Threat Actors

A directory of the ransomware crews and extortion groups behind recent data breaches — filter by name or sort by activity, then open any group for the incidents we link to it.

No actors match that name on this page.

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.