Unverified claim. Claimed by Akira.
Full stored descriptionBethany Press International was claimed by akira on October 22, 2026.
State now. Changed: +249 tier promotions, 0 known-exploited vulnerability additions, 64 leak-site claims, and 3 confirmed breaches since yesterday.
Why today matters
Incidents
Breaches and leak-site claims
Compare confirmed breaches with clearly labelled, unverified leak-site claims, each linked to its named source.
Two kinds of record, always labeled: CONFIRMED breaches published by a regulator, the Securities and Exchange Commission (SEC), or Have I Been Pwned, and CLAIMS posted by ransomware groups on their leak sites, which stay unverified until the affected organization confirms. Sources are listed at the bottom of the page.
Why now: 53 leak-site claims were first observed in the last 24 hours.
21,887 confirmed breach records, all time36,314 unverified leak-site claims, all time
53 leak-site claims · last 24 hours950 leak-site claims · Month to date through 2026-10-22 19:33 UTC11,027 leak-site claims · Year to date through 2026-10-22 19:33 UTC83 groups posting claims · Month to date through 2026-10-22 19:33 UTC7 additional claims without a disclosure date
Claims tracked since 2020-01-12. The 24-hour figure is a rolling window; month and year are calendar periods (UTC), so on the first days of a month the 24-hour count can exceed the month-to-date count.
5,595 confirmed rows from government sources show "Not reported" because the source published no count. The California Attorney General portal, which never publishes one, supplied 5,328 confirmed rows.
What changed
This page does not publish a page-specific change count. Open the daily comparison for newly confirmed breaches and newly observed leak-site claims.
Details
The labels separate confirmed incidents from claims, and the filters below narrow the source-linked records.
Dated confirmed breaches this tracker collected per sector for 2026-10-15 through 2026-10-21, Coordinated Universal Time (UTC), compared with 2026-10-08 through 2026-10-14. Each row is dated by its own source: a Securities and Exchange Commission (SEC) filing date, a state Attorney General portal's reported date, a Department of Health and Human Services Office for Civil Rights (HHS OCR) submission date, or another government source's own disclosure date. The last column counts disclosures dated in the 24 hours before the data export; a row stored with a date but no time counts when that date is today or yesterday. Rows without a disclosure date are left out of every column, and "Unclassified" collects rows whose sector this tracker has not matched to its sector list, including rows whose source never states one.
| Sector | Confirmed, latest 7 days | Prior 7 days | Change | Last 24 hours |
|---|---|---|---|---|
| Unclassified | 4 | 1 | Up 300.0% | 1 |
| Legal | 2 | 2 | No change | 0 |
| Financial Services | 2 | 1 | Up 100.0% | 0 |
| Government | 2 | 0 | Up from none in the prior 7 days | 0 |
| Healthcare | 1 | 5 | Down 80.0% | 0 |
| Education | 1 | 2 | Down 50.0% | 0 |
| Transportation & Logistics | 1 | 0 | Up from none in the prior 7 days | 0 |
| Hospitality | 0 | 1 | Down 100.0% | 0 |
Showing 8 of 8 sectors with a dated confirmed breach in these windows, ordered by confirmed breaches in the latest 7 days, so sectors that went quiet sort last. Every one of them is indata/breaches_index/manifest.json.
53 leak-site claims were observed in the last 24 hours, and 950 have been observed so far this month.
Newest first, by the date the source gave; each date says what it is (for example, listed by group, filed with the SEC, or submitted to the Department of Health and Human Services Office for Civil Rights, HHS OCR). A row whose source gave no date is placed by the date it was first tracked here, and a source date whose meaning we do not know is labeled "Date meaning unknown".
Unverified claim. Claimed by Akira.
Full stored descriptionMedienwerkstatt, a media services organization in Switzerland, was claimed as a compromise by akira on October 22, 2026.
Unverified claim. Claimed by Akira.
Full stored descriptionAnnapath was claimed by akira on October 22, 2026.
Unverified claim. Claimed by Leakeddata.
Full stored descriptionAn organization identified as M...r was claimed by leakeddata on October 22, 2026.
Unverified claim. Claimed by Bravox.
Full stored descriptionAMSAM, a social, healthcare and home care services organization in France, was claimed by bravox on October 22, 2026.
Unverified claim. Claimed by Rhysida.
Full stored descriptionDR.SCHNELL GmbH & Co. KGaA, a manufacturing or industrial organization, was claimed to be compromised by rhysida on October 22, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionAirtificial, an Architecture, Engineering & Design organization, was claimed by qilin on October 22, 2026.
Unverified claim. Claimed by Leakeddata.
Full stored descriptionKirkland & Ellis LLP was claimed by leakeddata on October 22, 2026.
Unverified claim. Claimed by Everest.
Full stored descriptionPwC was claimed by Everest on October 22, 2026.
Unverified claim. Claimed by Bravox.
Full stored descriptionBarrow & Grimm, a legal services organization in the United States, was claimed on October 22, 2026 by bravox.
Unverified claim. Claimed by Qilin.
Full stored descriptionBathurst RSL, a hospitality sector organization, was claimed by the group qilin on October 22, 2026.
Unverified claim. Claimed by Qilin.
Full stored descriptionCreative Universe, a business services organization, was claimed by qilin on October 22, 2026.
Unverified claim. Claimed by Lockbit5.
Full stored descriptionistanbultrading.com was claimed by lockbit5 on October 22, 2026.
Unverified claim. Claimed by Space Bears.
Full stored descriptionspace bears claimed SGLA (Schwartz, Giannini, Lantsberger & Adamson), an accounting firm operating in the United States, on October 22, 2026.
Unverified claim. Claimed by Lamashtu.
Full stored descriptionHecker Holzsystembau, a German construction company, was claimed by lamashtu on October 22, 2026.
Unverified claim. Claimed by Everest.
Full stored descriptionLinebarger Goggan Blair & Sampson was claimed by the everest group on October 22, 2026.
Unverified claim. Claimed by N0n.
Full stored descriptionCompany #109, a plumbing and kitchen products distributor in the United States, was claimed by n0n on October 22, 2026.
Unverified claim. Claimed by N0n.
Full stored descriptionCompany #108, a media production organization specializing in audio description and accessibility media in Montreal, Quebec, Canada, was claimed by n0n on October 22, 2026.
Unverified claim. Claimed by N0n.
Full stored descriptionCompany #107 was claimed by n0n on October 22, 2026.
Unverified claim. Claimed by N0n.
Full stored descriptionn0n claimed Company #106, a financial advisory and restructuring organization in the United States, on October 22, 2026.
Unverified claim. Claimed by N0n.
Full stored descriptionn0n claimed on October 22, 2026, to have breached Company #105, a diamond and lab grown diamond trading organization in New York, United States.
Unverified claim. Claimed by N0n.
Full stored descriptionCompany #104, a legal services organization specializing in family law located in California, USA, was claimed by n0n on October 22, 2026.
Unverified claim. Claimed by N0n.
Full stored descriptionPerformance Ford Inc, an automotive retail organization in the United States, was named in a claim by n0n on October 22, 2026.
Unverified claim. Claimed by Payoutsking.
Full stored descriptionMerical LLC was claimed by payoutsking on October 22, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by N0n.
Full stored descriptionHeritage Senior Living, a healthcare support services organization in the United States, was claimed by n0n on October 22, 2026.
Unverified claim. Claimed by Lamashtu.
Full stored descriptionFuG-Gruppe was claimed by lamashtu on October 22, 2026.
Unverified claim. Claimed by Lamashtu.
Full stored descriptionMECA-PRECIS, a French precision metal components manufacturer serving the automotive, construction, and home appliance sectors, was claimed by lamashtu on October 22, 2026.
Unverified claim. Claimed by Lamashtu.
Full stored descriptionWEPOS Chemie, a manufacturer of cleaning and care products based in Germany, was claimed by lamashtu on October 22, 2026.
Unverified claim. Claimed by Lamashtu.
Full stored descriptionGräfliches Hofbrauhaus Freising, a brewery in Germany, appeared on the lamashtu leak site on October 22, 2026.
Unverified claim. Claimed by Lamashtu.
Full stored descriptionVERGI Muenster, a tax advisory and business consulting firm in Germany, was claimed by lamashtu on October 22, 2026.
Unverified claim. Claimed by Incransom.
Full stored descriptionBereskinparr.com and Smartbiggar.ca were claimed by incransom on October 22, 2026.
Unverified claim. Claimed by SilentRansomGroup.
Full stored descriptionK.r.a. ...s, with claim date October 22, 2026, appeared on a leak site attributed to SilentRansomGroup.
Unverified claim. Claimed by N0n.
Full stored descriptionHeritage Senior Living, a Healthcare sector organization, was claimed by N0n on October 21, 2026.
Unverified claim. Claimed by INC Ransom.
Full stored descriptionbereskinparr.com smartbiggar.ca, a Legal sector organization, was claimed by inc ransom on October 21, 2026. No further details were available from the leak-site post.
Unverified claim. Claimed by Lamashtu.
Full stored descriptionFuG-Gruppe was claimed by lamashtu on October 21, 2026.
Unverified claim. Claimed by Lamashtu.
Full stored descriptionMECA-PRECIS, a Manufacturing sector organization, was claimed by lamashtu on October 21, 2026.
Unverified claim. Claimed by Lamashtu.
Full stored descriptionWEPOS Chemie, a chemicals and cleaning products manufacturer in Germany, was claimed by lamashtu on October 21, 2026.
Unverified claim. Claimed by Leakeddata.
Full stored descriptionK.r.a. ...s was listed by leakeddata on October 21, 2026.
Unverified claim. Claimed by Aurora.
Full stored descriptionAllmand-Smith Limited, a UK building products manufacturer and distributor, was claimed to be breached by aurora on October 21, 2026.
Unverified claim. Claimed by Whitearmor.
Full stored descriptionwhitearmor claimed on October 21, 2026 to have exfiltrated data from Whirlpool, a manufacturer of home appliances.
Unverified claim. Claimed by Leakeddata.
Full stored descriptionK.r.. ...s was claimed by leakeddata on October 21, 2026.
Unverified claim. Claimed by SilentRansomGroup.
Full stored descriptionK.r.. ...s was claimed by SilentRansomGroup on October 21, 2026.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionBrainCipher claimed novagroupgbc.com on October 21, 2026.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionO'Flaherty Law was claimed on October 21, 2026 by BrainCipher.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionClinicaromero.com was claimed by BrainCipher on October 21, 2026.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionSodali & Co, a corporate governance and advisory firm headquartered in Luxembourg, was claimed by BrainCipher on October 21, 2026.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionsrsnodgrass.com was claimed by BrainCipher on October 21, 2026.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionProSomnus Inc., a United States-based medical device company in the healthcare sector, was claimed to be breached by BrainCipher on October 21, 2026.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionBrainCipher claimed olyortho.com on October 21, 2026.
Unverified claim. Claimed by BrainCipher.
Full stored descriptionBrainCipher claimed access to mvjllp.com on October 21, 2026.
No breach entries match your current filters. Reset search and filters to show all breach entries.
Per-incident affected-count reconciliation across government breach sources is limited by what each source publishes: HHS OCR reports a nationwide count; the Washington, Oregon, and Maryland Attorneys General each report only their own state's residents affected; the Maine Attorney General portal has been offline since 2026-06-12; and the California Attorney General publishes no affected-persons count. Where one incident is reported to more than one source it is cross-linked, and every count shown is only the number that source itself reported, labelled with the population it counts.
A "No longer listed" badge means the victim was present on the leak site and is now absent from the claiming group's current listing, confirmed across two consecutive checks. It is an observation only. It is not a confirmation that the organization paid, negotiated, or resolved the incident, and a group that takes down its own site can cause it. Removal is tracked for RansomLook claims, the only source that publishes a full per-group listing. A claim from another source carries no badge because its removal is not tracked, which is not evidence the victim is still listed.
Browse every record in stable static pages, for search engines and no-JavaScript access to the complete set.
Leak-site claim data: RansomLook (CC BY 4.0), with ransomware.live as a failover, credited and linked as its terms require (Source: Ransomware.live). Claims are unverified until the affected organization confirms an incident. Confirmed breaches come from the California Attorney General breach portal (newest disclosure 2026-10-19), the HHS OCR Breach Portal (including its 42 CFR Part 2 records; newest disclosure 2026-10-01), the Maine Attorney General breach portal (offline since 2026-06-12; no rows are currently in this index), the Washington Attorney General breach notifications directory (newest disclosure 2026-10-06), the Oregon Attorney General breach directory (newest disclosure 2026-10-21), the Maryland Attorney General security breach notice lists (newest disclosure 2025-03-21), Securities and Exchange Commission 8-K filings (newest disclosure 2026-10-13), and Have I Been Pwned (CC BY 4.0; newest disclosure 2026-10-04).
How this is computed
Confirmed incidents come from the named government and breach-directory sources. Leak-site entries remain unverified claims. Windows use the recorded disclosure or observation date, and missing dates remain explicit.
Method reviewed on .