Misconfiguration & Exposed Data
Misconfigured databases and cloud storage leave sensitive data publicly accessible without any hacking required.
1660tracked breaches
Groups using this method
worldleaks 175The Gentlemen 141The Gentlemen 133Qilin 90ragnarlocker 85everest 47clop 45donutleaks 42Crpx0 41darkleakmarket 39lv 37INC Ransom 36Coinbase Cartel 29ShinyHunters 28L Group 28alphv 25krybit 21direwolf 21Orova 20leaktheanalyst 20Leakeddata 19Dark Project 18LockBit 14settra 14
+89 more groups
Lockbit5 13Majinahanashi 13Storm 13handala 13DragonForce 12Akira 10nightspire 9Play 9titan 9LeakBazaar 9pear 8Emperador 7The Crew 6Panzer 6dataleak 6Space Bears 5xpl0itrs 5Global Secret Group 5ransomhouse 5Helix 5monti 5ValenciaLeaks 5Booba Team 4genesis 4Rhysida 4aurora 4shaoleaks 4blackwater 3anubis 3Iah647 3interlock 3insomnia 3payload 3Ethics 3Wallstreet 3Arcus Media 2payoutsking 2SafePay 2Eclipse 2Sovcali 2kairos 2Deadlock 2Leaknet 2securotrop 23am 2bravox 2BlueWhale 2unsafe 2lynx 2orion 2lapsus$ 2siegedsec 2raworld 2ransomed 2kelvinsecurity 2mosesstaff 2beast 1Cyberleek 1Black X 1metaencryptor 1Termite 1nasirsecurity 1DYSPHOR1A 1threeam 1Audit Team 1Securotop 1gunra 1Ms13-089 1Barracuda 1m3rx 1Kyber 1morpheus 1ShadowByt3$ 1coinbasecartel 1J 1cephalus 1datacarry 1blackbyte 1BrainCipher 1flocker 1royal 1hive 1yanluowang 1ransomexx 1ragnarok 1sabbath 1marketo 1karma 1azroteam 1
Breaches using Misconfiguration & Exposed Data
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
icnavais.com Listed by Lockbit5 Ransomware Group
Lockbit5LockBit Ransomware
RCF1 Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Srchome Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
RCF5 Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Probeabs Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Probedir Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Rcmls Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Srcsrv Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Srcapp Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Srcpsc Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Rcbeacon Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
RCF4 Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Rcimg2 Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Rcgen1 {{7*7}} Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
PCA ***** Listed by Majinahanashi Ransomware Group
Majinahanashi Ransomware
Opview2 Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
evergladesboats.com Listed by Termite Ransomware Group
Termite Ransomware
OTEIS Conseil & Ingénierie NEW Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
RXPE Group NEW Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
Test Listed by Emperador Ransomware Group
Emperador Ransomware
Rcop1 Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Kessler Creative NEW Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
holzmarkt chemnitz Listed by Space Bears Ransomware Group
Space Bears Ransomware
CRI Electric Listed by Rhysida Ransomware Group
Rhysida Ransomware
Freelom Listed by Space Bears Ransomware Group
Space Bears Ransomware
Check your exposure
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.