Concise previewSIA Medical Centre, a healthcare organization in Australia, was claimed by rhysida on August 13, 2026.
Breaches and leak-site claims
Confirmed breaches and unverified leak-site claims in one labeled feed. Confirmed breaches come from the California Attorney General breach portal, the Department of Health and Human Services Office for Civil Rights (HHS OCR, including its 42 CFR Part 2 substance-use records), Securities and Exchange Commission (SEC) 8-K cyber-incident filings, and the Have I Been Pwned breach directory. Leak-site claims come from RansomLook and, as a failover, ransomware.live. Claims are always labeled and never presented as fact.
Claims tracked since 2026-01-01.
Of 13,212 confirmed breaches, 5,333 come from the California Attorney General portal, which publishes no individuals-affected count. Those rows, and any other government-source row whose portal did not publish a count, read "Not reported" here (5,334 in all): the source's own gap, not omission on our part.
Filter to "Removed from leak site" to surface victims a ransomware group has taken off its own leak site. A removal can signal that the incident was resolved or the ransom paid, but a group can also remove a victim after a fake or withdrawn claim, or by taking down its own site, so it is an observation only, never a guarantee or confirmation of payment.
Ordered by the source-provided record date when present, even when its meaning is unknown; otherwise, by when this tracker first saw the record. Every displayed date states which event it represents.
Concise previewGB Group S.A, a conglomerate organization in Haiti, was claimed by dragonforce on August 13, 2026.
Concise previewD & J Beverage Service was claimed by qilin on August 13, 2026.
Concise previewCF Supply, a construction products company based in Texas, was claimed by akira on August 13, 2026.
Concise previewZara Investment Holding, a tourism and hospitality company based in Jordan, was claimed by payload on August 13, 2026.
Concise previewDAISEN, a manufacturer of greenhouses, vinyl houses, and daylight architecture, was claimed compromised by AiLock on August 13, 2026.
Concise previewAiLock claims Yaomasa, a supermarket chain in Japan, on August 13, 2026.
Concise previewSafeware Inc., a United States-based provider of safety and security solutions, was claimed by the actor thegentlemen on August 13, 2026.
Concise previewCompunnel, an information technology consulting and staffing firm headquartered in Plainsboro, New Jersey, United States, was claimed by incransom on August 13, 2026.
Concise previewPortable Intelligence Inc, a Canadian software company in the warehouse management and automation sector, was claimed by blacknevas on August 13, 2026.
Concise previewLaw firm Riker Danzig Scherer Hyland & Perretti was claimed by SilentRansomGroup on August 12, 2026.
Concise previewHightech Signs was claimed by kairos on August 12, 2026.
Concise previewRiker Danzig LLP, a law firm in the United States, was claimed by SilentRansomGroup on August 12, 2026.
Concise previewGreater Austin Merchants Cooperative Association was claimed by incransom on August 12, 2026.
Concise previewWestbrook Greenhouse Systems, a greenhouse design and manufacturing organization in Canada, was claimed by blacknevas on August 12, 2026.
Concise previewEnteroptyx Ophthalmology Products, an ophthalmology sector organization, was named in a claim on August 12, 2026.
Concise previewJack Rutherford Customs Brokers Ltd., a logistics and customs brokerage organization in Canada, was claimed by blacknevas on August 12, 2026.
Concise previewQilin claimed United Association Local Union 345 on August 12, 2026.
Concise previewBrighton East Dental Clinic (BEDC.COM.AU), a dental practice in Australia, was claimed on August 12, 2026.
Concise previewDiabetes and Metabolism Specialists, a medical clinic in the hospitals and physicians clinics sector located in San Antonio, TX, was claimed on August 12, 2026.
Concise previewclop claimed access to AOL.COM, a web services and media company based in the United States, on August 12, 2026.
Concise previewGATE7LLC.COMGBBEV.COM was claimed by clop on August 12, 2026.
Concise previewENTERATEK.MXESBERBEVERAGE.COM was claimed by clop on August 12, 2026.
Concise previewNUVITIA.COM was claimed by clop on August 12, 2026.
Concise previewIPMSOLUTIONS.SK was claimed by clop on August 12, 2026.
Concise previewECCELLENT.COM was claimed by clop on August 12, 2026.
Concise previewSTNET.IT was claimed by clop on August 12, 2026.
Concise previewQCPL.IN was claimed as compromised by clop on August 12, 2026.
Concise previewFluidLogic.com, a sporting goods and defense equipment company in the United States, was subject to a claim posted on August 12, 2026.
Concise previewClop claimed MIDLANDIND.COM.AU on August 12, 2026.
Concise previewITKHOLDING.HU was claimed by clop on August 12, 2026.
Concise previewG3 Aerospace was listed on an August 12, 2026 leak-site claim.
Concise previewclop claimed on August 12, 2026 to have compromised ARCHERGREY.COM.
Concise previewOMNITANKER.COM was claimed by clop on August 12, 2026.
Concise previewLifeStraw.com, a consumer goods organization in the United States, had a breach claimed on August 12, 2026.
Concise previewSPKAA.COM was listed on a leak site by clop on August 12, 2026.
Concise previewIVALUESYS.COM was listed in a clop leak-site post on August 12, 2026.
Concise previewclop claimed NUOVACMM.COM on August 12, 2026.
Concise previewThermos.com, a housewares company headquartered in the United States, was claimed by clop on August 12, 2026.
Concise previewWATERLANDPE.COM was named in a claim posted on August 12, 2026.
Concise preview9ALTITUDES.COM, a technology consulting and software implementation organization in Belgium, was claimed by clop on August 12, 2026.
Concise previewIntellihot.com, a commercial and residential tankless water heating solutions company in the United States, was claimed as compromised on August 12, 2026.
Concise previewIntelligent Growth Solutions, an agricultural technology sector organization in the United Kingdom, was claimed by clop on August 12, 2026.
Concise previewHONGHE-TECH.COM was claimed by clop on August 12, 2026.
Concise previewAtomberg.com, a consumer electronics company in India, received a claim on August 12, 2026.
Concise previewClover.com, a financial technology sector organization in the United States, was claimed on August 12, 2026.
Concise previewJPMGROUP.CO.IN was claimed by clop on August 12, 2026.
Concise previewBRILLONCONSUMER.COM was claimed by clop on August 12, 2026.
Concise previewSuunto.cn (Suunto.com), a sports equipment manufacturer, was claimed compromised by clop on August 12, 2026.
Concise previewClop claimed SMAPCENTER.UAH.EDU on August 12, 2026.
Per-incident affected-count reconciliation across government breach sources is not currently possible. The Maine Attorney General portal has been offline since 2026-06-12, and the California Attorney General publishes no affected-persons count. Where one incident is reported to more than one source it is cross-linked, and every count shown is only the number that source itself reported.
A "No longer listed" badge means the victim was present on the leak site and is now absent from the claiming group's current listing, confirmed across two consecutive checks. It is an observation only. It is not a confirmation that the organization paid, negotiated, or resolved the incident, and a group that takes down its own site can cause it. Removal is tracked for RansomLook claims, the only source that publishes a full per-group listing. A claim from another source carries no badge because its removal is not tracked, which is not evidence the victim is still listed.
Leak-site claim data:RansomLook(CC BY 4.0), withransomware.liveas a failover, credited voluntarily (it carries no attribution obligation). Claims are unverified until the affected organization confirms an incident. Confirmed breaches come from the California Attorney General breach portal, the Department of Health and Human Services Office for Civil Rights (including its 42 CFR Part 2 records), Securities and Exchange Commission 8-K filings, andHave I Been Pwned(CC BY 4.0).