Unverified claim. Claimed by Lockbit5.
Full stored descriptioncapitalbankhaiti.biz was claimed by lockbit5 on October 5, 2026.
State now. Changed: +1007 tier promotions, 0 known-exploited vulnerability additions, 1 leak-site claim, and 0 confirmed breaches since yesterday.
Why today matters
Incidents
Breaches and leak-site claims
Compare confirmed breaches with clearly labelled, unverified leak-site claims, each linked to its named source.
Two kinds of record, always labeled: CONFIRMED breaches published by a regulator, the Securities and Exchange Commission (SEC), or Have I Been Pwned, and CLAIMS posted by ransomware groups on their leak sites, which stay unverified until the affected organization confirms. Sources are listed at the bottom of the page.
Why now: 18 leak-site claims were first observed in the last 24 hours.
21,803 confirmed breach records, all time35,525 unverified leak-site claims, all time
18 leak-site claims · last 24 hours112 leak-site claims · Month to date through 2026-10-05 03:25 UTC13,532 leak-site claims · Year to date through 2026-10-05 03:25 UTC32 groups posting claims · Month to date through 2026-10-05 03:25 UTC7 additional claims without a disclosure date
Claims tracked since 2020-01-12. The 24-hour figure is a rolling window; month and year are calendar periods (UTC), so on the first days of a month the 24-hour count can exceed the month-to-date count.
5,571 confirmed rows from government sources show "Not reported" because the source published no count. The California Attorney General portal, which never publishes one, supplied 5,304 confirmed rows.
What changed
This page does not publish a page-specific change count. Open the daily comparison for newly confirmed breaches and newly observed leak-site claims.
Details
The labels separate confirmed incidents from claims, and the filters below narrow the source-linked records.
Dated confirmed breaches this tracker collected per sector for 2026-09-28 through 2026-10-04, Coordinated Universal Time (UTC), compared with 2026-09-21 through 2026-09-27. Each row is dated by its own source: a Securities and Exchange Commission (SEC) filing date, a state Attorney General portal's reported date, a Department of Health and Human Services Office for Civil Rights (HHS OCR) submission date, or another government source's own disclosure date. The last column counts disclosures dated in the 24 hours before the data export; a row stored with a date but no time counts when that date is today or yesterday. Rows without a disclosure date are left out of every column, and "Unclassified" collects rows whose sector this tracker has not matched to its sector list.
| Sector | Confirmed, latest 7 days | Prior 7 days | Change | Last 24 hours |
|---|---|---|---|---|
| Unclassified | 4 | 2 | Up 100.0% | 0 |
| Financial Services | 3 | 3 | No change | 0 |
| Legal | 3 | 1 | Up 200.0% | 0 |
| Government | 2 | 0 | Up from none in the prior 7 days | 0 |
| Healthcare | 1 | 6 | Down 83.3% | 0 |
| Insurance | 1 | 3 | Down 66.7% | 0 |
| Business & Professional Services | 1 | 2 | Down 50.0% | 0 |
| Real Estate | 1 | 1 | No change | 0 |
| Agriculture | 1 | 0 | Up from none in the prior 7 days | 0 |
| Education | 1 | 0 | Up from none in the prior 7 days | 0 |
Showing 10 of 14 sectors with a dated confirmed breach in these windows, ordered by confirmed breaches in the latest 7 days, so sectors that went quiet sort last. Every one of them is indata/breaches_index/manifest.json.
18 leak-site claims were observed in the last 24 hours, and 112 have been observed so far this month.
Newest first, by the date the source gave; each date says what it is (for example, listed by group, filed with the SEC, or submitted to the Department of Health and Human Services Office for Civil Rights, HHS OCR). A row whose source gave no date is placed by the date it was first tracked here, and a source date whose meaning we do not know is labeled "Date meaning unknown".
Unverified claim. Claimed by Play.
Full stored descriptionBold Spring Nursery, an Agriculture sector organization, was claimed by play on October 4, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Play.
Full stored descriptionSilicon Valley Glass was claimed by play on October 4, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Emperador.
Full stored descriptionOMUR HIRDAVAT LTD was claimed by emperador on October 4, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionUnident Group, a healthcare services organization, was claimed by qilin on October 4, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionChadwick Switchboards, an electronics organization, was claimed by qilin on October 4, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionEmser, a company in the Architecture, Engineering & Design sector, was claimed by qilin on October 4, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionCotesma, operating in the advertising and marketing sector, was claimed as a victim by qilin on October 4, 2026.
Unverified claim. Claimed by Direwolf.
Full stored descriptionSoftruck was claimed by direwolf on October 4, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Booba Team.
Full stored descriptionMorseLife Health System, Inc. was claimed by booba team on October 4, 2026.
Unverified claim. Claimed by Booba Project.
Full stored descriptionMorseLife Health System, Inc., a hospitals and health care organization, was claimed by Booba Project on October 4, 2026.
Unverified claim. Claimed by Storm.
Full stored descriptionNipigon District Memorial Hospital, a healthcare organization in Ontario, Canada, was claimed by storm on October 4, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionMutsumi Group, a construction sector organization, was claimed by qilin on October 4, 2026.
Unverified claim. Claimed by Payoutsking.
Full stored descriptionM****C was claimed by payoutsking on October 4, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionCenter State Engineering, a Manufacturing sector organization, was claimed by thegentlemen on October 4, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionGroupe Euroditel, a French telecommunications and IT systems integrator, was claimed by krybit on October 4, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionEmpaques y Servicios Superiores S.A.S. (SUPERPACK), a packaging company based in Colombia, was claimed by krybit on October 4, 2026.
Unverified claim. Claimed by KryBit.
Full stored descriptionDar Al-Tib, a healthcare organization in Egypt, was claimed to be compromised by krybit on October 4, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionCenter State Engineering, a civil engineering consultancy based in Monroe Township, New Jersey, was claimed by the gentlemen on October 3, 2026.
Unverified claim. Claimed by Payoutsking.
Full stored descriptionA****n was claimed by payoutsking on October 3, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Netrunner.
Full stored descriptionPrecon Marine Inc, a marine construction and subsea services contractor, was claimed by netrunner on October 3, 2026.
Unverified claim. Claimed by Wallstreet.
Full stored descriptionWorld Cup 2034 was claimed by wallstreet on October 3, 2026.
Unverified claim. Claimed by Wallstreet.
Full stored descriptionSt. Francis Healthcare Systems of Hawaii, a healthcare organization in Hawaii, was claimed by wallstreet on October 3, 2026.
Unverified claim. Claimed by Rhysida.
Full stored descriptionSkaff Group, a decorative fabrics organization in Lebanon, was claimed by rhysida on October 3, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionGenesis Credit Management, a banking sector organization, was claimed on October 3, 2026 by qilin.
Unverified claim. Claimed by Storm.
Full stored descriptionStates Industries, a manufacturing organization in the United States, was claimed by Storm on October 3, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionAware, Inc., a biometrics software company in the United States, was claimed by thegentlemen on October 3, 2026.
Unverified claim. Claimed by Storm.
Full stored descriptionAllied Machine & Engineering, a Manufacturing sector organization, was claimed by Storm on October 3, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionWOOSHIN SAFETY SYSTEMS CO LTD, a Manufacturing sector organization, was claimed by thegentlemen on October 3, 2026.
Unverified claim. Claimed by Storm.
Full stored descriptionStep By Step, Inc., a human services organization in the United States, was claimed by Storm on October 3, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionZelham was claimed by thegentlemen on October 3, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionHospital de la Santa Creu i Sant Pau, a healthcare organization in Spain, was claimed by thegentlemen on October 3, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionRotamac, a Manufacturing sector organization, was claimed by thegentlemen on October 3, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionMandurah State Emergency Service, a Government sector organization, was claimed by thegentlemen on October 3, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionWestrop Primary & Nursery School, an Education sector organization, was claimed by thegentlemen on October 3, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionGerrity Stone, a stone fabrication and installation company in the United States, was claimed by thegentlemen on October 3, 2026.
Unverified claim. Claimed by Akira.
Full stored descriptionThe Official College of Architects of León (COAL) was claimed by akira on October 3, 2026.
Unverified claim. Claimed by Spirals.
Full stored descriptionSEVEN SEAS GROUP was claimed by spirals on October 3, 2026.
Unverified claim. Claimed by Nightspire.
Full stored descriptionForma Therapeutics Holdings, Inc., a Pharmaceuticals & Life Sciences sector organization, was claimed by nightspire on October 3, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Panzer.
Full stored descriptionPaes Soluções, an information technology company in Brazil, was claimed by the panzer group on October 2, 2026.
Unverified claim. Claimed by Rhysida.
Full stored descriptionMat Bao Corporation, a domain registration and cloud hosting provider, was claimed as compromised by rhysida on October 2, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionThai Lion Air was claimed by qilin on October 2, 2026.
Unverified claim. Claimed by Rhysida.
Full stored descriptionElectro Heat Sweden AB, a manufacturer in Sweden, was claimed by rhysida on October 2, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionQilin claimed Sports Events365, a business services organization, on October 2, 2026.
Unverified claim. Claimed by Shinyhunters.
Full stored descriptionDexCom, Inc. was claimed by shinyhunters on October 2, 2026.
Unverified claim. Claimed by Shinyhunters.
Full stored descriptionO'Reilly Automotive was claimed by shinyhunters on October 2, 2026.
Unverified claim. Claimed by AuditTeam.
Full stored descriptionAd***ng, a Technology sector organization, was claimed by AuditTeam on October 2, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Audit Team.
Full stored descriptionAn advertising entity was claimed by audit team on October 2, 2026.
Unverified claim. Claimed by The Gentlemen.
Full stored descriptionGerrity Stone, a stone fabrication and installation company based in Wilmington, Massachusetts, was claimed by the gentlemen on October 2, 2026.
Unverified claim. Claimed by Payoutsking.
Full stored descriptionM****C was claimed by payoutsking on October 2, 2026. No further details were available from the leak-site post.
No breach entries match your current filters. Reset search and filters to show all breach entries.
Per-incident affected-count reconciliation across government breach sources is limited by what each source publishes: HHS OCR reports a nationwide count; the Washington, Oregon, and Maryland Attorneys General each report only their own state's residents affected; the Maine Attorney General portal has been offline since 2026-06-12; and the California Attorney General publishes no affected-persons count. Where one incident is reported to more than one source it is cross-linked, and every count shown is only the number that source itself reported, labelled with the population it counts.
A "No longer listed" badge means the victim was present on the leak site and is now absent from the claiming group's current listing, confirmed across two consecutive checks. It is an observation only. It is not a confirmation that the organization paid, negotiated, or resolved the incident, and a group that takes down its own site can cause it. Removal is tracked for RansomLook claims, the only source that publishes a full per-group listing. A claim from another source carries no badge because its removal is not tracked, which is not evidence the victim is still listed.
Browse every record in stable static pages, for search engines and no-JavaScript access to the complete set.
Leak-site claim data:RansomLook(CC BY 4.0), withransomware.liveas a failover, credited and linked as its terms require (Source: Ransomware.live). Claims are unverified until the affected organization confirms an incident. Confirmed breaches come from the California Attorney General breach portal, theHHS OCR Breach Portal(including its 42 CFR Part 2 records), theMaine Attorney Generalbreach portal (offline since 2026-06-12; no rows are currently in this index), theWashington Attorney Generalbreach notifications directory, theOregon Attorney Generalbreach directory, theMaryland Attorney Generalsecurity breach notice lists, Securities and Exchange Commission 8-K filings, andHave I Been Pwned(CC BY 4.0).
How this is computed
Confirmed incidents come from the named government and breach-directory sources. Leak-site entries remain unverified claims. Windows use the recorded disclosure or observation date, and missing dates remain explicit.
Method reviewed on .