Unverified claim. Claimed by Cry0.
Full stored descriptioncry0 claimed MinMor Industries on September 29, 2026.
State now. Changed: +31 tier promotions, 0 known-exploited vulnerability additions, 16 leak-site claims, and 2 confirmed breaches since yesterday.
Why today matters
Incidents
Breaches and leak-site claims
Compare confirmed breaches with clearly labelled, unverified leak-site claims, each linked to its named source.
Two kinds of record, always labeled: CONFIRMED breaches published by a regulator, the Securities and Exchange Commission (SEC), or Have I Been Pwned, and CLAIMS posted by ransomware groups on their leak sites, which stay unverified until the affected organization confirms. Sources are listed at the bottom of the page.
Why now: 77 leak-site claims were first observed in the last 24 hours.
21,877 confirmed breach records, all time35,274 unverified leak-site claims, all time
77 leak-site claims · last 24 hours1,117 leak-site claims · Month to date through 2026-09-29 04:28 UTC13,286 leak-site claims · Year to date through 2026-09-29 04:28 UTC95 groups posting claims · Month to date through 2026-09-29 04:28 UTC7 additional claims without a disclosure date
Claims tracked since 2020-01-12. The 24-hour figure is a rolling window; month and year are calendar periods (UTC), so on the first days of a month the 24-hour count can exceed the month-to-date count.
5,683 confirmed rows from government sources show "Not reported" because the source published no count. The California Attorney General portal, which never publishes one, supplied 5,416 confirmed rows.
What changed
This page does not publish a page-specific change count. Open the daily comparison for newly confirmed breaches and newly observed leak-site claims.
Details
The labels separate confirmed incidents from claims, and the filters below narrow the source-linked records.
77 leak-site claims were observed in the last 24 hours, and 1,117 have been observed so far this month.
Newest first, by the date the source gave; each date says what it is (for example, listed by group, filed with the SEC, or submitted to the Department of Health and Human Services Office for Civil Rights, HHS OCR). A row whose source gave no date is placed by the date it was first tracked here, and a source date whose meaning we do not know is labeled "Date meaning unknown".
Unverified claim. Claimed by Storm.
Full stored descriptionPoca Valley Bank, a financial services organization in the United States, was claimed by the actor storm on September 29, 2026.
Unverified claim. Claimed by Netrunner.
Full stored descriptionM*** P**** M*** was claimed by netrunner on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Cry0.
Full stored descriptionMinMor Industries was claimed by cry0 on September 28, 2026.
Unverified claim. Claimed by Lockbit5.
Full stored descriptionCamorim Serviços Marítimos, a maritime sector organization in Brazil, was claimed by lockbit5 on September 28, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionArnold Center in the education sector had a breach claimed by qilin on September 28, 2026.
Unverified claim. Claimed by INC Ransom.
Full stored descriptionbakemyday.se, a Retail sector organization, was claimed by inc ransom on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Threeam.
Full stored descriptionSafe Scaffolding, a commercial and residential construction contractor, was claimed by threeam on September 28, 2026.
Unverified claim. Claimed by Threeam.
Full stored descriptionCoosalud, a health sector organization in Colombia, was claimed by threeam on September 28, 2026.
Unverified claim. Claimed by Threeam.
Full stored descriptionPistones Persan, an automotive parts company in Argentina, was claimed compromised by threeam on September 28, 2026.
Unverified claim. Claimed by Threeam.
Full stored descriptionMidwest Business Technology, an IT services provider in the United States, was claimed by threeam on September 28, 2026.
Unverified claim. Claimed by Threeam.
Full stored descriptionApexus.com, a business services organization, was claimed compromised by threeam on September 28, 2026.
Unverified claim. Claimed by Threeam.
Full stored descriptionBHN Expertise, an accounting firm, was claimed compromised by threeam on September 28, 2026.
Unverified claim. Claimed by Threeam.
Full stored descriptionSt James' Anglican School in Australia was claimed by threeam on September 28, 2026.
Unverified claim. Claimed by Play.
Full stored descriptionStarr Whitehouse Landscape Architects, a Construction & Engineering sector organization, was claimed by play on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Play.
Full stored descriptionEver Ready First Aid, a Healthcare sector organization, was claimed by play on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by INC Ransom.
Full stored descriptionAHEAD was claimed by inc ransom on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by INC Ransom.
Full stored descriptionnsbsd.org was claimed by inc ransom on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Doommageddon.
Full stored descriptionGoodrich Logistics was claimed by doommageddon on September 28, 2026.
Unverified claim. Claimed by Doommageddon.
Full stored descriptionChem Process Systems Pvt. Ltd. was claimed by doommageddon on September 28, 2026.
Unverified claim. Claimed by Medusalocker.
Full stored descriptionPalli Karma-Sahayak Foundation (PKSF) had data claimed on September 28, 2026, by medusalocker.
Unverified claim. Claimed by Qilin.
Full stored descriptionSKLG, a freight and logistics services organization, was claimed as breached by qilin on September 28, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionNew World Diagnostics was claimed by qilin on September 28, 2026.
Unverified claim. Claimed by Interlock.
Full stored descriptionThe Center for Kidney Care was claimed by interlock on September 28, 2026.
Unverified claim. Claimed by Payload.
Full stored descriptionNetech (Neeser Technik AG), a Swiss engineering and industrial services company, was claimed by payload on September 28, 2026.
Unverified claim. Claimed by Vladivostok.
Full stored descriptionОткрыто для работы was claimed by vladivostok on September 28, 2026.
Unverified claim. Claimed by Imnotavillian.
Full stored descriptionThe Italy Files was claimed by imnotavillian on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Imnotavillian.
Full stored descriptionTimmermans was claimed by imnotavillian on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Imnotavillian.
Full stored descriptionKlaassen was claimed by imnotavillian on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Imnotavillian.
Full stored descriptionMortel was claimed by imnotavillian on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Imnotavillian.
Full stored descriptionKraft, a Manufacturing sector organization, was claimed by imnotavillian on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Imnotavillian.
Full stored descriptionMotlik was claimed by imnotavillian on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Imnotavillian.
Full stored descriptionTabacko was claimed by imnotavillian on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Imnotavillian.
Full stored descriptionKokli was claimed by imnotavillian on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Imnotavillian.
Full stored descriptionAlontsau was claimed by imnotavillian on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Imnotavillian.
Full stored descriptionLiu was claimed by imnotavillian on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Imnotavillian.
Full stored descriptionBodin Fredrik was claimed by imnotavillian on September 28, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Emperador.
Full stored descriptionAmazon Informatica, an information technology solutions and managed services organization operating in Brazil, was claimed by the grupo emperador on September 28, 2026.
Unverified claim. Claimed by Storm.
Full stored descriptionUC Components was claimed by storm on September 28, 2026.
Unverified claim. Claimed by Global Cybernetic Collective.
Full stored descriptionglobal cybernetic collective claimed on September 28, 2026 that an unspecified organization faced potential exposure.
Unverified claim. Claimed by Global Cybernetic Collective.
Full stored descriptionVigilia, a healthcare and support services provider, was claimed as compromised by global cybernetic collective on September 28, 2026.
Unverified claim. Claimed by Global Cybernetic Collective.
Full stored descriptionHangzhou Qihan Biotech Co., Ltd. was claimed by global cybernetic collective on September 28, 2026.
Unverified claim. Claimed by Medusalocker.
Full stored descriptionJuntadeandalucia was claimed by medusalocker on September 28, 2026.
Unverified claim. Claimed by Medusalocker.
Full stored descriptionPremiumfruits was claimed by medusalocker on September 28, 2026.
Unverified claim. Claimed by Global Cybernetic Collective.
Full stored descriptionShanghai Tunnel Engineering Co Ltd was claimed as compromised by global cybernetic collective on September 28, 2026.
Unverified claim. Claimed by Global Cybernetic Collective.
Full stored descriptionAtcomm, a Shanghai-based public relations and digital marketing agency, was claimed by global cybernetic collective on September 28, 2026.
Unverified claim. Claimed by Global Cybernetic Collective.
Full stored descriptionThe Town of Sutton, Massachusetts was claimed by global cybernetic collective on September 28, 2026.
Unverified claim. Claimed by Global Cybernetic Collective.
Full stored descriptionSutton Public Schools, located in Sutton, Massachusetts, was claimed by global cybernetic collective on September 28, 2026.
Unverified claim. Claimed by SilentRansomGroup.
Full stored descriptionS...d, organization sector unknown, country unknown, claimed by SilentRansomGroup on September 28, 2026.
Unverified claim. Claimed by Pear.
Full stored descriptionKellys Home Center, a home appliances and furniture retailer, was claimed by pear on September 28, 2026.
No breach entries match your current filters. Reset search and filters to show all breach entries.
Per-incident affected-count reconciliation across government breach sources is limited by what each source publishes: HHS OCR reports a nationwide count; the Washington, Oregon, and Maryland Attorneys General each report only their own state's residents affected; the Maine Attorney General portal has been offline since 2026-06-12; and the California Attorney General publishes no affected-persons count. Where one incident is reported to more than one source it is cross-linked, and every count shown is only the number that source itself reported, labelled with the population it counts.
A "No longer listed" badge means the victim was present on the leak site and is now absent from the claiming group's current listing, confirmed across two consecutive checks. It is an observation only. It is not a confirmation that the organization paid, negotiated, or resolved the incident, and a group that takes down its own site can cause it. Removal is tracked for RansomLook claims, the only source that publishes a full per-group listing. A claim from another source carries no badge because its removal is not tracked, which is not evidence the victim is still listed.
Browse every record in stable static pages, for search engines and no-JavaScript access to the complete set.
Leak-site claim data:RansomLook(CC BY 4.0), withransomware.liveas a failover, credited voluntarily (it carries no attribution obligation). Claims are unverified until the affected organization confirms an incident. Confirmed breaches come from the California Attorney General breach portal, theHHS OCR Breach Portal(including its 42 CFR Part 2 records), theMaine Attorney Generalbreach portal (offline since 2026-06-12; no rows are currently in this index), theWashington Attorney Generalbreach notifications directory, theOregon Attorney Generalbreach directory, theMaryland Attorney Generalsecurity breach notice lists, Securities and Exchange Commission 8-K filings, andHave I Been Pwned(CC BY 4.0).
How this is computed
Confirmed incidents come from the named government and breach-directory sources. Leak-site entries remain unverified claims. Windows use the recorded disclosure or observation date, and missing dates remain explicit.
Method reviewed on .