LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →

Recent BreachesData breach tracker

Newsletter Free scan

Recent Breaches › Attack methods › Data Extortion & Leaks

Attack method

Data Extortion & Leaks

Data-extortion actors steal data and threaten to publish or sell it unless the victim pays, even without deploying ransomware.

31356tracked breaches

Groups using this method

LockBit 3348 Qilin 2247 Akira 1570 Clop 1343 Play 1300 INC Ransom 956 The Gentlemen 941 RansomHub 841 ALPHV 727 DragonForce 647 SafePay 553 Black Basta 522 Medusa 515 Bianlian 507 8base 448 Lynx 417 Everest 399 Lockbit5 356 Conti 351 Dispossessor 344 NightSpire 323 Pysa 308 Hunters 305 Killsec 284

+320 more groups

Rhysida 280 Sinobi 274 Cactus 247 Coinbase Cartel 223 Royal 211 Hive 208 Ransomhouse 205 Stormous 190 Fog 189 Vicesociety 188 Devman 183 Blacksuit 183 Babuk2 178 Nova 175 World Leaks 175 Handala 172 Funksec 171 Cloak 166 ShinyHunters 158 Apt73 158 Space Bears 157 Blackbyte 147 Avaddon 146 Meow 144 Malas 144 Snatch 142 Sarcoma 141 SilentRansomGroup 137 Krybit 133 Ragnarlocker 128 Noescape 124 Interlock 121 Raworld 120 Direwolf 117 Toufan 117 Pear 116 Genesis 112 ElDorado 112 Payoutsking 110 Arcus Media 110 Monti 110 Anubis 109 Cuba 103 Deadlock 99 Kairos 94 Abyss 91 Threeam 90 Revil 89 Medusalocker 88 Chaos 85 Ransomexx 84 Warlock 78 Lorenz 78 Cicada3301 75 Payload 74 Karakurt 74 Beast 72 Avoslocker 70 BrainCipher 68 Ransomed 68 Quantum 68 Blacklock 64 Lv 63 Flocker 58 Settra 57 Darkvault 55 Losttrust 53 Gunra 52 Orova 51 Maze 51 AiLock 50 Termite 49 Tengu 49 Trigona 49 Nitrogen 48 Mallox 48 Knight 47 Global Secret Group 46 Insomnia 46 Crypto24 46 Midas 44 Cmdorganization 43 Donutleaks 42 Crpx0 41 Blackshrantac 41 J 41 Storm 40 Blacknevas 40 Embargo 40 Metaencryptor 39 Securotrop 39 Dragonransomware 39 Darkleakmarket 39 M3rx 38 CRPxO 37 Global 36 Ciphbit 36 Helldown 36 Nokoyawa 36 Moneymessage 35 Arvinclub 35 Spook 35 Dark Project 34 Lamashtu 34 Aurora 33 Obscura 33 dAn0n 33 Suncrypt 32 Marketo 32 Blackmatter 32 Majinahanashi 30 Alphalocker 30 Frag 30 Payloadbin 29 L Group 28 Onyx 28 Leakeddata 27 Bravox 26 Underground 26 Werewolves 26 Kelvinsecurity 26 Netwalker 26 Titan 25 Lapsus$ 25 Fulcrumsec 25 Vect 25 Kraken 25 Morpheus 23 Doppelpaymer 23 Unsafe 22 Radar 22 Ryuk 22 Daixin 21 Xinglocker 21 AuditTeam 20 Hellcat 20 Leaktheanalyst 20 Cephalus 19 Siegedsec 19 Ralord 19 ShadowByt3$ 18 Brotherhood 18 D4rk4rmy 18 Trinity 18 Mountlocker 18 Panzer 17 ALP-001 17 Sabbath 17 Booba Project 16 ExfilSquad 16 Tridentlocker 16 Datacarry 16 Dunghill 16 Apos 16 Madliberator 16 Redransomware 16 Mosesstaff 16 Azroteam 15 Cheers 15 Nefilim 15 Blackwater 14 Benzona 14 Weyhro 14 Kawa4096 14 Freecivilian 14 Sparta 14 Section9 13 Argonauts 13 Mindware 13 Zawoo 12 Blackout 12 IMNCrew 12 Teamxxx 12 Emperador 11 Black X 11 Kazu 11 Icarus 11 Icefire 11 Cryp70n1c0d3 11 Crazyhunter 10 Darkrace 10 Darkpower 10 Darkside 10 Doommageddon 9 LeakBazaar 9 Rook 9 Groove 9 Helix 8 Xpl0itrs 8 Skira 8 Radiant 8 VanHelsing 8 Qiulong 8 Mogilevich 8 Cryptbb 8 Babuk 8 Iah647 7 Iah6477 7 Dysphor1a 7 Barracuda 7 Wallstreet 7 Bert 7 Chort 7 Malekteam 7 0mega 7 Cyclops 7 Karma 7 Pay2key 7 The Crew 6 Ms13089 6 Netrunner 6 Cipherforce 6 RunSomeWares 6 Arkana 6 Silent 6 Rancoz 6 Dataleak 6 Redalert 6 Yanluowang 6 Egregor 6 Gammax 5 PrinzEugen 5 ULose 5 0day Syndicate 5 Secpo 5 Orca 5 Atomsilo 5 Minteye 5 Kryptos 5 Bqtlock 5 GDLockerSec 5 ValenciaLeaks 5 Donex 5 Raznatovic 5 Projectrelic 5 Pandora 5 Lockdata 5 Eclipse 4 Booba Team 4 Exitium 4 Linkc 4 Desolator 4 Satanlockv2 4 Ransomcortex 4 Shaoleaks 4 Blacktor 4 3am 3 Ethics 3 Orion 3 Triple X 3 Mnt6 3 TiMc 3 Yurei 3 Rebornvc 3 Bluebox 3 Vanirgroup 3 Hellogookie 3 Trisec 3 Noname 3 Vendetta 3 Ragnarok 3 Blackshadow 3 Bonacigroup 3 Grief 3 Snake 3 Coldlock 3 Falcon 2 Nasirsecurity 2 Sovcali 2 Leaknet 2 BlueWhale 2 Cry0 2 Blackfield 2 Redact 2 Kittykatkrew 2 Osiris 2 Lunalock 2 Sensayq 2 Cryptnet 2 Bitlocker 2 Nightsky 2 Wastedlocker 2 Sekhmet 2 Prolock 2 Abyss-data 1 Cyberleek 1 Securotop 1 Kyber 1 D1R 1 Sicarii 1 Reynolds 1 Walocker 1 Secp0 1 Playboy 1 Zerotolerance 1 Insane 1 Ranstreet 1 Crosslock 1 Slug 1 Memedusalockerdusa 1 Blogxx 1 Roadsweep 1 La Piovra 1 Robinhood 1 Macaw 1 Deathkitty 1 Zeppelin 1 Networm 1 Maui 1 Astroteam 1 Phoenixcryptolocker 1 Synack 1 Ronggolawe 1 Cring 1 Hades 1 Netflim 1 Agelocker 1 Thanos 1 Dharma 1 Mamba 1

Breaches using Data Extortion & Leaks

January 17, 2025HIGH

Kilgore College (kilgore.edu) Listed by incransom Ransomware Group

INC Ransom Ransomware

January 17, 2025HIGH

Taylor Regional Hospital (thcg.local) Listed by incransom Ransomware Group

INC Ransom Ransomware

January 17, 2025HIGH

Regina Coeli Convent Listed by incransom Ransomware Group

INC Ransom Ransomware

January 17, 2025HIGH

Cartier Listed by shinyhunters Ransomware Group

ShinyHunters Ransomware

January 17, 2025HIGH

Tech NH Listed by lynx Ransomware Group

Lynx Ransomware

January 17, 2025HIGH

Woodway USA Listed by play Ransomware Group

Play Ransomware

January 17, 2025HIGH

gruppozaccaria.it Listed by lockbit3 Ransomware Group

LockBit Ransomware

January 17, 2025HIGH

vsstransportationgroup.com Listed by cactus Ransomware Group

CactusClop Ransomware

January 17, 2025HIGH

Prestige Maintenance USA Listed by medusa Ransomware Group

Medusa Ransomware

January 17, 2025HIGH

peponline.org Listed by incransom Ransomware Group

INC Ransom Ransomware

January 16, 2025HIGH

Woodlake Listed by everest Ransomware Group

Everest Ransomware

January 16, 2025HIGH

sportadmin.se Listed by ransomhub Ransomware Group

RansomHub Ransomware

January 16, 2025HIGH

By design Listed by play Ransomware Group

Play Ransomware

January 16, 2025LOW

Frame & Optic Data Breach (2025)

Misconfiguration & Exposed Data

January 16, 2025HIGH

Delta Dental of Washington Listed by 8base Ransomware Group

8base Ransomware

January 16, 2025HIGH

bsegroup.it Listed by ransomhub Ransomware Group

RansomHub Ransomware

January 16, 2025HIGH

www.solariumrevestimentos.com.br Listed by ransomhub Ransomware Group

RansomHub Ransomware

January 16, 2025HIGH

www.liteputer.com.tw Listed by ransomhub Ransomware Group

RansomHub Ransomware

January 16, 2025HIGH

Access Capital Partners SA Listed by lynx Ransomware Group

Lynx Ransomware

January 16, 2025HIGH

Cyncly Company Listed by akira Ransomware Group

Akira Ransomware

January 16, 2025HIGH

IDEA Expertises Listed by lynx Ransomware Group

Lynx Ransomware

January 16, 2025HIGH

Netform GmbH Listed by 8base Ransomware Group

8base Ransomware

January 16, 2025HIGH

planetone-asia.com Listed by lynx Ransomware Group

Lynx Ransomware

January 16, 2025HIGH

midwayimporting.com Listed by cactus Ransomware Group

Cactus Ransomware

January 16, 2025HIGH

anupalanonline.com Listed by killsec Ransomware Group

Killsec Ransomware

January 16, 2025HIGH

The Pawn Listed by akira Ransomware Group

Akira Ransomware

January 16, 2025HIGH

alkodistributors.com Listed by cactus Ransomware Group

Cactus Ransomware

January 16, 2025HIGH

jayaapparelgroup.com Listed by cactus Ransomware Group

CactusClop Ransomware

January 16, 2025HIGH

johnpaulrichard.com Listed by cactus Ransomware Group

CactusClop Ransomware

January 16, 2025HIGH

mcpathology.com Listed by safepay Ransomware Group

SafePay Ransomware

January 16, 2025HIGH

Heartcentre Listed by dragonforce Ransomware Group

DragonForce Ransomware

January 16, 2025HIGH

Farmacia Cofar Listed by killsec Ransomware Group

Killsec Ransomware

January 16, 2025HIGH

JD Lighting Listed by sarcoma Ransomware Group

Sarcoma Ransomware

January 16, 2025HIGH

Dona Formosa Listed by sarcoma Ransomware Group

Sarcoma Ransomware

January 16, 2025HIGH

The Hoff Brand SL Listed by everest Ransomware Group

Everest Ransomware

January 16, 2025HIGH

Volt Infrastructure Listed by everest Ransomware Group

Everest Ransomware

January 15, 2025HIGH

www.eurocert.pl Listed by ransomhub Ransomware Group

RansomHub Ransomware

January 15, 2025HIGH

jgele.com Listed by kairos Ransomware Group

Kairos Ransomware

January 15, 2025HIGH

wieso-cert Listed by qilin Ransomware Group

Qilin Ransomware

January 15, 2025HIGH

MBI International, Inc. Listed by weyhro Ransomware Group

Weyhro Ransomware

January 15, 2025HIGH

revitalash.com Listed by cactus Ransomware Group

CactusClop Ransomware

January 15, 2025HIGH

Nelson & Townsend, CPA's Listed by akira Ransomware Group

Akira Ransomware

January 15, 2025HIGH

leonardo.com Listed by threeam Ransomware Group

Threeam Ransomware

January 15, 2025HIGH

Allen & Pinnix Listed by akira Ransomware Group

Akira Ransomware

January 15, 2025HIGH

Daniel Island Club Listed by play Ransomware Group

Play Ransomware

January 15, 2025HIGH

boginmunns.com Listed by qilin Ransomware Group

Qilin Ransomware

January 15, 2025HIGH

Mark ResolveInc Listed by akira Ransomware Group

Akira Ransomware

January 15, 2025HIGH

conduent.com Listed by safepay Ransomware Group

SafePay Ransomware

January 15, 2025HIGH

topackt.com Listed by lockbit5 Ransomware Group

Lockbit5LockBit Ransomware

January 15, 2025HIGH

greyform.sg Listed by safepay Ransomware Group

SafePay Ransomware

January 15, 2025HIGH

termopuerto.com Listed by safepay Ransomware Group

SafePay Ransomware

January 15, 2025HIGH

mts.gov.eg Listed by funksec Ransomware Group

Funksec Ransomware

January 15, 2025HIGH

combinedpoolandspa.com Listed by kairos Ransomware Group

Kairos Ransomware

January 15, 2025HIGH

Lowe Engineers Listed by lynx Ransomware Group

Lynx Ransomware

January 15, 2025HIGH

barilga.gov.mn Listed by funksec Ransomware Group

Funksec Ransomware

January 14, 2025HIGH

ttucorp.com Listed by cactus Ransomware Group

Cactus Ransomware

January 14, 2025HIGH

DURAYDUNCAN.COM Listed by clop Ransomware Group

Clop Ransomware

January 14, 2025HIGH

Indus Towers Listed by medusa Ransomware Group

Medusa Ransomware

January 14, 2025HIGH

AVI Southeast Listed by medusa Ransomware Group

Medusa Ransomware

January 14, 2025HIGH

Boart & Wire Listed by sarcoma Ransomware Group

Sarcoma Ransomware

January 14, 2025HIGH

The Chicano Federation Listed by rhysida Ransomware Group

Rhysida Ransomware

January 14, 2025HIGH

Black , Bashor & Porsch Listed by SilentRansomGroup Ransomware Group

SilentRansomGroup Ransomware

January 14, 2025HIGH

Shea Barclay Group Listed by SilentRansomGroup Ransomware Group

SilentRansomGroup Ransomware

January 14, 2025HIGH

udb.net Listed by ransomhub Ransomware Group

RansomHub Ransomware

January 14, 2025HIGH

QualiTech (qualitech.com) Listed by lynx Ransomware Group

Lynx Ransomware

January 14, 2025HIGH

Kinseth Hospitality Companies Listed by lynx Ransomware Group

Lynx Ransomware

January 14, 2025HIGH

Buttery (butterycompany.com) Listed by fog Ransomware Group

January 14, 2025HIGH

Wynnewood High School Listed by 8base Ransomware Group

8base Ransomware

January 14, 2025HIGH

Moraviakov s.r.o. Listed by 8base Ransomware Group

8base Ransomware

January 14, 2025HIGH

Bring Solution Listed by 8base Ransomware Group

8base Ransomware

January 14, 2025HIGH

Gebäudereinigungsakademie Listed by 8base Ransomware Group

8base Ransomware

January 14, 2025HIGH

bluai.ai Listed by funksec Ransomware Group

Funksec Ransomware

January 14, 2025HIGH

Sharm Reef Hotel Listed by spacebears Ransomware Group

Space Bears Ransomware

January 14, 2025HIGH

Intelservice.com Listed by ransomhub Ransomware Group

RansomHub Ransomware

January 14, 2025HIGH

Solaris Pharma Listed by everest Ransomware Group

Everest Ransomware

January 14, 2025HIGH

Riverina Medical Listed by incransom Ransomware Group

INC Ransom Ransomware

January 14, 2025HIGH

kinseysinc.com Listed by cactus Ransomware Group

Cactus Ransomware

January 14, 2025HIGH

KWS Listed by play Ransomware Group

Play Ransomware

January 14, 2025HIGH

Plymouth Foam Listed by play Ransomware Group

Play Ransomware

January 14, 2025HIGH

bigotti.ro Listed by safepay Ransomware Group

SafePay Ransomware

January 14, 2025HIGH

nutripack.eu Listed by safepay Ransomware Group

SafePay Ransomware

January 14, 2025HIGH

brunetti.com Listed by safepay Ransomware Group

SafePay Ransomware

January 14, 2025HIGH

solge.es Listed by safepay Ransomware Group

SafePay Ransomware

January 14, 2025HIGH

branchgroup.com Listed by cactus Ransomware Group

Cactus Ransomware

January 14, 2025HIGH

Erie Management Group, LLC Listed by qilin Ransomware Group

Qilin Ransomware

January 14, 2025HIGH

Douglas County, GA (DDCWSA.COM) Listed by lynx Ransomware Group

Lynx Ransomware

January 14, 2025HIGH

SciTech Services, Inc. Listed by fog Ransomware Group

January 14, 2025HIGH

Klehr Harrison Harvey Branzburg Listed by SilentRansomGroup Ransomware Group

SilentRansomGroup Ransomware

January 13, 2025HIGH

Castle Rock ConstructionCompany Listed by akira Ransomware Group

Akira Ransomware

January 13, 2025HIGH

PT PINS Indonesia Listed by dragonforce Ransomware Group

DragonForce Ransomware

January 13, 2025HIGH

mymobileforms app Listed by funksec Ransomware Group

Funksec Ransomware

January 13, 2025HIGH

Browdy (bl.local) Listed by lynx Ransomware Group

Lynx Ransomware

January 13, 2025HIGH

kuzstu-nf.ru Listed by funksec Ransomware Group

Funksec Ransomware

January 13, 2025HIGH

telering.de Listed by lockbit3 Ransomware Group

LockBit Ransomware

January 13, 2025HIGH

Aurora Public Schools (aurorak12.org) Listed by fog Ransomware Group

January 13, 2025HIGH

mi.edu Listed by ransomhub Ransomware Group

RansomHub Ransomware

January 13, 2025HIGH

Nash Brothers Construction Listed by bianlian Ransomware Group

Bianlian Ransomware

January 13, 2025HIGH

linxe.com Listed by funksec Ransomware Group

Funksec Ransomware

January 13, 2025HIGH

zapopan.gob.mx Listed by funksec Ransomware Group

FunksecBabuk2 Ransomware

January 13, 2025HIGH

Castle Rock Construction Company Listed by akira Ransomware Group

Akira Ransomware

Showing 14,601–14,700 of 31,356

‹ Prev 1…145 146 147 148 149…314 Next ›

Per page25 50 75 100

Check your exposure

See if your email turned up in any breach we track — free.

Check if you’re exposed →

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.