CYBERSECURITYTRACKER
TRACKING4,782 stories890 vuln stories
Incidents

Breaches and leak-site claims

Confirmed breaches and unverified leak-site claims in one labeled feed. Confirmed breaches come from the California Attorney General breach portal, the Department of Health and Human Services Office for Civil Rights (HHS OCR, including its 42 CFR Part 2 substance-use records), Securities and Exchange Commission (SEC) 8-K cyber-incident filings, and the Have I Been Pwned breach directory. Leak-site claims come from RansomLook and, as a failover, ransomware.live. Claims are always labeled and never presented as fact.

13274 confirmed5876 unverified claims
16 victims last 24 hours954 victims · Month to date through 2026-08-26 20:43 UTC5,868 victims · Year to date through 2026-08-26 20:43 UTC75 groups active · Month to date through 2026-08-26 20:43 UTC7 additional claims without a disclosure date

Claims tracked since 2024-04-19.

Of 13,274 confirmed breaches, 5,361 come from the California Attorney General portal, which publishes no individuals-affected count. Those rows, and any other government-source row whose portal did not publish a count, read "Not reported" here (5,362 in all): the source's own gap, not omission on our part.

Filter to "Removed from leak site" to surface victims a ransomware group has taken off its own leak site. A removal can signal that the incident was resolved or the ransom paid, but a group can also remove a victim after a fake or withdrawn claim, or by taking down its own site, so it is an observation only, never a guarantee or confirmation of payment.

Ordered by the source-provided record date when present, even when its meaning is unknown; otherwise, by when this tracker first saw the record. Every displayed date states which event it represents.

CLAIMMetal ConversionsManufacturing
Unverified claim. Claimed by Qilin.

Full stored descriptionMetal Conversions, a Manufacturing sector organization, was claimed by qilin on August 26, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMCalifornia Truck EquipmentTransportation & Logistics
Unverified claim. Claimed by Qilin.

Full stored descriptionCalifornia Truck Equipment, a Transportation & Logistics sector organization, was claimed by qilin on August 26, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMNorthern Leasing SystemsFinancial Services
Unverified claim. Claimed by Qilin.

Full stored descriptionNorthern Leasing Systems, a Financial Services sector organization, was claimed by qilin on August 26, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMIntegrex RCMBusiness & Professional Services
Unverified claim. Claimed by Qilin.

Full stored descriptionIntegrex RCM, a Business & Professional Services sector organization, was claimed by qilin on August 26, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMATFGovernment
Unverified claim. Claimed by Qilin.

Full stored descriptionATF, a Government sector organization, was claimed by qilin on August 26, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMWireCoManufacturing
Unverified claim. Claimed by Qilin.

Full stored descriptionWireCo, a Manufacturing sector organization, was claimed by qilin on August 26, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMERPIS LLCBusiness & Professional Services
Unverified claim. Claimed by Aurora.

Full stored descriptionERPIS LLC, a Business & Professional Services sector organization, was claimed by aurora on August 26, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMMEMSICManufacturing
Unverified claim. Claimed by Abyss.

Full stored descriptionMEMSIC, a Manufacturing sector organization, was claimed by abyss on August 26, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMMorgan ServicesBusiness & Professional Services
Unverified claim. Claimed by AiLock.

Full stored descriptionMorgan Services, a Business & Professional Services sector organization, was claimed by AiLock on August 26, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by AiLock.

Full stored descriptionHamilton was claimed by AiLock on August 26, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Qilin.

Full stored descriptionAir International Thermal Systems, a Manufacturing sector organization, was claimed by qilin on August 26, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMCentral Florida Civil LLCBusiness & Professional Services
Unverified claim. Claimed by Orova.

Full stored descriptionCentral Florida Civil LLC, a Business & Professional Services sector organization, was claimed by Orova on August 25, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Orova.

Full stored descriptionArich Enterprise Co., Ltd. was claimed by Orova on August 25, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMBai-chi CPA FirmBusiness & Professional Services
Unverified claim. Claimed by Orova.

Full stored descriptionBai-chi CPA Firm, a Business & Professional Services sector organization, was claimed by Orova on August 25, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMma***up
Unverified claim. Claimed by AuditTeam.

Full stored descriptionma***up was claimed by AuditTeam on August 25, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMindustry.airliquide.krManufacturing
Unverified claim. Claimed by Safepay.

Full stored descriptionindustry.airliquide.kr, a Manufacturing sector organization, was claimed by safepay on August 25, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Chaos.

Full stored descriptionparkderochie.com was claimed by chaos on August 25, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMmswalker.comBusiness & Professional Services
Unverified claim. Claimed by Chaos.

Full stored descriptionmswalker.com, a Business & Professional Services sector organization, was claimed by chaos on August 25, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Chaos.

Full stored descriptioncopcp.com was claimed by chaos on August 25, 2026. No further details were available from the leak-site post.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Qilin.

Full stored descriptionSC PaderTeG Cabluri Electrice was claimed by qilin on August 25, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Direwolf.

Full stored descriptiondirewolf claimed to have compromised National Kidney Registry, a healthcare organization based in the United States, on August 25, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMStudio Legale ESEBusiness & Professional Services
Unverified claim. Claimed by Direwolf.

Full stored descriptiondirewolf claims Studio Legale ESE, a legal services organization, on August 25, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMTiseo PavingTransportation & Logistics
Unverified claim. Claimed by Global Secret Group.

Full stored descriptionTiseo Paving, a construction sector organization in the United States, was listed in a claim by Global Secret Group on August 25, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Global Secret Group.

Full stored descriptionJohnson City Honda, an automobile dealer in the United States, was claimed by Global Secret Group on August 25, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Global Secret Group.

Full stored descriptionLockheed Architectural Solutions, Inc., a manufacturing, construction, and building materials organization in the United States, was claimed by Global Secret Group on August 25, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by ShadowByt3$.

Full stored descriptionA-Plus Software Limited, a Technology sector organization, was claimed by ShadowByt3$ on August 25, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Genesis.

Full stored descriptionS******* was claimed by genesis on August 25, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMWINTER IngenieureManufacturing
Unverified claim. Claimed by Akira.

Full stored descriptionWINTER Ingenieure, an engineering and construction services organization in Germany, was claimed by akira on August 25, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMSTRUCTURED SETTLEMENT CAPITAL LLCFinancial Services
Unverified claim. Claimed by Qilin.

Full stored descriptionQilin claimed STRUCTURED SETTLEMENT CAPITAL LLC on August 25, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMDavis & FerberBusiness & Professional Services
Unverified claim. Claimed by Akira.

Full stored descriptionDavis & Ferber, a personal injury and malpractice law firm based in New York, was claimed by akira on August 25, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMAGROLAND S.A.Agriculture
Unverified claim. Claimed by Qilin.

Full stored descriptionAGROLAND S.A. was claimed by qilin on August 25, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMPump Engineering CompanyManufacturing
Unverified claim. Claimed by Dark Project.

Full stored descriptionPump Engineering Company, an industrial pump distributor and supplier, was claimed to be compromised by Dark Project on August 25, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Majinahanashi.

Full stored descriptionPCA Group Sdn. Bhd. was claimed on August 25, 2026 by majinahanashi.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Dark Project.

Full stored descriptionDark Project claimed to have breached a dentist in New Britain, CT on August 25, 2026.

ransomware.liveListed by group: First tracked here: source ↗

Full stored descriptionReported to the California Attorney General under the state data breach notification law.

Individuals affected
Not reported
State
CA
California AGReported to California AG: First tracked here: source ↗
CLAIMConsultores de SegurosFinancial Services
Unverified claim. Claimed by Qilin.

Full stored descriptionConsultores de Seguros was claimed by qilin on August 24, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMSHAHEEN LAW GROUP PLC - Richmond, Virginia, USABusiness & Professional Services
Unverified claim. Claimed by Deadlock.

Full stored descriptionShaheen Law Group PLC, a family law firm in Richmond, Virginia, USA, was claimed by Deadlock on August 24, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMFBC
Unverified claim. Claimed by Deadlock.

Full stored descriptionFurniture Bargaining Council, a furniture and upholstery industry organization in South Africa, was named in a claim by Deadlock on August 24, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMlagegepesca.itAgriculture
Unverified claim. Claimed by Safepay.

Full stored descriptionlagegepesca.it, an Agriculture sector organization, was claimed by safepay on August 24, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Dark Project.

Full stored descriptionThe Liberty Group was claimed by Dark Project on August 24, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMJones, Little & Co., CPAs, LLPBusiness & Professional Services
Unverified claim. Claimed by Dark Project.

Full stored descriptionJones, Little & Co., CPAs, LLP, a professional accounting firm, was claimed to be compromised by Dark Project on August 24, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Dark Project.

Full stored descriptionDesign-Aire Engineering, INC, a Manufacturing sector organization, was claimed by Dark Project on August 24, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMFurnished QuartersHospitality
Unverified claim. Claimed by Dark Project.

Full stored descriptionFurnished Quarters, a Hospitality sector organization, was claimed by Dark Project on August 24, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMFratoRetail
Unverified claim. Claimed by Dragonforce.

Full stored descriptionFrato, an interior lifestyle organization, was claimed by dragonforce on August 24, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMCribaTechnology
Unverified claim. Claimed by Dragonforce.

Full stored descriptionCriba, an Argentina-based construction company, was claimed compromised by dragonforce on August 24, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMBrookview FinancialFinancial Services
Unverified claim. Claimed by Dragonforce.

Full stored descriptionBrookview Financial, a financial services organization, had a breach claimed by dragonforce on August 24, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMWozairManufacturing
Unverified claim. Claimed by Dragonforce.

Full stored descriptionWozair, an HVAC products and services organization, was claimed by the dragonforce group on August 24, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMBihlManufacturing
Unverified claim. Claimed by Akira.

Full stored descriptionBihl was claimed by akira on August 24, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMDavrocTechnology
Unverified claim. Claimed by Booba Project.

Full stored descriptionBooba Project claimed access to Davroc, a furniture and home furnishings manufacturing organization, on August 24, 2026.

ransomware.liveListed by group: First tracked here: source ↗

Per-incident affected-count reconciliation across government breach sources is not currently possible. The Maine Attorney General portal has been offline since 2026-06-12, and the California Attorney General publishes no affected-persons count. Where one incident is reported to more than one source it is cross-linked, and every count shown is only the number that source itself reported.

A "No longer listed" badge means the victim was present on the leak site and is now absent from the claiming group's current listing, confirmed across two consecutive checks. It is an observation only. It is not a confirmation that the organization paid, negotiated, or resolved the incident, and a group that takes down its own site can cause it. Removal is tracked for RansomLook claims, the only source that publishes a full per-group listing. A claim from another source carries no badge because its removal is not tracked, which is not evidence the victim is still listed.

Browse every record in stable static pages, for search engines and no-JavaScript access to the full corpus.

Leak-site claim data:RansomLook(CC BY 4.0), withransomware.liveas a failover, credited voluntarily (it carries no attribution obligation). Claims are unverified until the affected organization confirms an incident. Confirmed breaches come from the California Attorney General breach portal, theHHS OCR Breach Portal(including its 42 CFR Part 2 records), theMaine Attorney Generalbreach portal, Securities and Exchange Commission 8-K filings, andHave I Been Pwned(CC BY 4.0).