Unverified claim. Claimed by Storm.
Full stored descriptionWest County Health Centers was claimed by storm on September 30, 2026.
State now. Changed: +41 tier promotions, 0 known-exploited vulnerability additions, 15 leak-site claims, and 0 confirmed breaches since yesterday.
Why today matters
Incidents
Breaches and leak-site claims
Compare confirmed breaches with clearly labelled, unverified leak-site claims, each linked to its named source.
Two kinds of record, always labeled: CONFIRMED breaches published by a regulator, the Securities and Exchange Commission (SEC), or Have I Been Pwned, and CLAIMS posted by ransomware groups on their leak sites, which stay unverified until the affected organization confirms. Sources are listed at the bottom of the page.
Why now: 67 leak-site claims were first observed in the last 24 hours.
21,884 confirmed breach records, all time35,347 unverified leak-site claims, all time
67 leak-site claims · last 24 hours1,187 leak-site claims · Month to date through 2026-09-30 08:37 UTC13,356 leak-site claims · Year to date through 2026-09-30 08:37 UTC96 groups posting claims · Month to date through 2026-09-30 08:37 UTC7 additional claims without a disclosure date
Claims tracked since 2020-01-12. The 24-hour figure is a rolling window; month and year are calendar periods (UTC), so on the first days of a month the 24-hour count can exceed the month-to-date count.
5,684 confirmed rows from government sources show "Not reported" because the source published no count. The California Attorney General portal, which never publishes one, supplied 5,417 confirmed rows.
What changed
This page does not publish a page-specific change count. Open the daily comparison for newly confirmed breaches and newly observed leak-site claims.
Details
The labels separate confirmed incidents from claims, and the filters below narrow the source-linked records.
67 leak-site claims were observed in the last 24 hours, and 1,187 have been observed so far this month.
Newest first, by the date the source gave; each date says what it is (for example, listed by group, filed with the SEC, or submitted to the Department of Health and Human Services Office for Civil Rights, HHS OCR). A row whose source gave no date is placed by the date it was first tracked here, and a source date whose meaning we do not know is labeled "Date meaning unknown".
Unverified claim. Claimed by Storm.
Full stored descriptionStorm claimed Gardeners' Guild, a manufacturing sector organization based in Richmond, California, United States, on September 30, 2026.
Unverified claim. Claimed by Storm.
Full stored descriptionNorth Hills Facility Services, a Business & Professional Services sector organization, was claimed by storm on September 30, 2026.
Unverified claim. Claimed by Storm.
Full stored descriptionstorm claimed Olnick Rentals, a real estate management organization in the United States, on September 30, 2026.
Unverified claim. Claimed by Storm.
Full stored descriptionCentury Management Services, a Real Estate sector organization, was claimed by storm on September 30, 2026.
Unverified claim. Claimed by Storm.
Full stored descriptionSilvercup Studios, a Media & Entertainment sector organization, was claimed by storm on September 30, 2026.
Unverified claim. Claimed by M3rx.
Full stored descriptionintense.pl, a software development and IT consulting company in Poland, was claimed by m3rx on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionCorswarem Group, a Belgian aluminium windows, doors and solar panels manufacturer, was claimed to be compromised by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionPulmonary Services Group, a healthcare equipment and respiratory therapy services provider in Puerto Rico, was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by Kairos.
Full stored descriptionUnique Repair Services, an appliance repair and maintenance business operating in Des Plaines, Illinois, was claimed by kairos on September 29, 2026.
Unverified claim. Claimed by Chaos.
Full stored descriptionAdvantech was claimed by chaos on September 29, 2026.
Unverified claim. Claimed by Wallstreet.
Full stored descriptionGibson Area Hospital & Health Services was claimed by wallstreet on September 29, 2026.
Unverified claim. Claimed by Interlock.
Full stored descriptionTekko Enterprises, Inc., a prime contractor based in Tooele, Utah, was claimed to have been breached by interlock on September 29, 2026.
Unverified claim. Claimed by Emperador.
Full stored descriptionPolikem, a manufacturing company in Colombia, was claimed by emperador on September 29, 2026.
Unverified claim. Claimed by Ulose.
Full stored descriptionA Korean hospital claimed by ulose on September 29, 2026.
Unverified claim. Claimed by Gammax.
Full stored descriptionAHeadStart Tutoring was claimed by gammax on September 29, 2026.
Unverified claim. Claimed by Gammax.
Full stored descriptionCrowder Industries, Inc was claimed on September 29, 2026 by gammax.
Unverified claim. Claimed by Brain Cipher.
Full stored descriptiontrailerbridge.com was claimed by brain cipher on September 29, 2026.
Unverified claim. Claimed by Brain Cipher.
Full stored descriptionmccordclaims.com had a claim of compromise posted by brain cipher on September 29, 2026.
Unverified claim. Claimed by Brain Cipher.
Full stored descriptiongoriteway.com, a claimed organization in the education sector, received a claim from brain cipher on September 29, 2026.
Unverified claim. Claimed by Brain Cipher.
Full stored descriptionNortheast Rehab was mentioned in a claim by brain cipher on September 29, 2026.
Unverified claim. Claimed by Brain Cipher.
Full stored descriptionbrain cipher claimed responsibility for an incident involving mulholland.com on September 29, 2026.
Unverified claim. Claimed by Brain Cipher.
Full stored descriptionwildmanbg.com was claimed by brain cipher on September 29, 2026.
Unverified claim. Claimed by Brain Cipher.
Full stored descriptionmaxwell-group.com was claimed as compromised by brain cipher on September 29, 2026.
Unverified claim. Claimed by Brain Cipher.
Full stored descriptionlatitudesubro.com was claimed by brain cipher on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionGuy José Bendaña-Guerrero & Asociados, an intellectual property and law firm in Nicaragua, was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionDon Hierro, a Panama-based engineering and construction firm, was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionTommy Garner Air Conditioning Heating, an HVAC contractor in the United States, was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionAuto Holler, a multi-brand car dealership and workshop in Austria, was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionVUS - The English Center was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionNorthern NJ Eye Institute, an ophthalmology practice and ambulatory surgery center based in South Orange, New Jersey, was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionBrainCipher claimed latitudesubro.com on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionWilliamson Dacar Associates, an architecture and engineering firm in the United States, was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionAgospap, a non-profit association in France, was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionDBU Construction was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionQUALITY SPORT Topsport Italia was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionEuroprim, a digital printing and reprographics company in France, was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionTelrad Networks, a wireless broadband equipment developer based in Israel, was the subject of a claim by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionGroupe APROSEP, a solidarity-economy network in French Guiana, was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionDrinks Wines Spirits, a spirits and wine retail sector organization in Taiwan, was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionCustom Rx Shoppe, a pharmacy in the United States, was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionTrailer Bridge, a transportation and logistics organization operating in the United States, was claimed by BrainCipher on September 29, 2026.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionBrainCipher claimed mccordclaims.com on September 29, 2026.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionBrainCipher claimed goriteway.com on September 29, 2026.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionBrainCipher claimed mulholland.com on September 29, 2026.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionBrainCipher claimed wildmanbg.com on September 29, 2026.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionmaxwell-group.com has been claimed by BrainCipher on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionAuren, a professional services firm in Spain, was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionDatacomm Services was claimed by the gentlemen on September 29, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionWebb Electric Company of Florida, an electrical contractor in the United States, was claimed to be compromised by the gentlemen on September 29, 2026.
No breach entries match your current filters. Reset search and filters to show all breach entries.
Per-incident affected-count reconciliation across government breach sources is limited by what each source publishes: HHS OCR reports a nationwide count; the Washington, Oregon, and Maryland Attorneys General each report only their own state's residents affected; the Maine Attorney General portal has been offline since 2026-06-12; and the California Attorney General publishes no affected-persons count. Where one incident is reported to more than one source it is cross-linked, and every count shown is only the number that source itself reported, labelled with the population it counts.
A "No longer listed" badge means the victim was present on the leak site and is now absent from the claiming group's current listing, confirmed across two consecutive checks. It is an observation only. It is not a confirmation that the organization paid, negotiated, or resolved the incident, and a group that takes down its own site can cause it. Removal is tracked for RansomLook claims, the only source that publishes a full per-group listing. A claim from another source carries no badge because its removal is not tracked, which is not evidence the victim is still listed.
Browse every record in stable static pages, for search engines and no-JavaScript access to the complete set.
Leak-site claim data:RansomLook(CC BY 4.0), withransomware.liveas a failover, credited voluntarily (it carries no attribution obligation). Claims are unverified until the affected organization confirms an incident. Confirmed breaches come from the California Attorney General breach portal, theHHS OCR Breach Portal(including its 42 CFR Part 2 records), theMaine Attorney Generalbreach portal (offline since 2026-06-12; no rows are currently in this index), theWashington Attorney Generalbreach notifications directory, theOregon Attorney Generalbreach directory, theMaryland Attorney Generalsecurity breach notice lists, Securities and Exchange Commission 8-K filings, andHave I Been Pwned(CC BY 4.0).
How this is computed
Confirmed incidents come from the named government and breach-directory sources. Leak-site entries remain unverified claims. Windows use the recorded disclosure or observation date, and missing dates remain explicit.
Method reviewed on .