CLAIMVitar Group
Unverified claim. Claimed by Qilin.
Full stored descriptionVitar Group was claimed by Qilin on September 14, 2026.
State now. Changed: +62 tier promotions, 0 known-exploited vulnerability additions, 18 leak-site claims, and 3 confirmed breaches between the two successful daily updates shown.
Why today matters · Incidents
Breaches and leak-site claims
Confirmed breaches and unverified leak-site claims in one labeled feed. Confirmed breaches come from the California Attorney General breach portal, the Department of Health and Human Services Office for Civil Rights (HHS OCR, including its 42 CFR Part 2 substance-use records), Securities and Exchange Commission (SEC) 8-K cyber-incident filings, and the Have I Been Pwned breach directory. Leak-site claims come from RansomLook and, as a failover, ransomware.live. Claims are always labeled and never presented as fact.
Why now: 6 leak-site claims were first observed in the last 24 hours.
13,356 confirmed breach records, all time6,354 unverified leak-site claims, all time
6 leak-site claims · last 24 hours293 leak-site claims · Month to date through 2026-09-14 19:51 UTC6,345 leak-site claims · Year to date through 2026-09-14 19:51 UTC50 groups posting claims · Month to date through 2026-09-14 19:51 UTC7 additional claims without a disclosure date
Claims tracked since 2024-04-19. The 24-hour figure is a rolling window; month and year are calendar periods (UTC), so on the first days of a month the 24-hour count can exceed the month-to-date count.
Of 13,356 confirmed breaches, 5,384 show "Not reported" for individuals affected because the portal published no count: all 5,383 California Attorney General rows plus 1 other government-source row. The gap is the source's, not omission on our part.
What changed
This page does not publish a page-specific change count. Open the daily comparison for newly confirmed breaches and newly observed leak-site claims.
Details
The labels separate confirmed incidents from claims, and the filters below narrow the source-linked records.
Ordered by the source-provided record date when present, even when its meaning is unknown; otherwise, by when this tracker first saw the record. Every displayed date states which event it represents.
Unverified claim. Claimed by Booba Project.
Full stored descriptionMestechkin Law Group P.C., a Business & Professional Services sector organization, was claimed by Booba Project on September 14, 2026.
Unverified claim. Claimed by Booba Project.
Full stored descriptionAtlas Ocean Voyages, a Hospitality sector organization, was claimed by Booba Project on September 14, 2026.
Unverified claim. Claimed by AuditTeam.
Full stored descriptionNe***ox, a Technology sector organization, was claimed by AuditTeam on September 14, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Qilin.
Full stored descriptionAlicotrans was listed on the qilin leak site on September 14, 2026.
Unverified claim. Claimed by Panzer.
Full stored descriptionCerámicas Kantu, a Manufacturing sector organization, was claimed by Panzer on September 13, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionGilco Scaffolding was claimed by qilin on September 13, 2026.
Unverified claim. Claimed by Emperador.
Full stored descriptionNavitrans, a Transportation & Logistics sector organization, was claimed by emperador on September 13, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionKashkha, a multinational modest fashion brand, was claimed by krybit on September 13, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionQilin claimed CARIDRO VAL DE LOIRE on September 13, 2026.
Unverified claim. Claimed by AuditTeam.
Full stored descriptionAuditTeam claimed on September 13, 2026 to have obtained data from Paid Victim F9CF4B639CAC1B18.
Unverified claim. Claimed by AuditTeam.
Full stored descriptionAuditTeam claimed Paid Victim FDC699DE3A112669 on September 13, 2026.
Unverified claim. Claimed by AuditTeam.
Full stored descriptionvi***in, a Transportation & Logistics sector organization, was claimed by AuditTeam on September 13, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Barracuda.
Full stored descriptioni2i-systems was claimed to have been breached by Barracuda on September 13, 2026.
Unverified claim. Claimed by Shinyhunters.
Full stored descriptionKimberly-Clark was claimed by shinyhunters on September 13, 2026.
CLAIMINCOR Group
Unverified claim. Claimed by Doommageddon.
Full stored descriptionINCOR Group, sector unknown, country unknown, claimed by Doommageddon on September 13, 2026.
Unverified claim. Claimed by Vexy Ransomware.
Full stored descriptionStrad Solutions, a cloud hosting and managed IT services provider, was claimed compromised by Vexy Ransomware on September 12, 2026.
Unverified claim. Claimed by Emperador.
Full stored descriptionNexbex Solutions Private Limited, a technology consulting and software engineering firm in India, was claimed by emperador on September 12, 2026.
Unverified claim. Claimed by Rhysida.
Full stored descriptionAxdia International, a German electronics company, was claimed to have been compromised by the Rhysida group on September 12, 2026.
Unverified claim. Claimed by Unsafe.
Full stored descriptionunsafe claimed access to watchops.com on September 12, 2026.
CLAIMTE***PB
Unverified claim. Claimed by AuditTeam.
Full stored descriptionTE***PB was claimed by AuditTeam on September 12, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by KryBit.
Full stored descriptionTiflis Palace, a hotel organization in Georgia, was claimed by krybit on September 12, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionTender, a Mexican butcher shop chain, was claimed by krybit on September 12, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionCapricorn Logistics Pvt. Ltd., a logistics and supply chain organization in India, was claimed by krybit on September 12, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionThe Ibn Sina Trust, a healthcare organization in Bangladesh, was listed by krybit on September 12, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionLa Sultana Hotel Group, a luxury hotel organization in Morocco, was claimed by krybit on September 12, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionERACM, a French regional drama school, was claimed as compromised by krybit on September 12, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionpss.ht, a Business & Professional Services sector organization, was claimed by krybit on September 12, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionMetalware Corporation Inc., an industrial shelving manufacturer in Canada, was claimed by krybit on September 12, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionIntherpro LLC, an engineering and fire protection organization based in the United Arab Emirates, was claimed by krybit on September 12, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionmeridian16.hr, a Business & Professional Services sector organization, was claimed by krybit on September 12, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionEgyptian Airports Company, a state-owned enterprise in the aviation sector, claimed by krybit on September 12, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionSwadeshi Civil Infrastructure Private Limited was claimed to be compromised by krybit on September 12, 2026.
Unverified claim. Claimed by Global.
Full stored descriptionSutton Public Schools, located in the United States, was claimed by global on September 12, 2026.
Unverified claim. Claimed by Medusalocker.
Full stored description瑞祥机电 (Ruixiang Jidian), a Manufacturing sector organization, was claimed by medusalocker on September 12, 2026.
Unverified claim. Claimed by Medusalocker.
Full stored descriptionAbourametals, a Manufacturing sector organization, was claimed by medusalocker on September 12, 2026.
Unverified claim. Claimed by Medusalocker.
Full stored descriptionFrisby Roofing (Frisby Construction LLC), a residential roofing contractor in the construction sector operating in the United States, was claimed by medusalocker on September 12, 2026.
Unverified claim. Claimed by Medusalocker.
Full stored descriptionPraveg Caves Jawai, a Hospitality sector organization, was claimed by medusalocker on September 12, 2026.
Unverified claim. Claimed by Global.
Full stored descriptionTown of Sutton, a municipal government organization in Massachusetts, was claimed by global on September 12, 2026.
Unverified claim. Claimed by Securotrop.
Full stored descriptionShelco Filters was claimed by securotrop on September 12, 2026.
Unverified claim. Claimed by Safepay.
Full stored descriptioncompunnel.com, a Technology sector organization, was claimed by safepay on September 11, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionImperial Healthcare Solutions was claimed by qilin on September 11, 2026.
Unverified claim. Claimed by Direwolf.
Full stored descriptionPort of Tanjung Pelepas, a marine shipping and transportation organization, was claimed by direwolf on September 11, 2026.
Unverified claim. Claimed by Pear.
Full stored descriptionFoss Inc., a provider of installation and maintenance services to the energy industry, was claimed by pear on September 11, 2026.
Unverified claim. Claimed by Fulcrumsec.
Full stored descriptionDustin Group, a Swedish technology reseller and IT solutions provider, was claimed by fulcrumsec on September 11, 2026.
Unverified claim. Claimed by Panzer.
Full stored descriptionKonica Minolta Bulgaria, a Manufacturing sector organization, was claimed by Panzer on September 11, 2026.
Unverified claim. Claimed by Dragonforce.
Full stored descriptionMedical Department Store, a Retail sector organization, was claimed by dragonforce on September 11, 2026.
Unverified claim. Claimed by Panzer.
Full stored descriptionAgencia Estatal de Meteorología, a meteorological services organization in Spain, was claimed by Panzer on September 11, 2026.
Unverified claim. Claimed by Global Secret Group.
Full stored descriptionGlobal Secret Group claimed CO-OP URBAN BANK LTD, a banking and finance organization in India, on September 10, 2026.
Unverified claim. Claimed by Vexy Ransomware.
Full stored descriptioni2k2 Networks, a Technology sector organization, was claimed by Vexy Ransomware on September 10, 2026.
No breach entries match your current filters. Reset search and filters to show all breach entries.
Per-incident affected-count reconciliation across government breach sources is not currently possible. The Maine Attorney General portal has been offline since 2026-06-12, and the California Attorney General publishes no affected-persons count. Where one incident is reported to more than one source it is cross-linked, and every count shown is only the number that source itself reported.
A "No longer listed" badge means the victim was present on the leak site and is now absent from the claiming group's current listing, confirmed across two consecutive checks. It is an observation only. It is not a confirmation that the organization paid, negotiated, or resolved the incident, and a group that takes down its own site can cause it. Removal is tracked for RansomLook claims, the only source that publishes a full per-group listing. A claim from another source carries no badge because its removal is not tracked, which is not evidence the victim is still listed.
Browse every record in stable static pages, for search engines and no-JavaScript access to the full corpus.
Leak-site claim data:RansomLook(CC BY 4.0), withransomware.liveas a failover, credited voluntarily (it carries no attribution obligation). Claims are unverified until the affected organization confirms an incident. Confirmed breaches come from the California Attorney General breach portal, theHHS OCR Breach Portal(including its 42 CFR Part 2 records), theMaine Attorney Generalbreach portal (offline since 2026-06-12; no rows are currently in this index), Securities and Exchange Commission 8-K filings, andHave I Been Pwned(CC BY 4.0).
How this is computed
Confirmed incidents come from the named government and breach-directory sources. Leak-site entries remain unverified claims. Windows use the recorded disclosure or observation date, and missing dates remain explicit.
Method reviewed on .