Data Extortion & Leaks
Data-extortion actors steal data and threaten to publish or sell it unless the victim pays, even without deploying ransomware.
31243tracked breaches
Groups using this method
LockBit 3346Qilin 2228Akira 1566Clop 1343Play 1300INC Ransom 951The Gentlemen 925ransomhub 841alphv 727DragonForce 647SafePay 553blackbasta 522medusa 515bianlian 5078base 448lynx 416everest 399Lockbit5 354conti 351dispossessor 344Nightspire 323pysa 308hunters 305killsec 284
+324 more groups
rhysida 278sinobi 274cactus 247royal 211hive 208ransomhouse 205coinbasecartel 192stormous 190fog 189vicesociety 188devman 183blacksuit 183babuk2 178Nova 175worldleaks 175handala 172funksec 171cloak 166apt73 158ShinyHunters 154spacebears 152blackbyte 147avaddon 146meow 144malas 144snatch 142sarcoma 141The Gentlemen 138SilentRansomGroup 135Krybit 133ragnarlocker 128noescape 124Interlock 121raworld 120direwolf 117toufan 117Pear 116Genesis 112ElDorado 112monti 110Payoutsking 109arcusmedia 108anubis 108cuba 103Deadlock 99Kairos 94abyss 91threeam 90revil 89medusalocker 88ransomexx 84chaos 82warlock 78lorenz 78cicada3301 75payload 74karakurt 74beast 72avoslocker 70BrainCipher 68ransomed 68quantum 68blacklock 64lv 63flocker 58settra 57darkvault 55losttrust 53gunra 52maze 51AiLock 50Orova 49termite 49tengu 49trigona 49nitrogen 48mallox 48knight 47Global Secret Group 46insomnia 46crypto24 46midas 44cmdorganization 43donutleaks 42Crpx0 41blackshrantac 41J 41blacknevas 40embargo 40metaencryptor 39securotrop 39dragonransomware 39darkleakmarket 39M3rx 37CRPxO 37ciphbit 36helldown 36nokoyawa 36arvinclub 35spook 35Dark Project 34Storm 34moneymessage 34lamashtu 34Aurora 33obscura 33dAn0n 33global 32suncrypt 32marketo 32blackmatter 32Coinbase Cartel 31alphalocker 30frag 30payloadbin 29Majinahanashi 28L Group 28onyx 28Leakeddata 26bravox 26underground 26werewolves 26kelvinsecurity 26netwalker 26titan 25lapsus$ 25fulcrumsec 25vect 25kraken 25morpheus 23doppelpaymer 23radar 22ryuk 22unsafe 21daixin 21xinglocker 21hellcat 20leaktheanalyst 20AuditTeam 19cephalus 19siegedsec 19ralord 19brotherhood 18d4rk4rmy 18trinity 18mountlocker 18ALP-001 17sabbath 17ShadowByt3$ 16Booba Project 16Panzer 16ExfilSquad 16tridentlocker 16datacarry 16dunghill 16apos 16madliberator 16redransomware 16mosesstaff 16azroteam 15cheers 15nefilim 15blackwater 14benzona 14weyhro 14kawa4096 14freecivilian 14sparta 14Section9 13argonauts 13mindware 13blackout 12IMNCrew 12teamxxx 12kazu 11Icarus 11icefire 11cryp70n1c0d3 11crazyhunter 10darkrace 10darkpower 10darkside 10Emperador 9Black X 9LeakBazaar 9rook 9groove 9Helix 8xpl0itrs 8skira 8radiant 8VanHelsing 8qiulong 8mogilevich 8cryptbb 8babuk 8Barracuda 7Wallstreet 7Doommageddon 7bert 7chort 7malekteam 70mega 7cyclops 7karma 7pay2key 7The Crew 6DYSPHOR1A 6netrunner 6cipherforce 6RunSomeWares 6arkana 6silent 6rancoz 6dataleak 6redalert 6yanluowang 6egregor 6iah6477 5Space Bears 5ms13089 5Gammax 5PrinzEugen 5ULose 50day Syndicate 5secpo 5orca 5atomsilo 5minteye 5kryptos 5bqtlock 5GDLockerSec 5ValenciaLeaks 5donex 5raznatovic 5projectrelic 5pandora 5lockdata 5Booba Team 4exitium 4linkc 4desolator 4satanlockv2 4ransomcortex 4shaoleaks 4blacktor 4Eclipse 3Iah647 3Ethics 3orion 3Triple X 3mnt6 3TiMc 3yurei 3rebornvc 3bluebox 3vanirgroup 3hellogookie 3trisec 3noname 3vendetta 3ragnarok 3blackshadow 3bonacigroup 3grief 3snake 3coldlock 3Arcus Media 2nasirsecurity 2Sovcali 2Leaknet 23am 2BlueWhale 2cry0 2Blackfield 2Redact 2kittykatkrew 2osiris 2lunalock 2sensayq 2cryptnet 2bitlocker 2nightsky 2wastedlocker 2sekhmet 2prolock 2Abyss-data 1Cyberleek 1Audit Team 1Securotop 1Ms13-089 1Kyber 1D1R 1sicarii 1reynolds 1walocker 1secp0 1playboy 1zerotolerance 1insane 1ranstreet 1crosslock 1slug 1memedusalockerdusa 1blogxx 1roadsweep 1la_piovra 1robinhood 1macaw 1deathkitty 1zeppelin 1networm 1maui 1astroteam 1phoenixcryptolocker 1synack 1ronggolawe 1cring 1hades 1netflim 1agelocker 1thanos 1dharma 1mamba 1
Breaches using Data Extortion & Leaks
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 14, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 13, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
August 12, 2026HIGH
TOA Listed by thegentlemen Ransomware Group
The Gentlemen Ransomware
granjarinya.com Listed by Safepay Ransomware Group
SafePay Ransomware
tecnoabi.com Listed by M3rx Ransomware Group
M3rx Ransomware
Hinman Straub Listed by Storm Ransomware Group
Storm Ransomware
Serruya private equity Listed by coinbasecartel Ransomware Group
coinbasecartel Ransomware
Integra Castings Listed by Storm Ransomware Group
Storm Ransomware
Plaza Auto Mall Listed by thegentlemen Ransomware Group
The Gentlemen Ransomware
Gravity Coffee Listed by thegentlemen Ransomware Group
The Gentlemen Ransomware
The Coffee Bean Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Cityside Homes Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Cook Medical LLC Listed by shinyhunters Ransomware Group
ShinyHunters Ransomware
Serruya private equity NEW Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
Ferrari Mangimi Srl Listed by Qilin Ransomware Group
Qilin Ransomware
Plaza Auto Mall Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Tempel Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
KFC Kosova Listed by thegentlemen Ransomware Group
The Gentlemen Ransomware
First Coast Heart Vascular Center Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Columbia University Information (Dental) Listed by Global Secret Group Ransomware Group
Global Secret Group Ransomware
granjarinya.com Listed by safepay Ransomware Group
SafePay Ransomware
Keystops Listed by akira Ransomware Group
Akira Ransomware
https://pacific-construction.com/ Listed by incransom Ransomware Group
INC Ransom Ransomware
Riker Danzig Scherer Hyland & Perretti Listed by Leakeddata Ransomware Group
Leakeddata Ransomware
cambrialawfirm.com Listed by incransom Ransomware Group
INC Ransom Ransomware
clgroup Listed by Inc Ransom Ransomware Group
INC Ransom Ransomware
Reminger Listed by SilentRansomGroup Ransomware Group
SilentRansomGroup Ransomware
Hitachi High-Tech NEW Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
Zebra.Com Listed by Clop Ransomware Group
Clop Ransomware
SIA Medical Centre Listed by rhysida Ransomware Group
rhysida Ransomware
pacific-construction.com Listed by Incransom Ransomware Group
INC Ransom Ransomware
CF Supply Listed by akira Ransomware Group
Akira Ransomware
Gfeller Treuhand und Verwaltungs Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
IPS Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
clgroup Listed by incransom Ransomware Group
INC Ransom Ransomware
Hitachi High-Tech Listed by coinbasecartel Ransomware Group
coinbasecartel Ransomware
Yaomasa Listed by AiLock Ransomware Group
AiLock Ransomware
eas**** Listed by Nightspire Ransomware Group
Nightspire Ransomware
Safeware Listed by thegentlemen Ransomware Group
The Gentlemen Ransomware
Daisen Listed by AiLock Ransomware Group
AiLock Ransomware
GB Group S.A Listed by Dragonforce Ransomware Group
DragonForce Ransomware
D & J Beverage Service Listed by qilin Ransomware Group
Qilin Ransomware
Zara Investment Holding Listed by payload Ransomware Group
payload Ransomware
Omnitanker.Com Listed by Clop Ransomware Group
Clop Ransomware
Spkaa.Com Listed by Clop Ransomware Group
Clop Ransomware
Nuovacmm.Com Listed by Clop Ransomware Group
Clop Ransomware
Waterlandpe.Com Listed by Clop Ransomware Group
Clop Ransomware
Intellihot.Com Listed by Clop Ransomware Group
Clop Ransomware
Eccellent.Com Listed by Clop Ransomware Group
Clop Ransomware
Altair Listed by majinahanashi Ransomware Group
majinahanashi Ransomware
Computer Country And Networks Listed by blacknevas Ransomware Group
blacknevas Ransomware
Gate7Llc.Comgbbev.Com Listed by clop Ransomware Group
clop Ransomware
Caribe / Subra Listed by majinahanashi Ransomware Group
majinahanashi Ransomware
Goccia S.p.A. Listed by majinahanashi Ransomware Group
majinahanashi Ransomware
Camandona SA Listed by majinahanashi Ransomware Group
majinahanashi Ransomware
Brillonconsumer.Com (Brillonconsumer.Com) Listed by Clop Ransomware Group
Clop Ransomware
9Altitudes.Com Listed by Clop Ransomware Group
Clop Ransomware
CDA Listed by majinahanashi Ransomware Group
majinahanashi Ransomware
Son-Video Listed by majinahanashi Ransomware Group
majinahanashi Ransomware
Grupo Starfoods Listed by majinahanashi Ransomware Group
majinahanashi Ransomware
Schmitz & Nittenwilm Listed by majinahanashi Ransomware Group
majinahanashi Ransomware
American Hospice & Home Health Services (Ahhh Care) Listed by Crpx0 Ransomware Group
Crpx0 Ransomware
Wondr Diamonds & D Gem Mount Listed by majinahanashi Ransomware Group
majinahanashi Ransomware
diabetesandmetabolism.com Listed by incransom Ransomware Group
INC Ransom Ransomware
Enteratek.Mxesberbeverage.Com Listed by clop Ransomware Group
clop Ransomware
Mamasandpapas.Com Listed by Clop Ransomware Group
Clop Ransomware
Largan.Com.Tw Listed by Clop Ransomware Group
Clop Ransomware
Anadolubank Listed by Crpx0 Ransomware Group
Crpx0 Ransomware
Towne Machine Tool Listed by Crpx0 Ransomware Group
Crpx0 Ransomware
stuartandassociates.com Listed by incransom Ransomware Group
INC Ransom Ransomware
Bedc.Com.Au Listed by incransom Ransomware Group
INC Ransom Ransomware
gamaus.com Listed by incransom Ransomware Group
INC Ransom Ransomware
Aol.Com Listed by clop Ransomware Group
clop Ransomware
Partech.Com Listed by Clop Ransomware Group
Clop Ransomware
Performance Data Solutions Listed by Crpx0 Ransomware Group
Crpx0 Ransomware
Elko Dental Specialists Listed by Crpx0 Ransomware Group
Crpx0 Ransomware
Nuvitia.Com Listed by Clop Ransomware Group
Clop Ransomware
Intelligentgrowthsolutions.Com Listed by Clop Ransomware Group
Clop Ransomware
RnnR Cloud Listed by Crpx0 Ransomware Group
Crpx0 Ransomware
Marketech Listed by Crpx0 Ransomware Group
Crpx0 Ransomware
Tianji Auto Care Service Listed by Nightspire Ransomware Group
Nightspire Ransomware
Leer Listed by Crpx0 Ransomware Group
Crpx0 Ransomware
A101 Listed by Crpx0 Ransomware Group
Crpx0 Ransomware
Doğan Holdi̇ng Listed by Crpx0 Ransomware Group
Crpx0 Ransomware
Summit Hill Insurance Listed by Crpx0 Ransomware Group
Crpx0 Ransomware
diabetesandmetabolism.com Listed by Inc Ransom Ransomware Group
INC Ransom Ransomware
CDA Listed by Majinahanashi Ransomware Group
Majinahanashi Ransomware
Son-Video Listed by Majinahanashi Ransomware Group
Majinahanashi Ransomware
Wondr Diamonds & D Gem Mount Listed by Majinahanashi Ransomware Group
Majinahanashi Ransomware
Caribe / Subra Listed by Majinahanashi Ransomware Group
Majinahanashi Ransomware
Grupo Starfoods Listed by Majinahanashi Ransomware Group
Majinahanashi Ransomware
Cornelius.Com Listed by Clop Ransomware Group
Clop Ransomware
Riker Danzig Scherer Hyland & Perretti Listed by SilentRansomGroup Ransomware Group
SilentRansomGroup Ransomware
Wanted Listed by Qilin Ransomware Group
Qilin Ransomware
hisstw.com Listed by Krybit Ransomware Group
Krybit Ransomware
R...er Listed by SilentRansomGroup Ransomware Group
SilentRansomGroup Ransomware
labindia.com Listed by Krybit Ransomware Group
Krybit Ransomware
lhyk.com.sg Listed by Krybit Ransomware Group
Krybit Ransomware
R... D... Listed by SilentRansomGroup Ransomware Group
SilentRansomGroup Ransomware
D...s Listed by Leakeddata Ransomware Group
Leakeddata Ransomware
Prei Capital Listed by Crpx0 Ransomware Group
Crpx0 Ransomware
eCare Platform Listed by Crpx0 Ransomware Group
Crpx0 Ransomware
Check your exposure
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.