Unverified claim. Claimed by N0n.
Max Fashion, a fashion retail organization operating in the Middle East, was claimed by N0n on November 6, 2026.
State now. Since yesterday: +2 tier promotions, 0 known-exploited vulnerability additions, 4 leak-site claims, and 4 confirmed breaches.
Why today matters ·
Incidents
Breaches and leak-site claims
Two kinds of record, always labeled: CONFIRMED breaches published by a regulator, the Securities and Exchange Commission (SEC), or Have I Been Pwned, and CLAIMS posted by ransomware groups on their leak sites, which stay unverified until the affected organization confirms, each linked to its named source.
Why now: 33 leak-site claims were first observed in the last 24 hours.
21,972 confirmed breach records, all time38,747 unverified leak-site claims, all time
33 leak-site claims · last 24 hours255 leak-site claims · Month to date through 2026-11-06 02:52 UTC11,689 leak-site claims · Year to date through 2026-11-06 02:52 UTC47 groups posting claims · Month to date through 2026-11-06 02:52 UTC7 additional claims without a disclosure date
Claims tracked since 2020-01-12. The 24-hour figure is a rolling window; month and year are calendar periods (UTC).
How these numbers are counted
On the first days of a month the 24-hour count can exceed the month-to-date count, because the 24-hour figure rolls while the month is a calendar period.
5,639 confirmed rows from government sources show "Not reported" because the source published no count. The California Attorney General portal, which never publishes one, supplied 5,372 confirmed rows.
Dated confirmed breaches this tracker collected per sector for 2026-10-30 through 2026-11-05, Coordinated Universal Time (UTC), compared with 2026-10-23 through 2026-10-29.
How these are counted
Each row is dated by its own source: a Securities and Exchange Commission (SEC) filing date, a state Attorney General portal's reported date, a Department of Health and Human Services Office for Civil Rights (HHS OCR) submission date, or another government source's own disclosure date. The last column counts disclosures dated in the 24 hours before the data export; a row stored with a date but no time counts when that date is today or yesterday. Rows without a disclosure date are left out of every column, and "Unclassified" collects rows whose sector this tracker has not matched to its sector list, including rows whose source never states one.
| Sector | Confirmed, latest 7 days | Prior 7 days | Change | Last 24 hours |
|---|---|---|---|---|
| Healthcare | 6 | 4 | +2 from 4 | 0 |
| Education | 3 | 1 | +2 from 1 | 0 |
| Financial Services | 1 | 5 | -4 from 5 | 0 |
| Technology | 1 | 1 | No change | 0 |
| Agriculture | 1 | 0 | Up from none in the prior 7 days | 0 |
| Media & Entertainment | 1 | 0 | Up from none in the prior 7 days | 0 |
| Transportation & Logistics | 1 | 0 | Up from none in the prior 7 days | 0 |
| Legal | 0 | 2 | -2 from 2 | 0 |
| Consumer Services | 0 | 1 | -1 from 1 | 0 |
| Unclassified | 3 | 3 | No change | 0 |
Showing 10 of 12 sectors with a dated confirmed breach in these windows, ordered by confirmed breaches in the latest 7 days, so sectors that went quiet sort last, except Unclassified, which is always last. Download the data (JSON).
33 leak-site claims were observed in the last 24 hours, and 255 have been observed so far this month.
Newest first, by the date the source gave; each date says what it is (for example, listed by group, filed with the SEC, or submitted to the Department of Health and Human Services Office for Civil Rights, HHS OCR). A row whose source gave no date is placed by the date it was first tracked here, and a source date whose meaning we do not know is labeled "Date meaning unknown".
Unverified claim. Claimed by N0n.
Hallmark Cards, Inc., a greeting cards and gifts retail organization in the United States, was claimed by N0n on November 6, 2026.
Unverified claim. Claimed by N0n.
Scry Analytics, a data analytics and AI services organization in the United States, was claimed by N0n on November 6, 2026.
Unverified claim. Claimed by Vexy.
Unverified claim. Claimed by Leakeddata.
W... R... received a claim from leakeddata on November 5, 2026.
Unverified claim. Claimed by Qilin.
Insurance Audit Services, operating in the insurance sector, was claimed by Qilin on November 5, 2026.
Unverified claim. Claimed by Leakeddata.
Smith, Gambrell & Russell, LLP was claimed as breached by Leakeddata on November 5, 2026.
Unverified claim. Claimed by N0n.
n0n claimed access to Company #137, a mobile advertising and audience data organization in Canada, on November 5, 2026.
Unverified claim. Claimed by N0n.
Company #136, a pharmaceutical organization specializing in dermatology and thrombosis, was claimed on November 5, 2026 by N0n.
Unverified claim. Claimed by N0n.
Company #135, a digital beauty community and commerce organization in Indonesia, was claimed by N0n on November 5, 2026.
Unverified claim. Claimed by N0n.
Company #134, a commercial truck dealership in the United States, was claimed by N0n on November 5, 2026.
Unverified claim. Claimed by N0n.
n0n claimed Company #133, an education services organization based in the United States, on November 5, 2026.
Unverified claim. Claimed by Redact.
Unverified claim. Claimed by Akira.
System Plus, an IT infrastructure provider in Romania, was claimed by Akira on November 5, 2026.
Unverified claim. Claimed by Akira.
David L Wade & Associates, an accounting firm in Fort Wayne, Indiana, was claimed by Akira on November 5, 2026.
Unverified claim. Claimed by Akira.
Source Energy Services, an oilfield logistics organization operating in the energy sector, was claimed by Akira on November 5, 2026.
Unverified claim. Claimed by Akira.
Westboro Partners, a business and financial solutions provider, was claimed by Akira on November 5, 2026.
Unverified claim. Claimed by Beast.
SevenPlus, an IT company in Japan operating in software development and systems integration, was claimed by Beast on November 5, 2026.
Unverified claim. Claimed by Aoqin.
Sistel, a social security and pension services organization in Brazil, was claimed to be compromised by Aoqin on November 5, 2026.
Unverified claim. Claimed by Pear.
Unverified claim. Claimed by Qilin.
Calvary Christian College, operating in the education sector, was claimed by Qilin on November 5, 2026.
Unverified claim. Claimed by Everstake.
everstake claims to have breached ne***h.com, an organization in the electronic manufacturing sector, on November 5, 2026.
Unverified claim. Claimed by Byod.
IHG Hotels & Resorts claimed compromised by Byod on November 5, 2026.
Unverified claim. Claimed by Audit Team.
Unverified claim. Claimed by Everstake.
everstake claimed access to an organization in the electronic and manufacturing sector on November 5, 2026.
Unverified claim. Claimed by AuditTeam.
Unverified claim. Claimed by PixelLeaks.
Disclosed, a hosted email and IT services provider in Italy, was claimed by PixelLeaks on November 5, 2026.
Unverified claim. Claimed by N0n.
Delta Dental of Missouri, a dental insurance organization in the United States, was claimed by N0n on November 5, 2026.
Unverified claim. Claimed by N0n.
The Container Store, a storage and organization retail company in the United States, was claimed by N0n on November 5, 2026.
Unverified claim. Claimed by Dark Project.
Unverified claim. Claimed by Destello.
Destello claimed MAPFRE Brasil 2026, an insurance organization in Brazil, on November 5, 2026.
Unverified claim. Claimed by The Gentlemen.
MKG Kirchrode, an oral and maxillofacial surgery practice in Germany, was claimed by thegentlemen on November 5, 2026.
Unverified claim. Claimed by Majinahanashi.
Magasin du Nord, a retail organization, was claimed as compromised by Majinahanashi on November 5, 2026.
Unverified claim. Claimed by Medusalocker.
Unverified claim. Claimed by Medusalocker.
Baiapai, a France-based organization, received a claim from medusalocker on November 4, 2026.
Unverified claim. Claimed by Medusalocker.
Unverified claim. Claimed by Medusalocker.
Unverified claim. Claimed by Medusalocker.
Unverified claim. Claimed by Medusalocker.
Ruixiang Jidian, an elevator manufacturer in China, was claimed to be compromised by Medusalocker on November 4, 2026.
Unverified claim. Claimed by Ransomhouse.
Unverified claim. Claimed by Medusalocker.
Kde, an industrial and automotive organization in Morocco, has been claimed by Medusalocker on November 4, 2026.
Unverified claim. Claimed by Leakeddata.
Unverified claim. Claimed by Medusalocker.
Unverified claim. Claimed by Medusalocker.
Unverified claim. Claimed by Medusalocker.
Ulaval, a radiology and medical services organization, was claimed as compromised by Medusalocker on November 4, 2026.
Unverified claim. Claimed by Medusalocker.
Moda Hair Salon, a retail and salon services organization, was claimed by Medusalocker on November 4, 2026.
Unverified claim. Claimed by Medusalocker.
Hirschinjurylaw, a legal services organization, was claimed by Medusalocker on November 4, 2026.
Unverified claim. Claimed by Medusalocker.
BCH, a residential care facility, was claimed to be compromised by Medusalocker on November 4, 2026.
Unverified claim. Claimed by Medusalocker.
Unverified claim. Claimed by Medusalocker.
The Courier Guy, a courier company in South Africa, was claimed by Medusalocker on November 4, 2026.
No breach entries match your current filters. Reset search and filters to show all breach entries.
Per-incident affected-count reconciliation across government breach sources is limited by what each source publishes: HHS OCR reports a nationwide count; the Washington, Oregon, and Maryland Attorneys General each report only their own state's residents affected; the Maine Attorney General portal has been offline since 2026-06-12; and the California Attorney General publishes no affected-persons count. Where one incident is reported to more than one source it is cross-linked, and every count shown is only the number that source itself reported, labelled with the population it counts.
A "No longer listed" badge means the victim was present on the leak site and is now absent from the claiming group's current listing, confirmed across two consecutive checks. It is an observation only. It is not a confirmation that the organization paid, negotiated, or resolved the incident, and a group that takes down its own site can cause it. Removal is tracked for RansomLook claims, the only source that publishes a full per-group listing. A claim from another source carries no badge because its removal is not tracked, which is not evidence the victim is still listed.
Browse every record in stable static pages, for search engines and no-JavaScript access to the complete set.
Leak-site claim data: RansomLook (CC BY 4.0), with ransomware.live as a failover, credited and linked as its terms require (Source: Ransomware.live). Claims are unverified until the affected organization confirms an incident. Confirmed breaches come from the California Attorney General breach portal (newest disclosure 2026-11-04), the HHS OCR Breach Portal (including its 42 CFR Part 2 records; newest disclosure 2026-10-15), the Maine Attorney General breach portal (offline since 2026-06-12; no rows are currently in this index), the Washington Attorney General breach notifications directory (newest disclosure 2026-10-13), the Oregon Attorney General breach directory (newest disclosure 2026-10-21), the Maryland Attorney General security breach notice lists (newest disclosure 2025-03-21), Securities and Exchange Commission 8-K filings (newest disclosure 2026-10-13), and Have I Been Pwned (CC BY 4.0; newest disclosure 2026-10-04).
How this is computed
Confirmed incidents come from the named government and breach-directory sources. Leak-site entries remain unverified claims. Windows use the recorded disclosure or observation date, and missing dates remain explicit.
Method reviewed on .