Unverified claim. Claimed by Titan.
Concise previewCTP S.r.l., an Italian printing and publishing technology company, was claimed by titan on August 20, 2026.
Incidents
Breaches and leak-site claims
Confirmed breaches and unverified leak-site claims in one labeled feed. Confirmed breaches come from the California Attorney General breach portal, the Department of Health and Human Services Office for Civil Rights (HHS OCR, including its 42 CFR Part 2 substance-use records), Securities and Exchange Commission (SEC) 8-K cyber-incident filings, and the Have I Been Pwned breach directory. Leak-site claims come from RansomLook and, as a failover, ransomware.live. Claims are always labeled and never presented as fact.
13251 confirmed5689 unverified claims
32 victims last 24 hours768 victims · Month to date through 2026-08-20 21:36 UTC5,682 victims · Year to date through 2026-08-20 21:36 UTC67 groups active · Month to date through 2026-08-20 21:36 UTC7 additional claims without a disclosure date
Claims tracked since 2026-01-01.
Of 13,251 confirmed breaches, 5,352 come from the California Attorney General portal, which publishes no individuals-affected count. Those rows, and any other government-source row whose portal did not publish a count, read "Not reported" here (5,353 in all): the source's own gap, not omission on our part.
Filter to "Removed from leak site" to surface victims a ransomware group has taken off its own leak site. A removal can signal that the incident was resolved or the ransom paid, but a group can also remove a victim after a fake or withdrawn claim, or by taking down its own site, so it is an observation only, never a guarantee or confirmation of payment.
Ordered by the source-provided record date when present, even when its meaning is unknown; otherwise, by when this tracker first saw the record. Every displayed date states which event it represents.
CLAIMPOEMA S.r.l.
Unverified claim. Claimed by Titan.
Concise previewPOEMA S.r.l. was listed on August 20, 2026 by titan.
Unverified claim. Claimed by DYSPHOR1A.
Concise previewAYUDHYA TH Insurance, an insurance sector organization, was claimed to be compromised on August 20, 2026.
Unverified claim. Claimed by DYSPHOR1A.
Concise previewGUSTO College GLMS, an education sector organization, received a claim of compromised user accounts on August 20, 2026.
Unverified claim. Claimed by DYSPHOR1A.
Concise previewIndonesian Police Database was claimed by DYSPHOR1A on August 20, 2026.
Unverified claim. Claimed by DYSPHOR1A.
Concise previewJob Net .COM.MM was claimed to be compromised on August 20, 2026.
Unverified claim. Claimed by DYSPHOR1A.
Concise previewStrategy First International College was claimed by DYSPHOR1A on August 20, 2026.
Unverified claim. Claimed by Akira.
Concise previewCascade Coffee, a coffee manufacturing organization in the United States, was claimed by akira on August 20, 2026.
Unverified claim. Claimed by Thegentlemen.
Concise previewP**** R***** was claimed on August 20, 2026 by thegentlemen; the organization operates as a full-service event rental company in the event services sector in the United States.
Unverified claim. Claimed by Titan.
Concise previewtitan claimed on August 20, 2026 to have breached CONDOR SPA, an airline organization in Chile.
Unverified claim. Claimed by Titan.
Concise previewElbor S.p.A., an Italian distribution and wholesale sector organization, was claimed by titan on August 20, 2026.
Unverified claim. Claimed by Everest.
Concise previewCCA Bank was claimed by everest on August 20, 2026.
Unverified claim. Claimed by Akira.
Concise previewDeas Millwork, a millwork and architectural design company, had a claim filed against it on August 20, 2026.
Unverified claim. Claimed by Titan.
Concise previewtitan claimed access to TECNOLOGICA S.r.l. on August 20, 2026.
Unverified claim. Claimed by Pear.
Concise previewMedical Arts Chemists and Surgicals was claimed on August 20, 2026 by pear.
Unverified claim. Claimed by Pear.
Concise previewClub One Casino, a gambling establishment in the United States, was claimed by the pear group on August 20, 2026.
Unverified claim. Claimed by Pear.
Concise previewPracti-Cal was claimed as a breach victim by pear on August 20, 2026.
Unverified claim. Claimed by Pear.
Concise previewAustin Plastic Surgery Institute was claimed by pear on August 20, 2026.
Unverified claim. Claimed by Titan.
Concise previewELCON MEGARAD S.p.A., an electrical and industrial materials manufacturer in Italy, was claimed by titan on August 20, 2026.
Unverified claim. Claimed by Lockbit5.
Concise previewU.S. Bank, a financial services organization in the United States, was claimed by lockbit5 on August 20, 2026.
Unverified claim. Claimed by Majinahanashi.
Concise previewGrand Ion Delemen Hotel had a claim filed on August 20, 2026.
Unverified claim. Claimed by Majinahanashi.
Concise previewThe Margo Hotel was claimed as breached by majinahanashi on August 20, 2026.
CLAIMQuestronix
Unverified claim. Claimed by Qilin.
Concise previewqilin claims Questronix on August 20, 2026.
Unverified claim. Claimed by Qilin.
Concise previewProvite was claimed on August 20, 2026 by qilin.
CLAIMTrends And Concepts
Unverified claim. Claimed by Qilin.
Concise previewQilin published a claim against Trends And Concepts on August 20, 2026.
Unverified claim. Claimed by Deadlock.
Concise previewJP Molyneux Studio was named in a claim by Deadlock on August 20, 2026.
Unverified claim. Claimed by Everest.
Concise previewKingston Technology, a memory products manufacturer, was claimed by everest on August 20, 2026.
Unverified claim. Claimed by Everest.
Concise previewExperts Entreprendre received a claim from the everest group on August 20, 2026.
CLAIMGrupo DT
Unverified claim. Claimed by Everest.
Concise previewGrupo DT was claimed by everest on August 20, 2026.
Unverified claim. Claimed by Everest.
Concise previewCapgemini Engineering, a technology and engineering services company in France, was claimed by everest on August 20, 2026.
Unverified claim. Claimed by Xpl0itrs.
Concise previewTarget received a breach notice from xpl0itrs on August 20, 2026 in the general merchandise retail sector.
CONFIRMEDApollo Management Holdings, L.P.
Concise previewReported to the California Attorney General under the state data breach notification law.
CONFIRMEDNebraska Orthopaedic Center, P.C.
Concise previewReported to the California Attorney General under the state data breach notification law.
CLAIMSemana
Unverified claim. Claimed by Qilin.
Concise previewQilin claimed an attack on Semana on August 19, 2026.
Unverified claim. Claimed by Helix.
Concise previewDelek US was claimed by Helix on August 19, 2026.
Unverified claim. Claimed by Deadlock.
Concise previewUnited Fiber Optic Communication Inc. (UFOC), a telecommunications company in Taiwan, was claimed by Deadlock on August 19, 2026.
Unverified claim. Claimed by Deadlock.
Concise previewGlobal Terminal Services, an oil and gas storage organization, was claimed to be breached by Deadlock on August 19, 2026.
Unverified claim. Claimed by Xpl0itrs.
Concise previewxpl0itrs claimed Mihuru, a consumer travel financing organization, on August 19, 2026.
Unverified claim. Claimed by KryBit.
Concise previewSunsea Plastics P.S. Co., Ltd., a plastics sector organization in Thailand, was claimed on August 19, 2026.
Unverified claim. Claimed by Coinbasecartel.
Concise previewCrowe, a public accounting and consulting firm in the United States, was named in a claim posted on August 19, 2026.
Unverified claim. Claimed by Coinbasecartel.
Concise previewAdvanced Engineering Consultants was claimed by coinbasecartel on August 19, 2026.
Unverified claim. Claimed by Akira.
Concise previewEricksen Krentel, a CPA and consulting firm in the United States, was claimed to be compromised on August 19, 2026.
Unverified claim. Claimed by Insomnia.
Concise previewAn unnamed private company offering fluid system solutions for the oil, gas, chemical, and semiconductor sectors was claimed by insomnia on August 19, 2026.
Unverified claim. Claimed by Orova.
Concise previewDL HOLDINGS GROUP was claimed by Orova on August 19, 2026.
Unverified claim. Claimed by Incransom.
Concise previewBangkok Cable, a manufacturer of electric wires and cables in Thailand, was claimed by incransom on August 19, 2026.
Unverified claim. Claimed by Incransom.
Concise previewUniversal Plastics Inc., a commercial specialty contracting organization, had a breach claimed by incransom on August 19, 2026.
Unverified claim. Claimed by Incransom.
Concise previewCDGARVINLAW, a legal services organization in the United States, was claimed on August 19, 2026.
Unverified claim. Claimed by Incransom.
Concise previewExel Systems Inc., an HVAC and energy recovery products company, was claimed by incransom on August 19, 2026.
Unverified claim. Claimed by Qilin.
Concise previewThrifty Building Supply was claimed by qilin on August 19, 2026.
Unverified claim. Claimed by Qilin.
Concise previewEstech was claimed by qilin on August 19, 2026.
No breach entries match your current filters. Reset search and filters to show all breach entries.
Per-incident affected-count reconciliation across government breach sources is not currently possible. The Maine Attorney General portal has been offline since 2026-06-12, and the California Attorney General publishes no affected-persons count. Where one incident is reported to more than one source it is cross-linked, and every count shown is only the number that source itself reported.
A "No longer listed" badge means the victim was present on the leak site and is now absent from the claiming group's current listing, confirmed across two consecutive checks. It is an observation only. It is not a confirmation that the organization paid, negotiated, or resolved the incident, and a group that takes down its own site can cause it. Removal is tracked for RansomLook claims, the only source that publishes a full per-group listing. A claim from another source carries no badge because its removal is not tracked, which is not evidence the victim is still listed.
Browse every record in stable static pages, for search engines and no-JavaScript access to the full corpus.
Leak-site claim data:RansomLook(CC BY 4.0), withransomware.liveas a failover, credited voluntarily (it carries no attribution obligation). Claims are unverified until the affected organization confirms an incident. Confirmed breaches come from the California Attorney General breach portal, theHHS OCR Breach Portal(including its 42 CFR Part 2 records), theMaine Attorney Generalbreach portal, Securities and Exchange Commission 8-K filings, andHave I Been Pwned(CC BY 4.0).