underground
underground is a ransomware / data-extortion group tracked on public leak-site monitors. The breaches below are victims it has publicly claimed.
26tracked breaches
2linked methods
Methods used
Breaches linked to underground
Were you caught in one of these?
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.