Unverified claim. Claimed by Insomnia.
Full stored descriptionWiggins, Childs, Pantazis, Fisher, & Goldfarb LLC, a Business & Professional Services sector organization, was claimed by insomnia on September 15, 2026.
State now. Changed: +4 tier promotions, +1 known-exploited vulnerability addition, 66 leak-site claims, and 6 confirmed breaches since yesterday.
Why today matters · Incidents
Breaches and leak-site claims
Confirmed breaches and unverified leak-site claims in one labeled feed. Confirmed breaches come from the California Attorney General breach portal, the Department of Health and Human Services Office for Civil Rights (HHS OCR, including its 42 CFR Part 2 substance-use records), Securities and Exchange Commission (SEC) 8-K cyber-incident filings, and the Have I Been Pwned breach directory. Leak-site claims come from RansomLook and, as a failover, ransomware.live. Claims are always labeled and never presented as fact.
Why now: 50 leak-site claims were first observed in the last 24 hours.
13,365 confirmed breach records, all time6,420 unverified leak-site claims, all time
50 leak-site claims · last 24 hours359 leak-site claims · Month to date through 2026-09-15 23:57 UTC6,411 leak-site claims · Year to date through 2026-09-15 23:57 UTC53 groups posting claims · Month to date through 2026-09-15 23:57 UTC7 additional claims without a disclosure date
Claims tracked since 2024-04-19. The 24-hour figure is a rolling window; month and year are calendar periods (UTC), so on the first days of a month the 24-hour count can exceed the month-to-date count.
Of 13,365 confirmed breaches, 5,389 show "Not reported" for individuals affected because the portal published no count: all 5,388 California Attorney General rows plus 1 other government-source row. The gap is the source's, not omission on our part.
What changed
This page does not publish a page-specific change count. Open the daily comparison for newly confirmed breaches and newly observed leak-site claims.
Details
The labels separate confirmed incidents from claims, and the filters below narrow the source-linked records.
Ordered by the source-provided record date when present, even when its meaning is unknown; otherwise, by when this tracker first saw the record. Every displayed date states which event it represents.
Unverified claim. Claimed by Qilin.
Full stored descriptionTaurus Ibérica was claimed by qilin on September 15, 2026.
Unverified claim. Claimed by Akira.
Full stored descriptionPilot Precision, an industrial tools and machining equipment manufacturer, was claimed as compromised by akira on September 15, 2026.
Unverified claim. Claimed by Akira.
Full stored descriptionLazyboyz, a motorcycle retail and service business in Norway, was claimed by akira on September 15, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionQilin claimed Montana Civil Contractors on September 15, 2026.
Unverified claim. Claimed by Akira.
Full stored descriptionSouthern California Telephone Company, a telecommunications sector organization, was claimed by akira on September 15, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionResolve Law Group was claimed by qilin on September 15, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionADM is claimed to have been compromised by the Qilin group on September 15, 2026.
Unverified claim. Claimed by Metaencryptor.
Full stored descriptionSFA Engineering Corporation, a high-tech engineering sector organization based in South Korea, was claimed by metaencryptor on September 15, 2026.
Unverified claim. Claimed by Metaencryptor.
Full stored descriptionNippon Steel Corporation, a Manufacturing sector organization, was claimed by metaencryptor on September 15, 2026.
Unverified claim. Claimed by Arcusmedia.
Full stored descriptionAsada Sarapiqu, an organization focused on water supply services, claimed by arcusmedia on September 15, 2026.
CLAIMIncrys
Unverified claim. Claimed by Qilin.
Full stored descriptionIncrys was listed on the qilin leak site on September 15, 2026.
CLAIMBravo Group
Unverified claim. Claimed by Qilin.
Full stored descriptionBravo Group was reported as compromised by qilin on September 15, 2026.
Unverified claim. Claimed by Storm.
Full stored descriptionMcCarthy Tire Service, a Retail sector organization, was claimed by Storm on September 15, 2026.
Unverified claim. Claimed by Storm.
Full stored descriptionPANTHERx Rare, a pharmacy sector organization in the United States, was claimed by Storm on September 15, 2026.
Unverified claim. Claimed by Storm.
Full stored descriptionStorm claimed Insight Credit Union, a financial services organization in the United States, on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionACA Pescara, a public housing agency in the Province of Pescara, Italy, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionHattiesburg Eye Clinic, a Healthcare sector organization, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionIndic, a Houston-based industrial electronics manufacturer's representative firm, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionAurora Technologies, a materials fabrication and distribution company in the United States, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionGöteborgsregionens Tekniska Gymnasium, a Swedish educational institution, was claimed by the thegentlemen group on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionAlchin Long Group, an Australian hardware conglomerate, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionGelarti, a food and beverage company operating in Peru, was claimed as compromised by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionBalkan Polymers, a polymer recycling organization in Serbia, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionCedars Foods, an Agriculture sector organization, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionAgenzia Vittoria Assicurazioni, a Financial Services sector organization, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionDownrite Engineering, a specialty contractor in the United States, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionNeff & Drexel AG, a Swiss multimedia retailer and integrator, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionIveta, a confectionery and bakery organization in Croatia, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionColegio Humboldt, an educational institution in Brazil, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionHigh Oakham Primary School, a community primary school in Mansfield, Nottinghamshire, United Kingdom, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionTENTAC Co., Ltd., a robotics manufacturer based in Japan, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionDome Gold Mines, a Manufacturing sector organization, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionDang Invest Group, a Financial Services sector organization, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionBGR Energy Systems, an Indian power and engineering contractor, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionArdom Eilot, a Transportation & Logistics sector organization, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionTechnical Asia, a Technology sector organization, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionMultipla Contabilidade Empresarial, an accounting firm in Brazil, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionSomit, a Technology sector organization, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionWada Farms, an agricultural organization in the United States, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionAforpa, a French electrical engineering and installation contractor, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionApteki Mareshki, a Healthcare sector organization, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionLibrería Santa Fe, a book retail and distribution organization in Argentina, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionSarku Japan, an automotive sector organization in Japan, was the subject of a breach claim by the group thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionTMI Tecnicas Mecanicas Ilerdenses, a Manufacturing sector organization, was claimed by thegentlemen on September 15, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionMedSkin Solutions Dr. Suwelack AG, a biotechnology company in Germany, claimed by thegentlemen on September 15, 2026.
CLAIMGeieg
Unverified claim. Claimed by Qilin.
Full stored descriptionQilin posted a claim regarding Geieg on September 15, 2026.
Unverified claim. Claimed by Panzer.
Full stored descriptionPanzer claimed Honda (Peru) on September 15, 2026.
Unverified claim. Claimed by Iah6477.
Full stored descriptionveritiv, a Manufacturing sector organization, was claimed by iah6477 on September 15, 2026.
Unverified claim. Claimed by ShadowByt3$.
Full stored descriptionHandyTrac (Greystar Litchfield Park, AZ) was claimed by ShadowByt3$ on September 15, 2026.
No breach entries match your current filters. Reset search and filters to show all breach entries.
Per-incident affected-count reconciliation across government breach sources is not currently possible. The Maine Attorney General portal has been offline since 2026-06-12, and the California Attorney General publishes no affected-persons count. Where one incident is reported to more than one source it is cross-linked, and every count shown is only the number that source itself reported.
A "No longer listed" badge means the victim was present on the leak site and is now absent from the claiming group's current listing, confirmed across two consecutive checks. It is an observation only. It is not a confirmation that the organization paid, negotiated, or resolved the incident, and a group that takes down its own site can cause it. Removal is tracked for RansomLook claims, the only source that publishes a full per-group listing. A claim from another source carries no badge because its removal is not tracked, which is not evidence the victim is still listed.
Browse every record in stable static pages, for search engines and no-JavaScript access to the full corpus.
Leak-site claim data:RansomLook(CC BY 4.0), withransomware.liveas a failover, credited voluntarily (it carries no attribution obligation). Claims are unverified until the affected organization confirms an incident. Confirmed breaches come from the California Attorney General breach portal, theHHS OCR Breach Portal(including its 42 CFR Part 2 records), theMaine Attorney Generalbreach portal (offline since 2026-06-12; no rows are currently in this index), Securities and Exchange Commission 8-K filings, andHave I Been Pwned(CC BY 4.0).
How this is computed
Confirmed incidents come from the named government and breach-directory sources. Leak-site entries remain unverified claims. Windows use the recorded disclosure or observation date, and missing dates remain explicit.
Method reviewed on .