Unverified claim. Claimed by Space Bears.
Full stored descriptionTomix / Grupo JOPER was claimed by space bears on September 23, 2026.
State now. Changed: +17 tier promotions, +4 known-exploited vulnerability additions, 1975 leak-site claims, and 4 confirmed breaches since yesterday.
Why today matters
Incidents
Breaches and leak-site claims
Compare confirmed breaches with clearly labelled, unverified leak-site claims, each linked to its named source.
Confirmed breaches and unverified leak-site claims in one labeled feed. Confirmed breaches come from the California Attorney General breach portal, the Department of Health and Human Services Office for Civil Rights (HHS OCR, including its 42 CFR Part 2 substance-use records), Securities and Exchange Commission (SEC) 8-K cyber-incident filings, and the Have I Been Pwned breach directory. Leak-site claims come from RansomLook and, as a failover, ransomware.live. Claims are always labeled and never presented as fact.
Why now: 55 leak-site claims were first observed in the last 24 hours.
13,406 confirmed breach records, all time8,476 unverified leak-site claims, all time
55 leak-site claims · last 24 hours655 leak-site claims · Month to date through 2026-09-23 21:19 UTC7,132 leak-site claims · Year to date through 2026-09-23 21:19 UTC78 groups posting claims · Month to date through 2026-09-23 21:19 UTC7 additional claims without a disclosure date
Claims tracked since 2021-09-09. The 24-hour figure is a rolling window; month and year are calendar periods (UTC), so on the first days of a month the 24-hour count can exceed the month-to-date count.
Of 13,406 confirmed breaches, 5,404 show "Not reported" for individuals affected because the portal published no count: all 5,403 California Attorney General rows plus 1 other government-source row. The gap is the source's, not omission on our part.
What changed
This page does not publish a page-specific change count. Open the daily comparison for newly confirmed breaches and newly observed leak-site claims.
Details
The labels separate confirmed incidents from claims, and the filters below narrow the source-linked records.
Ordered by the source-provided record date when present, even when its meaning is unknown; otherwise, by when this tracker first saw the record. Every displayed date states which event it represents.
Unverified claim. Claimed by Brain Cipher.
Full stored descriptionGoldstarfinancial.com had a claimed breach by brain cipher on September 23, 2026.
Unverified claim. Claimed by Payoutsking.
Full stored descriptionM****n was claimed by payoutsking on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Rhysida.
Full stored descriptionLegis, a Latin American legal and business publisher, was claimed by rhysida on September 23, 2026.
Unverified claim. Claimed by Lockbit5.
Full stored descriptionanery.com.br was claimed by lockbit5 on September 23, 2026.
Unverified claim. Claimed by Spirals.
Full stored descriptionSpirals claimed on September 23, 2026 to have breached Asyad Group, a logistics organization in Oman.
Unverified claim. Claimed by Clop.
Full stored descriptionALDOGROUP.COM(ALDOSHOES.COM) was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionBRILLONCONSUMER.COM(BRILLONCONSUMER.COM) was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionSUUNTO.CN(SUUNTO.COM) was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionSMAPCENTER-UAH.EDU was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionDAD-CO.TH was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionCLOUD-CLEARWAYGROUP.COM was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionHODERO-HOLDINGS-LTD was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionKVHELI-WORDPRESS.COM was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionCCCM-BC.CA was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionBRINKS-CO.NZ was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionSAUL-ORG.UK was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionCCED-COM.OM was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionINFINIGATE.CH(INFINIGATE.CO.UK) was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionSWEETLAKE-LAND-AND-OIL-CO-INC was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionKIRKLAND-AND-ELLIS.LLP was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionPALIG.COM was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionCOLUMBIABANK.COM(UMPQUABANK.COM) was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionUNISALLE-EDU.CO was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionVALLEY-TRUCK-AND-TRACTOR was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionKSS-ARCHITECTS-LLP was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionELANDRETAIL.COM-KMALL24.COM was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionTRANSPORT-NSW.GOV.AU was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Clop.
Full stored descriptionAMEY-CO.UK was claimed by clop on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by EndZone.
Full stored descriptionEndZone claimed Trump Mobile, a United States mobile virtual network operator, on September 23, 2026.
Unverified claim. Claimed by INC Ransom.
Full stored descriptionLemon Law was claimed by inc ransom on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Blacklocks.
Full stored descriptionApollo 21 – Quality Truck, Bus & Trailer Spare Parts South Africa was claimed by blacklocks on September 23, 2026.
Unverified claim. Claimed by Akira.
Full stored descriptionApex Litigation Support, a litigation services provider, was claimed to be breached by akira on September 23, 2026.
Unverified claim. Claimed by Akira.
Full stored descriptionUrban Engineering, an engineering services company headquartered in Annandale, Virginia, was claimed on September 23, 2026 by akira.
Unverified claim. Claimed by Akira.
Full stored descriptionHIT dd, an entertainment and gaming company based in Nova Gorica, Slovenia, was claimed by akira on September 23, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionInkript was claimed by qilin on September 23, 2026.
Unverified claim. Claimed by Booba Team.
Full stored descriptionCOSEF - Consorzio di Sviluppo Economico del Friuli was claimed by booba team on September 23, 2026.
Unverified claim. Claimed by Booba Team.
Full stored descriptionThe Merrimack County was claimed by booba team on September 23, 2026.
Unverified claim. Claimed by Booba Team.
Full stored descriptionbooba team claimed access to Smart Eye Care, an optometry sector organization, on September 23, 2026.
Unverified claim. Claimed by Booba Team.
Full stored descriptionWashington County was claimed by booba team on September 23, 2026.
Unverified claim. Claimed by Arcus Media.
Full stored descriptionAGROFRUTO SAC was claimed by arcus media on September 23, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Arcusmedia.
Full stored descriptionAGROFRUTO SAC, an agroindustrial company in Peru, was claimed by arcusmedia on September 23, 2026.
Unverified claim. Claimed by Booba Project.
Full stored descriptionCOSEF - Consorzio di Sviluppo Economico del Friuli was claimed by Booba Project on September 23, 2026.
Unverified claim. Claimed by Booba Project.
Full stored descriptionSmart Eye Care, operating in the optometry sector, was claimed to be breached by Booba Project on September 23, 2026.
Unverified claim. Claimed by Booba Project.
Full stored descriptionWashington County, Government Administration sector, was named in a claim by Booba Project on September 23, 2026.
Unverified claim. Claimed by Emperador.
Full stored descriptionRECEITA FEDERAL DO BRASIL was claimed by emperador on September 23, 2026.
Unverified claim. Claimed by Medusalocker.
Full stored descriptionAokkef was claimed to be breached by medusalocker on September 23, 2026.
Unverified claim. Claimed by Medusalocker.
Full stored descriptionSeznam was claimed by medusalocker on September 23, 2026.
Unverified claim. Claimed by Medusalocker.
Full stored descriptionAbv, a Bulgarian organization, was claimed by medusalocker on September 23, 2026.
Unverified claim. Claimed by Shinyhunters.
Full stored descriptionFresenius Medical Care was claimed by shinyhunters on September 23, 2026.
No breach entries match your current filters. Reset search and filters to show all breach entries.
Per-incident affected-count reconciliation across government breach sources is not currently possible. The Maine Attorney General portal has been offline since 2026-06-12, and the California Attorney General publishes no affected-persons count. Where one incident is reported to more than one source it is cross-linked, and every count shown is only the number that source itself reported.
A "No longer listed" badge means the victim was present on the leak site and is now absent from the claiming group's current listing, confirmed across two consecutive checks. It is an observation only. It is not a confirmation that the organization paid, negotiated, or resolved the incident, and a group that takes down its own site can cause it. Removal is tracked for RansomLook claims, the only source that publishes a full per-group listing. A claim from another source carries no badge because its removal is not tracked, which is not evidence the victim is still listed.
Browse every record in stable static pages, for search engines and no-JavaScript access to the full corpus.
Leak-site claim data:RansomLook(CC BY 4.0), withransomware.liveas a failover, credited voluntarily (it carries no attribution obligation). Claims are unverified until the affected organization confirms an incident. Confirmed breaches come from the California Attorney General breach portal, theHHS OCR Breach Portal(including its 42 CFR Part 2 records), theMaine Attorney Generalbreach portal (offline since 2026-06-12; no rows are currently in this index), Securities and Exchange Commission 8-K filings, andHave I Been Pwned(CC BY 4.0).
How this is computed
Confirmed incidents come from the named government and breach-directory sources. Leak-site entries remain unverified claims. Windows use the recorded disclosure or observation date, and missing dates remain explicit.
Method reviewed on .