Misconfiguration & Exposed Data
Misconfigured databases and cloud storage leave sensitive data publicly accessible without any hacking required.
2903tracked breaches
Groups using this method
Qilin 237The Gentlemen 235World Leaks 175Ragnar Locker 85Storm 81Krybit 76Akira 71Clop 70Everest 65INC Ransom 62LockBit 55Leakeddata 48ShinyHunters 47NightSpire 44Direwolf 43SafePay 42Donutleaks 42Crpx0 41Darkleakmarket 39Lv 37Emperador 36N0n 30Play 29L Group 28
+119 more groups
Settra 27Rhysida 26DragonForce 25Dark Project 25ALPHV 25Wallstreet 24Orova 24BrainCipher 22Coinbase Cartel 22ZaWoo 21Leaktheanalyst 20Vexy 19Booba Team 19Pear 18Chaos 17Majinahanashi 16Aurora 15Interlock 14Global Secret Group 14Handala 13Anubis 12Eclipse 12Panzer 123am 12RansomHouse 11Imnotavillian 11Titan 11Insomnia 10Genesis 10Lamashtu 10Umbra 9Black X 9Arcus Media 9Payoutsking 9M3rx 9LeakBazaar 9Doommageddon 8Kairos 8Blacknevas 8Iah647 8Termite 7Byod 7VYPR 7AuditTeam 7Global Cybernetic Collective 7Unsafe 7Kazu 7The Crew 6Dataleak 6Deadlock 5Bravox 5Space Bears 5DYSPHOR1A 5Xpl0itrs 5Helix 5Monti 5ValenciaLeaks 5Shiba 4Payload 4Metaencryptor 4Nasirsecurity 4Shaoleaks 4Redact 3Cry0 3Endzone 3Gammax 3Booba Project 3Moneymessage 3Securotrop 3Beast 3Shadowbyt3$ 3Falcon 3Lynx 3Blackwater 3Ethics 3Morpheus 2Threeam 2Fulcrumsec 2AiLock 2Sovcali 2Leaknet 2BlueWhale 2Orion 2Lapsus$ 2Siegedsec 2RA World 2Ransomed 2Kelvinsecurity 2Mosesstaff 2RunSomeWares 1Netrunner 1Spirals 1ULose 1Blacklocks 1Tridentlocker 1Vexy Ransomware 1Meowciety403 1Crypto24 1Abyss-data 1Abyss 1Gunra 1Securotop 1Ms13089 1Barracuda 1Kyber 1J 1Cephalus 1Datacarry 1BlackByte 1Flocker 1Royal 1Hive 1Yanluowang 1Ransomexx 1Ragnarok 1Sabbath 1Marketo 1Karma 1Azroteam 1
Breaches using Misconfiguration & Exposed Data
June 3, 2026HIGH
June 2, 2026HIGH
June 2, 2026HIGH
June 1, 2026HIGH
May 29, 2026LOW
May 28, 2026HIGH
May 28, 2026HIGH
May 25, 2026MED
May 25, 2026HIGH
May 23, 2026LOW
May 23, 2026MED
May 23, 2026MED
May 22, 2026HIGH
May 22, 2026CRIT
May 20, 2026MED
May 20, 2026HIGH
May 20, 2026HIGH
May 19, 2026HIGH
May 18, 2026HIGH
May 15, 2026HIGH
May 14, 2026HIGH
May 13, 2026HIGH
May 12, 2026HIGH
May 11, 2026HIGH
May 10, 2026HIGH
Emmy.tv AWS Credentials Exposed in Public HTML
Supply-Chain Attack
Ingka Group (IKEA) Targeted in Alleged Lapsus$ Data Theft
Lapsus$ Ransomware
Grindr Users' Data Allegedly Leaked on Cybercrime Forum
Credential & Infostealer Leaks
Hackers claim 32M Bumble user records leaked
Credential & Infostealer Leaks
BCD Travel Data Breach (2026)
ShinyHunters Ransomware
Alamo Heights School District Listed by Qilin Ransomware Group
QilinWorld Leaks Ransomware
American Battery Factory Listed by World Leaks Ransomware Group
World Leaks Ransomware
Mercedes-Benz UK Customer Data Allegedly Leaked
Misconfiguration & Exposed Data
Lithuania State Registers Leak Impacts 540K Citizens
Misconfiguration & Exposed Data
Baker Distributing Data Breach (2026)
ShinyHunters Ransomware
DentaQuest Data Breach (2026)
ShinyHunters Ransomware
Charter Data Breach (2026)
Misconfiguration & Exposed Data
BMJ Paperpack Listed by World Leaks Ransomware Group
World Leaks Ransomware
Lithuania National Register Data Leak of 600K Entries
Misconfiguration & Exposed Data
Trump Mobile Probes Website Leak of 27K Customer Records
Misconfiguration & Exposed Data
Acton Electrical Hit by Akira Ransomware, 73GB Leaked
Akira Ransomware
Nothing Technology Breached by INC_RANSOM, 52GB Exposed
INC Ransom Ransomware
B1ack's Stash Marketplace Releases 4.6M Stolen Credit Cards
Misconfiguration & Exposed Data
CISA Contractor Leaks AWS GovCloud Keys on Public GitHub
Credential & Infostealer Leaks
Baytech Hit by Morpheus Ransomware with 110GB Data Leak
Morpheus Ransomware
Hotelogix Breached via Misconfigured Cloud Storage
Shadowbyt3$ Ransomware
Thales Group Linked to LuxTrust Data Leak on Forum
Misconfiguration & Exposed Data
Bestat Pharmaservices Corp. Listed by World Leaks Ransomware Group
World Leaks Ransomware
Lapsus$ Leaks Vodafone Source Code and Database Credentials
Lapsus$ Ransomware
e-jones associates LCC Listed by LeakBazaar Ransomware Group
LeakBazaar Ransomware
Check your exposure
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.