LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker
LIVE45146 tracked365 threat actors8 attack methodsupdated October 31, 2026

USA

All USA breaches →

Confirmed filings first — state Attorney General breach notifications and SEC Form 8-K disclosures — then leak-site claims, labelled as claims. · Government (889)

Data breach
CRITICAL

Marathon Health Data Breach Notice (Vermont Attorney General)

Marathon Health notified Vermont residents of a data breach in a filing reported to the Vermont Attorney General on October 30, 2026, and the notice lists social security numbers, health…

October 30, 2026 · 9K records
October 29, 2026CRIT

Del Monte Foods Corporation II Inc. Data Breach Notice (Vermont Attorney General)

October 28, 2026CRIT

Metro Tulsa Foot & Ankle Specialist Data Breach Notice (Vermont Attorney General)

October 28, 2026CRIT

Quantum Health, Inc. Data Breach Notice (Vermont Attorney General)

Latest breaches

Browse all →
October 31, 2026HIGH

nelsenarchitects.com Listed by Settra Ransomware Group

Settra Ransomware
October 31, 2026HIGH

SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH) Listed by Payload Ransomware Group

Payload Ransomware
October 31, 2026HIGH

atljamaica.com Listed by Settra Ransomware Group

Settra Ransomware
October 31, 2026HIGH

Gamdom V2 Listed by Whitearmor Ransomware Group

Whitearmor Ransomware
October 31, 2026HIGH

smithandcasady.com Listed by Settra Ransomware Group

Settra Ransomware
October 31, 2026HIGH

spencers.com Listed by Scarlettgroup Ransomware Group

Scarlettgroup Ransomware
October 31, 2026HIGH

sp***g.com Listed by Everstake Ransomware Group

Everstake Ransomware
October 31, 2026HIGH

flynn-construction.com Listed by Settra Ransomware Group

Settra Ransomware
October 31, 2026HIGH

Phoenix Charter Academy Listed by Rhysida Ransomware Group

Rhysida Ransomware
October 31, 2026HIGH

System Soft Listed by Vexy Ransomware Ransomware Group

Vexy Ransomware Ransomware
October 31, 2026HIGH

Cabka Listed by AuditTeam Ransomware Group

AuditTeam Ransomware
October 31, 2026HIGH

Pe***CT Listed by AuditTeam Ransomware Group

AuditTeam Ransomware
October 31, 2026HIGH

jl***om Listed by AuditTeam Ransomware Group

AuditTeam Ransomware
October 31, 2026HIGH

JHAMF Group Listed by Vexy Ransomware Group

Vexy Ransomware
October 30, 2026HIGH

INTI International University & Colleges Listed by Rhysida Ransomware Group

Rhysida Ransomware
October 30, 2026HIGH

Novadata Listed by The Gentlemen Ransomware Group

The Gentlemen Ransomware
October 30, 2026HIGH

FrenchCreek Production Listed by Akira Ransomware Group

Akira Ransomware
October 30, 2026HIGH

Farmacia I Listed by Qilin Ransomware Group

Qilin Ransomware
October 30, 2026HIGH

Phillips Nizer Listed by RansomHouse Ransomware Group

RansomHouse Ransomware
October 30, 2026HIGH

Minutes Quick Services Listed by N0n Ransomware Group

N0n Ransomware
October 30, 2026HIGH

Five Star Jewelers Listed by Pear Ransomware Group

Pear Ransomware
October 30, 2026HIGH

lyserp.com Listed by DragonForce Ransomware Group

DragonForce Ransomware
October 30, 2026HIGH

iFink Listed by Qilin Ransomware Group

Qilin Ransomware
October 30, 2026HIGH

Palletline Listed by Qilin Ransomware Group

Qilin Ransomware
October 30, 2026HIGH

Grupo Ciosa, SAPI de CV Listed by Qilin Ransomware Group

Qilin Ransomware
October 30, 2026HIGH

Richland Resources Corporation Listed by Qilin Ransomware Group

Qilin Ransomware
October 30, 2026HIGH

Cipsa Industrias Sa De Cv Listed by Rhysida Ransomware Group

Rhysida Ransomware
October 30, 2026HIGH

Honghwa International Listed by Qilin Ransomware Group

Qilin Ransomware
October 30, 2026HIGH

P... Listed by SilentRansomGroup Ransomware Group

SilentRansomGroup Ransomware
October 30, 2026HIGH

EAS Engineering Listed by Genesis Ransomware Group

Genesis Ransomware
October 30, 2026HIGH

Moritt Hock & Hamroff LLP Listed by SilentRansomGroup Ransomware Group

SilentRansomGroup Ransomware
October 30, 2026HIGH

Societe Ivoirienne De Telediffusion Listed by Qilin Ransomware Group

Qilin Ransomware
October 30, 2026HIGH

M... H... Listed by SilentRansomGroup Ransomware Group

SilentRansomGroup Ransomware
October 30, 2026HIGH

ArentFox Schiff Listed by SilentRansomGroup Ransomware Group

SilentRansomGroup Ransomware
October 30, 2026HIGH

Studio Stelitano e Associati Listed by Emperador Ransomware Group

Emperador Ransomware
October 30, 2026HIGH

Hudson & Hudson Sign Products Listed by Akira Ransomware Group

Akira Ransomware
October 30, 2026HIGH

A... F... Listed by SilentRansomGroup Ransomware Group

SilentRansomGroup Ransomware
October 30, 2026HIGH

Gilliam & Associates, P.C Listed by Genesis Ransomware Group

Genesis Ransomware
October 30, 2026HIGH

Light Rail Manila Listed by Qilin Ransomware Group

Qilin Ransomware
October 30, 2026HIGH

Service One Transportation Listed by Akira Ransomware Group

Akira Ransomware
Was your information leaked? Scan your email against 13.1B+ leaked records — see every breach you’re in, free.
Was your email in a breach like this?
15-second check — no card, no account. Details go to your inbox.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

More stories

Privacy guides →
Sarcoma
HIGH

Ivan Smith Furniture Listed by Sarcoma Ransomware Group

For 65 years, Ivan Smith Furniture has believed that great service starts with treating people like neighbors. What began as a small-town furniture store has grown to 40 locations across…

October 31, 2026
INC Ransom
HIGH

chicagolawyer.com Listed by INC Ransom Ransomware Group

Chicago Personal Injury Lawyers Award-Winning Injury Lawyers At Staver Accident Injury Lawyers, we face powerful insurance companies head-on, using our decades of experience to help injury…

October 31, 2026
Emperador
HIGH

Holcim Listed by Emperador Ransomware Group

Holcim is a global building-materials and building-solutions company founded in Switzerland in 1912. It provides cement, aggregates, ready-mix concrete and high-value building solutions for…

October 31, 2026
N0n
HIGH

Digital Triumph Listed by N0n Ransomware Group

telecommunications services · Malaysia | Employee payroll records with names, national identity numbers and wages, statutory filings 2016 to 2025; Audited financial statements, tax filings…

October 31, 2026
The Gentlemen
HIGH

Bi Link Listed by The Gentlemen Ransomware Group

bi-link.com Revenue $380.2 Million Bi-Link US precision manufacturer founded in 1961 (HQ Bloomingdale, IL), making metal stampings and injection-molded plastics with in-house tooling and…

October 31, 2026
Payload
HIGH

Kraft Lernen Listed by Payload Ransomware Group

Kraft Lernen is a German company that specializes in supplying didactic and developmental materials for kindergartens, schools, and therapeutic institutions. Its product catalog includes…

October 31, 2026
Interlock
HIGH

Meadows Valley School District Listed by Interlock Ransomware Group

https://www.mvsd11.org/ The Meadows Valley School District strives to prepare all students for life's demands, adventures, and challenges. While the district offers educational services…

October 31, 2026
Qilin
HIGH

Community Medical Center, Falls City Nebraska Listed by Qilin Ransomware Group

Community Medical Center, Falls City Nebraska was named on a ransomware group's data-leak site. Public details are limited so far; the listing points to stolen internal data.

October 31, 2026
Vexy Ransomware
HIGH

JHAMF Group Listed by Vexy Ransomware Ransomware Group

JHAMF Group is a Colombian IT services company specializing in IT infrastructure, telecommunications, software licensing and implementation, network installation and certification, technical…

October 31, 2026
Vexy
HIGH

System Soft Listed by Vexy Ransomware Group

System Soft was named on a ransomware group's data-leak site. Public details are limited so far; the listing points to stolen internal data.

October 31, 2026
NightSpire
HIGH

**F*A *.A Listed by NightSpire Ransomware Group

**F*A *.A was listed on the NightSpire ransomware leak site. The group claims to have stolen internal data.

October 31, 2026
Emperador
HIGH

Punta Shopping Listed by Emperador Ransomware Group

Commercial organization in Uruguay, located in the city of Punta del Este Field of activity: shopping center management, rental of commercial space, retail trade and services. The archive…

October 31, 2026
Underground Breach IndexSTEADY
94▼ -6% vs baseline
34 newly surfaced (24h) · 360 disclosed this week · baseline ~55.0/day (90-day median) · 100 = baseline
323Ransomware claimspast 7 days
26KRecords exposeddisclosed · past 7 days
19Critical severityconfirmed · past 7 days

Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.

Brief of the dayOctober 31, 2026

34 breaches surfaced in the last 24 hours, against a baseline of about 55.0/day. The most severe this week: Marathon Health (critical). Ransomware and extortion crews account for 323 of this week’s claims. Roughly 26K records were exposed in the past seven days. If your email is in any of these, attackers can chain it to your other accounts.

Scan your email free →
LIVE
Breach rankings

Known Exploited Vulnerabilities

All vulnerabilities →

Flaws CISA has confirmed are being actively exploited in the wild — if you run the affected software, patch these first. Source: CISA KEV.

CVE-2026-118527Oct 30

Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Ivanti · Connect Secure
CVE-2026-111357Oct 30

Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability

Ivanti · Connect Secure
CVE-2026-97229Oct 29

GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

GitLab · Community Edition and Enterprise Edition
CVE-2026-76418Oct 29

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability

Cisco · Secure Firewall ASA Software and Cisco Secure FTD Software
CVE-2026-41709Oct 28

Broadcom VMWare ESX Insufficient Logging Vulnerability

Broadcom · VMware ESX
CVE-2026-46300Oct 28

Linux Kernel Missing Initialization of a Variable Vulnerability

Linux · Kernel
CVE-2026-48356Oct 27

Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

Adobe · Commerce and Magento
CVE-2026-111497Oct 27

Google Brotli Unchecked Return Value Vulnerability

Google · Brotli

Threat actors

All actors →
LockBit 3430Qilin 2490Akira 1652Clop 1369Play 1338The Gentlemen 1121INC Ransom 1007RansomHub 833ALPHV 727DragonForce 673SafePay 614Black Basta 522

Attack methods

All methods →
Data Extortion & Leaks 33719Ransomware 33436Misconfiguration & Exposed Data 3634Credential & Infostealer Leaks 725Supply-Chain Attack 59Phishing & Social Engineering 24Zero-Day & Vulnerability Exploitation 12Insider & Account Hijack 9

Company ratings

All companies →

DoxxScan™ Rating — lower means higher doxx risk. How it works →

RTRockland Trust 5TVThe Village Bank 5EBEastern Bank 5SBSavers Bank 5MSMain Street Bank 5BOBank of America 5JCJPMorgan Chase Bank, N.A. 5WSWatertown Savings Bank 5WFWells Fargo Bank, N.A. 5SMSt Mary's Credit Union 5SMSt Marys Credit Union 5DODepartment of Revenue 5

Developers: free breach data API & embeddable widgets →

Share this tracker
ShareXLinkedInFacebookRedditWhatsAppTelegram

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.