Misconfiguration & Exposed Data
Misconfigured databases and cloud storage leave sensitive data publicly accessible without any hacking required.
3024tracked breaches
Groups using this method
Qilin 242The Gentlemen 236World Leaks 175Ragnar Locker 85Storm 83Krybit 76N0n 73Akira 73Clop 70Everest 68INC Ransom 65LockBit 56Leakeddata 48ShinyHunters 47NightSpire 46Direwolf 44SafePay 43Donutleaks 42Crpx0 41Darkleakmarket 39Emperador 37Lv 37Wallstreet 35Orova 33
+120 more groups
Play 29Dark Project 28Settra 28L Group 28DragonForce 26Rhysida 26ALPHV 25Majinahanashi 23BrainCipher 23Coinbase Cartel 22ZaWoo 21Vexy 20Interlock 20Leaktheanalyst 20Booba Team 19Pear 18Chaos 17Aurora 16Panzer 14Global Secret Group 14Handala 13RansomHouse 12Anubis 12Eclipse 123am 12Imnotavillian 11Titan 11Payoutsking 10Insomnia 10Genesis 10Lamashtu 10UmBra 9Black X 9Arcus Media 9M3rx 9LeakBazaar 9Hyflock 8Byod 8Doommageddon 8Kairos 8Blacknevas 8Iah647 8Termite 7VYPR 7AuditTeam 7Global Cybernetic Collective 7Unsafe 7Kazu 7Metaencryptor 6The Crew 6Dataleak 6Deadlock 5Bravox 5Space Bears 5DYSPHOR1A 5Xpl0itrs 5Helix 5Monti 5ValenciaLeaks 5Shiba 4Payload 4Nasirsecurity 4Shaoleaks 4Redact 3Cry0 3EndZone 3Gammax 3Booba Project 3Moneymessage 3Securotrop 3Beast 3ShadowByt3$ 3Falcon 3Lynx 3Blackwater 3Ethics 3Morpheus 2Threeam 2Fulcrumsec 2AiLock 2Sovcali 2Leaknet 2BlueWhale 2Orion 2Lapsus$ 2Siegedsec 2RA World 2Ransomed 2Kelvinsecurity 2Mosesstaff 2RunSomeWares 1Spirals 1Netrunner 1ULose 1Blacklocks 1Tridentlocker 1Vexy Ransomware 1Meowciety403 1Crypto24 1Abyss-data 1Abyss 1Securotop 1Gunra 1Ms13089 1Barracuda 1Kyber 1J 1Cephalus 1Datacarry 1BlackByte 1Flocker 1Royal 1Hive 1Yanluowang 1Ransomexx 1Ragnarok 1Sabbath 1Marketo 1Karma 1Azroteam 1
Breaches using Misconfiguration & Exposed Data
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026MED
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026MED
August 27, 2026HIGH
August 27, 2026HIGH
August 27, 2026HIGH
LGG Advisors Listed by Qilin Ransomware Group
Qilin Ransomware
Cgp Mep Listed by Akira Ransomware Group
Akira Ransomware
Cetylite Listed by Akira Ransomware Group
Akira Ransomware
K... M... Listed by Leakeddata Ransomware Group
Leakeddata Ransomware
dece.cz Listed by Lockbit5 Ransomware Group
LockBit Ransomware
Displaydata Listed by Qilin Ransomware Group
Qilin Ransomware
Providence Investments Listed by Qilin Ransomware Group
Qilin Ransomware
Seabrook Island Listed by Akira Ransomware Group
Akira Ransomware
singleton.com Listed by Chaos Ransomware Group
Chaos Ransomware
S... P... Listed by Leakeddata Ransomware Group
Leakeddata Ransomware
Is the Carhartt data breach real? What the 12.9 million-email dump means
ShinyHunters Misconfiguration & Exposed Data
tnmed.org Listed by Lockbit5 Ransomware Group
LockBit Ransomware
Kling Automaten Listed by Qilin Ransomware Group
Qilin Ransomware
takt.be Listed by Lockbit5 Ransomware Group
LockBit Ransomware
DAB Investments Listed by Qilin Ransomware Group
Qilin Ransomware
GPS Grothkopp und Partner Listed by Qilin Ransomware Group
Qilin Ransomware
ETNA Software Listed by Eclipse Ransomware Group
Eclipse Ransomware
Ne...n M... Listed by Leakeddata Ransomware Group
Leakeddata Ransomware
SCA Logistik & Fulfillment GmbH Listed by Aurora Ransomware Group
Aurora Ransomware
Open Sports Listed by Qilin Ransomware Group
Qilin Ransomware
Globalport Terminals Listed by Qilin Ransomware Group
Qilin Ransomware
UBL data leak reports: six accounts, Rs 10.45 million, no bank confirmation
Misconfiguration & Exposed Data
Dotlines Listed by Qilin Ransomware Group
Qilin Ransomware
Q... E... Listed by Leakeddata Ransomware Group
Leakeddata Ransomware
H... K... Listed by Leakeddata Ransomware Group
Leakeddata Ransomware
Check your exposure
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.