LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker
NewsletterFree scan

Recent Breaches › Threat actors › underground

Threat actor

underground

underground is a ransomware / data-extortion group tracked on public leak-site monitors. The breaches below are victims it has publicly claimed.
26tracked breaches
2linked methods

Methods used

Ransomware 26Data Extortion & Leaks 26

Breaches linked to underground

August 15, 2025HIGH

SFA Engineering Listed by underground Ransomware Group

underground Ransomware
June 25, 2025HIGH

GMORS Co., Ltd Listed by underground Ransomware Group

underground Ransomware
April 15, 2025HIGH

semex.com Listed by underground Ransomware Group

underground Ransomware
March 30, 2025HIGH

shengyusteel.com Listed by underground Ransomware Group

underground Ransomware
February 13, 2025HIGH

Afa Systems Ltd. Listed by underground Ransomware Group

underground Ransomware
December 16, 2024HIGH

Simmtech Co., Ltd. Listed by underground Ransomware Group

underground Ransomware
October 25, 2024HIGH

hcsgcorp.com Listed by underground Ransomware Group

underground Ransomware
October 5, 2024HIGH

Casio Computer Co., Ltd Listed by underground Ransomware Group

underground Ransomware
July 3, 2024HIGH

ramservices.com Listed by underground Ransomware Group

underground Ransomware
June 20, 2024HIGH

Ethypharm Listed by underground Ransomware Group

underground Ransomware
May 24, 2024HIGH

A-Line Staffing Solutions Listed by underground Ransomware Group

underground Ransomware
May 15, 2024HIGH

CentralSecurities.com Listed by underground Ransomware Group

underground Ransomware
May 4, 2024HIGH

belcherpharma.com Listed by underground Ransomware Group

underground Ransomware
May 4, 2024HIGH

www.belcherpharma.com Listed by underground Ransomware Group

underground Ransomware
April 15, 2024HIGH

cochraneglobal.com Listed by underground Ransomware Group

underground Ransomware
March 21, 2024HIGH

Skender Construction Listed by underground Ransomware Group

underground Ransomware
March 17, 2024HIGH

Creative Business Interiors Listed by underground Ransomware Group

underground Ransomware
March 14, 2024HIGH

Y. Hata & Co., Ltd. Listed by underground Ransomware Group

underground Ransomware
March 6, 2024HIGH

KyungChang Listed by underground Ransomware Group

underground Ransomware
February 23, 2024HIGH

kc.co.kr Listed by underground Ransomware Group

underground Ransomware
January 26, 2024HIGH

Triathlon.group Listed by underground Ransomware Group

underground Ransomware
January 25, 2024HIGH

awwg.com Listed by underground Ransomware Group

underground Ransomware
July 18, 2023HIGH

frenckengroup.com Listed by underground Ransomware Group

underground Ransomware
July 14, 2023HIGH

bulldogbag.com Listed by underground Ransomware Group

underground Ransomware
July 4, 2023HIGH

tpa-group.sk Listed by underground Ransomware Group

underground Ransomware
May 30, 2023HIGH

synology.com Listed by underground Ransomware Group

underground Ransomware
Showing 1–26 of 26
‹ Prev1Next ›
Per page255075100
Were you caught in one of these?
Scan your email against every breach we track — free.
Check if you’re exposed →

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.