Unverified claim. Claimed by KryBit.
Actualize Consulting, an engineering and digital transformation services company, was claimed by KryBit on November 10, 2026.
State now. Since yesterday: +52 tier promotions, 0 known-exploited vulnerability additions, 14 leak-site claims, and 5 confirmed breaches.
Why today matters ·
Incidents
Breaches and leak-site claims
Two kinds of record, always labeled: CONFIRMED breaches published by a regulator, the Securities and Exchange Commission (SEC), or Have I Been Pwned, and CLAIMS posted by ransomware groups on their leak sites, which stay unverified until the affected organization confirms, each linked to its named source.
Why now: 59 leak-site claims were first observed in the last 24 hours.
21,994 confirmed breach records, all time38,985 unverified leak-site claims, all time
59 leak-site claims · last 24 hours501 leak-site claims · Month to date through 2026-11-10 14:45 UTC11,927 leak-site claims · Year to date through 2026-11-10 14:45 UTC61 groups posting claims · Month to date through 2026-11-10 14:45 UTC7 additional claims without a disclosure date
Claims tracked since 2020-01-12. The 24-hour figure is a rolling window; month and year are calendar periods (UTC).
How these numbers are counted
On the first days of a month the 24-hour count can exceed the month-to-date count, because the 24-hour figure rolls while the month is a calendar period.
5,649 confirmed rows from government sources show "Not reported" because the source published no count. The California Attorney General portal, which never publishes one, supplied 5,382 confirmed rows.
Dated confirmed breaches this tracker collected per sector for 2026-11-03 through 2026-11-09, Coordinated Universal Time (UTC), compared with 2026-10-27 through 2026-11-02.
How these are counted
Each row is dated by its own source: a Securities and Exchange Commission (SEC) filing date, a state Attorney General portal's reported date, a Department of Health and Human Services Office for Civil Rights (HHS OCR) submission date, or another government source's own disclosure date. The last column counts disclosures dated in the 24 hours before the data export; a row stored with a date but no time counts when that date is today or yesterday. Rows without a disclosure date are left out of every column, and "Unclassified" collects rows whose sector this tracker has not matched to its sector list, including rows whose source never states one.
| Sector | Confirmed, latest 7 days | Prior 7 days | Change | Last 24 hours |
|---|---|---|---|---|
| Healthcare | 9 | 10 | Down 10% | 1 |
| Education | 3 | 2 | +1 from 2 | 0 |
| Consumer Services | 1 | 2 | -1 from 2 | 0 |
| Technology | 1 | 2 | -1 from 2 | 0 |
| Media & Entertainment | 1 | 0 | Up from none in the prior 7 days | 0 |
| Nonprofit | 1 | 0 | Up from none in the prior 7 days | 0 |
| Transportation & Logistics | 1 | 0 | Up from none in the prior 7 days | 0 |
| Financial Services | 0 | 5 | -5 from 5 | 0 |
| Legal | 0 | 2 | -2 from 2 | 0 |
| Unclassified | 2 | 4 | -2 from 4 | 0 |
Showing 10 of 13 sectors with a dated confirmed breach in these windows, ordered by confirmed breaches in the latest 7 days, so sectors that went quiet sort last, except Unclassified, which is always last. Download the data (JSON).
59 leak-site claims were observed in the last 24 hours, and 501 have been observed so far this month.
Newest first, by the date the source gave; each date says what it is (for example, listed by group, filed with the SEC, or submitted to the Department of Health and Human Services Office for Civil Rights, HHS OCR). A row whose source gave no date is placed by the date it was first tracked here, and a source date whose meaning we do not know is labeled "Date meaning unknown".
Unverified claim. Claimed by Booba Team.
Computer Task Group, Inc., an information technology services and consulting organization, was claimed as a breach victim by Booba Team on November 10, 2026.
Unverified claim. Claimed by Booba Team.
Georgetown Sleep Center, a medical practices organization, was claimed by Booba Team on November 10, 2026.
Unverified claim. Claimed by Booba Team.
Unverified claim. Claimed by Booba Team.
Unverified claim. Claimed by Booba Team.
Unverified claim. Claimed by Booba Team.
Acclaim Health, a healthcare organization in Canada, was claimed by Booba Team on November 10, 2026.
Unverified claim. Claimed by Metaencryptor.
SIFCO Industries INC., an aerospace, energy, and defense sector organization, was claimed as compromised by Metaencryptor on November 10, 2026.
Unverified claim. Claimed by Byod.
Unverified claim. Claimed by N0n.
Landmark Group, a retail conglomerate based in the United Arab Emirates, was claimed by N0n on November 10, 2026.
Unverified claim. Claimed by N0n.
Vertex Pharmaceuticals Incorporated, a biopharmaceutical organization in the United States, was claimed by N0n on November 9, 2026.
Unverified claim. Claimed by Iah647.
Unverified claim. Claimed by Aoqin.
Irwin Automotive Group, an automotive retail organization in the United States, was claimed by Aoqin on November 9, 2026.
Unverified claim. Claimed by Vortex.
Unverified claim. Claimed by Vortex.
Unverified claim. Claimed by Vortex.
Arthrex was claimed by Vortex on November 9, 2026.
Unverified claim. Claimed by Vortex.
Solenis experienced a claim of data exposure on November 9, 2026, reported by Vortex.
Unverified claim. Claimed by Vortex.
Unverified claim. Claimed by Vortex.
Unverified claim. Claimed by Vortex.
Andersen Construction, a construction sector organization, was claimed on November 9, 2026 by Vortex.
Unverified claim. Claimed by Vortex.
Karlstorz, a surgical device organization, was claimed by Vortex on November 9, 2026.
Unverified claim. Claimed by Vortex.
Air Communities was claimed to be compromised by Vortex on November 9, 2026.
Unverified claim. Claimed by Vortex.
Unverified claim. Claimed by Vortex.
Scripps, a healthcare organization in the United States, was claimed by Vortex on November 9, 2026.
Unverified claim. Claimed by SilentRansomGroup.
Wilentz, Goldman & Spitzer, a legal services firm based in the United States, was claimed by SilentRansomGroup on November 9, 2026.
Unverified claim. Claimed by Climax.
Allegis Advisor Group, a financial organization, appeared on the Climax leak site on November 9, 2026.
Unverified claim. Claimed by Climax.
Futura (VF Distribution SAS), a wholesaler and distribution organization, was claimed on the climax leak site on November 9, 2026.
Unverified claim. Claimed by Climax.
Emerging Display Technologies Corp, a manufacturer, was claimed on the climax leak site on November 9, 2026.
Unverified claim. Claimed by Climax.
Servicasa S.L., a service provider, was listed on the Climax leak site on November 9, 2026.
Unverified claim. Claimed by Climax.
Double Star Industry Co., Ltd., a textile sector organization, appeared on the climax leak site on November 9, 2026.
Unverified claim. Claimed by Climax.
MiraeING Co., a Financial Solutions organization, was listed on the Climax leak site on November 9, 2026.
Unverified claim. Claimed by Climax.
Zetton Inc. (Aloha Table Inc.), a restaurant chain, was claimed by Climax on November 9, 2026.
Unverified claim. Claimed by Climax.
Climax claimed Maruki Medical Systems Inc., a medical device organization, on November 9, 2026.
Unverified claim. Claimed by Climax.
Unverified claim. Claimed by Climax.
Mayur Group, a food provider, appeared on the climax leak site on November 9, 2026.
Unverified claim. Claimed by Climax.
Texmo Group, a manufacturer, was claimed by Climax on November 9, 2026.
Unverified claim. Claimed by Climax.
Tiendaleon, a bus transport organization, appeared on the climax leak site on November 9, 2026.
Unverified claim. Claimed by Climax.
Setai Hotel Group (Nakash Holdings), a hotels sector organization, was listed on a leak site by the actor climax on November 9, 2026.
Unverified claim. Claimed by Climax.
Ipaco Inc., a manufacturer, was claimed by Climax on November 9, 2026.
Unverified claim. Claimed by Leakeddata.
Unverified claim. Claimed by Vexy.
Albion Online Data Project, a provider of market and historical data for the MMORPG Albion Online, was claimed as compromised by Vexy on November 9, 2026.
Unverified claim. Claimed by Vexy.
Living Word Schools, an educational institution, was claimed by Vexy on November 9, 2026.
Unverified claim. Claimed by SilentRansomGroup.
B... W... received a claim from SilentRansomGroup on November 9, 2026.
Unverified claim. Claimed by PixelLeaks.
PixelLeaks claimed on November 9, 2026 responsibility for accessing records from a hosted email and IT services provider in Italy.
Unverified claim. Claimed by Leakeddata.
Unverified claim. Claimed by Global Secret Group.
Unverified claim. Claimed by Global Secret Group.
Unverified claim. Claimed by Eclipse.
Unverified claim. Claimed by Black X.
DomusVi, healthcare sector, disclosed as compromised by Black X on November 9, 2026.
Unverified claim. Claimed by Leaknet.
No breach entries match your current filters. Reset search and filters to show all breach entries.
Per-incident affected-count reconciliation across government breach sources is limited by what each source publishes: HHS OCR reports a nationwide count; the Washington, Oregon, and Maryland Attorneys General each report only their own state's residents affected; the Maine Attorney General portal has been offline since 2026-06-12; and the California Attorney General publishes no affected-persons count. Where one incident is reported to more than one source it is cross-linked, and every count shown is only the number that source itself reported, labelled with the population it counts.
A "No longer listed" badge means the victim was present on the leak site and is now absent from the claiming group's current listing, confirmed across two consecutive checks. It is an observation only. It is not a confirmation that the organization paid, negotiated, or resolved the incident, and a group that takes down its own site can cause it. Removal is tracked for RansomLook claims, the only source that publishes a full per-group listing. A claim from another source carries no badge because its removal is not tracked, which is not evidence the victim is still listed.
Browse every record in stable static pages, for search engines and no-JavaScript access to the complete set.
Leak-site claim data: RansomLook (CC BY 4.0), with ransomware.live as a failover, credited and linked as its terms require (Source: Ransomware.live). Claims are unverified until the affected organization confirms an incident. Confirmed breaches come from the California Attorney General breach portal (newest disclosure 2026-11-09), the HHS OCR Breach Portal (including its 42 CFR Part 2 records; newest disclosure 2026-10-15), the Maine Attorney General breach portal (offline since 2026-06-12; no rows are currently in this index), the Washington Attorney General breach notifications directory (newest disclosure 2026-11-05), the Oregon Attorney General breach directory (newest disclosure 2026-10-21), the Maryland Attorney General security breach notice lists (newest disclosure 2025-03-21), Securities and Exchange Commission 8-K filings (newest disclosure 2026-10-13), and Have I Been Pwned (CC BY 4.0; newest disclosure 2026-10-04).
How this is computed
Confirmed incidents come from the named government and breach-directory sources. Leak-site entries remain unverified claims. Windows use the recorded disclosure or observation date, and missing dates remain explicit.
Method reviewed on .