Threat Actors
The ransomware crews and extortion groups behind recent data breaches — who they are, what they target, and every incident we link to them.
sicarii1 trackedsicarii is a ransomware / data-extortion group tracked on public leak-site monitors. The breaches below are victims it has publicly claimed.slug1 trackedslug is a ransomware / data-extortion group tracked on public leak-site monitors. The breaches below are victims it has publicly claimed.synack1 trackedsynack is a ransomware / data-extortion group tracked on public leak-site monitors. The breaches below are victims it has publicly claimed.thanos1 trackedthanos is a ransomware / data-extortion group tracked on public leak-site monitors. The breaches below are victims it has publicly claimed.walocker1 trackedwalocker is a ransomware / data-extortion group tracked on public leak-site monitors. The breaches below are victims it has publicly claimed.zeppelin1 trackedzeppelin is a ransomware / data-extortion group tracked on public leak-site monitors. The breaches below are victims it has publicly claimed.zerotolerance1 trackedzerotolerance is a ransomware / data-extortion group tracked on public leak-site monitors. The breaches below are victims it has publicly claimed.Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.