.
newhollandwood.com was named on the Incransom ransomware data-leak (extortion) site on 2025-03-19.
Palomino Petroleum was named on the Lynx ransomware data-leak (extortion) site on 2025-03-19.
Q railing was named on the Play ransomware data-leak (extortion) site on 2025-03-19.
THX Transport was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-19.
warmsworth.doncaster.sch.uk was named on the Incransom ransomware data-leak (extortion) site on 2025-03-19.
51talk.com was named on the LockBit ransomware data-leak (extortion) site on 2025-03-18.
airtelligence.com was named on the Incransom ransomware data-leak (extortion) site on 2025-03-18.
AMICIO was named on the Lynx ransomware data-leak (extortion) site on 2025-03-18.
CD was named on the Monti ransomware data-leak (extortion) site on 2025-03-18.
expertdata.com.au was named on the Incransom ransomware data-leak (extortion) site on 2025-03-18.
gaertnerhof-jeutter.de was named on the Incransom ransomware data-leak (extortion) site on 2025-03-18.
Gloria Cales was named on the Monti ransomware data-leak (extortion) site on 2025-03-18.
Harcourts Prime Properties was named on the Killsecurity ransomware data-leak (extortion) site on 2025-03-18.
Ted Hosmer Enterprises was named on the Rhysida ransomware data-leak (extortion) site on 2025-03-18.
assaabloy.com\$14.4B\Sweden\229GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-17.
baillie.com\$130.5M\USA\52GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-17.
bluedge.com\$104.5M\USA\994GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-17.
CableVision was named on the Hunters International ransomware data-leak (extortion) site on 2025-03-17.
ccktech.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-17.
kyb.com\$600.5M\USA\1.8TB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-17.
oneill.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-17.
RAE (Real Academia Espaรฑola) (rae.es) was named on the FOG ransomware data-leak (extortion) site on 2025-03-17.
rocketstores.com\$738.9M\USA\3.2TB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-17.
tempel.com\$628.7M\USA\111GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-17.
thermoid.com\$183.2M\USA\199GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-17.
urban1.com\$460.3M\USA\2.5TB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-17.
www.baxterlaboratories.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-17.
www.jhayber.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-17.
Courageous Home Care was named on the Hunters International ransomware data-leak (extortion) site on 2025-03-16.
www.ameda.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-16.
yeanshalle.de was named on the Incransom ransomware data-leak (extortion) site on 2025-03-15.
Bancroft Wines was named on the Incransom ransomware data-leak (extortion) site on 2025-03-14.
Casale Del Giglio was named on the Orca ransomware data-leak (extortion) site on 2025-03-14.
Fulcrum Lifting was named on the Lynx ransomware data-leak (extortion) site on 2025-03-14.
idcconstruction.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-14.
Indiv Usa was named on the Lynx ransomware data-leak (extortion) site on 2025-03-14.
jennyyoo.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-14.
mdm-insurance.com was named on the Abyss ransomware data-leak (extortion) site on 2025-03-14.
Perrigo Company was named on the Termite ransomware data-leak (extortion) site on 2025-03-14.
Tryon was named on the Lynx ransomware data-leak (extortion) site on 2025-03-14.
Backes was named on the Play ransomware data-leak (extortion) site on 2025-03-13.
Best Cheer Stone was named on the Play ransomware data-leak (extortion) site on 2025-03-13.
chfindustries.com\$253.8M\USA\2.5TB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-13.
Cothron's Security Professionals was named on the Rhysida ransomware data-leak (extortion) site on 2025-03-13.
dtrglaw.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-13.
fstlogistics.com was named on the Lynx ransomware data-leak (extortion) site on 2025-03-13.
Harrells.com was named on the Lynx ransomware data-leak (extortion) site on 2025-03-13.
In March 2025, rental-application files held by French real estate network Laforรชt were exposed, leaking tenants' identity documents and bank account details (RIB) along with the rest of their dossiers.
muellersyste was named on the LockBit ransomware data-leak (extortion) site on 2025-03-13.
rixos.com was named on the Embargo ransomware data-leak (extortion) site on 2025-03-13.
SL Tennessee Information was named on the Play ransomware data-leak (extortion) site on 2025-03-13.
University Diagnostic Medical Imaging, PC (udmi.net) was named on the FOG ransomware data-leak (extortion) site on 2025-03-13.
www.raymond.in was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-13.
baillie.com\$130.5M\USA\52GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-12.
El Camino Real Academy (elcaminorealacademy) was named on the FOG ransomware data-leak (extortion) site on 2025-03-12.
HYPERNOVA TELECOM was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-12.
HYPONAMIRU was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-12.
rocketstores.com\$738.9M\USA\3.2TB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-12.
tempel.com\$628.7M\USA\111GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-12.
thermoid.com\$183.2M\USA\199GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-12.
TUV India Pvt. Ltd. was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-03-12.
urban1.com\$460.3M\USA\2.5TB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-12.
www.visualisation.one was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-12.
ciscientific.com.au was named on the Lynx ransomware data-leak (extortion) site on 2025-03-11.
Edesur Dominicana was named on the Hunters International ransomware data-leak (extortion) site on 2025-03-11.
Essex County OB/GYN Associates was named on the Incransom ransomware data-leak (extortion) site on 2025-03-11.
Longue Vue Club was named on the Lynx ransomware data-leak (extortion) site on 2025-03-11.
quigleyeye.com\$33.6M\USA\3.4TB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-11.
Research Electronics International was named on the Nitrogen ransomware data-leak (extortion) site on 2025-03-11.
Skyward Specialty Insurance was named on the Killsecurity ransomware data-leak (extortion) site on 2025-03-11.
Springfield Water and Sewer Commission was named on the Lynx ransomware data-leak (extortion) site on 2025-03-11.
Trymata was named on the Killsecurity ransomware data-leak (extortion) site on 2025-03-11.
Wilkinson Rogers (wilkinsonrogers.com) was named on the FOG ransomware data-leak (extortion) site on 2025-03-11.
wmk-hvb.de was named on the Incransom ransomware data-leak (extortion) site on 2025-03-11.
aiibeauty.com\$274.8M\USA\508GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-10.
amalgamatedsugar.com\$764.8 M\USA\464GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-10.
caltrol.com\$296.3M\USA\224GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-10.
dccsagroup.com&csahome.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-10.
[DISCLOSED]Nationz Technologies Inc. was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-03-10.
formanmills.com\$422.2M\USA\846GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-10.
Fred Salvucci was named on the Kairos ransomware data-leak (extortion) site on 2025-03-10.
Magnolia Manor (magnoliamanor.com) was named on the FOG ransomware data-leak (extortion) site on 2025-03-10.
pace-usa.com\$134.4M\USA\65GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-10.
steelwarehouse.com\$570.3M\USA\679GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-10.
www.hexosys.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-10.
ACTi Corporation was named on the Lynx ransomware data-leak (extortion) site on 2025-03-09.
baldaufarchitekten.de was named on the Incransom ransomware data-leak (extortion) site on 2025-03-09.
BerksBar.org was named on the Incransom ransomware data-leak (extortion) site on 2025-03-09.
British virgin islands London Office was named on the Rhysida ransomware data-leak (extortion) site on 2025-03-09.
Buckley BalaWilson Mew was named on the Play ransomware data-leak (extortion) site on 2025-03-09.
Clawson Honda was named on the Play ransomware data-leak (extortion) site on 2025-03-09.
Compound Solutions was named on the Play ransomware data-leak (extortion) site on 2025-03-09.
Dectron was named on the Play ransomware data-leak (extortion) site on 2025-03-09.
emperors.edu was named on the Incransom ransomware data-leak (extortion) site on 2025-03-09.
Gevril was named on the Play ransomware data-leak (extortion) site on 2025-03-09.
Greenwood Village South GVS was named on the Incransom ransomware data-leak (extortion) site on 2025-03-09.
Holiday Comfort was named on the Play ransomware data-leak (extortion) site on 2025-03-09.
Insider Technologies Limited was named on the Embargo ransomware data-leak (extortion) site on 2025-03-09.
Jerue Companies was named on the Play ransomware data-leak (extortion) site on 2025-03-09.
Nor Arc was named on the Play ransomware data-leak (extortion) site on 2025-03-09.
Peak Season was named on the Play ransomware data-leak (extortion) site on 2025-03-09.
Salemerode.com was named on the Flocker ransomware data-leak (extortion) site on 2025-03-09.
State Bar of Texas (www.texasbar.com) was named on the Incransom ransomware data-leak (extortion) site on 2025-03-09.
Syma-System was named on the Play ransomware data-leak (extortion) site on 2025-03-09.
T J Machine & Tool was named on the Play ransomware data-leak (extortion) site on 2025-03-09.
williampevear.com was named on the Incransom ransomware data-leak (extortion) site on 2025-03-09.
wog-kaiserbaeder.de was named on the Incransom ransomware data-leak (extortion) site on 2025-03-09.
Yorke & Curtis was named on the Play ransomware data-leak (extortion) site on 2025-03-09.
mitchellmcnutt.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-08.
Tech NH was named on the Lynx ransomware data-leak (extortion) site on 2025-03-08.
www.dcarosolutions.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-08.
www.jpwindustries.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-08.
ACDC Express was named on the Lynx ransomware data-leak (extortion) site on 2025-03-07.
Allworx was named on the BianLian ransomware data-leak (extortion) site on 2025-03-07.
alphabaking.com\$421.9M\USA\1TB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-07.
associatedasset.com\$288M\USA\26GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-07.
bayvillage.org was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-07.
grede.com\$814.7M\USA\524GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-07.
Island Realty was named on the BianLian ransomware data-leak (extortion) site on 2025-03-07.
lofotenseafood.com was named on the Lynx ransomware data-leak (extortion) site on 2025-03-07.
Minnesota Orthodontics was named on the BianLian ransomware data-leak (extortion) site on 2025-03-07.
REYCOTEL was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-07.
srmg.com.au was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-07.
total-ps.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-07.
wheats.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-07.
Adval Tech was named on the Lynx ransomware data-leak (extortion) site on 2025-03-06.
agi.net was named on the Monti ransomware data-leak (extortion) site on 2025-03-06.
Dynamic Closures was named on the Lynx ransomware data-leak (extortion) site on 2025-03-06.
electrocraft.com\$190.1M\USA\477GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-06.
hickorylaw.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-06.
holtcat.com\$1B\USA\868GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-06.
lovesac.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-06.
Naples Heritage Golf & Country Club was named on the Incransom ransomware data-leak (extortion) site on 2025-03-06.
Oberlin Cable Co-op (oberlin.net) was named on the FOG ransomware data-leak (extortion) site on 2025-03-06.
stanleyconsultants.com\$190.5M\USA\388GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-06.
Tugwell Pump & Supply was named on the Lynx ransomware data-leak (extortion) site on 2025-03-06.
WJCC Public Schools (wjccschools.org) was named on the FOG ransomware data-leak (extortion) site on 2025-03-06.
www.centersheetmetal.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-06.
www.convention.qc.ca was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-06.
www.hinton.ca was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-06.
www.portlandschools.org was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-06.
Best Collateral, Inc. was named on the Rhysida ransomware data-leak (extortion) site on 2025-03-05.
Pervedant was named on the Lynx ransomware data-leak (extortion) site on 2025-03-05.
Schmiedetechnik Plettenberg GmbH & Co KG was named on the Lynx ransomware data-leak (extortion) site on 2025-03-05.
SCOLARO FETTER GRIZANTI & McGOUGH, P.C. (scolaro.com) was named on the FOG ransomware data-leak (extortion) site on 2025-03-05.
The 19 biggest gitlabs was named on the FOG ransomware data-leak (extortion) site on 2025-03-05.
USA Rice<br /> was named on the Kairos ransomware data-leak (extortion) site on 2025-03-05.
www.black-star.fr was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-05.
www.cda.be was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-05.
www.japanrebuilt.jp was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-05.
www.sunsweet.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-05.
365labs - Security Corp was named on the Monti ransomware data-leak (extortion) site on 2025-03-04.
Brien, Inc. was named on the BianLian ransomware data-leak (extortion) site on 2025-03-04.
dsrny.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-04.
Ewald Consulting was named on the BianLian ransomware data-leak (extortion) site on 2025-03-04.
Garner, P.C. was named on the BianLian ransomware data-leak (extortion) site on 2025-03-04.
goencon.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-04.
Grupo Baston Aerossol (baston.com.br) was named on the FOG ransomware data-leak (extortion) site on 2025-03-04.
Keystone Pacific Property Management LLC was named on the BianLian ransomware data-leak (extortion) site on 2025-03-04.
Layfield and Borel CPA's L.L.C was named on the BianLian ransomware data-leak (extortion) site on 2025-03-04.
Legal Aid Society of Salt Lake was named on the BianLian ransomware data-leak (extortion) site on 2025-03-04.
Pampili (pampili.com.br) was named on the FOG ransomware data-leak (extortion) site on 2025-03-04.
Phoenix was named on the Monti ransomware data-leak (extortion) site on 2025-03-04.
Seabank Group was named on the Lynx ransomware data-leak (extortion) site on 2025-03-04.
Tata Technologies was named on the Hunters International ransomware data-leak (extortion) site on 2025-03-04.
Wendy Wu Tours was named on the Killsecurity ransomware data-leak (extortion) site on 2025-03-04.
almostfamousclothing.com\$183M\USA\375GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-03.
andreyevengineering.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-03.
Central McGowan (centralmcgowan.com) was named on the FOG ransomware data-leak (extortion) site on 2025-03-03.
ceratec.com was named on the Abyss ransomware data-leak (extortion) site on 2025-03-03.
everelgroup.com\$259M\Italy\440GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-03.
familychc.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-03-03.
Grafitec was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-03.
ICO was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-03.
Itapeseg was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-03.
K**d.edu was named on the Flocker ransomware data-leak (extortion) site on 2025-03-03.
Klesk Metal Stamping Co (kleskmetalstamping.com) was named on the FOG ransomware data-leak (extortion) site on 2025-03-03.
La Uniรณn was named on the Lynx ransomware data-leak (extortion) site on 2025-03-03.
LINKGROUP was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-03.
logic insectes was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-03.
New .Gov ? was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-03.
Openreso was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-03.
quigleyeye.com\$33.6M\USA\435GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-03.
regulvar.com\$253.5M\Canada\3.6TB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-03.
RJ IT Solutions was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-03.
S********e.com was named on the Flocker ransomware data-leak (extortion) site on 2025-03-03.
ssmcoop.com\$22.5M\USA\26GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-03.
synaptic.co.tz was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-03-03.
Vitenas Cosmetic Surgery was named on the Kairos ransomware data-leak (extortion) site on 2025-03-03.
bestbrands.com\$25.5M\USA\659GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-02.
britannicahome.com\$20.6M\USA\2.8TB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-02.
Couri Insurance Agency was named on the Play ransomware data-leak (extortion) site on 2025-03-02.
FM.GOB.AR was named on the Monti ransomware data-leak (extortion) site on 2025-03-02.
Ganong Bros was named on the Play ransomware data-leak (extortion) site on 2025-03-02.
germancentre.sg was named on the Incransom ransomware data-leak (extortion) site on 2025-03-02.
gruppocogesi.org was named on the LockBit ransomware data-leak (extortion) site on 2025-03-02.
International Process Plants was named on the Play ransomware data-leak (extortion) site on 2025-03-02.
IT-IQ Botswana was named on the Play ransomware data-leak (extortion) site on 2025-03-02.
kinseysinc.com\$74.9M\USA\675GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-02.
M&n Management was named on the Play ransomware data-leak (extortion) site on 2025-03-02.
midwayimporting.com\$43.7M\USA\915GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-02.
newhorizonsbaking.com\$163M\USA\455GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-02.
North American Fire Hose was named on the Play ransomware data-leak (extortion) site on 2025-03-02.
Optometrics was named on the Play ransomware data-leak (extortion) site on 2025-03-02.
Pre Con Industries was named on the Play ransomware data-leak (extortion) site on 2025-03-02.
revitalash.com\$21.5M\USA\1.2TB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-02.
steelerubber.com\$17.9M\USA\116GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-02.
uniekinc.com\$37.5M\USA\1.8TB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-03-02.
Workforce Group was named on the Killsecurity ransomware data-leak (extortion) site on 2025-03-02.
breakawayconcretecutting.com was named on the Incransom ransomware data-leak (extortion) site on 2025-03-01.
Newton & Associates, Inc was named on the Rhysida ransomware data-leak (extortion) site on 2025-03-01.
associatedasset.com\$288M\USA\26GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-28.
branchgroup.com\$333M\USA\253GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-28.
curtisint.com\$37.2M\Canada\676GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-28.
electrocraft.com\$190.1M\USA\477GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-28.
Engineering Mechanics was named on the Lynx ransomware data-leak (extortion) site on 2025-02-28.
grede.com\$814.7M\USA\524gb\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-28.
Inversiones Clinica Del Meta SA was named on the Ransomblog_noname ransomware data-leak (extortion) site on 2025-02-28.
pace-usa.com\$134.4M\USA\65gb\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-28.
stanleyconsultants.com\$190.5M\USA\388GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-28.
steelwarehouse.com\$570.3M\USA\679gb\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-28.
sublettecountywy.gov was named on the Incransom ransomware data-leak (extortion) site on 2025-02-28.
uniquehd.com\$13.7M\USA\429GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-28.
www.casinoessentials.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-28.
www.journeyoilfield.net was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-28.
On 28 February 2025, a data leak attributed to Zephir (France) exposed personal records of roughly 67,000 people, including names, email addresses, phone numbers and bank account details (IBAN).
Biogena GmbH & Co KG was named on the Lynx ransomware data-leak (extortion) site on 2025-02-27.
jtu.com.br was named on the LockBit ransomware data-leak (extortion) site on 2025-02-27.
teamwass.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-27.
www.nasonptc.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-27.
www.townofbourne.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-27.
3cBSI was named on the Play ransomware data-leak (extortion) site on 2025-02-26.
alphabaking.com\$421.9M\USA\1TB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-26.
Arcandco was named on the Termite ransomware data-leak (extortion) site on 2025-02-26.
caltrol.com\$296.3M\USA\224gb\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-26.
Finck Cigar was named on the Play ransomware data-leak (extortion) site on 2025-02-26.
Genea was named on the Termite ransomware data-leak (extortion) site on 2025-02-26.
Gitlabs: Synelixis Solutions, INGV, VMO Holdings was named on the FOG ransomware data-leak (extortion) site on 2025-02-26.
holtcat.com\$1B\USA\868GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-26.
ITU AbsorbTech was named on the Lynx ransomware data-leak (extortion) site on 2025-02-26.
Kendall Auto Group was named on the Hunters International ransomware data-leak (extortion) site on 2025-02-26.
London Belgravia was named on the Termite ransomware data-leak (extortion) site on 2025-02-26.
Muller Insurance was named on the Play ransomware data-leak (extortion) site on 2025-02-26.
National Legal Service was named on the Termite ransomware data-leak (extortion) site on 2025-02-26.
Nationz Technologies Inc. was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-02-26.
Nichino Ryokka Co Ltd was named on the Hunters International ransomware data-leak (extortion) site on 2025-02-26.
Omni United was named on the Hunters International ransomware data-leak (extortion) site on 2025-02-26.
powelltool.com was named on the Lynx ransomware data-leak (extortion) site on 2025-02-26.
Rooks Rider Solicitors was named on the Termite ransomware data-leak (extortion) site on 2025-02-26.
Story Environmental was named on the Play ransomware data-leak (extortion) site on 2025-02-26.
Vermeer Mexico was named on the Hunters International ransomware data-leak (extortion) site on 2025-02-26.
www.amerasphalt.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-26.
www.cmsg.cl was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-26.
www.emeryair.net was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-26.
www.envirolabsinc.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-26.
www.kppm.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-26.
www.newburghhealthcarecenter.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-26.
www.obrienavocats.qc.ca was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-26.
acmefan.com was named on the Lynx ransomware data-leak (extortion) site on 2025-02-25.
ALCOTT HR GROUP was named on the Play ransomware data-leak (extortion) site on 2025-02-25.
bluedge.com\$104.5M\USA\994GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-25.
Convert Solar was named on the Play ransomware data-leak (extortion) site on 2025-02-25.
essenzamovies.com.br was named on the LockBit ransomware data-leak (extortion) site on 2025-02-25.
Fairhaven Shipyard Companies was named on the Play ransomware data-leak (extortion) site on 2025-02-25.
First Federal Savings & Loan was named on the Play ransomware data-leak (extortion) site on 2025-02-25.
GANRO was named on the Lynx ransomware data-leak (extortion) site on 2025-02-25.
hgmlegal.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-25.
lifting.com\$135.8M\USA\1.4TB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-25.
megamtls.com was named on the Incransom ransomware data-leak (extortion) site on 2025-02-25.
neatem.fr | Update! was named on the Braincipher ransomware data-leak (extortion) site on 2025-02-25.
ossc.mx was named on the LockBit ransomware data-leak (extortion) site on 2025-02-25.
pacresmortgage.com was named on the Lynx ransomware data-leak (extortion) site on 2025-02-25.
PPS Services Group was named on the Lynx ransomware data-leak (extortion) site on 2025-02-25.
Radco Industries was named on the Play ransomware data-leak (extortion) site on 2025-02-25.
South Georgia Accounting Services was named on the Spacebears ransomware data-leak (extortion) site on 2025-02-25.
tequaly.com was named on the Embargo ransomware data-leak (extortion) site on 2025-02-25.
unila.edu.mx was named on the LockBit ransomware data-leak (extortion) site on 2025-02-25.
Vvf Ilinois Services was named on the Lynx ransomware data-leak (extortion) site on 2025-02-25.
welcompanies.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-25.
www.ateliermonarque.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-25.
www.avalon-hotel.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-25.
www.bwdtechnology.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-25.
www.confabca.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-25.
www.rgb.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-25.
www.wpisd.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-25.
Xepa Soul was named on the Lynx ransomware data-leak (extortion) site on 2025-02-25.
aiibeauty.com\$274.8M\USA\508GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-24.
amalgamatedsugar.com\$764.8 M\USA\464gb\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-24.
chfindustries.com\$253.8M\USA\2.5TB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-24.
compactmould.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-24.
denbyco.co.uk was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-24.
[DISCLOSED] Aishu, Eshoo was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-02-24.
everelgroup.com\$259M\Italy\440GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-24.
[EVIDENCE] Aishu, Eshoo was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-02-24.
Fireplace Warehouse was named on the Kairos ransomware data-leak (extortion) site on 2025-02-24.
formanmills.com\$422.2M\USA\846gb\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-24.
Geokon was named on the Lynx ransomware data-leak (extortion) site on 2025-02-24.
IDEA Expertises was named on the Lynx ransomware data-leak (extortion) site on 2025-02-24.
Planet One was named on the Lynx ransomware data-leak (extortion) site on 2025-02-24.
regulvar.com\$253.5M\Canada\3.6TB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-24.
Stรผrmer Maschinen was named on the Lynx ransomware data-leak (extortion) site on 2025-02-24.
BluAgent Technologies, Inc was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-23.
G& was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-23.
Gitlabs: Naphix, WDNA, Bayteq was named on the FOG ransomware data-leak (extortion) site on 2025-02-23.
Novi Community School District was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-23.
ondaralogistica.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-23.
Shaghalni was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-23.
www.famcomachine.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-23.
alleghenybradford.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-22.
CCOO Servicios was named on the Hunters International ransomware data-leak (extortion) site on 2025-02-22.
evergreenpnw.com was named on the Incransom ransomware data-leak (extortion) site on 2025-02-22.
Excel Security was named on the Lynx ransomware data-leak (extortion) site on 2025-02-22.
Peter Glenn Ski Sport was named on the Rhysida ransomware data-leak (extortion) site on 2025-02-22.
SPEED Co was named on the Hunters International ransomware data-leak (extortion) site on 2025-02-22.
teamsters175.org was named on the Incransom ransomware data-leak (extortion) site on 2025-02-22.
In February 2025 the French Football Federation (FFF) suffered a data breach via a compromised account on its licensee-management platform; at least ~43,000 users had personal data exposed, including names, contact details, and copies of ID documents.
guadeloupeformation.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-21.
headcount.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-21.
jindalgroup.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-21.
(kc2) geokon.com was named on the Lynx ransomware data-leak (extortion) site on 2025-02-21.
planetone-asia.com was named on the Lynx ransomware data-leak (extortion) site on 2025-02-21.
statesideseattle.com was named on the Incransom ransomware data-leak (extortion) site on 2025-02-21.
www.elecgalapagos.com.ec was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-21.
www.electro-fusion.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-21.
www.fla-esq.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-21.
www.midwestvascular.net was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-21.
www.nola-law.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-21.
www.saracenproperties.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-21.
www.witheyaddison.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-21.
californiaclingpeaches.com was named on the Incransom ransomware data-leak (extortion) site on 2025-02-20.
eaglepost.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-20.
ehdd.com was named on the Incransom ransomware data-leak (extortion) site on 2025-02-20.
Fortune Electric Co Ltd was named on the Lynx ransomware data-leak (extortion) site on 2025-02-20.
gilcar.co was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-20.
Ligentia was named on the Termite ransomware data-leak (extortion) site on 2025-02-20.
Medical File was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-20.
newhorizonsbaking.com\$163M\USA\455GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-20.
www.okddsi.net was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-20.
www.phdental.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-20.
www.pransystems.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-20.
www.riverdale.edu was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-20.
Alabama Ophthalmology Associates was named on the BianLian ransomware data-leak (extortion) site on 2025-02-19.
BeniPlus was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-19.
Brolly was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-19.
DR.Claims FL LLC was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-19.
Eservices.gov.zm was named on the Flocker ransomware data-leak (extortion) site on 2025-02-19.
EzyLegal was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-19.
Gitlabs: Next TI, VISEO, Hochschule Trier was named on the FOG ransomware data-leak (extortion) site on 2025-02-19.
Haggin Oaks Golf (hagginoaks.com) was named on the FOG ransomware data-leak (extortion) site on 2025-02-19.
haleycomfort.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-19.
Help Me Grow Yolo was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-19.
NimuSoft was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-19.
Pulmonary Physicians of South Florida Clinics | Data security breach! was named on the Braincipher ransomware data-leak (extortion) site on 2025-02-19.
Ranhill Bersekutu was named on the Lynx ransomware data-leak (extortion) site on 2025-02-19.
Revi was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-19.
Supreme Administrative Court of Bulgaria was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-02-19.
Afa Systems Ltd. was named on the Underground ransomware data-leak (extortion) site on 2025-02-18.
bestbrands.com\$25.5M\USA\659GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-18.
boostheat.com was named on the Bashe ransomware data-leak (extortion) site on 2025-02-18.
Buanderie Centrale de Montreal was named on the Rhysida ransomware data-leak (extortion) site on 2025-02-18.
lavi.co.il was named on the Incransom ransomware data-leak (extortion) site on 2025-02-18.
midwayimporting.com\$43.7M\USA\915GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-18.
pyasolutions.com was named on the Incransom ransomware data-leak (extortion) site on 2025-02-18.
ranhillbersekutu.com.my was named on the Lynx ransomware data-leak (extortion) site on 2025-02-18.
revitalash.com\$21.5M\USA\1.2TB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-18.
uniekinc.com\$37.5M\USA\1.8TB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-18.
www.alphamedctr.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-18.
www.ccttechnologies.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-18.
www.copleystoughton.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-18.
www.macmed.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-18.
www.mwmechanicalinc.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-18.
Allied Tenesis was named on the Lynx ransomware data-leak (extortion) site on 2025-02-17.
almostfamousclothing.com\$183M\USA\375GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-17.
Autoschade Pippel was named on the Lynx ransomware data-leak (extortion) site on 2025-02-17.
bisindustries.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-17.
Bulldog Oilfield Services was named on the Play ransomware data-leak (extortion) site on 2025-02-17.
Bushmans was named on the Play ransomware data-leak (extortion) site on 2025-02-17.
Cirion Technologies was named on the Braincipher ransomware data-leak (extortion) site on 2025-02-17.
Cuna Supply was named on the Play ransomware data-leak (extortion) site on 2025-02-17.
Dane Court Grammar School was named on the Kairos ransomware data-leak (extortion) site on 2025-02-17.
Greencastle-Antrim Senior High School (gcasd.org) was named on the FOG ransomware data-leak (extortion) site on 2025-02-17.
hamton was named on the Lynx ransomware data-leak (extortion) site on 2025-02-17.
Hisingstads Bleck was named on the Lynx ransomware data-leak (extortion) site on 2025-02-17.
HRS_IDEA_Expertises was named on the Lynx ransomware data-leak (extortion) site on 2025-02-17.
https://www.dapope.com/ was named on the BlackSuit ransomware data-leak (extortion) site on 2025-02-17.
Inland Empire Distribution Systems, Inc. was named on the Play ransomware data-leak (extortion) site on 2025-02-17.
kinseysinc.com\$74.9M\USA\675GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-17.
Leadership Strategies was named on the Lynx ransomware data-leak (extortion) site on 2025-02-17.
lekiaviation.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-17.
LINTEC & LINNHOFF Holdings was named on the Lynx ransomware data-leak (extortion) site on 2025-02-17.
mgainnovation.com\$30.9M\USA\215GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-17.
myhscu.com was named on the Embargo ransomware data-leak (extortion) site on 2025-02-17.
neatem.fr was named on the Braincipher ransomware data-leak (extortion) site on 2025-02-17.
northernresponse.com\$17.4M\Canada\366GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-17.
Oxford Companies was named on the Play ransomware data-leak (extortion) site on 2025-02-17.
Pedensia Graphics Distribution was named on the Lynx ransomware data-leak (extortion) site on 2025-02-17.
Persante Health Care was named on the Incransom ransomware data-leak (extortion) site on 2025-02-17.
Rheinischer Sch was named on the Play ransomware data-leak (extortion) site on 2025-02-17.
savoiesfoods.com\$18.2M\USA\95GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-17.
ssmcoop.com\$22.5M\USA\26GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-17.
Stage 3 Separation was named on the Play ransomware data-leak (extortion) site on 2025-02-17.
Startek Peglar & Calcagni was named on the Play ransomware data-leak (extortion) site on 2025-02-17.
steelerubber.com\$17.9M\USA\116GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-17.
Swissmem was named on the Hunters International ransomware data-leak (extortion) site on 2025-02-17.
teamwass.com\$676.3M\USA\451GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-17.
The Townsley Law Firm Information was named on the Play ransomware data-leak (extortion) site on 2025-02-17.
Toi Toi USA was named on the Kairos ransomware data-leak (extortion) site on 2025-02-17.
Transkid was named on the Play ransomware data-leak (extortion) site on 2025-02-17.
Weed Man Canada was named on the Play ransomware data-leak (extortion) site on 2025-02-17.
Winbas was named on the Lynx ransomware data-leak (extortion) site on 2025-02-17.
www.macter.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-17.
Wylie Steel Fabricators was named on the Play ransomware data-leak (extortion) site on 2025-02-17.
A*u.edu.au was named on the Flocker ransomware data-leak (extortion) site on 2025-02-16.
annegrady.org was named on the Embargo ransomware data-leak (extortion) site on 2025-02-16.
Gitlabs: Acqua development, QBurst, Pamyra.de was named on the FOG ransomware data-leak (extortion) site on 2025-02-16.
Gpstech2007.com was named on the Flocker ransomware data-leak (extortion) site on 2025-02-16.
Mervis.info was named on the Flocker ransomware data-leak (extortion) site on 2025-02-16.
Realtime.tw was named on the Flocker ransomware data-leak (extortion) site on 2025-02-16.
City of McKinney was named on the Incransom ransomware data-leak (extortion) site on 2025-02-15.
Empire Home Center was named on the Lynx ransomware data-leak (extortion) site on 2025-02-15.
halex.com was named on the Abyss ransomware data-leak (extortion) site on 2025-02-15.
(M)Empire-home-center was named on the Lynx ransomware data-leak (extortion) site on 2025-02-15.
Northeast Delta Human Services Authority was named on the Incransom ransomware data-leak (extortion) site on 2025-02-15.
saulttribe.com/kewadin.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-15.
www.310tempering.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-15.
www.cityoftarrant.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-15.
www.colacouronnelocations.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-15.
www.imgenterprises.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-15.
www.naga.ae was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-15.
www.rowetactical.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-15.
www.solardatasystems.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-15.
www.transcend-info.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-15.
brockbanks.co.uk was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-14.
In February 2025, the spyware service Cocospy suffered a data breach along with sibling spyware service, Spyic. The Cocospy breach alone exposed almost 1.8M customer email addresses which were provided to HIBP, and reportedly also enabled unauthorised access to captured messages, photos, call logs,โฆ
Heritage South Credit Union was named on the Embargo ransomware data-leak (extortion) site on 2025-02-14.
In February 2025, the spyware service Spyic suffered a data breach along with sibling spyware service, Cocospy. The Spyic breach alone exposed almost 876k customer email addresses which were provided to HIBP, and reportedly also enabled unauthorised access to captured messages, photos, call logs,โฆ
The Agency was named on the Rhysida ransomware data-leak (extortion) site on 2025-02-14.
www.calspa.it was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-14.
Aspire Rural Health System was named on the BianLian ransomware data-leak (extortion) site on 2025-02-13.
Ball, LLP was named on the BianLian ransomware data-leak (extortion) site on 2025-02-13.
Borel CPA's L.L.C was named on the BianLian ransomware data-leak (extortion) site on 2025-02-13.
Dain, Torpy, Le Ray, Wiest and Garner, P.C. was named on the BianLian ransomware data-leak (extortion) site on 2025-02-13.
enventuregt.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-13.
Financial Services of America, Inc. was named on the BianLian ransomware data-leak (extortion) site on 2025-02-13.
Gitlabs: Omydoo, Ayomi, ADULLACT was named on the FOG ransomware data-leak (extortion) site on 2025-02-13.
leonardo.com was named on the Threeam ransomware data-leak (extortion) site on 2025-02-13.
Mozo Grau (mozo-grau.com) was named on the FOG ransomware data-leak (extortion) site on 2025-02-13.
Nash Brothers Construction was named on the BianLian ransomware data-leak (extortion) site on 2025-02-13.
Nippon Steel USA was named on the BianLian ransomware data-leak (extortion) site on 2025-02-13.
R Molds Inc was named on the BianLian ransomware data-leak (extortion) site on 2025-02-13.
Shields Facilities Maintenance was named on the Play ransomware data-leak (extortion) site on 2025-02-13.
snoqualmietribe.us was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-13.
alderconstruction.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
askgs.ma was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
bergconst.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
britannicahome.com\$20.6M\USA\2.8TB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-12.
burdickpainting.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
columbiacabinets.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
curtisint.com\$37.2M\Canada\676GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-12.
E*******s.gov.zm was named on the Flocker ransomware data-leak (extortion) site on 2025-02-12.
ekvallbyrne.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
Gitlabs: INGV, Spacemanic, Squeezer-software was named on the FOG ransomware data-leak (extortion) site on 2025-02-12.
Hess (hess-gmbh.de) was named on the FOG ransomware data-leak (extortion) site on 2025-02-12.
http://thermaseal.net was named on the Ciphbit ransomware data-leak (extortion) site on 2025-02-12.
krmcustomhomes.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
laderalending.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
MICRO MANUFACTRING was named on the Ransomblog_noname ransomware data-leak (extortion) site on 2025-02-12.
minnesotaexteriors.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
Obex Medical was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-12.
Omni Fiber LLC was named on the Monti ransomware data-leak (extortion) site on 2025-02-12.
rogerspetro.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
slchc.edu was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
Societatea Energetica Electrica S.A. was named on the Lynx ransomware data-leak (extortion) site on 2025-02-12.
steveallcorn.remax.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
STIIIZY Full Data Leak was named on the Everest ransomware data-leak (extortion) site on 2025-02-12.
sundanceliving.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
The Brown & Hurley Group was named on the Lynx ransomware data-leak (extortion) site on 2025-02-12.
thejdkgroup.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
twncomm.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
uniquehd.com\$13.7M\USA\429GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-12.
weathersa.co.za was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-12.
Aurora Public Schools (aurorak12.org) was named on the FOG ransomware data-leak (extortion) site on 2025-02-11.
Baltimore Country Club was named on the Play ransomware data-leak (extortion) site on 2025-02-11.
CESI was named on the Termite ransomware data-leak (extortion) site on 2025-02-11.
Cold Storage Manufacturing was named on the Play ransomware data-leak (extortion) site on 2025-02-11.
EAC Consulting was named on the Play ransomware data-leak (extortion) site on 2025-02-11.
Fastighetsservice AB was named on the Play ransomware data-leak (extortion) site on 2025-02-11.
Hammond Trucking & Excavation was named on the Rhysida ransomware data-leak (extortion) site on 2025-02-11.
Jildor Shoes was named on the Play ransomware data-leak (extortion) site on 2025-02-11.
Kensington Glass Arts was named on the Play ransomware data-leak (extortion) site on 2025-02-11.
Logix Corporate Solutions was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-11.
Mainline Information Systems was named on the Play ransomware data-leak (extortion) site on 2025-02-11.
Monroe Transportation Services Inc was named on the Play ransomware data-leak (extortion) site on 2025-02-11.
Neaton Auto Products Manufacturing was named on the Play ransomware data-leak (extortion) site on 2025-02-11.
primesourcestaffing.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-11.
ROCK SOLID Stabilization & Reclamation was named on the Play ransomware data-leak (extortion) site on 2025-02-11.
Rogers was named on the Hunters International ransomware data-leak (extortion) site on 2025-02-11.
Saint George's College (saintgeorge.cl) was named on the FOG ransomware data-leak (extortion) site on 2025-02-11.
sehma.com was named on the Threeam ransomware data-leak (extortion) site on 2025-02-11.
Shinn Fu Company of America was named on the Play ransomware data-leak (extortion) site on 2025-02-11.
sole technology was named on the Monti ransomware data-leak (extortion) site on 2025-02-11.
The Children's Center Of Hamden was named on the Incransom ransomware data-leak (extortion) site on 2025-02-11.
The University of Notre Dame Australia (nd.edu.au) was named on the FOG ransomware data-leak (extortion) site on 2025-02-11.
Tie Down Engineering was named on the Play ransomware data-leak (extortion) site on 2025-02-11.
TMC was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-11.
abcapital.com.ph was named on the LockBit ransomware data-leak (extortion) site on 2025-02-10.
Albright Institute was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-10.
ASRAM Medical College and Hospita was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-10.
Atlas Commodities was named on the Lynx ransomware data-leak (extortion) site on 2025-02-10.
bazcooil.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-10.
Capital Cell Global (CCG) was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-10.
D-7 Roofing was named on the BianLian ransomware data-leak (extortion) site on 2025-02-10.
Enfin was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-10.
kaplanstahler.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-10.
komline.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-10.
Lexington Electric was named on the Lynx ransomware data-leak (extortion) site on 2025-02-10.
Marshall Motor Holdings was named on the Lynx ransomware data-leak (extortion) site on 2025-02-10.
ome.tv | SOLD was named on the Bashe ransomware data-leak (extortion) site on 2025-02-10.
Recievership Specialists was named on the BianLian ransomware data-leak (extortion) site on 2025-02-10.
sdfab.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-10.
WhoHire was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-10.
www.jsp.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-10.
Gitlabs: Universitatea Politehnica din Bucuresti, Maxvy Technologies Pvt, iRidge Inc. was named on the FOG ransomware data-leak (extortion) site on 2025-02-09.
Handala New Telegram Channel was named on the Handala ransomware data-leak (extortion) site on 2025-02-09.
Hpisd.org was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-09.
Israel Police Hacked was named on the Handala ransomware data-leak (extortion) site on 2025-02-09.
Leading Edge Specialized Dentistry was named on the Rhysida ransomware data-leak (extortion) site on 2025-02-09.
wwcsd.net was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-09.
G*********7.com was named on the Flocker ransomware data-leak (extortion) site on 2025-02-08.
M****s.info was named on the Flocker ransomware data-leak (extortion) site on 2025-02-08.
R******e.tw was named on the Flocker ransomware data-leak (extortion) site on 2025-02-08.
SAKAI SOUKEN Co. was named on the Hunters International ransomware data-leak (extortion) site on 2025-02-08.
Gitlabs: Chalmers tekniska hรถgskola, Fligno, 3SS was named on the FOG ransomware data-leak (extortion) site on 2025-02-07.
sautech.edu was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-07.
teamues.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-07.
Gitlabs: eConceptions, Top Systems, DIEM was named on the FOG ransomware data-leak (extortion) site on 2025-02-06.
northernresponse.com\$17.4M\Canada\366GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-06.
Robertshaw was named on the Hunters International ransomware data-leak (extortion) site on 2025-02-06.
savoiesfoods.com\$18.2M\USA\95GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-06.
SmithDunn&Co was named on the Spacebears ransomware data-leak (extortion) site on 2025-02-06.
zsattorneys.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-06.
A2b-cargo.com was named on the Flocker ransomware data-leak (extortion) site on 2025-02-05.
Banfi Vintners was named on the Lynx ransomware data-leak (extortion) site on 2025-02-05.
corehandf.com was named on the Threeam ransomware data-leak (extortion) site on 2025-02-05.
Dash Business was named on the BianLian ransomware data-leak (extortion) site on 2025-02-05.
Hall Chadwick was named on the BianLian ransomware data-leak (extortion) site on 2025-02-05.
India car owners was named on the Bashe ransomware data-leak (extortion) site on 2025-02-05.
Mid-State Machine & Fabricating Corp was named on the Play ransomware data-leak (extortion) site on 2025-02-05.
NESCTC Security Services was named on the BianLian ransomware data-leak (extortion) site on 2025-02-05.
OFW Law was named on the BianLian ransomware data-leak (extortion) site on 2025-02-05.
Shinsung Delta Tech was named on the Lynx ransomware data-leak (extortion) site on 2025-02-05.
St Clair Orthopaedics and Sports Medicine P.C. was named on the BianLian ransomware data-leak (extortion) site on 2025-02-05.
Toshapp.com was named on the Flocker ransomware data-leak (extortion) site on 2025-02-05.
alojaimi.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-04.
C and R Molds Inc was named on the BianLian ransomware data-leak (extortion) site on 2025-02-04.
C2S Technologies Inc. was named on the Everest ransomware data-leak (extortion) site on 2025-02-04.
capstoneins.ca was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-04.
Casper's Truck Equipment was named on the Kairos ransomware data-leak (extortion) site on 2025-02-04.
clarkfreightways.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-04.
coel.com.mx was named on the Bashe ransomware data-leak (extortion) site on 2025-02-04.
Commercial Solutions was named on the BianLian ransomware data-leak (extortion) site on 2025-02-04.
cornwelltools.com\$218.7M\USA\4.6TB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-04.
escada.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-04.
gaheritagefcu.org was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-04.
Gitlabs: hemio.de, SOLEIL, Devlion was named on the FOG ransomware data-leak (extortion) site on 2025-02-04.
heartlandrvs.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-04.
ITSS was named on the Everest ransomware data-leak (extortion) site on 2025-02-04.
Medical Reports was named on the Kairos ransomware data-leak (extortion) site on 2025-02-04.
mgainnovation.com\$30.9M\USA\215GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-04.
mistralsolutions.com was named on the Bashe ransomware data-leak (extortion) site on 2025-02-04.
rashtiandrashti.com\$19.1M\USA\786GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-02-04.
sportadmin.se was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-04.
Town Counsel Law & Litigation was named on the Rhysida ransomware data-leak (extortion) site on 2025-02-04.
www.aswgr.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-04.
www.aymcdonald.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-04.
Daniel Island Club was named on the Play ransomware data-leak (extortion) site on 2025-02-03.
Dickerson & Nieman Realtors was named on the Play ransomware data-leak (extortion) site on 2025-02-03.
DPC Development was named on the Play ransomware data-leak (extortion) site on 2025-02-03.
[EVIDANCE] AIshu, Eshoo was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-02-03.
Evidn Data Leak was named on the Everest ransomware data-leak (extortion) site on 2025-02-03.
Gitlabs: Bolin Centre for Climate Research, X-lab group, Madia was named on the FOG ransomware data-leak (extortion) site on 2025-02-03.
gruppozaccaria.it was named on the LockBit ransomware data-leak (extortion) site on 2025-02-03.
Karadeniz Holding (karadenizholding.com) was named on the FOG ransomware data-leak (extortion) site on 2025-02-03.
KWS was named on the Play ransomware data-leak (extortion) site on 2025-02-03.
ome.tv was named on the Bashe ransomware data-leak (extortion) site on 2025-02-03.
Pineland community service board was named on the Spacebears ransomware data-leak (extortion) site on 2025-02-03.
Ponte16 Hotel & was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-03.
QGS Development was named on the Play ransomware data-leak (extortion) site on 2025-02-03.
realtaxcanada.com was named on the Bashe ransomware data-leak (extortion) site on 2025-02-03.
Sheridan Nurseries was named on the Play ransomware data-leak (extortion) site on 2025-02-03.
smithmidland.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-03.
The Hill Brush was named on the Play ransomware data-leak (extortion) site on 2025-02-03.
Woodway USA was named on the Play ransomware data-leak (extortion) site on 2025-02-03.
www.origene.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-03.
www.wongfleming.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-02-03.
Ayres Law Firm was named on the BianLian ransomware data-leak (extortion) site on 2025-02-02.
Civic Committee was named on the BianLian ransomware data-leak (extortion) site on 2025-02-02.
Four Eye Clinics was named on the Abyss ransomware data-leak (extortion) site on 2025-02-02.
Growth Acceleration Partners was named on the BianLian ransomware data-leak (extortion) site on 2025-02-02.
jpcgroupinc.com was named on the Abyss ransomware data-leak (extortion) site on 2025-02-02.
Tosaf Hacked was named on the Handala ransomware data-leak (extortion) site on 2025-02-02.
usuhs.edu was named on the LockBit ransomware data-leak (extortion) site on 2025-02-02.
CAMRIDGEPORT was named on the Spacebears ransomware data-leak (extortion) site on 2025-02-01.
Eascon was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-02-01.
Falcon Gaming was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-02-01.
GATTELLI SpA was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-02-01.
Gitlabs: PT. ITPRENEUR INDONESIA TECHNOLOGY, GFZ Helmholtz Centre for Geosciences, LUA Cof was named on the FOG ransomware data-leak (extortion) site on 2025-02-01.
My New Jersey Dentist was named on the Rhysida ransomware data-leak (extortion) site on 2025-02-01.
Nano Health was named on the Killsecurity ransomware data-leak (extortion) site on 2025-02-01.
Technico was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-02-01.
Utilissimo Transportes was named on the Arcusmedia ransomware data-leak (extortion) site on 2025-02-01.
Wireless Solutions (Morris.Domain) was named on the Lynx ransomware data-leak (extortion) site on 2025-02-01.
Zamzow's was named on the Lynx ransomware data-leak (extortion) site on 2025-02-01.
A**-****o.com was named on the Flocker ransomware data-leak (extortion) site on 2025-01-31.
BH Aircraft Company, Inc. was named on the Rhysida ransomware data-leak (extortion) site on 2025-01-31.
Pembina Trails School Division was named on the Rhysida ransomware data-leak (extortion) site on 2025-01-31.
T*****p.com was named on the Flocker ransomware data-leak (extortion) site on 2025-01-31.
Engine Power Source was named on the Lynx ransomware data-leak (extortion) site on 2025-01-30.
FENSTERMAKER was named on the Monti ransomware data-leak (extortion) site on 2025-01-30.
Gitlabs: Prasaga, HE2B, Kombinat was named on the FOG ransomware data-leak (extortion) site on 2025-01-30.
Gitlabs: Professional Computer, X-Pans, Propulsion Academy AG was named on the FOG ransomware data-leak (extortion) site on 2025-01-30.
ibericar was named on the Monti ransomware data-leak (extortion) site on 2025-01-30.
icicibank.com | SOLD was named on the Bashe ransomware data-leak (extortion) site on 2025-01-30.
Jalaram Produce was named on the Lynx ransomware data-leak (extortion) site on 2025-01-30.
jayaapparelgroup.com\$60.6M\USA\824GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-01-30.
johnpaulrichard.com\$60M\USA\985GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-01-30.
KPI Engineering was named on the Lynx ransomware data-leak (extortion) site on 2025-01-30.
malindoair.com | SOLD was named on the Bashe ransomware data-leak (extortion) site on 2025-01-30.
nenok.de was named on the Monti ransomware data-leak (extortion) site on 2025-01-30.
Night Hawk was named on the Play ransomware data-leak (extortion) site on 2025-01-30.
payahmedabadechallan.org was named on the Killsecurity ransomware data-leak (extortion) site on 2025-01-30.
Scott Engineering was named on the Lynx ransomware data-leak (extortion) site on 2025-01-30.
Silverado Contractors was named on the Lynx ransomware data-leak (extortion) site on 2025-01-30.
soitinlaine.fi was named on the Threeam ransomware data-leak (extortion) site on 2025-01-30.
sunrise-soya.com\$42.2M\Canada\504GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-01-30.
Tri-Sen Systems was named on the Lynx ransomware data-leak (extortion) site on 2025-01-30.
ttucorp.com\$27.6M\USA\1TB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-01-30.
vsstransportationgroup.com\$54.5M\USA\522GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-01-30.
Zschimmer and Schwarz was named on the Termite ransomware data-leak (extortion) site on 2025-01-30.
air europa was named on the Incransom ransomware data-leak (extortion) site on 2025-01-29.
alkodistributors.com\$33.5M\USA\345GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-01-29.
biagibros.com\$273M\USA\820GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-01-29.
Boldon James was named on the Incransom ransomware data-leak (extortion) site on 2025-01-29.
Boutin Jones (boutindentino.com) was named on the FOG ransomware data-leak (extortion) site on 2025-01-29.
By design was named on the Play ransomware data-leak (extortion) site on 2025-01-29.
Cahoon Farms was named on the Play ransomware data-leak (extortion) site on 2025-01-29.
Cimarron Telephone Company was named on the Play ransomware data-leak (extortion) site on 2025-01-29.
City Of Beloit was named on the Incransom ransomware data-leak (extortion) site on 2025-01-29.
Commercial & Residential Management Group was named on the Play ransomware data-leak (extortion) site on 2025-01-29.
daVinci was named on the Play ransomware data-leak (extortion) site on 2025-01-29.
DEL Packaging was named on the Kairos ransomware data-leak (extortion) site on 2025-01-29.
Delta Screen & Filtration () was named on the Lynx ransomware data-leak (extortion) site on 2025-01-29.
Heart to Heart Hospice was named on the Incransom ransomware data-leak (extortion) site on 2025-01-29.
Israel Ministry of National Security Hacked was named on the Handala ransomware data-leak (extortion) site on 2025-01-29.
Johnston was named on the Play ransomware data-leak (extortion) site on 2025-01-29.
Marshall & Bruce Printing was named on the Play ransomware data-leak (extortion) site on 2025-01-29.
Menominee Tribal Clinic was named on the Incransom ransomware data-leak (extortion) site on 2025-01-29.
midwaymetals.com.vn was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-29.
Mission Locale Montpellier was named on the Incransom ransomware data-leak (extortion) site on 2025-01-29.
Plymouth Foam was named on the Play ransomware data-leak (extortion) site on 2025-01-29.
Rossi Real Estate (ROSSIDG.LOCAL) was named on the Lynx ransomware data-leak (extortion) site on 2025-01-29.
SCV Med Group was named on the Monti ransomware data-leak (extortion) site on 2025-01-29.
Strategic Materials was named on the Lynx ransomware data-leak (extortion) site on 2025-01-29.
The Wendt Agency was named on the Lynx ransomware data-leak (extortion) site on 2025-01-29.
tnlottery.com was named on the Incransom ransomware data-leak (extortion) site on 2025-01-29.
TRIVAD was named on the Play ransomware data-leak (extortion) site on 2025-01-29.
Turning Leaf (TURNINGLEAF.local) was named on the Incransom ransomware data-leak (extortion) site on 2025-01-29.
W*****e.com was named on the Flocker ransomware data-leak (extortion) site on 2025-01-29.
Wallin & Klarich was named on the Play ransomware data-leak (extortion) site on 2025-01-29.
Acoustiblok was named on the Monti ransomware data-leak (extortion) site on 2025-01-28.
BBLAWFIRM was named on the Monti ransomware data-leak (extortion) site on 2025-01-28.
broward.edu was named on the Incransom ransomware data-leak (extortion) site on 2025-01-28.
Carthage Police Department was named on the Rhysida ransomware data-leak (extortion) site on 2025-01-28.
cnnindonesia.com was named on the Incransom ransomware data-leak (extortion) site on 2025-01-28.
lnetwork was named on the Monti ransomware data-leak (extortion) site on 2025-01-28.
metalurgica roma was named on the Monti ransomware data-leak (extortion) site on 2025-01-28.
sce.org.sg was named on the Lynx ransomware data-leak (extortion) site on 2025-01-28.
www.healthcarewithinreach.org was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-28.
AIshu, Eshoo was named on the Ransomhouse ransomware data-leak (extortion) site on 2025-01-27.
Alo Center (hq.aloteknik.se) was named on the Lynx ransomware data-leak (extortion) site on 2025-01-27.
https://leehartman.com was named on the Metaencryptor ransomware data-leak (extortion) site on 2025-01-27.
International AIDS Vaccine Initiative (iavi.org) was named on the Incransom ransomware data-leak (extortion) site on 2025-01-27.
lhps.org was named on the Incransom ransomware data-leak (extortion) site on 2025-01-27.
Prinston Pharmaceutical (huahaius.com) was named on the Incransom ransomware data-leak (extortion) site on 2025-01-27.
Weeks, Brucker & Coleman, Ltd | Legal Services was named on the Everest ransomware data-leak (extortion) site on 2025-01-27.
Letโs Secure Insurance was named on the Killsecurity ransomware data-leak (extortion) site on 2025-01-26.
Metro Wire & Cable was named on the Spacebears ransomware data-leak (extortion) site on 2025-01-26.
DataSociete was named on the Killsecurity ransomware data-leak (extortion) site on 2025-01-25.
envirosep.com was named on the Abyss ransomware data-leak (extortion) site on 2025-01-25.
Keepz was named on the Killsecurity ransomware data-leak (extortion) site on 2025-01-25.
Arrow Motor Auctions was named on the Spacebears ransomware data-leak (extortion) site on 2025-01-24.
De La Salle High School (dlshs.org) was named on the FOG ransomware data-leak (extortion) site on 2025-01-24.
In January 2025, 435k email addresses were scraped from the "doxing" service Doxbin. Posts to the service are usually intended to disclose the personal information of non-consensually third parties.
ELTEK Group (eltekgroup.com) was named on the FOG ransomware data-leak (extortion) site on 2025-01-24.
In late January 2025, the French Mountaineering and Climbing Federation (FFME) disclosed a breach exposing a dataset of 808,881 member accounts, including names, postal and email addresses, member IDs, dates of birth and phone numbers.
icicibank.com was named on the Bashe ransomware data-leak (extortion) site on 2025-01-24.
Kooijman Vianen (kooijmanvianen.nl) was named on the FOG ransomware data-leak (extortion) site on 2025-01-24.
ORU Mabee Center was named on the Rhysida ransomware data-leak (extortion) site on 2025-01-24.
PrimoTicketing was named on the Killsecurity ransomware data-leak (extortion) site on 2025-01-24.
Punjab.gov.pk was named on the Flocker ransomware data-leak (extortion) site on 2025-01-24.
topackt.com was named on the LockBit ransomware data-leak (extortion) site on 2025-01-24.
www.pcm.com.mx was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-24.
archaeologicalresearchservices.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-23.
Cyrious Software was named on the BianLian ransomware data-leak (extortion) site on 2025-01-23.
Medical Associates of Brevard was named on the BianLian ransomware data-leak (extortion) site on 2025-01-23.
PINELAND BHDD COMMUNITY SERVICES was named on the Spacebears ransomware data-leak (extortion) site on 2025-01-23.
reesndt.ca was named on the Eldorado ransomware data-leak (extortion) site on 2025-01-23.
samsill.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-23.
starkaerospace.com was named on the Incransom ransomware data-leak (extortion) site on 2025-01-23.
www.missionbank.bank was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-23.
Christian Community Aid was named on the Spacebears ransomware data-leak (extortion) site on 2025-01-22.
Gossett Motor Cars was named on the Lynx ransomware data-leak (extortion) site on 2025-01-22.
ilemgroup.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-22.
Jacobs & Thompson was named on the Lynx ransomware data-leak (extortion) site on 2025-01-22.
Mintz Law Firm, LLC was named on the Lynx ransomware data-leak (extortion) site on 2025-01-22.
Omni Fiber LLC - Press Release was named on the Monti ransomware data-leak (extortion) site on 2025-01-22.
SANTA MARIA LABORATORIO was named on the Spacebears ransomware data-leak (extortion) site on 2025-01-22.
sdkgroup.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-22.
www.americanstandard-us.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-22.
www.grohe.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-22.
www.manpower.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-22.
www.reesndt.com was named on the Eldorado ransomware data-leak (extortion) site on 2025-01-22.
Bethany Hospital was named on the Spacebears ransomware data-leak (extortion) site on 2025-01-21.
boardman-hamilton.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-21.
FAAB Invest Advisors Private Limited was named on the Killsecurity ransomware data-leak (extortion) site on 2025-01-21.
Inaya Clinique was named on the Spacebears ransomware data-leak (extortion) site on 2025-01-21.
malindoair.com was named on the Bashe ransomware data-leak (extortion) site on 2025-01-21.
Marukai was named on the Lynx ransomware data-leak (extortion) site on 2025-01-21.
miedemaproduce.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-21.
Nimbus Facility Services was named on the Killsecurity ransomware data-leak (extortion) site on 2025-01-21.
precisionmechsd.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-21.
RETAL Baltic Films was named on the Incransom ransomware data-leak (extortion) site on 2025-01-21.
Solaris-pharma.com leakage was named on the Everest ransomware data-leak (extortion) site on 2025-01-21.
supremegroup.co.in was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-21.
whychoosebw.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-21.
Angotti & Reilly was named on the Lynx ransomware data-leak (extortion) site on 2025-01-20.
Clutch Industries was named on the Lynx ransomware data-leak (extortion) site on 2025-01-20.
On 20 January 2025 the French Archery Federation (FFTA) disclosed a breach stemming from a flaw at its shared license-management provider; a dataset of 625,434 accounts (names, dates of birth, postal addresses, phones, emails, profile photos) was offered for sale online.
fol-23.fr was named on the Bashe ransomware data-leak (extortion) site on 2025-01-20.
Kinseth Hospitality Companies was named on the Lynx ransomware data-leak (extortion) site on 2025-01-20.
P****b.gov.pk was named on the Flocker ransomware data-leak (extortion) site on 2025-01-20.
PetroVietnam Exploration Production Corporation was named on the Hunters International ransomware data-leak (extortion) site on 2025-01-20.
Sentinel Systems was named on the Lynx ransomware data-leak (extortion) site on 2025-01-20.
The Urswick School was named on the Kairos ransomware data-leak (extortion) site on 2025-01-20.
Zuk Group Hacked was named on the Handala ransomware data-leak (extortion) site on 2025-01-20.
TG3 Electronics was named on the Rhysida ransomware data-leak (extortion) site on 2025-01-19.
Kassin & Carrow was named on the Lynx ransomware data-leak (extortion) site on 2025-01-18.
Marina Family Medical was named on the Moneymessage ransomware data-leak (extortion) site on 2025-01-18.
MassDevelopment was named on the BianLian ransomware data-leak (extortion) site on 2025-01-18.
betclic.com was named on the Bashe ransomware data-leak (extortion) site on 2025-01-17.
Kilgore College (kilgore.edu) was named on the Incransom ransomware data-leak (extortion) site on 2025-01-17.
Nightingale Hammerson was named on the Kairos ransomware data-leak (extortion) site on 2025-01-17.
peponline.org was named on the Incransom ransomware data-leak (extortion) site on 2025-01-17.
Regina Coeli Convent was named on the Incransom ransomware data-leak (extortion) site on 2025-01-17.
Taylor Regional Hospital (thcg.local) was named on the Incransom ransomware data-leak (extortion) site on 2025-01-17.
Washington Gastroenterology (DHSWA.NET) was named on the Incransom ransomware data-leak (extortion) site on 2025-01-17.
Access Capital Partners SA was named on the Lynx ransomware data-leak (extortion) site on 2025-01-16.
anupalanonline.com was named on the Killsecurity ransomware data-leak (extortion) site on 2025-01-16.
bsegroup.it was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-16.
Fish Nelson and Holden was named on the BianLian ransomware data-leak (extortion) site on 2025-01-16.
In January 2025, the eyewear seller Frame & Optic suffered a data breach. The incident exposed almost 16k unique email addresses along with names, phone numbers and geolocation data including country, state and postcode.
Real Tax was named on the Kairos ransomware data-leak (extortion) site on 2025-01-16.
Solaris Pharma proof was named on the Everest ransomware data-leak (extortion) site on 2025-01-16.
The Hoff Brand SL was named on the Everest ransomware data-leak (extortion) site on 2025-01-16.
Volt Infrastructure was named on the Everest ransomware data-leak (extortion) site on 2025-01-16.
Woodlake was named on the Everest ransomware data-leak (extortion) site on 2025-01-16.
www.liteputer.com.tw was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-16.
www.solariumrevestimentos.com.br was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-16.
A*****Y.com was named on the Flocker ransomware data-leak (extortion) site on 2025-01-15.
AKConstructors.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-15.
anwsd.org was named on the Threeam ransomware data-leak (extortion) site on 2025-01-15.
Combined Pool and Spa was named on the Kairos ransomware data-leak (extortion) site on 2025-01-15.
communisis.com & paragon.world was named on the Lynx ransomware data-leak (extortion) site on 2025-01-15.
fplfood.com\$675M\USA\21GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-01-15.
FSOCIETY X FUNKSEC was named on the Flocker ransomware data-leak (extortion) site on 2025-01-15.
J.G. Electrical Installations was named on the Kairos ransomware data-leak (extortion) site on 2025-01-15.
Lowe Engineers was named on the Lynx ransomware data-leak (extortion) site on 2025-01-15.
optiline.com\$127.3M\USA\947GB\<1% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-01-15.
pnp.co.za was named on the Bashe ransomware data-leak (extortion) site on 2025-01-15.
Woodport Doors was named on the Lynx ransomware data-leak (extortion) site on 2025-01-15.
www.eurocert.pl was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-15.
Buttery (butterycompany.com) was named on the FOG ransomware data-leak (extortion) site on 2025-01-14.
Douglas County, GA (DDCWSA.COM) was named on the Lynx ransomware data-leak (extortion) site on 2025-01-14.
Farmacia Cofar was named on the Killsecurity ransomware data-leak (extortion) site on 2025-01-14.
In January 2025, the Fรฉdรฉration Franรงaise de Force (FFForce) had personal data of 64,512 members exposed via a compromised shared sports-licensing IT provider; records (names, dates of birth, emails, postal addresses, phone numbers) were later sold on BreachForums.
In January 2025, the Fรฉdรฉration Franรงaise de Roller et Skateboard had the personal data of roughly 577,000 members exposed after a shared sports-federation IT provider was compromised; names, dates of birth, email/postal addresses and phone numbers were leaked.
Intelservice.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-14.
pittman-construction.com was named on the LockBit ransomware data-leak (extortion) site on 2025-01-14.
QualiTech (qualitech.com) was named on the Lynx ransomware data-leak (extortion) site on 2025-01-14.
SciTech Services, Inc. was named on the FOG ransomware data-leak (extortion) site on 2025-01-14.
Sharm Reef Hotel was named on the Spacebears ransomware data-leak (extortion) site on 2025-01-14.
Solaris Pharma was named on the Everest ransomware data-leak (extortion) site on 2025-01-14.
Spectrum was named on the Incransom ransomware data-leak (extortion) site on 2025-01-14.
The Chicano Federation was named on the Rhysida ransomware data-leak (extortion) site on 2025-01-14.
The University of Oklahoma (ou.edu) was named on the FOG ransomware data-leak (extortion) site on 2025-01-14.
udb.net was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-14.
WPD.WOODPORTDOORS.COM was named on the Lynx ransomware data-leak (extortion) site on 2025-01-14.
adveo.com\$740.7M\France\1.1TB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-01-13.
atpformosa.gob.ar was named on the LockBit ransomware data-leak (extortion) site on 2025-01-13.
Biomedical Caledonia Medical Laboratory (calmedlab.local) was named on the Incransom ransomware data-leak (extortion) site on 2025-01-13.
Browdy (bl.local) was named on the Lynx ransomware data-leak (extortion) site on 2025-01-13.
candelasyasociados.es was named on the LockBit ransomware data-leak (extortion) site on 2025-01-13.
Conad (conad.lan) was named on the Lynx ransomware data-leak (extortion) site on 2025-01-13.
Delap & Waller was named on the Lynx ransomware data-leak (extortion) site on 2025-01-13.
Findhelp Information Services was named on the Incransom ransomware data-leak (extortion) site on 2025-01-13.
gelco-s-a.com.br was named on the LockBit ransomware data-leak (extortion) site on 2025-01-13.
healthcarewithinreach.org was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-13.
Imperial Valley Respite (ivrespite.com) was named on the Incransom ransomware data-leak (extortion) site on 2025-01-13.
lamejor.com.co was named on the LockBit ransomware data-leak (extortion) site on 2025-01-13.
mi.edu was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-13.
Nash Brothers Construction (nashdom.local) was named on the Lynx ransomware data-leak (extortion) site on 2025-01-13.
nicatel.com.uy was named on the LockBit ransomware data-leak (extortion) site on 2025-01-13.
Novati Constructions was named on the Lynx ransomware data-leak (extortion) site on 2025-01-13.
Onecare was named on the Incransom ransomware data-leak (extortion) site on 2025-01-13.
oyolasvegas.com was named on the LockBit ransomware data-leak (extortion) site on 2025-01-13.
PHG CPAs (bushman.biz) was named on the Lynx ransomware data-leak (extortion) site on 2025-01-13.
Riverina Medical was named on the Incransom ransomware data-leak (extortion) site on 2025-01-13.
SERGAS Group was named on the Lynx ransomware data-leak (extortion) site on 2025-01-13.
telering.de was named on the LockBit ransomware data-leak (extortion) site on 2025-01-13.
viacaojacarei.com.br was named on the LockBit ransomware data-leak (extortion) site on 2025-01-13.
Welcomehallmission.com was named on the Everest ransomware data-leak (extortion) site on 2025-01-13.
Arun Estates was named on the Black Basta ransomware data-leak (extortion) site on 2025-01-11.
Astaphans was named on the Lynx ransomware data-leak (extortion) site on 2025-01-11.
Avril Supermarchรฉ Santรฉ was named on the Black Basta ransomware data-leak (extortion) site on 2025-01-11.
Barber Specialties was named on the Hunters International ransomware data-leak (extortion) site on 2025-01-11.
Bnext.nl was named on the Black Basta ransomware data-leak (extortion) site on 2025-01-11.
Brachot was named on the Black Basta ransomware data-leak (extortion) site on 2025-01-11.
COROB was named on the Hunters International ransomware data-leak (extortion) site on 2025-01-11.
Costex was named on the Hunters International ransomware data-leak (extortion) site on 2025-01-11.
Granby Industries was named on the Black Basta ransomware data-leak (extortion) site on 2025-01-11.
Jim Thompson was named on the Lynx ransomware data-leak (extortion) site on 2025-01-11.
Mortgage Investors Group (MIG) was named on the Black Basta ransomware data-leak (extortion) site on 2025-01-11.
Patriarche Office of Architecture was named on the Hunters International ransomware data-leak (extortion) site on 2025-01-11.
Plasma-Therm was named on the Black Basta ransomware data-leak (extortion) site on 2025-01-11.
RocSearch was named on the Hunters International ransomware data-leak (extortion) site on 2025-01-11.
Schuff Steel Company was named on the Black Basta ransomware data-leak (extortion) site on 2025-01-11.
T. Hasegawa USA was named on the Hunters International ransomware data-leak (extortion) site on 2025-01-11.
Unisource Information Services was named on the Hunters International ransomware data-leak (extortion) site on 2025-01-11.
amerplumb.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-10.
Evidn was named on the Everest ransomware data-leak (extortion) site on 2025-01-10.
massdevelopment.com\$24.6M\USA\1.2TB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-01-10.
OmniRide (omniride.com) was named on the FOG ransomware data-leak (extortion) site on 2025-01-10.
Protected: Title Hidden was named on the Everest ransomware data-leak (extortion) site on 2025-01-10.
ptcky.com\$5M\USA\902GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-01-10.
Qualinet was named on the Rhysida ransomware data-leak (extortion) site on 2025-01-10.
www.wisesocon.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-10.
xtremmedia.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-10.
alansarioman.com was named on the Embargo ransomware data-leak (extortion) site on 2025-01-09.
awimc.com\$102.7M\USA\440GB\100% DISCLOSED was named on the Cactus ransomware data-leak (extortion) site on 2025-01-09.
azpay.me | SOLD was named on the Bashe ransomware data-leak (extortion) site on 2025-01-09.
castlehillha.co.uk was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-09.
CO-VER Power Technology SpA Data Leak was named on the Everest ransomware data-leak (extortion) site on 2025-01-09.
depewgillen.com was named on the Incransom ransomware data-leak (extortion) site on 2025-01-09.
drive-lines.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-09.
evasair.com was named on the Eldorado ransomware data-leak (extortion) site on 2025-01-09.
Fukoku Co. Ltd. was named on the Spacebears ransomware data-leak (extortion) site on 2025-01-09.
hapsch.de was named on the Threeam ransomware data-leak (extortion) site on 2025-01-09.
Izmocars Data Leak was named on the Everest ransomware data-leak (extortion) site on 2025-01-09.
Myhealthcarebilling Data Leak was named on the Everest ransomware data-leak (extortion) site on 2025-01-09.
Sarah Car Care Data Leak was named on the Everest ransomware data-leak (extortion) site on 2025-01-09.
www.excelresourcing.co.uk was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-09.
www.fairhallzhang.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-09.
www.leaguecenter.org was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-09.
www.mie.com.my was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-09.
www.primalwear.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-09.
www.rotaryeng.co.th was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-09.
www.temotekstil.com.tr was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-09.
acquafertil.com.br was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-08.
bendixengineering was named on the Ransomblog_noname ransomware data-leak (extortion) site on 2025-01-08.
fwmep.edu was named on the Incransom ransomware data-leak (extortion) site on 2025-01-08.
General Digital was named on the Spacebears ransomware data-leak (extortion) site on 2025-01-08.
General Digital CRM was named on the Spacebears ransomware data-leak (extortion) site on 2025-01-08.
Huntington Hotel Group was named on the Termite ransomware data-leak (extortion) site on 2025-01-08.
kingpower.com was named on the Abyss ransomware data-leak (extortion) site on 2025-01-08.
sahpetrol.com.tr was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-08.
astaphans.com was named on the Lynx ransomware data-leak (extortion) site on 2025-01-07.
jimthompson.com was named on the Lynx ransomware data-leak (extortion) site on 2025-01-07.
Saint-Bar (saintbar.be) was named on the FOG ransomware data-leak (extortion) site on 2025-01-07.
Sunflower Medical Group was named on the Rhysida ransomware data-leak (extortion) site on 2025-01-07.
u0 Excel Transportation was named on the Lynx ransomware data-leak (extortion) site on 2025-01-07.
molars.co.ke was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-06.
yoniot.cn was named on the Darkvault ransomware data-leak (extortion) site on 2025-01-06.
akantha.fr was named on the Eldorado ransomware data-leak (extortion) site on 2025-01-05.
Car Care Plan - Turkey was named on the Hellcat ransomware data-leak (extortion) site on 2025-01-05.
Hunter Taubman Fischer & Li was named on the Lynx ransomware data-leak (extortion) site on 2025-01-05.
aliorbank.pl was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
assurified.com was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
baldinger-ag.ch was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
bigalsfoodservice.co.uk was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
bms.com was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
certifiedinfosec.com was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
credio.eu was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
datascan.com was named on the Eldorado ransomware data-leak (extortion) site on 2025-01-04.
fpj.com.py PART1 was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
fpj.com.py PART2 was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
fpj.com.py PART3 was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
gannons.co.uk was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
hasa-arg.com was named on the Eldorado ransomware data-leak (extortion) site on 2025-01-04.
lamaisonducitron.com was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
legilog.fr was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
minerasancristobal.com was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
Montreal North was named on the Rhysida ransomware data-leak (extortion) site on 2025-01-04.
netromsoftware.ro was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
northernsafety.com was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
perucontrols.com was named on the Eldorado ransomware data-leak (extortion) site on 2025-01-04.
pindrophearing.co.uk was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
polleninformation.at was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
prixet.com was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
protectasecurity.pe was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
sansirostadium.com was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
scopeset.de was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
sella.eng.br was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
servicepower.com was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
sfr.fr was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
siapenet.gov.br was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
talonsolutions.co.uk was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
trifecta.com was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
trinitesolutions.com was named on the Bashe ransomware data-leak (extortion) site on 2025-01-04.
Amourgis & Associates was named on the Lynx ransomware data-leak (extortion) site on 2025-01-03.
Nikki-Universal Co Ltd was named on the Hunters International ransomware data-leak (extortion) site on 2025-01-03.
www.alliancemat.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-03.
www.geedingconstruction.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-03.
confluxhr.com was named on the Darkvault ransomware data-leak (extortion) site on 2025-01-02.
groupegm.com was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-02.
CM Buck & Associates was named on the Lynx ransomware data-leak (extortion) site on 2025-01-01.
http://www.kitevuc.com was named on the Ciphbit ransomware data-leak (extortion) site on 2025-01-01.
lianbeng.sg was named on the RansomHub ransomware data-leak (extortion) site on 2025-01-01.
regencymedia was named on the LockBit ransomware data-leak (extortion) site on 2025-01-01.
In December 2024, the video sharing Community BitView suffered a data breach that exposed 63k customer records. Attributed to a backup taken by a previous administrator earlier in the year, the breach exposed email and IP addresses, bcrypt password hashes, usernames, bios, private messages, videoโฆ
On 4 December 2024, the Brain Cipher ransomware group publicly claimed to have stolen over 1 TB of data from Deloitte UK; Deloitte said the allegations related to a single client's system outside its own network and that no Deloitte systems were impacted.
In October 2024, the Hungarian IT headhunting service Switch inadvertently exposed thousands of customer records via a public GitHub repository. The exposed data contained job applications with names, email addresses and in some cases, commentary on the applicant.
In September 2024, the Instituto Nacional de Deportes de Chile (Chile's National Sports Institute) suffered a data breach. The incident exposed 1.7M rows of data with 320k unique email addresses alongside names, dates of birth, genders and bcrypt password hashes.
In July 2024, MSI inadvertently exposed hundreds of thousands of customer records related to RMA claims that were subsequently found to be publicly accessible. The data included 250k unique email addresses alongside names, phone numbers, physical addresses and warranty claims.
In June 2024, spyware maker SpyX suffered a data breach that exposed almost 2M unique email addresses. The breach also exposed IP addresses, countries of residence, device information and 6-digit PINs in the password field.
In July 2024, spyware maker Spytech suffered a data breach that exposed data collected as recently as the previous month. Designed to "invisibly record everything users do", the breach exposed information related to both purchasers and targets of the product.
In May 2024, a coalition of international law enforcement agencies took down a series of botnets in a campaign they coined "Operation Endgame". Data seized in the operation included impacted email addresses and passwords which were provided to HIBP to help victims learn of their exposure.
In 2024, ticketing giant Ticketmaster (Live Nation) suffered a breach of a third-party Snowflake cloud database; data on up to 560 million customers โ names, contact details, order history and partial payment-card data โ was stolen and offered for sale by ShinyHunters.
In March 2024, the Canadian national citizens' campaign for proportional representation Fair Vote Canada suffered a data breach. The incident was attributed to "a well-meaning volunteer" who inadvertently exposed data from 2020 which included 134k unique email addresses, names, physical addresses,โฆ
In February 2025, the spyware service Spyzie suffered a data breach along with sibling spyware services, Spyic and Cocospy. The Spyzie breach alone exposed almost 519k customer email addresses which were provided to HIBP, and reportedly also enabled unauthorised access to captured messages, photos,โฆ
In August 2023, the Portuguese home decor company Market Moveis suffered a data breach that impacted 28k records. The exposed records were limited to names and email addresses.
In August 2023, the US Justice Department announced a multinational operation involving actions in the United States, France, Germany, the Netherlands, and the United Kingdom to disrupt the botnet and malware known as Qakbot and take down its infrastructure.
In August 2023, CERT Poland observed a phishing campaign that collected credentials from 68k victims. The campaign collected email addresses and passwords via a phishing email masquerading as a purchase order confirmation.
In February 2023, the European airport transfers service Terravision suffered a data breach. The breach exposed over 2M records of customer data including names, phone numbers, email addresses, salted password hashes and in some cases, date of birth and country of origin.
In October 2022, the GTA mod menu provider RealDudesInc suffered a data breach that exposed over 100k email addresses (many of which are temporary guest account addresses). The breach also included usernames and bcrypt password hashes.
In October 2022, the Doomworld fourm suffered a data breach that exposed 34k member records. The data included email and IP addresses, usernames and bcrypt password hashes.
In August 2022, the food ordering and delivery service DoorDash disclosed a data breach that impacted a portion of their customers. DoorDash attributed the breach to an unnamed "third-party vendor" they stated was the victim of a phishing campaign.
In February 2022, microchip company NVIDIA suffered a data breach that exposed employee credentials and proprietary code. Impacted data included over 70k employee email addresses and NTLM password hashes, many of which were subsequently cracked and circulated within the hacking community.
In February 2022, the Christian fundraising service GiveSendGo suffered a data breach which exposed the personal data of 90k donors to the Canadian "Freedom Convoy" protest against vaccine mandates.
In December 2021, logs from the RedLine Stealer malware were left publicly exposed and were then obtained by security researcher Bob Diachenko. The data included 441 thousand unique email addresses, usernames and plain text passwords.
In November 2021, web host ZAP-Hosting suffered a data breach that exposed over 60GB of data containing 746k unique email addresses. The breach also contained support chat logs, IP addresses, names, purchases, physical addresses and phone numbers.
In September 2021, the Republican Party of Texas was hacked by a group claiming to be "Anonymous" in retaliation for the state's controversial abortion ban. The September defacement was followed by a leak of data and documents which included material from the hosting provider Epik.
In mid-2021, the "vintage messaging reborn" service Phoenix suffered a data breach that exposed 75k unique email addresses. The breach also exposed IP addresses, usernames and passwords.
In February 2021, a series of egregiously bad security flaws were identified in the NurseryCam system designed for parents to remotely monitor their children whilst attending nursery. The flaws led to the exposure of over 10k parent records before the service was shut down.
In January 2021, the FBI in partnership with the Dutch NHTCU, German BKA and other international law enforcement agencies brought down the world's most dangerous malware: Emotet.
The largest personal-data leak in Brazilian history: databases on roughly 223 million people โ including names, CPF tax IDs, facial images, salaries and credit scores โ surfaced for sale on a dark-web forum, with suspicion pointing at credit-bureau data.
In December 2020, the economic research company Capital Economics suffered a data breach that exposed 263k customer records. The exposed data included email and physical addresses, names, phone numbers, job titles and the employer of impacted customers.
In 2020, a corpus of data containing almost a quarter of a billion records spanning over 400 different fields was misattributed to database marketing company Acxiom and subsequently circulated within the hacking community.
In mid-2020, a 437GB corpus of data attributed to an entity named "Acuity" was created and later extensively distributed. However, the source could not be confidently verified as any known companies named Acuity.
In February 2020, Israeli marketing company Straffic exposed a database with 140GB of personal data. The publicly accessible Elasticsearch database contained over 300M rows with 49M unique email addresses. Exposed data also included names, phone numbers, physical addresses and genders.
In January 2020, the online dating service Zoosk suffered a data breach which was subsequently shared extensively across online hacking communities. The breach contained 24 million unique email addresses alongside extensive personal information including genders, sexualities, dates of birth,โฆ
In approximately 2019 or 2020, the Lithuanian movie streaming service Filmai.in suffered a data breach exposing 645k email addresses, usernames and plain text passwords.
In January 2021, NordLocker provided HIBP 1.1 million email addresses collected by nameless malware. The malware campaign ran between 2018 and 2020 and infected 3.25 million computers, stealing files, credentials and taking screenshots and photos using the computer's webcam.
In approximately November 2019, the Russian "Remote preparatory faculty for IT specialties" Universarium suffered a data breach. The incident exposed 565k email addresses and passwords in plain text. Universarium did not respond to multiple attempts to make contact over a period of many weeks.
In August 2019, Audi USA suffered a data breach after a vendor left data unsecured and exposed on the internet. The data contained 2.7M unique email addresses along with names, phone numbers, physical addresses and vehicle information including VIN.
In June 2019, the library of Vienna (Wiener Bรผchereien) suffered a data breach. The compromised data included 224k unique email addresses, names, physical addresses, phone numbers and dates of birth. The breached data was subsequently posted to Twitter by the alleged perpetrator of the breach.
In March 2019, the Japanese solder-related business Hakko Corporation suffered a data breach. The incident exposed almost 10k customer records including email and physical addresses, phone numbers, names, usernames, genders, dates of birth and plain text passwords.
In March 2019, a spam operation known as "Intelimost" sent millions of emails appearing to come from people the recipients knew. Security researcher Bob Diachenko found over 3 million unique email addresses in an exposed Elasticsearch database, alongside plain text passwords used to access theโฆ
In October 2018, security researcher Bob Diachenko identified multiple exposed databases with hundreds of millions of records. One of those datasets was an Elasticsearch instance on AWS containing sales lead data and 5.8M unique email addresses.
In September 2018, security researcher Bob Diachenko discovered a massive collection of personal details exposed in an unprotected Mongo DB instance. The data appears to have been used in marketing campaigns (possibly for spam purposes) but had little identifying data about it other than aโฆ
In September 2018, a collection of almost 42 million email address and plain text password pairs was uploaded to the anonymous file sharing service kayo.moe.
In August 2018, the spyware company SpyFone left terabytes of data publicly exposed. Collected surreptitiously whilst the targets were using their devices, the data included photos, audio recordings, text messages and browsing history which were then exposed via a number of misconfigurations withinโฆ
In July 2018, the cloud-based video making service Animoto suffered a data breach. The breach exposed 22 million unique email addresses alongside names, dates of birth, country of origin and salted password hashes.
In April 2018, a credential stuffing list containing 111 million email addresses and passwords known as Pemiblanc was discovered on a French server. The list contained email addresses and passwords collated from different data breaches and used to mount account takeover attacks against otherโฆ
In February 2018, a massive collection of almost 3,000 alleged data breaches was found online. Whilst some of the data had previously been seen in Have I Been Pwned, 2,844 of the files consisting of more than 80 million unique email addresses had not previously been seen.
In December 2017, the Danish torrent tracker known as HoundDawgs suffered a data breach. More than 55GB of data was dumped publicly and whilst there was initially contention as to the severity of the incident, the data did indeed contain more than 45k unique email addresses complete extensive logsโฆ
In October 2017, the now defunct Brazilian service for retrieving subtitles in Portuguese Legendas.TV suffered a data breach that exposed nearly 4M customer records. The impacted data included names, usernames, email and IP addresses and unsalted SHA-1 hashes.
In mid-2017, a spam list of over 105 million individuals in corporate America was discovered online. Referred to as "B2B USA Businesses", the list categorised email addresses by employer, providing information on individuals' job titles plus their work phone numbers and physical addresses.
In June 2017, the online playlists service known as 8Tracks suffered a data breach which impacted 18 million accounts. In their disclosure, 8Tracks advised that "the vector for the attack was an employeeโs GitHub account, which was not secured using two-factor authentication".
A large-scale, highly targeted phishing campaign documented by Citizen Lab sent 90+ credential-stealing messages against Egyptian NGOs, activists, and lawyers tied to the government's 'Case 173' crackdown on civil society.
In January 2017, the free hidden service host Freedom Hosting II suffered a data breach. The attack allegedly took down 20% of dark web sites running behind Tor hidden services with the attacker claiming that of the 10,613 impacted sites, more than 50% of the content was child pornography.
In January, the maker of teddy bears that record children's voices and sends them to family and friends via the internet CloudPets left their database publicly exposed and it was subsequently downloaded by external parties (the data was also subject to 3 different ransom demands).
In approximately January 2017, the Lady Gaga fan site known as "Little Monsters" suffered a data breach that impacted 1 million accounts. The data contained usernames, email addresses, dates of birth and bcrypt hashes of passwords.
In January 2017, the automated telephony services company Victory Phones left a Mongo DB database publicly facing without a password. Subsequently, 213GB of data was downloaded by an unauthorised party including names, addresses, phone numbers and over 166k unique email addresses.
In December 2016, a huge list of email address and password pairs appeared in a "combo list" referred to as "Anti Public". The list contained 458 million unique email addresses, many with multiple different passwords hacked from various online systems.
In late 2016, China's leading online video platform Youku suffered a data breach exposing roughly 92 million unique user accounts together with usernames and MD5-hashed passwords, which later circulated on dark-web marketplaces.
In October 2016, the Minecraft banning service known as MCBans suffered a data breach resulting in the exposure of 120k unique user records. The data contained email and IP addresses, usernames and password hashes of unknown format.
In late 2016, a huge list of email address and password pairs appeared in a "combo list" referred to as "Exploit.In". The list contained 593 million unique email addresses, many with multiple different passwords hacked from various online systems.
In approximately October 2016, the Spanish Pokรฉmon site Pokรฉmon Negro suffered a data breach. The attack resulted in the disclosure of 830k accounts including email and IP addresses along with plain text passwords. Pokรฉmon Negro did not respond when contacted about the breach.
In September 2016, the real estate investment site Real Estate Mogul had a Mongo DB instance compromised and 5GB of data downloaded by an unauthorised party. The data contained real estate listings including addresses and the names, phone numbers and 308k unique email addresses of the sellers.
In September 2016, over 16GB of logs from a service indicated to be digimon.co.in were obtained, most likely from an unprotected Mongo DB instance. The service ceased running shortly afterwards and no information remains about the precise nature of it.
In 2016, a list of over 33 million individuals in corporate America sourced from Dun & Bradstreet's NetProspex service was leaked online. D&B believe the targeted marketing data was lost by a customer who purchased it from them.
In August 2016, Roblox disclosed a data breach that affected over 50k users. The security incident impacted email and IP addresses, usernames, purchases and Robux balances which were left exposed on a test server.
In July 2016, the India-based food delivery service FreshMenu suffered a data breach. The incident exposed the personal data of over 110k customers and included their names, email addresses, phone numbers, home addresses and order histories.
In July 2016, the anime site Funimation suffered a data breach that impacted 2.5 million accounts. The data contained usernames, email addresses, dates of birth and salted SHA1 hashes of passwords.
In June 2016, the Facebook application known as Uiggy was hacked and 4.3M accounts were exposed, 2.7M of which had email addresses against them. The leaked accounts also exposed names, genders and the Facebook ID of the owners.
In May 2015, almost 100k user records were extracted from the Hungarian torrent site known as Teracod. The data was later discovered being torrented itself and included email addresses, passwords, private messages between members and the peering history of IP addresses using the service.
In February 2016, the Russian portal and email service KM.RU was the target of an attack which was consequently detailed on Reddit. Allegedly protesting "the foreign policy of Russia in regards to Ukraine", KM.RU was one of several Russian sites in the breach and impacted almost 1.5M accountsโฆ
In February 2016, the online trucking simulator mod TruckersMP suffered a data breach which exposed 84k user accounts. In a first for "Have I Been Pwned", the breached data was self-submitted directly by the organisation that was breached itself.
In approximately February 2016, data surfaced which was allegedly obtained from V-Tight Gel (vaginal tightening gel). Whilst the data set was titled V-Tight, within there were 50 other (predominantly wellness-related) domain names, most owned by the same entity.
In January 2016, the online virtual world known as Onverse was hacked and 800k accounts were exposed. Along with email and IP addresses, the site also exposed salted MD5 password hashes.
In mid-2015, the Dutch Minecraft site ServerPact was hacked and 73k accounts were exposed. Along with birth dates, email and IP addresses, the site also exposed SHA1 password hashes with the username as the salt.
In December 2015, the service for creating and running free Minecraft servers known as Aternos suffered a data breach that impacted 1.4 million subscribers. The data included usernames, email and IP addresses and hashed passwords.
In November 2015, an Ancestry service known as RootsWeb suffered a data breach. The breach was not discovered until late 2017 when a file containing almost 300k email addresses and plain text passwords was identified.
In October 2015, the torrent site Mac-Torrents was hacked and almost 94k usernames, email addresses and passwords were leaked. The passwords were hashed with MD5 and no salt.
In mid to late 2015, a spam list known as the Special K Data Feed was discovered containing almost 31M identities. The data includes personal attributes such as names, physical and IP addresses, genders, birth dates and phone numbers. Read more about spam lists in HIBP.
In August 2015, the social video sharing and bookmarking site MyVidster was hacked and nearly 20,000 accounts were dumped online. The dump included usernames, email addresses and hashed passwords.
In July 2015, the Italian security firm Hacking Team suffered a major data breach that resulted in over 400GB of their data being posted online via a torrent. The data searchable on "Have I Been Pwned?" is from 189GB worth of PST mail folders in the dump.
In July 2015, the Cydia repository known as myRepoSpace was hacked and user data leaked publicly. Cydia is designed to facilitate the installation of apps on jailbroken iOS devices.
In early 2015, a spam list known as SC Daily Phone emerged containing almost 33M identities. The data includes personal attributes such as names, physical and IP addresses, genders, birth dates and phone numbers. Read more about spam lists in HIBP.
In approximately March 2015, the free web hosting provider 000webhost suffered a major data breach that exposed almost 15 million customer records. The data was sold and traded before 000webhost was alerted in October. The breach included names, email addresses and plain text passwords.
In December 2014, the electronic sports organisation known as Team SoloMid was hacked and 442k members accounts were leaked. The accounts included email and IP addresses, usernames and salted hashes of passwords.
In May 2014, the link management company Bitly announced they'd suffered a data breach. The breach contained over 9.3 million unique email addresses, usernames and hashed passwords, most using SHA1 with a small number using bcrypt.
In March 2014, the booter service Quantum Booter (also referred to as Quantum Stresser) suffered a breach which lead to the disclosure of their internal database.
A data dump of almost 100 million accounts from Russian internet portal Rambler โ often called 'the Russian Yahoo' โ surfaced for trade in 2016, exposing roughly 91 million unique usernames and passwords stored in plain text.
In January 2014 just one week after Gibson Security detailed vulnerabilities in the service, Snapchat had 4.6 million usernames and phone number exposed.
In August 2012, the fashion site Lookbook suffered a data breach. The data later appeared listed for sale in June 2016 and included 1.1 million usernames, email and IP addresses, birth dates and plain text passwords.
In October 2017, the blog commenting service Disqus announced they'd suffered a data breach. The breach dated back to July 2012 but wasn't identified until years later when the data finally surfaced. The breach contained over 17.5 million unique email addresses and usernames.
In approximately 2012, it's alleged that the Chinese email service known as 126 suffered a data breach that impacted 6.4 million subscribers. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified".
In December 2011, the Chinese dating site known as Zhenai.com suffered a data breach that impacted 5 million subscribers. Whilst there is evidence that the data is legitimate, due to the difficulty of emphatically verifying the Chinese breach it has been flagged as "unverified".
In 2011, Sony suffered breach after breach after breach โ it was a very bad year for them. The breaches spanned various areas of the business ranging from the PlayStation network all the way through to the motion picture arm, Sony Pictures.
In mid-2011, the Russian instant messaging service known as QIP (Quiet Internet Pager) suffered a data breach. The attack resulted in the disclosure of over 26 million unique accounts including email addresses and passwords with the data eventually appearing in public years later.
In May 2010, the e-wallet service known as Neteller suffered a data breach which exposed over 3.6M customers. The breach was not discovered until October 2015 and included names, email addresses, home addresses and account balances.
Sometime in 2009, the e-wallet service known as Money Bookers suffered a data breach which exposed almost 4.5M customers. Now called Skrill, the breach was not discovered until October 2015 and included names, email addresses, home addresses and IP addresses.