Misconfiguration & Exposed Data
Misconfigured databases and cloud storage leave sensitive data publicly accessible without any hacking required.
2892tracked breaches
Groups using this method
Qilin 237The Gentlemen 235World Leaks 175Ragnar Locker 85Storm 81Krybit 76Akira 71Clop 70Everest 65INC Ransom 62LockBit 55Leakeddata 48ShinyHunters 47Direwolf 43SafePay 42NightSpire 42Donutleaks 42Crpx0 41Darkleakmarket 39Lv 37Emperador 35Play 29L Group 28Settra 27
+119 more groups
Rhysida 26DragonForce 25Dark Project 25ALPHV 25Wallstreet 24Orova 24N0n 23BrainCipher 22Coinbase Cartel 22Zawoo 21Leaktheanalyst 20Vexy 19Booba Team 19Pear 18Chaos 17Majinahanashi 16Aurora 15Interlock 14Global Secret Group 14Handala 13Anubis 12Eclipse 12Panzer 123am 12RansomHouse 11Imnotavillian 11Titan 11Insomnia 10Genesis 10Lamashtu 10Umbra 9Black X 9Arcus Media 9Payoutsking 9M3rx 9LeakBazaar 9Doommageddon 8Kairos 8Blacknevas 8Iah647 8Termite 7Byod 7VYPR 7AuditTeam 7Global Cybernetic Collective 7Unsafe 7Kazu 7The Crew 6Dataleak 6Deadlock 5Bravox 5Space Bears 5DYSPHOR1A 5Xpl0itrs 5Helix 5Monti 5ValenciaLeaks 5Shiba 4Payload 4Metaencryptor 4Nasirsecurity 4Shaoleaks 4Cry0 3EndZone 3Gammax 3Booba Project 3Moneymessage 3Securotrop 3Beast 3ShadowByt3$ 3Falcon 3Lynx 3Blackwater 3Ethics 3Redact 2Morpheus 2Threeam 2Fulcrumsec 2AiLock 2Sovcali 2Leaknet 2BlueWhale 2Orion 2Lapsus$ 2Siegedsec 2RA World 2Ransomed 2Kelvinsecurity 2Mosesstaff 2RunSomeWares 1Netrunner 1Spirals 1ULose 1Blacklocks 1Tridentlocker 1Vexy Ransomware 1Meowciety403 1Crypto24 1Abyss-data 1Abyss 1Securotop 1Gunra 1Ms13089 1Barracuda 1Kyber 1J 1Cephalus 1Datacarry 1BlackByte 1Flocker 1Royal 1Hive 1Yanluowang 1Ransomexx 1Ragnarok 1Sabbath 1Marketo 1Karma 1Azroteam 1
Breaches using Misconfiguration & Exposed Data
February 16, 2020MED
February 14, 2020HIGH
January 12, 2020HIGH
January 1, 2020MED
December 26, 2019LOW
November 1, 2019HIGH
October 16, 2019CRIT
September 27, 2019LOW
September 10, 2019LOW
August 20, 2019LOW
August 14, 2019MED
August 3, 2019MED
August 1, 2019CRIT
July 25, 2019MED
July 25, 2019HIGH
July 15, 2019LOW
June 10, 2019LOW
June 1, 2019MED
April 22, 2019CRIT
April 15, 2019HIGH
March 31, 2019LOW
March 23, 2019MED
March 21, 2019LOW
March 18, 2019HIGH
March 1, 2019MED
Slickwraps Data Breach (2020)
Misconfiguration & Exposed Data
Straffic Data Breach (2020)
Misconfiguration & Exposed Data
Zoosk (2020) Data Breach (2020)
Misconfiguration & Exposed Data
Nameless Malware Data Breach (2020)
Misconfiguration & Exposed Data
BtoBet Data Breach (2019)
Misconfiguration & Exposed Data
IndiHome Data Breach (2019)
Misconfiguration & Exposed Data
Data Enrichment Exposure From PDL Customer Data Breach (2019)
Misconfiguration & Exposed Data
The Halloween Spot Data Breach (2019)
Misconfiguration & Exposed Data
KiwiFarms Data Breach (2019)
Misconfiguration & Exposed Data
Mastercard Priceless Specials Data Breach (2019)
Misconfiguration & Exposed Data
Audi Data Breach (2019)
Misconfiguration & Exposed Data
Promofarma Data Breach (2019)
Misconfiguration & Exposed Data
Facebook Data Breach (2019)
Misconfiguration & Exposed Data
MGM Resorts Data Breach (2019)
Misconfiguration & Exposed Data
MGM Resorts (2022 Update) Data Breach (2019)
Misconfiguration & Exposed Data
Bulgarian National Revenue Agency Data Breach (2019)
Misconfiguration & Exposed Data
Wiener Büchereien Data Breach (2019)
Misconfiguration & Exposed Data
Condo.com Data Breach (2019)
Misconfiguration & Exposed Data
Deezer Data Breach (2019)
Misconfiguration & Exposed Data
ApexSMS Data Breach (2019)
Misconfiguration & Exposed Data
Vastaamo Data Breach (2019)
Misconfiguration & Exposed Data
Everybody Edits Data Breach (2019)
Misconfiguration & Exposed Data
Utair Data Breach (2019)
Misconfiguration & Exposed Data
Mindjolt Data Breach (2019)
Misconfiguration & Exposed Data
MalindoAir Data Breach (2019)
Misconfiguration & Exposed Data
Check your exposure
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.