Recent Breaches › Attack methods › Data Extortion & Leaks

Attack method

Data Extortion & Leaks

Data-extortion actors steal data and threaten to publish or sell it unless the victim pays, even without deploying ransomware.

31235tracked breaches

Groups using this method

LockBit 3345 Qilin 2228 Akira 1563 clop 1343 Play 1300 INC Ransom 949 The Gentlemen 925 ransomhub 841 alphv 727 DragonForce 647 SafePay 553 blackbasta 522 medusa 515 bianlian 507 8base 448 lynx 416 everest 399 Lockbit5 353 conti 351 dispossessor 344 nightspire 323 pysa 308 hunters 305 killsec 284

+324 more groups

rhysida 278 sinobi 274 cactus 247 royal 211 hive 208 ransomhouse 205 coinbasecartel 192 stormous 190 fog 189 vicesociety 188 devman 183 blacksuit 183 babuk2 178 Nova 175 worldleaks 175 handala 172 funksec 171 cloak 166 apt73 158 ShinyHunters 154 spacebears 152 blackbyte 147 avaddon 146 meow 144 malas 144 snatch 142 sarcoma 141 The Gentlemen 138 SilentRansomGroup 135 Krybit 133 ragnarlocker 128 noescape 124 interlock 121 raworld 120 direwolf 117 toufan 117 Pear 116 genesis 112 ElDorado 112 monti 110 payoutsking 109 arcusmedia 108 anubis 108 cuba 103 Deadlock 99 kairos 94 abyss 91 threeam 90 revil 89 medusalocker 88 ransomexx 84 chaos 82 warlock 78 lorenz 78 cicada3301 75 payload 74 karakurt 74 beast 72 avoslocker 70 BrainCipher 68 ransomed 68 quantum 68 blacklock 64 lv 63 flocker 58 settra 57 darkvault 55 losttrust 53 gunra 52 maze 51 AiLock 50 Orova 49 termite 49 tengu 49 trigona 49 nitrogen 48 mallox 48 knight 47 Global Secret Group 46 insomnia 46 crypto24 46 midas 44 cmdorganization 43 donutleaks 42 Crpx0 41 blackshrantac 41 J 41 blacknevas 40 embargo 40 metaencryptor 39 securotrop 39 dragonransomware 39 darkleakmarket 39 m3rx 37 CRPxO 37 ciphbit 36 helldown 36 nokoyawa 36 arvinclub 35 spook 35 Dark Project 34 Storm 34 moneymessage 34 lamashtu 34 Aurora 33 obscura 33 dAn0n 33 global 32 suncrypt 32 marketo 32 blackmatter 32 Coinbase Cartel 31 alphalocker 30 frag 30 payloadbin 29 Majinahanashi 28 L Group 28 onyx 28 Leakeddata 26 bravox 26 underground 26 werewolves 26 kelvinsecurity 26 netwalker 26 titan 25 lapsus$ 25 fulcrumsec 25 vect 25 kraken 25 morpheus 23 doppelpaymer 23 radar 22 ryuk 22 unsafe 21 daixin 21 xinglocker 21 hellcat 20 leaktheanalyst 20 cephalus 19 siegedsec 19 ralord 19 AuditTeam 18 brotherhood 18 d4rk4rmy 18 trinity 18 mountlocker 18 ALP-001 17 sabbath 17 ShadowByt3$ 16 Booba Project 16 Panzer 16 ExfilSquad 16 tridentlocker 16 datacarry 16 dunghill 16 apos 16 madliberator 16 redransomware 16 mosesstaff 16 azroteam 15 cheers 15 nefilim 15 blackwater 14 benzona 14 weyhro 14 kawa4096 14 freecivilian 14 sparta 14 Section9 13 argonauts 13 mindware 13 blackout 12 IMNCrew 12 teamxxx 12 kazu 11 Icarus 11 icefire 11 cryp70n1c0d3 11 crazyhunter 10 darkrace 10 darkpower 10 darkside 10 Black X 9 LeakBazaar 9 rook 9 groove 9 Emperador 8 Helix 8 xpl0itrs 8 skira 8 radiant 8 VanHelsing 8 qiulong 8 mogilevich 8 cryptbb 8 babuk 8 Barracuda 7 Wallstreet 7 Doommageddon 7 bert 7 chort 7 malekteam 7 0mega 7 cyclops 7 karma 7 pay2key 7 The Crew 6 DYSPHOR1A 6 netrunner 6 cipherforce 6 RunSomeWares 6 arkana 6 silent 6 rancoz 6 dataleak 6 redalert 6 yanluowang 6 egregor 6 iah6477 5 Space Bears 5 ms13089 5 Gammax 5 PrinzEugen 5 ULose 5 0day Syndicate 5 secpo 5 orca 5 atomsilo 5 minteye 5 kryptos 5 bqtlock 5 GDLockerSec 5 ValenciaLeaks 5 donex 5 raznatovic 5 projectrelic 5 pandora 5 lockdata 5 Booba Team 4 exitium 4 linkc 4 desolator 4 satanlockv2 4 ransomcortex 4 shaoleaks 4 blacktor 4 Eclipse 3 Iah647 3 Ethics 3 orion 3 Triple X 3 mnt6 3 TiMc 3 yurei 3 rebornvc 3 bluebox 3 vanirgroup 3 hellogookie 3 trisec 3 noname 3 vendetta 3 ragnarok 3 blackshadow 3 bonacigroup 3 grief 3 snake 3 coldlock 3 Arcus Media 2 nasirsecurity 2 Sovcali 2 Leaknet 2 3am 2 BlueWhale 2 cry0 2 Blackfield 2 Redact 2 kittykatkrew 2 osiris 2 lunalock 2 sensayq 2 cryptnet 2 bitlocker 2 nightsky 2 wastedlocker 2 sekhmet 2 prolock 2 Abyss-data 1 Cyberleek 1 Audit Team 1 Securotop 1 Ms13-089 1 Kyber 1 D1R 1 sicarii 1 reynolds 1 walocker 1 secp0 1 playboy 1 zerotolerance 1 insane 1 ranstreet 1 crosslock 1 slug 1 memedusalockerdusa 1 blogxx 1 roadsweep 1 la_piovra 1 robinhood 1 macaw 1 deathkitty 1 zeppelin 1 networm 1 maui 1 astroteam 1 phoenixcryptolocker 1 synack 1 ronggolawe 1 cring 1 hades 1 netflim 1 agelocker 1 thanos 1 dharma 1 mamba 1

Breaches using Data Extortion & Leaks

August 27, 2026HIGH

Showing 1–50 of 31,235

‹ Prev1 2 3…625 Next ›

Per page25 50 75 100

Check your exposure

See if your email turned up in any breach we track — free.

Check if you’re exposed →

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

Data Extortion & Leaks

Groups using this method

Breaches using Data Extortion & Leaks

Capitol Mechanics Listed by Emperador Ransomware Group

Q... E... Listed by Leakeddata Ransomware Group

H... K... Listed by Leakeddata Ransomware Group

N... M... Listed by Leakeddata Ransomware Group

H... L... Listed by Leakeddata Ransomware Group

Hungry Lion Listed by medusalocker Ransomware Group

dece.cz Listed by Lockbit5 Ransomware Group

Open Sports Listed by Qilin Ransomware Group

GPS Grothkopp und Partner Listed by Qilin Ransomware Group

DAB Investments Listed by Qilin Ransomware Group

Servifruit Listed by medusalocker Ransomware Group

takt.be Listed by Lockbit5 Ransomware Group

K... M... Listed by Leakeddata Ransomware Group

Ruby Seven Studios Listed by Inc Ransom Ransomware Group

Jgsee Listed by medusalocker Ransomware Group

Health Listed by medusalocker Ransomware Group

S... P... Listed by Leakeddata Ransomware Group

C... O... Listed by Leakeddata Ransomware Group

LGG Advisors Listed by Qilin Ransomware Group

Providence Investments Listed by Qilin Ransomware Group

Next Level Medical, Llc Listed by Pear Ransomware Group

SCA Logistik & Fulfillment GmbH Listed by Aurora Ransomware Group

Qualisteel Listed by medusalocker Ransomware Group

Displaydata Listed by Qilin Ransomware Group

Incolur Listed by thegentlemen Ransomware Group

mimafoods.net Listed by Krybit Ransomware Group

Gill Rock Drill Listed by Akira Ransomware Group

jindallifescience.com Listed by Krybit Ransomware Group

mat-holdings-inc Listed by iah6477 Ransomware Group

Incolur Listed by The Gentlemen Ransomware Group

Q... E... Listed by SilentRansomGroup Ransomware Group

S... P... Listed by SilentRansomGroup Ransomware Group

H... K... Listed by SilentRansomGroup Ransomware Group

C... O... Listed by SilentRansomGroup Ransomware Group

H... L... Listed by SilentRansomGroup Ransomware Group

proampac Listed by iah6477 Ransomware Group

sankovn.com Listed by Krybit Ransomware Group

ferretornillos.gt Listed by Krybit Ransomware Group

TEC Container Listed by The Gentlemen Ransomware Group

Espinos Listed by The Gentlemen Ransomware Group

Demidov Steel Group Listed by AuditTeam Ransomware Group

TEC Container Listed by thegentlemen Ransomware Group

Espinos Listed by thegentlemen Ransomware Group

www.neooftalmo.com.br Listed by krybit Ransomware Group

Party Rental Listed by thegentlemen Ransomware Group

Verbux Listed by thegentlemen Ransomware Group

Crowe Listed by Coinbase Cartel Ransomware Group

vascara.com Listed by Krybit Ransomware Group

finodayacapital.com Listed by Krybit Ransomware Group

karkinos.in Listed by Krybit Ransomware Group