CYBERSECURITYTRACKER
TRACKING8,272 stories in this site build1,858 vulnerability news stories in this site build

State now. Changed: 0 tier promotions, 0 known-exploited vulnerability additions, 4 leak-site claims, and 0 confirmed breaches since yesterday.

Why today matters
Incidents

Breaches and leak-site claims

Compare confirmed breaches with clearly labelled, unverified leak-site claims, each linked to its named source.

Two kinds of record, always labeled: CONFIRMED breaches published by a regulator, the Securities and Exchange Commission (SEC), or Have I Been Pwned, and CLAIMS posted by ransomware groups on their leak sites, which stay unverified until the affected organization confirms. Sources are listed at the bottom of the page.

Why now: 30 leak-site claims were first observed in the last 24 hours.

21,918 confirmed breach records, all time35,443 unverified leak-site claims, all time
30 leak-site claims · last 24 hours32 leak-site claims · Month to date through 2026-10-02 02:49 UTC13,452 leak-site claims · Year to date through 2026-10-02 02:49 UTC18 groups posting claims · Month to date through 2026-10-02 02:49 UTC7 additional claims without a disclosure date

Claims tracked since 2020-01-12. The 24-hour figure is a rolling window; month and year are calendar periods (UTC), so on the first days of a month the 24-hour count can exceed the month-to-date count.

5,691 confirmed rows from government sources show "Not reported" because the source published no count. The California Attorney General portal, which never publishes one, supplied 5,424 confirmed rows.

What changed

This page does not publish a page-specific change count. Open the daily comparison for newly confirmed breaches and newly observed leak-site claims.

Details

The labels separate confirmed incidents from claims, and the filters below narrow the source-linked records.

Confirmed breaches by sector, rolling 7 days

Dated confirmed breaches this tracker collected per sector for 2026-09-25 through 2026-10-01, Coordinated Universal Time (UTC), compared with 2026-09-18 through 2026-09-24. Each row is dated by its own source: a Securities and Exchange Commission (SEC) filing date, a state Attorney General portal's reported date, a Department of Health and Human Services Office for Civil Rights (HHS OCR) submission date, or another government source's own disclosure date. The last column counts disclosures dated in the 24 hours before the data export; a row stored with a date but no time counts when that date is today or yesterday. Rows without a disclosure date are left out of every column, and "Unclassified" collects rows whose sector this tracker has not matched to its sector list.

SectorConfirmed, latest 7 daysPrior 7 daysChangeLast 24 hours
Financial Services51Up 400.0%0
Unclassified32Up 50.0%0
Healthcare24Down 50.0%0
Business & Professional Services14Down 75.0%0
Insurance13Down 66.7%0
Government11No change0
Agriculture10Up from none in the prior 7 days0
Education10Up from none in the prior 7 days0
Nonprofit10Up from none in the prior 7 days0
Technology10Up from none in the prior 7 days0

Showing 10 of 14 sectors with a dated confirmed breach in these windows, ordered by confirmed breaches in the latest 7 days, so sectors that went quiet sort last. Every one of them is indata/breaches_index/manifest.json.

30 leak-site claims were observed in the last 24 hours, and 32 have been observed so far this month.

Newest first, by the date the source gave; each date says what it is (for example, listed by group, filed with the SEC, or submitted to the Department of Health and Human Services Office for Civil Rights, HHS OCR). A row whose source gave no date is placed by the date it was first tracked here, and a source date whose meaning we do not know is labeled "Date meaning unknown".

Unverified claim. Claimed by Ransomhouse.

Full stored descriptionHospital Hermilio Valdizán, a Healthcare sector organization, was claimed by ransomhouse on October 1, 2026. No further details were available from the leak-site post.

RansomLookListed by group: First tracked here: source ↗
CLAIMEURODITEL/RESOTELECOMTechnology
Unverified claim. Claimed by KryBit.

Full stored descriptionEURODITEL/RESOTELECOM, a Technology sector organization, was claimed by krybit on October 1, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Kairos.

Full stored descriptionSlate Valley Unified School District, a public school district in Vermont, appeared on a kairos leak site on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
Unverified claim. Claimed by Morpheus.

Full stored descriptionSuperior Plating Technology CO was claimed by morpheus on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
Unverified claim. Claimed by Booba Team.

Full stored descriptionFUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel" had a claimed breach disclosed by booba team on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
Unverified claim. Claimed by Booba Team.

Full stored descriptionAssociated Gastroenterologists of Central New York, P.C., a healthcare organization operating in the United States, was claimed by booba team on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMAUDIT ENTITY: steelcoManufacturing
Unverified claim. Claimed by Audit Team.

Full stored descriptionSteelco was claimed by audit team on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMAUDIT ENTITY: ProMind ITUnclassified
Unverified claim. Claimed by Audit Team.

Full stored descriptionAUDIT ENTITY: ProMind IT was claimed by audit team on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
Unverified claim. Claimed by Akira.

Full stored descriptionKrycler, Ervin, Taubman & Kaminsky, an accounting, litigation support, and consulting firm in the United States, was claimed by akira on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMWesmarManufacturing
Unverified claim. Claimed by Akira.

Full stored descriptionWesmar, a marine technology organization, was claimed by akira on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMDPL GroupRetail
Unverified claim. Claimed by Akira.

Full stored descriptionDPL Group, a building materials and home improvement products supplier, was claimed by akira on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMTercaUnclassified
Unverified claim. Claimed by Ransomhouse.

Full stored descriptionTerca was claimed by ransomhouse on October 1, 2026. No further details were available from the leak-site post.

RansomLookListed by group: First tracked here: source ↗
Unverified claim. Claimed by KryBit.

Full stored descriptionDisk Precision Group, a Singapore-based organization, was claimed to be compromised by krybit on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMGuardian Pharmacy LLCHealthcare
Unverified claim. Claimed by INC Ransom.

Full stored descriptionGuardian Pharmacy LLC, a Healthcare sector organization, was claimed by inc ransom on October 1, 2026. No further details were available from the leak-site post.

Observed by RansomLook and ransomware.liveListed by group: First tracked here: source ↗
CLAIMDen Hartog IndustriesUnclassified
Unverified claim. Claimed by INC Ransom.

Full stored descriptionDen Hartog Industries was claimed by inc ransom on October 1, 2026. No further details were available from the leak-site post.

Observed by RansomLook and ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by INC Ransom.

Full stored descriptionNorthern Counties Health Care, a Healthcare sector organization, was claimed by inc ransom on October 1, 2026. No further details were available from the leak-site post.

Observed by RansomLook and ransomware.liveListed by group: First tracked here: source ↗
CLAIMPost Metal RecyclingManufacturing
Unverified claim. Claimed by INC Ransom.

Full stored descriptionPost Metal Recycling, a Manufacturing sector organization, was claimed by inc ransom on October 1, 2026. No further details were available from the leak-site post.

Observed by RansomLook and ransomware.liveListed by group: First tracked here: source ↗
CLAIMRimrock FoundationNonprofit
Unverified claim. Claimed by INC Ransom.

Full stored descriptionRimrock Foundation, a Nonprofit sector organization, was claimed by inc ransom on October 1, 2026. No further details were available from the leak-site post.

Observed by RansomLook and ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Booba Project.

Full stored descriptionFUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel", a Government sector organization, was claimed by Booba Project on October 1, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Booba Project.

Full stored descriptionASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P.C, a Healthcare sector organization, was claimed by Booba Project on October 1, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Redact.

Full stored descriptionGraybar Electric Company, Inc., an electrical equipment sector organization, was claimed by redact on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMC*ro *nty *esUnclassified
Unverified claim. Claimed by Nightspire.

Full stored descriptionC*ro *nty *es was claimed by nightspire on October 1, 2026. No further details were available from the leak-site post.

RansomLookListed by group: First tracked here: source ↗
CLAIMVPNEBusiness & Professional Services
Unverified claim. Claimed by Genesis.

Full stored descriptiongenesis claimed a breach of VPNE, a service management company, on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMTLC PerinatalHealthcare
Unverified claim. Claimed by Genesis.

Full stored descriptionTLC Perinatal, a healthcare services provider, was claimed as compromised by genesis on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMVera SciencePharmaceuticals & Life Sciences
Unverified claim. Claimed by Genesis.

Full stored descriptionVera Science, a biotechnology company, was claimed by the genesis group on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMOwens DistributorsManufacturing
Unverified claim. Claimed by Genesis.

Full stored descriptionOwens Distributors was claimed by genesis on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMparkdental.comHealthcare
Unverified claim. Claimed by Chaos.

Full stored descriptionPark Dental received a claim from the chaos group on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMLaboratorios Roemmers SAICFPharmaceuticals & Life Sciences
Unverified claim. Claimed by Aurora.

Full stored descriptionLaboratorios Roemmers SAICF, a pharmaceutical company in Argentina, was claimed to be breached by aurora on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMDynamic Office SolutionsManufacturing
Unverified claim. Claimed by Qilin.

Full stored descriptionDynamic Office Solutions was claimed by qilin on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMLA PONDEROSAManufacturing
Unverified claim. Claimed by Emperador.

Full stored descriptionGranja Avícola La Ponderosa, a poultry manufacturing organization in Venezuela, was claimed by emperador on October 1, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMconsilio.comLegal
Unverified claim. Claimed by Lockbit5.

Full stored descriptionConsilio.com was claimed on October 1, 2026 by lockbit5.

RansomLookListed by group: First tracked here: source ↗
CLAIMengic techTechnology
Unverified claim. Claimed by Black X.

Full stored descriptionengic tech, a Technology sector organization, was claimed by black x on October 1, 2026. No further details were available from the leak-site post.

RansomLookListed by group: First tracked here: source ↗
CLAIMZelhamConstruction & Engineering
Unverified claim. Claimed by The Gentlemen.

Full stored descriptionZelham, Inc., a U.S. hospitality renovation general contractor, was claimed by the gentlemen on September 30, 2026.

RansomLookListed by group: First tracked here: source ↗
Unverified claim. Claimed by Pear.

Full stored descriptionSoftware Answers, a Banyan Software Company, a Technology sector organization, was claimed by pear on September 30, 2026.

RansomLookListed by group: First tracked here: source ↗
Unverified claim. Claimed by N0n.

Full stored descriptionHouston Thyroid & Endocrine Specialists, a healthcare endocrinology organization in the United States, was claimed by n0n on September 30, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMThe Japan TimesMedia & Entertainment
Unverified claim. Claimed by Eclipse.

Full stored descriptionThe Japan Times, a media and publishing organization in Japan, was claimed by eclipse on September 30, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMSummit Electric SupplyEnergy & Utilities
Unverified claim. Claimed by Vexy Ransomware.

Full stored descriptionSummit Electric Supply, an electrical products and solutions provider, was claimed as compromised by Vexy Ransomware on September 30, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMSummit Electric SupplyConstruction & Engineering
Unverified claim. Claimed by Vexy.

Full stored descriptionSummit Electric Supply, a provider of electrical products and solutions, was claimed by vexy on September 30, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMwolfusofsky.deConstruction & Engineering
Unverified claim. Claimed by Safepay.

Full stored descriptionwolfusofsky.de was claimed by safepay on September 30, 2026.

RansomLookListed by group: First tracked here: source ↗
Unverified claim. Claimed by Kairos.

Full stored descriptionLe Centre National de l'Expertise Hospitalière (CNEH), a French healthcare sector organization, was claimed by kairos on September 30, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMTitusUnclassified
Unverified claim. Claimed by Play.

Full stored descriptionTitus was claimed by play on September 30, 2026. No further details were available from the leak-site post.

RansomLookListed by group: First tracked here: source ↗
CLAIMAirtech Mechanical ServicesConstruction & Engineering
Unverified claim. Claimed by Play.

Full stored descriptionAirtech Mechanical Services, a Construction & Engineering sector organization, was claimed by play on September 30, 2026. No further details were available from the leak-site post.

RansomLookListed by group: First tracked here: source ↗
CLAIMOrth AutomobileAutomotive
Unverified claim. Claimed by Play.

Full stored descriptionOrth Automobile, an Automotive sector organization, was claimed by play on September 30, 2026. No further details were available from the leak-site post.

RansomLookListed by group: First tracked here: source ↗
Unverified claim. Claimed by Interlock.

Full stored descriptionBlaise C. Bender, PC was claimed by interlock on September 30, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMBuford-Thompson Company, LTDConstruction & Engineering
Unverified claim. Claimed by Aurora.

Full stored descriptionBuford-Thompson Company, LTD, a construction general contractor in Texas, was claimed to have been compromised by aurora on September 30, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMecon-tec.comManufacturing
Unverified claim. Claimed by Safepay.

Full stored descriptionecon-tec.com, an industrial engineering and automation organization, was claimed by safepay on September 30, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMassist2enjoy.beRetail
Unverified claim. Claimed by Safepay.

Full stored descriptionassist2enjoy.be, a company operating in the wholesale and retail electrical household appliances sector in Belgium, was claimed by safepay on September 30, 2026.

RansomLookListed by group: First tracked here: source ↗
Unverified claim. Claimed by N0n.

Full stored descriptionMCAP, a mortgage securitization and servicing organization in Canada, was claimed by n0n on September 30, 2026.

RansomLookListed by group: First tracked here: source ↗
CLAIMDr Damiel PuglieseBusiness & Professional Services
Unverified claim. Claimed by Lamashtu.

Full stored descriptionDr Damiel Pugliese was claimed by lamashtu on September 30, 2026; the country and sector were not stated.

RansomLookListed by group: First tracked here: source ↗
CLAIMAstidental di SabbioneHealthcare
Unverified claim. Claimed by Lamashtu.

Full stored descriptionAstidental di Sabbione, a dental equipment distributor in Italy, was claimed as compromised by lamashtu on September 30, 2026.

RansomLookListed by group: First tracked here: source ↗

Per-incident affected-count reconciliation across government breach sources is limited by what each source publishes: HHS OCR reports a nationwide count; the Washington, Oregon, and Maryland Attorneys General each report only their own state's residents affected; the Maine Attorney General portal has been offline since 2026-06-12; and the California Attorney General publishes no affected-persons count. Where one incident is reported to more than one source it is cross-linked, and every count shown is only the number that source itself reported, labelled with the population it counts.

A "No longer listed" badge means the victim was present on the leak site and is now absent from the claiming group's current listing, confirmed across two consecutive checks. It is an observation only. It is not a confirmation that the organization paid, negotiated, or resolved the incident, and a group that takes down its own site can cause it. Removal is tracked for RansomLook claims, the only source that publishes a full per-group listing. A claim from another source carries no badge because its removal is not tracked, which is not evidence the victim is still listed.

Browse every record in stable static pages, for search engines and no-JavaScript access to the complete set.

Leak-site claim data:RansomLook(CC BY 4.0), withransomware.liveas a failover, credited and linked as its terms require (Source: Ransomware.live). Claims are unverified until the affected organization confirms an incident. Confirmed breaches come from the California Attorney General breach portal, theHHS OCR Breach Portal(including its 42 CFR Part 2 records), theMaine Attorney Generalbreach portal (offline since 2026-06-12; no rows are currently in this index), theWashington Attorney Generalbreach notifications directory, theOregon Attorney Generalbreach directory, theMaryland Attorney Generalsecurity breach notice lists, Securities and Exchange Commission 8-K filings, andHave I Been Pwned(CC BY 4.0).

How this is computed

Confirmed incidents come from the named government and breach-directory sources. Leak-site entries remain unverified claims. Windows use the recorded disclosure or observation date, and missing dates remain explicit.

Method reviewed on .

Glossary