Misconfiguration & Exposed Data
Misconfigured databases and cloud storage leave sensitive data publicly accessible without any hacking required.
1662tracked breaches
Groups using this method
worldleaks 175The Gentlemen 141The Gentlemen 133Qilin 90ragnarlocker 85Everest 47clop 45donutleaks 42Crpx0 41darkleakmarket 39lv 37INC Ransom 36Coinbase Cartel 29L Group 28ShinyHunters 28alphv 25krybit 21direwolf 21Orova 20leaktheanalyst 20Leakeddata 19Dark Project 18LockBit 14settra 14
+89 more groups
Lockbit5 13Majinahanashi 13Storm 13handala 13DragonForce 12Akira 10nightspire 9Play 9Titan 9LeakBazaar 9pear 8Emperador 7The Crew 6Panzer 6dataleak 6Space Bears 5Xpl0itrs 5Global Secret Group 5ransomhouse 5Helix 5monti 5ValenciaLeaks 5Booba Team 4genesis 4rhysida 4aurora 4shaoleaks 4blackwater 3anubis 3Iah647 3interlock 3insomnia 3payload 3Ethics 3Wallstreet 3beast 2payoutsking 2Arcus Media 2SafePay 2Eclipse 2Sovcali 2Kairos 2Deadlock 2Leaknet 2securotrop 23am 2bravox 2BlueWhale 2unsafe 2lynx 2orion 2lapsus$ 2siegedsec 2raworld 2ransomed 2kelvinsecurity 2mosesstaff 2Cyberleek 1Black X 1metaencryptor 1termite 1nasirsecurity 1DYSPHOR1A 1threeam 1Audit Team 1Securotop 1gunra 1Ms13-089 1Barracuda 1m3rx 1Kyber 1morpheus 1ShadowByt3$ 1coinbasecartel 1J 1cephalus 1datacarry 1blackbyte 1BrainCipher 1flocker 1royal 1hive 1yanluowang 1ransomexx 1ragnarok 1sabbath 1marketo 1karma 1azroteam 1
Breaches using Misconfiguration & Exposed Data
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
August 20, 2026HIGH
usbank.com Listed by Lockbit5 Ransomware Group
Lockbit5LockBit Ransomware
Target Listed by Xpl0itrs Ransomware Group
Xpl0itrs Ransomware
Gruppo Spaggiari Parma Listed by Xpl0itrs Ransomware Group
Xpl0itrs Ransomware
Latoplast Listed by Play Ransomware Group
Play Ransomware
Ayuntamiento de Velilla de San Antonio Listed by Kairos Ransomware Group
Kairos Ransomware
NetExam Listed by Emperador Ransomware Group
Emperador Ransomware
P**** R***** Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Be Media Listed by Play Ransomware Group
Play Ransomware
Frisian Flag Indonesia Listed by Panzer Ransomware Group
Panzer Ransomware
Kingston Technology Listed by Everest Ransomware Group
Everest Ransomware
Cascade Coffee Listed by Akira Ransomware Group
Akira Ransomware
Alto Calore Servizi SPA Listed by Titan Ransomware Group
Titan Ransomware
Termotecnica Industriale S.r.l. Listed by Titan Ransomware Group
Titan Ransomware
Tedesco & Partners STP srl Listed by Titan Ransomware Group
Titan Ransomware
POEMA S.r.l. Listed by Titan Ransomware Group
Titan Ransomware
Elbor S.p.A. Listed by Titan Ransomware Group
Titan Ransomware
Grand Ion Delemen Hotel Listed by Majinahanashi Ransomware Group
Majinahanashi Ransomware
Capgemini Engineering Listed by Everest Ransomware Group
Everest Ransomware
Condor Spa Listed by Titan Ransomware Group
Titan Ransomware
CCA Bank Listed by Everest Ransomware Group
Everest Ransomware
Grupo DT Listed by Everest Ransomware Group
Everest Ransomware
Experts Entreprendre Listed by Everest Ransomware Group
Everest Ransomware
TECNOLOGICA S.r.l. Listed by Titan Ransomware Group
Titan Ransomware
BioPharma Listed by The Gentlemen Ransomware Group
The GentlemenThe Gentlemen Ransomware
Provite Listed by Qilin Ransomware Group
Qilin Ransomware
Check your exposure
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.