Misconfiguration & Exposed Data
Misconfigured databases and cloud storage leave sensitive data publicly accessible without any hacking required.
2980tracked breaches
Groups using this method
Qilin 240The Gentlemen 236World Leaks 175Ragnar Locker 85Storm 83Krybit 76Akira 73Clop 70N0n 68Everest 68INC Ransom 63LockBit 55Leakeddata 48NightSpire 47ShinyHunters 47Direwolf 43SafePay 42Donutleaks 42Crpx0 41Darkleakmarket 39Lv 37Emperador 36Play 29Dark Project 28
+119 more groups
Orova 28Settra 28L Group 28DragonForce 26Rhysida 26ALPHV 25Wallstreet 24Majinahanashi 22BrainCipher 22Coinbase Cartel 22Zawoo 21Interlock 20Leaktheanalyst 20Vexy 19Booba Team 19Pear 18Chaos 17Aurora 16Global Secret Group 14Handala 13Anubis 12Eclipse 12Panzer 123am 12RansomHouse 11Imnotavillian 11Titan 11Insomnia 10Genesis 10Lamashtu 10Umbra 9Arcus Media 9Black X 9Payoutsking 9M3rx 9LeakBazaar 9Doommageddon 8Kairos 8Blacknevas 8Iah647 8Termite 7BYOD 7VYPR 7AuditTeam 7Global Cybernetic Collective 7Unsafe 7Kazu 7Metaencryptor 6The Crew 6Dataleak 6Deadlock 5Bravox 5Space Bears 5DYSPHOR1A 5Xpl0itrs 5Helix 5Monti 5ValenciaLeaks 5Shiba 4Payload 4Nasirsecurity 4Shaoleaks 4Redact 3Cry0 3EndZone 3Gammax 3Booba Project 3Moneymessage 3Securotrop 3Beast 3ShadowByt3$ 3Falcon 3Lynx 3Blackwater 3Ethics 3Morpheus 2Threeam 2Fulcrumsec 2AiLock 2Sovcali 2Leaknet 2BlueWhale 2Orion 2Lapsus$ 2Siegedsec 2RA World 2Ransomed 2Kelvinsecurity 2Mosesstaff 2RunSomeWares 1Spirals 1Netrunner 1ULose 1BlackLocks 1Tridentlocker 1Vexy Ransomware 1Meowciety403 1Crypto24 1Abyss 1Abyss-data 1Securotop 1Gunra 1Ms13089 1Barracuda 1Kyber 1J 1Cephalus 1Datacarry 1BlackByte 1Flocker 1Royal 1Hive 1Yanluowang 1Ransomexx 1Ragnarok 1Sabbath 1Marketo 1Karma 1Azroteam 1
Breaches using Misconfiguration & Exposed Data
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 22, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
August 21, 2026HIGH
Srchome Listed by The Gentlemen Ransomware Group
The Gentlemen Ransomware
August 22, 2026HIGHRcbeacon Listed by The Gentlemen Ransomware Group
The Gentlemen Ransomware
Rcbot2 Listed by The Gentlemen Ransomware Group
The Gentlemen Ransomware
Probe999 Listed by The Gentlemen Ransomware Group
The Gentlemen Ransomware
Travd Listed by The Gentlemen Ransomware Group
The Gentlemen Ransomware
Dubai Airport Listed by Nasirsecurity Ransomware Group
Nasirsecurity Ransomware
Longhorn Investments NEW Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
August 22, 2026HIGHTower Insurance NEW Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
August 22, 2026HIGHReport Queue Stalled Listed by The Gentlemen Ransomware Group
The Gentlemen Ransomware
Probedir Listed by The Gentlemen Ransomware Group
The Gentlemen Ransomware
Trava Listed by The Gentlemen Ransomware Group
The Gentlemen Ransomware
Rcop1 Listed by The Gentlemen Ransomware Group
The Gentlemen Ransomware
Kessler Creative NEW Listed by Coinbase Cartel Ransomware Group
Coinbase Cartel Ransomware
August 22, 2026HIGHRCF5 Listed by The Gentlemen Ransomware Group
The Gentlemen Ransomware
Mon Health phishing attack: 2,173 patients may have personal data exposed
Phishing & Social Engineering
JC Sales Listed by Akira Ransomware Group
Akira Ransomware
Crystal Pharmatech Listed by Eclipse Ransomware Group
Eclipse Ransomware
Nteitalia Listed by Panzer Ransomware Group
Panzer Ransomware
Fairview Dental Group Listed by Rhysida Ransomware Group
Rhysida Ransomware
iPic Listed by Qilin Ransomware Group
Qilin Ransomware
Gindre India Listed by Qilin Ransomware Group
Qilin Ransomware
Yoma Fleet Listed by DYSPHOR1A Ransomware Group
DYSPHOR1A Ransomware
Blake Services Listed by Qilin Ransomware Group
Qilin Ransomware
Battle Creek Public Schools Listed by Rhysida Ransomware Group
Rhysida Ransomware
Cinépolis Listed by Qilin Ransomware Group
Qilin Ransomware
Check your exposure
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.