Company Breach Ratings
Companies that appear in our tracker — some through breaches the organisation, a regulator or a breach index has confirmed, and most through unconfirmed listings posted by ransomware and extortion groups. Each carries a DoxxScan™ Rating for how exposed their customers’ information may be if the reports behind it are accurate (lower rating = higher doxx risk), and a Safety Grade summarising that public record (higher = cleaner). Unconfirmed claims are labelled as such and count for less in both numbers. A listing is not proof that a breach happened.
Companies we track
Center for Advanced Learning
Southern Oregon Education Service District
Eugene School District 4J
Creswell School District
Lebanon Community School District 9
Santiam Canyon School District 129J
Junction City School District
Ulrich Consulting & Investment Group, LLC
Scappoose School District 1J
Sweet Home School District 55
Seaside School District 10
North Marion School District #15
Umatilla School District
InterMountain ESD
Helix School District #1-R
Marcola School District
Greater Albany Public Schools
Perrydale School District
Pendleton School District 16R
Pilot Rock School District
Lane ESD
Estacada School District
Astoria School District
Philomath School District
Rainier School District
North Santiam School District 29 J
Ione School District 2
Baker School District
Hillsboro School District
Archie Cochrane Motors, Inc
Birch Medical
Valsoft Corporation Inc.
Medical
QualiTech, LLC
Copeland Buhl
Mainelli Mechanical Contractors, Inc.
Roybal-Mack & Cordova, PC
University of Oregon
American InfoSource
The City of Roseburg
The Pension Specialists, Ltd
Cocospy
Adpost
Spyic
Wolfe Consulting, LLC dba Wolfe Advisors
Scio School District 95-C
Abilene Teachers Federal Credit Union
KeyBank
The New England Center for Children
Western Cooperative Credit Union
The DoxxScan™ Rating is an automated, informational estimate of how exposed a company’s customers may be if the incidents on its public record are accurate, derived solely from that record — the number of incidents, how recent and severe they were, the sensitivity of the data involved, and who established the incident. Most incidents we track are unverified listings published by ransomware and extortion groups; those are accusations, not established facts, and they count for less. A lower rating indicates a higher likelihood that personal information tied to this company is circulating and could be used to dox or target individuals. It is not an audit, certification, or assessment of the company’s current security controls, and it does not represent present-day risk. It may rely on incomplete or unverified public reports and can change as new information emerges. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company named here. Provided for general awareness only — not legal, financial, or security advice. How the rating is calculated →
