CYBERSECURITYTRACKER
TRACKING4,054 stories762 vuln stories
Incidents

Breaches and leak-site claims

Confirmed breaches and unverified leak-site claims in one labeled feed. Confirmed breaches come from the California Attorney General breach portal, the Department of Health and Human Services Office for Civil Rights (HHS OCR, including its 42 CFR Part 2 substance-use records), Securities and Exchange Commission (SEC) 8-K cyber-incident filings, and the Have I Been Pwned breach directory. Leak-site claims come from RansomLook and, as a failover, ransomware.live. Claims are always labeled and never presented as fact.

13212 confirmed5469 unverified claims
11 victims last 24 hours533 victims · Month to date through 2026-08-13 20:36 UTC5,462 victims · Year to date through 2026-08-13 20:36 UTC54 groups active · Month to date through 2026-08-13 20:36 UTC7 additional claims without a disclosure date

Claims tracked since 2026-01-01.

Of 13,212 confirmed breaches, 5,333 come from the California Attorney General portal, which publishes no individuals-affected count. Those rows, and any other government-source row whose portal did not publish a count, read "Not reported" here (5,334 in all): the source's own gap, not omission on our part.

Filter to "Removed from leak site" to surface victims a ransomware group has taken off its own leak site. A removal can signal that the incident was resolved or the ransom paid, but a group can also remove a victim after a fake or withdrawn claim, or by taking down its own site, so it is an observation only, never a guarantee or confirmation of payment.

Ordered by the source-provided record date when present, even when its meaning is unknown; otherwise, by when this tracker first saw the record. Every displayed date states which event it represents.

CLAIMSIA Medical CentreHealthcare
Unverified claim. Claimed by Rhysida.

Concise previewSIA Medical Centre, a healthcare organization in Australia, was claimed by rhysida on August 13, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMGB Group S.AFinancial Services
Unverified claim. Claimed by Dragonforce.

Concise previewGB Group S.A, a conglomerate organization in Haiti, was claimed by dragonforce on August 13, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMD & J Beverage ServiceHospitality
Unverified claim. Claimed by Qilin.

Concise previewD & J Beverage Service was claimed by qilin on August 13, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMCF SupplyRetail
Unverified claim. Claimed by Akira.

Concise previewCF Supply, a construction products company based in Texas, was claimed by akira on August 13, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMZara Investment HoldingFinancial Services
Unverified claim. Claimed by Payload.

Concise previewZara Investment Holding, a tourism and hospitality company based in Jordan, was claimed by payload on August 13, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMDAISENTechnology
Unverified claim. Claimed by AiLock.

Concise previewDAISEN, a manufacturer of greenhouses, vinyl houses, and daylight architecture, was claimed compromised by AiLock on August 13, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMYaomasaRetail
Unverified claim. Claimed by AiLock.

Concise previewAiLock claims Yaomasa, a supermarket chain in Japan, on August 13, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMSafewareTechnology
Unverified claim. Claimed by Thegentlemen.

Concise previewSafeware Inc., a United States-based provider of safety and security solutions, was claimed by the actor thegentlemen on August 13, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMclgroupBusiness & Professional Services
Unverified claim. Claimed by Incransom.

Concise previewCompunnel, an information technology consulting and staffing firm headquartered in Plainsboro, New Jersey, United States, was claimed by incransom on August 13, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMRiker Danzig Scherer Hyland & PerrettiBusiness & Professional Services
Unverified claim. Claimed by SilentRansomGroup.

Concise previewLaw firm Riker Danzig Scherer Hyland & Perretti was claimed by SilentRansomGroup on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMHightech SignsManufacturing
Unverified claim. Claimed by Kairos.

Concise previewHightech Signs was claimed by kairos on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMRiker Danzig LLPBusiness & Professional Services
Unverified claim. Claimed by SilentRansomGroup.

Concise previewRiker Danzig LLP, a law firm in the United States, was claimed by SilentRansomGroup on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMgamaus.comTechnology
Unverified claim. Claimed by Incransom.

Concise previewGreater Austin Merchants Cooperative Association was claimed by incransom on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Qilin.

Concise previewQilin claimed United Association Local Union 345 on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMBEDC.COM.AUEnergy & Utilities
Unverified claim. Claimed by Incransom.

Concise previewBrighton East Dental Clinic (BEDC.COM.AU), a dental practice in Australia, was claimed on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Incransom.

Concise previewDiabetes and Metabolism Specialists, a medical clinic in the hospitals and physicians clinics sector located in San Antonio, TX, was claimed on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMAOL.COMTechnology
Unverified claim. Claimed by Clop.

Concise previewclop claimed access to AOL.COM, a web services and media company based in the United States, on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Clop.

Concise previewGATE7LLC.COMGBBEV.COM was claimed by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Clop.

Concise previewENTERATEK.MXESBERBEVERAGE.COM was claimed by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMNUVITIA.COMTechnology
Unverified claim. Claimed by Clop.

Concise previewNUVITIA.COM was claimed by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMIPMSOLUTIONS.SKBusiness & Professional Services
Unverified claim. Claimed by Clop.

Concise previewIPMSOLUTIONS.SK was claimed by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Clop.

Concise previewECCELLENT.COM was claimed by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMSTNET.ITTechnology
Unverified claim. Claimed by Clop.

Concise previewSTNET.IT was claimed by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMQCPL.INManufacturing
Unverified claim. Claimed by Clop.

Concise previewQCPL.IN was claimed as compromised by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMFLUIDLOGIC.COMTechnology
Unverified claim. Claimed by Clop.

Concise previewFluidLogic.com, a sporting goods and defense equipment company in the United States, was subject to a claim posted on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMMIDLANDIND.COM.AUManufacturing
Unverified claim. Claimed by Clop.

Concise previewClop claimed MIDLANDIND.COM.AU on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMITKHOLDING.HUTechnology
Unverified claim. Claimed by Clop.

Concise previewITKHOLDING.HU was claimed by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMG3AEROSPACE.COMGovernment
Unverified claim. Claimed by Clop.

Concise previewG3 Aerospace was listed on an August 12, 2026 leak-site claim.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Clop.

Concise previewclop claimed on August 12, 2026 to have compromised ARCHERGREY.COM.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMOMNITANKER.COMTransportation & Logistics
Unverified claim. Claimed by Clop.

Concise previewOMNITANKER.COM was claimed by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMLIFESTRAW.COMRetail
Unverified claim. Claimed by Clop.

Concise previewLifeStraw.com, a consumer goods organization in the United States, had a breach claimed on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Clop.

Concise previewSPKAA.COM was listed on a leak site by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMIVALUESYS.COMTechnology
Unverified claim. Claimed by Clop.

Concise previewIVALUESYS.COM was listed in a clop leak-site post on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Clop.

Concise previewclop claimed NUOVACMM.COM on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMTHERMOS.COMRetail
Unverified claim. Claimed by Clop.

Concise previewThermos.com, a housewares company headquartered in the United States, was claimed by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Clop.

Concise previewWATERLANDPE.COM was named in a claim posted on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIM9ALTITUDES.COMTechnology
Unverified claim. Claimed by Clop.

Concise preview9ALTITUDES.COM, a technology consulting and software implementation organization in Belgium, was claimed by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMINTELLIHOT.COMHospitality
Unverified claim. Claimed by Clop.

Concise previewIntellihot.com, a commercial and residential tankless water heating solutions company in the United States, was claimed as compromised on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMINTELLIGENTGROWTHSOLUTIONS.COMBusiness & Professional Services
Unverified claim. Claimed by Clop.

Concise previewIntelligent Growth Solutions, an agricultural technology sector organization in the United Kingdom, was claimed by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMHONGHE-TECH.COMTechnology
Unverified claim. Claimed by Clop.

Concise previewHONGHE-TECH.COM was claimed by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMATOMBERG.COMManufacturing
Unverified claim. Claimed by Clop.

Concise previewAtomberg.com, a consumer electronics company in India, received a claim on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMCLOVER.COMRetail
Unverified claim. Claimed by Clop.

Concise previewClover.com, a financial technology sector organization in the United States, was claimed on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMJPMGROUP.CO.INFinancial Services
Unverified claim. Claimed by Clop.

Concise previewJPMGROUP.CO.IN was claimed by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
Unverified claim. Claimed by Clop.

Concise previewSuunto.cn (Suunto.com), a sports equipment manufacturer, was claimed compromised by clop on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗
CLAIMSMAPCENTER.UAH.EDUEducation
Unverified claim. Claimed by Clop.

Concise previewClop claimed SMAPCENTER.UAH.EDU on August 12, 2026.

ransomware.liveListed by group: First tracked here: source ↗

Per-incident affected-count reconciliation across government breach sources is not currently possible. The Maine Attorney General portal has been offline since 2026-06-12, and the California Attorney General publishes no affected-persons count. Where one incident is reported to more than one source it is cross-linked, and every count shown is only the number that source itself reported.

A "No longer listed" badge means the victim was present on the leak site and is now absent from the claiming group's current listing, confirmed across two consecutive checks. It is an observation only. It is not a confirmation that the organization paid, negotiated, or resolved the incident, and a group that takes down its own site can cause it. Removal is tracked for RansomLook claims, the only source that publishes a full per-group listing. A claim from another source carries no badge because its removal is not tracked, which is not evidence the victim is still listed.

Leak-site claim data:RansomLook(CC BY 4.0), withransomware.liveas a failover, credited voluntarily (it carries no attribution obligation). Claims are unverified until the affected organization confirms an incident. Confirmed breaches come from the California Attorney General breach portal, the Department of Health and Human Services Office for Civil Rights (including its 42 CFR Part 2 records), Securities and Exchange Commission 8-K filings, andHave I Been Pwned(CC BY 4.0).