Recent Breaches › Attack methods › Misconfiguration & Exposed Data

Attack method

Misconfiguration & Exposed Data

Misconfigured databases and cloud storage leave sensitive data publicly accessible without any hacking required.

1663tracked breaches

Groups using this method

worldleaks 175 The Gentlemen 141 The Gentlemen 133 Qilin 90 ragnarlocker 85 everest 47 clop 45 donutleaks 42 Crpx0 41 darkleakmarket 39 lv 37 INC Ransom 36 Coinbase Cartel 29 ShinyHunters 28 L Group 28 alphv 25 Krybit 21 direwolf 21 Orova 20 leaktheanalyst 20 Leakeddata 19 Dark Project 18 Majinahanashi 14 LockBit 14

+89 more groups

settra 14 lockbit5 13 Storm 13 handala 13 DragonForce 12 Akira 10 nightspire 9 Play 9 Titan 9 LeakBazaar 9 pear 8 Emperador 7 The Crew 6 Panzer 6 dataleak 6 Space Bears 5 Xpl0itrs 5 Global Secret Group 5 Ransomhouse 5 Helix 5 monti 5 ValenciaLeaks 5 Booba Team 4 genesis 4 rhysida 4 aurora 4 shaoleaks 4 blackwater 3 anubis 3 Iah647 3 interlock 3 Insomnia 3 payload 3 Ethics 3 Wallstreet 3 beast 2 Arcus Media 2 SafePay 2 payoutsking 2 Eclipse 2 Sovcali 2 kairos 2 Deadlock 2 Leaknet 2 securotrop 2 3am 2 bravox 2 BlueWhale 2 unsafe 2 Lynx 2 orion 2 lapsus$ 2 siegedsec 2 raworld 2 ransomed 2 kelvinsecurity 2 mosesstaff 2 Black X 1 Cyberleek 1 metaencryptor 1 termite 1 nasirsecurity 1 DYSPHOR1A 1 threeam 1 Audit Team 1 Securotop 1 gunra 1 Ms13-089 1 Barracuda 1 m3rx 1 Kyber 1 morpheus 1 ShadowByt3$ 1 coinbasecartel 1 J 1 cephalus 1 datacarry 1 blackbyte 1 BrainCipher 1 flocker 1 royal 1 hive 1 yanluowang 1 ransomexx 1 ragnarok 1 sabbath 1 marketo 1 karma 1 azroteam 1

Breaches using Misconfiguration & Exposed Data

August 7, 2026HIGH

Showing 651–700 of 1,663

‹ Prev 1…12 13 14 15 16…34 Next ›

Per page25 50 75 100

Check your exposure

See if your email turned up in any breach we track — free.

Check if you’re exposed →

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

Misconfiguration & Exposed Data

Groups using this method

Breaches using Misconfiguration & Exposed Data

serengetiestates.co.za Listed by Krybit Ransomware Group

ernat-bureau-etudes.fr Listed by Krybit Ransomware Group

actini.com Listed by Krybit Ransomware Group

Hst Listed by The Gentlemen Ransomware Group

Hoang Chiropractic Center Listed by The Gentlemen Ransomware Group

reflet2000.fr Listed by Krybit Ransomware Group

DHC Listed by The Gentlemen Ransomware Group

hymiasa.com Listed by Krybit Ransomware Group

ZS Salovnova Listed by The Gentlemen Ransomware Group

Ponti Listed by The Gentlemen Ransomware Group

Park Place Behavioral Health Care Listed by Insomnia Ransomware Group

automobile-mueller.info Listed by L Group Ransomware Group

psec.com.ar Listed by L Group Ransomware Group

NCA Alarms Listed by Storm Ransomware Group

City of Beacon Listed by Ransomhouse Ransomware Group

ausfec1.com.au Listed by L Group Ransomware Group

upbrand.com Listed by L Group Ransomware Group

Liberty Healthcare Corporation Listed by Storm Ransomware Group

lya Construtora Listed by Ransomhouse Ransomware Group

EvansPetree Listed by Storm Ransomware Group

vprj.org Listed by Inc Ransom Ransomware Group

talbotdes.org Listed by Lynx Ransomware Group

Nelson Manufacturing Listed by Storm Ransomware Group

Southern Indiana Radiological Associates Listed by Storm Ransomware Group

Data Exfiltration Diaries Listed by Leaknet Ransomware Group

coastproduce.com Listed by L Group Ransomware Group

OVP Health Listed by Storm Ransomware Group

jean-petit.lu Listed by L Group Ransomware Group

Westland Insurance Listed by Helix Ransomware Group

Morguard Listed by Helix Ransomware Group

Highwoods Properties Listed by Helix Ransomware Group

Uber Listed by Helix Ransomware Group

atp.chaco.gob.ar Listed by L Group Ransomware Group

uva.edu.br Listed by L Group Ransomware Group

nokotapackers.com Listed by L Group Ransomware Group

venezolanadepinturas.com Listed by L Group Ransomware Group

daycohost.com Listed by L Group Ransomware Group

brdigital.net.br Listed by L Group Ransomware Group

ratnasagar.com Listed by L Group Ransomware Group

ferretornillos.com Listed by L Group Ransomware Group

mygoalseek.com Listed by L Group Ransomware Group

immobilia.hu Listed by L Group Ransomware Group

cookieskids.com Listed by L Group Ransomware Group

onsite-eng.ca Listed by L Group Ransomware Group

racheljulien.com Listed by L Group Ransomware Group

jerryleigh.com Listed by Lynx Ransomware Group

doclv.com Listed by L Group Ransomware Group

l-a.com.vn Listed by L Group Ransomware Group

rosekennedygreenway.org Listed by L Group Ransomware Group

Venture Logistics Listed by Helix Ransomware Group