Misconfiguration & Exposed Data
Misconfigured databases and cloud storage leave sensitive data publicly accessible without any hacking required.
1661tracked breaches
Groups using this method
worldleaks 175The Gentlemen 141The Gentlemen 133Qilin 90ragnarlocker 85everest 47Clop 45donutleaks 42Crpx0 41darkleakmarket 39lv 37INC Ransom 36Coinbase Cartel 29ShinyHunters 28L Group 28alphv 25Krybit 21direwolf 21Orova 20leaktheanalyst 20Leakeddata 19Dark Project 18LockBit 14settra 14
+89 more groups
lockbit5 13Majinahanashi 13Storm 13handala 13DragonForce 12Akira 10Nightspire 9Play 9titan 9LeakBazaar 9Pear 8Emperador 7The Crew 6Panzer 6dataleak 6Space Bears 5xpl0itrs 5Global Secret Group 5ransomhouse 5Helix 5monti 5ValenciaLeaks 5Booba Team 4genesis 4Rhysida 4aurora 4shaoleaks 4blackwater 3anubis 3Iah647 3interlock 3insomnia 3payload 3Ethics 3Wallstreet 3SafePay 2Arcus Media 2payoutsking 2Eclipse 2Sovcali 2kairos 2Deadlock 2Leaknet 2securotrop 23am 2bravox 2BlueWhale 2unsafe 2lynx 2orion 2lapsus$ 2siegedsec 2raworld 2ransomed 2kelvinsecurity 2mosesstaff 2beast 1Cyberleek 1Black X 1metaencryptor 1termite 1nasirsecurity 1DYSPHOR1A 1threeam 1Audit Team 1Securotop 1gunra 1Ms13-089 1Barracuda 1M3rx 1Kyber 1morpheus 1ShadowByt3$ 1coinbasecartel 1J 1cephalus 1datacarry 1blackbyte 1BrainCipher 1flocker 1royal 1hive 1yanluowang 1ransomexx 1ragnarok 1sabbath 1marketo 1karma 1azroteam 1
Breaches using Misconfiguration & Exposed Data
August 22, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
Travb Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Lexacaucho Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Quaker State Mexico Listed by Qilin Ransomware Group
Qilin Ransomware
AWJ Holding Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Eyecare Center of Snohomish Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Espac Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Magdalena Grand Beach Golf Resort Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Accesso Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
Volktek Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Fairview Dental Group Listed by Rhysida Ransomware Group
Rhysida Ransomware
Turner and Townsend Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
ESCON Group Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Cinépolis Listed by Qilin Ransomware Group
Qilin Ransomware
Layher Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
The Pendas Law Firm Listed by Qilin Ransomware Group
Qilin Ransomware
Gould Sherwood Consulting Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Gindre India Listed by Qilin Ransomware Group
Qilin Ransomware
Blake Services Listed by Qilin Ransomware Group
Qilin Ransomware
Yoma Fleet Listed by DYSPHOR1A Ransomware Group
DYSPHOR1A Ransomware
Serruya private equity Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
iPic Listed by Qilin Ransomware Group
Qilin Ransomware
Sweet Water Holdings Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
Battle Creek Public Schools Listed by Rhysida Ransomware Group
Rhysida Ransomware
Clifton Architectural Glass & Metal Listed by Pear Ransomware Group
Pear Ransomware
First Commerce LLC Listed by Pear Ransomware Group
Pear Ransomware
Check your exposure
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.