Misconfiguration & Exposed Data
Misconfigured databases and cloud storage leave sensitive data publicly accessible without any hacking required.
1679tracked breaches
Groups using this method
worldleaks 175The Gentlemen 141The Gentlemen 133Qilin 93ragnarlocker 85everest 47clop 45donutleaks 42Crpx0 41darkleakmarket 39INC Ransom 37lv 37Coinbase Cartel 29L Group 28ShinyHunters 28alphv 25direwolf 23krybit 21Dark Project 20Orova 20leaktheanalyst 20Leakeddata 19Majinahanashi 14LockBit 14
+90 more groups
settra 14lockbit5 13Storm 13handala 13Akira 12DragonForce 12nightspire 9Play 9titan 9LeakBazaar 9Global Secret Group 8pear 8Emperador 7The Crew 6Panzer 6dataleak 6Space Bears 5xpl0itrs 5ransomhouse 5Helix 5monti 5ValenciaLeaks 5Booba Team 4genesis 4rhysida 4aurora 4shaoleaks 4chaos 3blackwater 3anubis 3Iah647 3interlock 3insomnia 3payload 3Ethics 3Wallstreet 3beast 2SafePay 2Arcus Media 2payoutsking 2Eclipse 2Sovcali 2kairos 2Deadlock 2Leaknet 2securotrop 23am 2bravox 2BlueWhale 2unsafe 2lynx 2orion 2lapsus$ 2siegedsec 2raworld 2ransomed 2kelvinsecurity 2mosesstaff 2Cyberleek 1Black X 1metaencryptor 1termite 1nasirsecurity 1DYSPHOR1A 1threeam 1Audit Team 1Securotop 1gunra 1Ms13-089 1Barracuda 1m3rx 1Kyber 1morpheus 1shadowbyt3$ 1coinbasecartel 1J 1cephalus 1datacarry 1blackbyte 1BrainCipher 1flocker 1royal 1hive 1yanluowang 1ransomexx 1ragnarok 1sabbath 1marketo 1karma 1azroteam 1
Breaches using Misconfiguration & Exposed Data
June 4, 2026MED
June 3, 2026HIGH
June 2, 2026HIGH
June 2, 2026HIGH
June 1, 2026HIGH
May 29, 2026LOW
May 28, 2026HIGH
May 28, 2026HIGH
May 25, 2026MED
May 25, 2026HIGH
May 23, 2026MED
May 23, 2026MED
May 23, 2026LOW
May 22, 2026CRIT
May 22, 2026HIGH
May 20, 2026HIGH
May 20, 2026MED
May 20, 2026HIGH
May 19, 2026HIGH
May 18, 2026HIGH
May 15, 2026HIGH
May 14, 2026HIGH
May 13, 2026HIGH
May 12, 2026HIGH
May 11, 2026HIGH
Microsoft Copilot SearchLeak Flaw Enables 1-Click Data Theft
Phishing & Social Engineering
Emmy.tv AWS Credentials Exposed in Public HTML
Supply-Chain Attack
Grindr Users' Data Allegedly Leaked on Cybercrime Forum
Credential & Infostealer Leaks
Ingka Group (IKEA) Targeted in Alleged Lapsus$ Data Theft
lapsus$ Ransomware
Hackers claim 32M Bumble user records leaked
Credential & Infostealer Leaks
BCD Travel Data Breach (2026)
ShinyHunters Ransomware
Alamo Heights School District Listed by qilin Ransomware Group
Qilinworldleaks Ransomware
American Battery Factory Listed by worldleaks Ransomware Group
worldleaks Ransomware
Mercedes-Benz UK Customer Data Allegedly Leaked
Misconfiguration & Exposed Data
Lithuania State Registers Leak Impacts 540K Citizens
Misconfiguration & Exposed Data
DentaQuest Data Breach (2026)
ShinyHunters Ransomware
Charter Data Breach (2026)
Misconfiguration & Exposed Data
Baker Distributing Data Breach (2026)
ShinyHunters Ransomware
Lithuania National Register Data Leak of 600K Entries
Misconfiguration & Exposed Data
BMJ Paperpack Listed by worldleaks Ransomware Group
worldleaks Ransomware
Acton Electrical Hit by Akira Ransomware, 73GB Leaked
Akira Ransomware
Trump Mobile Probes Website Leak of 27K Customer Records
Misconfiguration & Exposed Data
Nothing Technology Breached by INC_RANSOM, 52GB Exposed
INC Ransom Ransomware
B1ack's Stash Marketplace Releases 4.6M Stolen Credit Cards
Misconfiguration & Exposed Data
CISA Contractor Leaks AWS GovCloud Keys on Public GitHub
Credential & Infostealer Leaks
Baytech Hit by Morpheus Ransomware with 110GB Data Leak
morpheus Ransomware
Hotelogix Breached via Misconfigured Cloud Storage
shadowbyt3$ Ransomware
Thales Group Linked to LuxTrust Data Leak on Forum
Misconfiguration & Exposed Data
Bestat Pharmaservices Corp. Listed by worldleaks Ransomware Group
worldleaks Ransomware
Lapsus$ Leaks Vodafone Source Code and Database Credentials
lapsus$ Ransomware
Check your exposure
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.