Company Breach Ratings
Companies that appear in our tracker — some through breaches the organisation, a regulator or a breach index has confirmed, and most through unconfirmed listings posted by ransomware and extortion groups. Each carries a DoxxScan™ Rating for how exposed their customers’ information may be if the reports behind it are accurate (lower rating = higher doxx risk), and a Safety Grade summarising that public record (higher = cleaner). Unconfirmed claims are labelled as such and count for less in both numbers. A listing is not proof that a breach happened.
Companies we track
NorthWest Arkansas Community College
Perficient, Inc.
Silver Hill Hospital
S.W. Cole Engineering, Inc.
Bankers Cooperative Group
Sandy Spring Museum
Stram Center for Integrative Medicine
Calton & Associates, Inc.
Peterson Law Offices PC
Miedema Produce
Curium Pharma
BMS Holdings, LP
Business Insurance & Benefits Services of MA
Case Foods, Inc.
Mainline Health Systems Inc
Birdair, Inc.
Cowboy Clean Fuels, LLC
Electronics For Imaging, Inc.
Bray International, Inc.
American Driveline Systems, Inc.
Transamerica Retirement Solutions, LLC
Data Troll Stealer Logs
Shepherd Smith Edwards & Kantas, LLP
Cardiology Associates of Fredericksburg, Ltd.
Krispy Kreme Doughnut Corporation
Carleton Willard Homes Inc.
Marin Housing Authority
Gleason
Mahony & Reeve, LLC
University of Massachusetts Dartmouth
Albany College of Pharmacy and Health Sciences
Resource Energy Systems, LLC
Shrader & Associates, LLP
Infab Holdco, Inc.
Asheville Eye Associates, PLLC
OCH Regional Medical Center
Mount Rogers Community Services
Central Kentucky Radiology
John N. Fernez CPA, LLC
Spitler
McLean Mortgage Corporation
Apex Global Solutions, LLC
Pacific Summit Energy LLC
Comyns
The Bank of New York Mellon
Advisors Insurance Agency
Capitol Region Education Council
Optiline Enterprises, LLC
Tynan & Iannone
LG&W Federal Credit Union
The DoxxScan™ Rating is an automated, informational estimate of how exposed a company’s customers may be if the incidents on its public record are accurate, derived solely from that record — the number of incidents, how recent and severe they were, the sensitivity of the data involved, and who established the incident. Most incidents we track are unverified listings published by ransomware and extortion groups; those are accusations, not established facts, and they count for less. A lower rating indicates a higher likelihood that personal information tied to this company is circulating and could be used to dox or target individuals. It is not an audit, certification, or assessment of the company’s current security controls, and it does not represent present-day risk. It may rely on incomplete or unverified public reports and can change as new information emerges. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company named here. Provided for general awareness only — not legal, financial, or security advice. How the rating is calculated →
