underground
underground is a ransomware / data-extortion group tracked on public leak-site monitors. The breaches below are victims it has publicly claimed.
26tracked breaches
2linked methods
Methods used
Breaches linked to underground
August 15, 2025HIGHSFA Engineering Listed by underground Ransomware Group
undergroundRansomware
June 25, 2025HIGHGMORS Co., Ltd Listed by underground Ransomware GroupundergroundRansomware
April 15, 2025HIGHsemex.com Listed by underground Ransomware GroupundergroundRansomware
March 30, 2025HIGHshengyusteel.com Listed by underground Ransomware GroupundergroundRansomware
February 13, 2025HIGHAfa Systems Ltd. Listed by underground Ransomware GroupundergroundRansomware
December 16, 2024HIGHSimmtech Co., Ltd. Listed by underground Ransomware GroupundergroundRansomware
October 25, 2024HIGHhcsgcorp.com Listed by underground Ransomware GroupundergroundRansomware
October 5, 2024HIGHCasio Computer Co., Ltd Listed by underground Ransomware GroupundergroundRansomware
July 3, 2024HIGHramservices.com Listed by underground Ransomware GroupundergroundRansomware
June 20, 2024HIGHEthypharm Listed by underground Ransomware GroupundergroundRansomware
May 24, 2024HIGHA-Line Staffing Solutions Listed by underground Ransomware GroupundergroundRansomware
May 15, 2024HIGHCentralSecurities.com Listed by underground Ransomware GroupundergroundRansomware
May 4, 2024HIGHwww.belcherpharma.com Listed by underground Ransomware GroupundergroundRansomware
May 4, 2024HIGHbelcherpharma.com Listed by underground Ransomware GroupundergroundRansomware
April 15, 2024HIGHcochraneglobal.com Listed by underground Ransomware GroupundergroundRansomware
March 21, 2024HIGHSkender Construction Listed by underground Ransomware GroupundergroundRansomware
March 17, 2024HIGHCreative Business Interiors Listed by underground Ransomware GroupundergroundRansomware
March 14, 2024HIGHY. Hata & Co., Ltd. Listed by underground Ransomware GroupundergroundRansomware
March 6, 2024HIGHKyungChang Listed by underground Ransomware GroupundergroundRansomware
February 23, 2024HIGHkc.co.kr Listed by underground Ransomware GroupundergroundRansomware
January 26, 2024HIGHTriathlon.group Listed by underground Ransomware GroupundergroundRansomware
January 25, 2024HIGHawwg.com Listed by underground Ransomware GroupundergroundRansomware
July 18, 2023HIGHfrenckengroup.com Listed by underground Ransomware GroupundergroundRansomware
July 14, 2023HIGHbulldogbag.com Listed by underground Ransomware GroupundergroundRansomware
July 4, 2023HIGHtpa-group.sk Listed by underground Ransomware GroupundergroundRansomware
May 30, 2023HIGHsynology.com Listed by underground Ransomware GroupundergroundRansomware
Were you caught in one of these?
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.