Ransomware Activity

Victims as claimed on gang extortion sites, refreshed every two minutes. A claim means data was already stolen. Where shown, a gang's country is an assessed link from public law-enforcement and industry reporting, not telemetry.

Claims in window
100
Active gangs
23
Most active
qilin
Top sector
Manufacturing
  • RaceTrakka

    6h ago
    qilinAustraliaRetail & E-Commerce
    Assessed gang nexus: Russia
  • Smith Feddeler & Smith

    6h ago
    qilinUnited StatesProfessional Services
    Assessed gang nexus: Russia
  • Delta Electric Power Association

    8h ago
    qilinUnited StatesEnergy & Utilities
    Assessed gang nexus: Russia
  • Bangor Wholesale Laminates

    8h ago
    qilinUnited KingdomManufacturing
    Assessed gang nexus: Russia
  • TeleTronic

    8h ago
    qilinSpainTechnology
    Assessed gang nexus: Russia
  • FIRMENGRUPPE APPL Holding GmbH

    8h ago
    Assessed gang nexus: Russia
  • Premier Medical Group

    8h ago
    Assessed gang nexus: Russia
  • Zachary Confections

    8h ago
    qilinUnited StatesRetail & E-Commerce
    Assessed gang nexus: Russia
  • THOMAS JORDAN, P.A

    8h ago
    qilinUnited StatesProfessional Services
    Assessed gang nexus: Russia
  • Five Star Sheets

    8h ago
    qilinUnited StatesRetail & E-Commerce
    Assessed gang nexus: Russia
  • Power Funding

    8h ago
    qilinUnited KingdomFinancial Services
    Assessed gang nexus: Russia
  • Mountain Rheumatology

    8h ago
    Assessed gang nexus: Russia
  • Taubensee Steel & Wire

    8h ago
    qilinGermanyManufacturing
    Assessed gang nexus: Russia
  • Natural Energy Laboratory of Hawaii Authority

    8h ago
    qilinUnited StatesEnergy & Utilities
    Assessed gang nexus: Russia
  • Miller Stratvert

    8h ago
    Assessed gang nexus: Russia
  • Seufert Construction

    8h ago
    qilinUnited StatesManufacturing
    Assessed gang nexus: Russia
  • TRANSPORTES JIMENEZ and REYES JIM REY S.A.

    9h ago
    emperadorMexicoTransportation

    Transport company from Ecuador engaged in road freight transport. Including the transportation of heavy and bulk cargo, cars, animals and cargo in tanks. Year Founded: 2020 There are many customer documents and employee data. Financial documents, accounting and banking data. [Sector: Transportation]

  • Referans Lab Ref-Lab

    10h ago

    Status: leaked | Data size: 3.07 GB | Files: 2 files | Deadline: 2026-10-26T00:00:00Z

  • Ernesto Malvestiti S.p.A.

    11h ago
    auroraItalyManufacturing

    [manufacturer] Ernesto Malvestiti S.p.A. - a privately-held Italian manufacturer of precision aluminium die-cast and fine-blanked components, supplying BMW, Valeo, BorgWarner, Schneider Electric, Fiat/Stellantis, and 150+ other automotive OEM. The exposed material spans the company's entire operations: PAGHENET payroll database (1.1 GB SQL Server backup ×7 copies) - every employee's salary, IBAN bank account, codice fiscale (Italian tax ID), home address, and tax withholdings. Plus the INAZMST employee master database (181 MB ×5). GDPR Article 9 special-category data - medical fitness records, disability status, union membership lists, workplace injuries, occupational diseases, and stress assessments for the entire workforce. 50+ plaintext OEM portal credentials stored in a single file called accesso web.txt - BMW B2B, Brose SWP, Valeo, BorgWarner SAP, Schneider VFAST, Eaton, Fiat, Peugeot/PSA, and 40+ more. SQL Server administrator password for the payroll database server, stored in a plaintext ODBC registry export. ADP payroll SFTP credentials stored in WinSCP.ini - the channel used to transmit employee salary data to the external payroll processor. 614 MB of financial/controlling data - consolidated balance sheets (2024-2025), revenue by plant, P&L, transfer pricing documents, cash flow, competitor analysis, and banking relationships. 1.5 GB of engineering IP - 300+ fine blanking die designs, technical drawings (483 MB), press parameters, PLC programs, FANUC robot code, and R&D contracts. 160+ client/supplier contracts with pricing, commercial terms, and executed NDAs. 560+ job candidate CVs with full names, addresses, phone numbers, and career histories.

  • Inside Passage Electric Cooperative, Inc

    13h ago
    dragonforceUnited StatesEnergy & Utilities

    In 2004, Tlingit & Haida Regional Electric Authority was re-organized to an electric cooperative which is now known as Inside Passage Electric Cooperative, Inc. IPEC is a non-profit, independent electric utility owned by the members we serve. Electric cooperatives are democratically governed businesses, ensuring they are closely regulated by their consumers. Members of electric cooperatives express higher than average levels of customer satisfaction since they put customers first because the consumers are the owners. In addition, co-ops are locally owned and operated which makes IPEC more responsive to our members since they are the owners and we are accountable to them. IPEC is governed by a board of directors elected from the membership, which sets policies and procedures that are implemented by the cooperatives’ professional staff. Our Board is committed to providing quality, dependable and affordable electric service to our members since they live in the communities they represent. IPEC currently serves Hoonah (463 services), Kake (321 services), Chilkat Valley (231 services), Angoon (227 services) and Klukwan (61 services) for a total of 1,303 customers.

  • mahsing.com.my

    15h ago

    Mah Sing Group is a leading Malaysian property developer specializing in affordable residential and commercial properties, with additional businesses in healthcare and plastics manufacturing.

  • LoveSac

    17h ago
    whitearmorUnited StatesRetail & E-Commerce

    LoveSac (LOVE) is a premium furniture retailer operating more than 250 showrooms across the United States, generating approximately $700 million in annual revenue. We have obtained a database containing 1,113,285 order records spanning nearly seven years of transactions, from December 2019 through October 2026, with a combined recorded transaction value exceeding $1.62 billion. Each record contains detailed customer and transaction information, including full customer names, complete billing and shipping addresses, telephone numbers, order numbers, order dates, order statuses, and order grand totals. Our demand: $500,000 in BTC or XMR To verify, samples can be found below.

  • Glückauf-Vermessung GmbH

    19h ago
    payloadGermanyProfessional Services

    Glückauf-Vermessung GmbH (glueckauf-vermessung.de) is a German engineering and technical company based in Sondershausen, operating as part of the ERCOSPLAN Group and specializing in surveying and mine surveying (Bergbau-Markscheiderei). Its core business activities include geodetic support for the mining industry, geological exploration, and work related to salt and mineral deposits. The company provides services for surface and underground measurements, deformation monitoring, and the preparation of technical documentation for industrial projects.

  • Miletic GmbH

    19h ago

    Miletic GmbH is a German specialized contractor headquartered in Bad Schönborn that has been operating in the construction sector since 1989. The company's core business focuses on construction and repair work for ecologically sensitive industrial facilities, including gas stations, tank farms, and operations governed by German water protection laws (WHG Class LAU facilities). Its service portfolio includes joint sealing and remediation, the application of chemical-resistant protective coatings, concrete construction, and related earthworks.

  • Edelstahl-Mechanik GmbH

    19h ago
    payloadGermanyManufacturing

    Edelstahl-Mechanik GmbH is a German manufacturing company based in Göppingen. The company specializes in laser metal processing, including 2D and 3D laser cutting and welding, as well as structural sheet metal fabrication. Its products and services are applied in industries such as mechanical engineering, the automotive sector, construction, medical technology, and the food industry.

  • J.B Hunt

    20h ago

    You are so stupid JB Hunt. Instead of getting in contact with us & starting the negotiation process, not only did you not announce the breach, you silently email customers demanding them to update their passwords.. Fuck you... ;/

  • Yodingenierie

    1d ago
    panzerBeninProfessional Services

    YOD Engineering is an engineering company computer science, member of the NED&CO Group , a pan-African player committed to transformation digital, information systems governance and innovation by intelligence artificial.

  • White & Case

    1d ago
    qilinUnited StatesProfessional Services
    Assessed gang nexus: Russia
  • Hossner-Textil GmbH

    1d ago
    qilinGermanyManufacturing
    Assessed gang nexus: Russia
  • Partido Liberal

    1d ago
    whitearmorArgentinaGovernment & Defense

    Brazil's Liberal Party (PL) is the political party of the Bolsonaro family. Although named "Liberal," it is currently characterized by conservatism and right-wing populism. Jair Bolsonaro joined the party in 2021, and his son Flávio Bolsonaro is now the party's presidential candidate, advocating reduced government intervention and tough security policies. We hold the complete Partido Liberal (PL, Brazil) dump: 79K member records with CPF/voter ID/RG photos, 374 live cleartext e-Título credentials, 475 operator accounts with shared password, 2.7M audit events, party dossiers (artist payments, deepfakes, ghost donations), vendor PII, and 340K+ member images. If you don't want this getting out, we suggest you contact us & pay the ransom amount of $5,000,000 in BTC :) Contact: Email: whitearmorrxd@proton.me Session: 0547b7f96d469ecb332e89d0108e71c92df5bacff6c4ed5b9801ab5fffe872ee67

Show all 100 victims