d4 · tools · leaks
Who ransomware groups are claiming to have breached, from two independent trackers of their leak sites. Unverified criminal claims, not confirmed breaches: an early signal to go and check, never a finding. Get alerts when something on your watch list is claimed. We do not record what you look up.
Tracking 2,075 claims across 108 groups, 245 of them in the last seven days.
A listing means a criminal group has said it holds data from an organisation. It does not mean a breach happened, that the data is real, or that it is recent.
Where two independent trackers carried the same claim we mark it 2 sources. That means two crawlers saw the same post, not that anyone verified it.
We publish the claim only. We do not link to leak sites, mirror screenshots, or carry any pointer to stolen data. If you are listed here and believe it is wrong, or you want the entry removed, tell us and we will act on it.
None of this is our research. The crawling is done by RansomLook, Ransomfeed and ransomware.live, and we are grateful for it. Please go to them for the full picture.
| Organisation named | Group claiming | Claimed | Where | Sources |
|---|---|---|---|---|
| Cumar Marble & Granite cumar.com Cumar Marble & Granite, a company specializing in luxury kitchens, bathrooms, and custom projects, has been the target of a massive cyberattack. Hackers stole 489 gigabytes of data from the company’s servers, including personal information, technical drawings,... | Dark Project | 2026-09-11 | USA, Manufacturing | 3 sources |
| Specchem LLC specchem.com About Specchem LLC Specchem LLC is a U.S.-based supplier of concrete repair materials, flooring products, and chemical admixtures. The company offers a range of cementitious and epoxy-based systems. Their distribution network covers domestic commercial and ind... | dark project | 2026-09-09 | USA, Manufacturing | 3 sources |
| MEI Architects meiarchitects.com As a result of the attack, 340 GB of data (approximately 130,000 files) was stolen: including Social Security numbers, passports, green cards, invoices, HR documents, and a vast number of architectural drawings—including those from past and current projects, a... | dark project | 2026-09-07 | USA, Professional Services | 3 sources |
| Master Manufacturing Co., Inc. mastermfg.com Master Manufacturing Co specializing in custom metal stamping and production services has fallen victim to a significant cyberattack. Hackers reportedly exfiltrated 36 gigabytes of sensitive data from the company’s servers. The stolen information includes SQL... | dark project | 2026-09-07 | USA, Manufacturing | 3 sources |
| Alurwalls alurwalls.com Alurwalls was attacked, resulting in the theft of approximately 17 GB of confidential data. The stolen information includes banking and other financial documents, client building plans, and other personal data belonging to the company and its partners. Current... | dark project | 2026-09-07 | USA, Manufacturing | 3 sources |
| Pump Engineering Company pumpengineering.net During the cyberattack, 120,000 files (115 GB) were stolen, including an extensive customer database, insurance documents, confidential financial documents, and a vast number of project drawings. | Dark Project | 2026-08-25 | USA, Manufacturing | 3 sources |
| Dentist in New Britain, CT dentistinnewbritain.com As a result of the attack, the following were compromised: the entire customer database, consisting of just over 8,000 files, as well as a small number of records containing Social Security numbers | Dark Project | 2026-08-25 | USA, Healthcare services | 3 sources |
| The Liberty Group libertygrp.com About The Liberty Group Companys offerings include local, long distance, and international moving, lab relocation services, and logistics solutions. They cater to a diverse range of clients, providing professional and comprehensive assistance to both residenti... | Dark Project | 2026-08-24 | USA, Road transport | 3 sources |
| Jones, Little & Co., CPAs, LLP jonesandlittle.com At least 100 gigabytes of company data—including financial records, internal files, and employee personal information—were stolen in a cyberattack. Hackers encrypted the firm's systems after exfiltrating the documents, leaving operations paralyzed. | Dark Project | 2026-08-24 | USA, Professional Services | 3 sources |
| Design-Aire Engineering, INC daengineering.com Design-Aire Engineering, INC has suffered a cyberattack on its service systems, resulting in the theft of approximately 377GB of sensitive data. The breached information includes employees' personal data and detailed architectural plans of clients' buildings. | Dark Project | 2026-08-24 | USA, Manufacturing | 3 sources |
| Furnished Quarters furnishedquarters.com The company "Furnished Quarters" was the victim of a successful cyberattack, as a result of which the company’s confidential data was stolen. The volume of data stolen amounts to 155 GB. The data stolen included the company’s customer details, as well as docum... | Dark Project | 2026-08-24 | USA, Lodging industry | 3 sources |
| Reid Electric Service, Inc reidelectricservice.com About Reid Electric Service, Inc At Reid Electric Service, Inc. we realize the safety, and reliability of your electrical system is important to you. We take pride in exceeding your expectations to perform work on your electrical system on time, safely and on... | Dark Project | 2026-08-04 | USA, Energy & Utilities | 3 sources |
| TSC Logistics tsclogistics.com About TSC Logistics TSC Logistics specializes in providing advanced transportation solutions that prioritize speed and cost-effectiveness for their clients. A cyberattack has resulted in the exfiltration of nearly 600 gigabytes of highly sensitive data, exposi... | Dark Project | 2026-08-04 | USA, Transportation | 3 sources |
| Long-Lewis Automotive Group longlewis.com Following a successful cyberattack on Long Lewis, more than 500 GB of confidential information was stolen. More than 15,000 records containing personal data of the organization’s customers and employees, important financial and banking documents, and other val... | Dark Project | 2026-08-04 | USA, Not Found | 3 sources |
| The Miller Group miller-group.com About The Miller Group The Miller Group refers to The Miller Group - Multiplex Division, a retail display manufacturer with operations spanning Dupo, Illinois and Richmond, Virginia As a result of the cyberattack, the company lost control of 500 GB of confiden... | Dark Project | 2026-08-04 | USA, Other | 3 sources |
| Brainhunter Companies LLC. and Brainhunter Systems Ltd. brainhunter.com About Brainhunter Companies LLC. and Brainhunter Systems Ltd. Founded in 1995, Brainhunter is an employment agency providing staffing and recruiting services to engineers, information technology, healthcare, and industrial sectors. Brainhunter also offers work... | Dark Project | 2026-08-03 | US, Professional Services | 3 sources |
| Leviton leviton.com About Leviton Founded in 1906 and headquartered in Melville, New York, Leviton is a privately held global provider of electrical wiring devices, data center connectivity solutions, and lighting energy management systems. A major cyber attack has resulted in th... | Dark Project | 2026-07-31 | USA, Manufacturing | 3 sources |
| Mayco International maycointernational.com About Mayco International At least 2Tb of sensitive data were exfiltrated from the company’s control following a cyberattack. The compromised dataset leaked from Mayco internatioins company infrastructure includes internal organizational documents, proprietary... | Dark Project | 2026-07-31 | USA, Manufacturing | 3 sources |
| Sutherland Packaging sutherlandpackaging.com About SPI Sutherland Packaging LLC is a leading manufacturer specializing in creative digitally printed full-color point-of-purchase displays for brands worldwide. The company offers a range of services including digital printing, retail packaging, and turnkey... | Dark Project | 2026-07-24 | USA, Manufacturing | 3 sources |
| The Family Medicine Clinic facebook.com About FMC The Family Medicine Clinic (Louisiana) suffered a serious cyberattack, which resulted in the encryption of a vast data archive and left the company without access to its own online systems. The leak of more then 250Gb FMC medical data encompasses a w... | Dark Project | 2026-07-24 | USA, Healthcare | 3 sources |
| Rocky Mount Recyclers rmrnc.com Due to cyberattack on Rocky Mount Recyclers more than 40Gb of company personal data was stolen. Leakage contains big amount of sensitive data such as personal emlpoyes documents, company's customers data, bank and financial information documents. About 12,000... | Dark Project | 2026-07-20 | USA, Manufacturing | 3 sources |
| Storer Transportation and Storer Coachways storerbus.com The company "Storer Transportation" and "Storer Coachways" was attacked, resulting in the theft of more than 50,000 folders (240+ GB) of the company’s confidential information, including more than 1,500 pieces of employee personal data, financial and banking d... | Dark Project | 2026-07-14 | USA, Transportation | 3 sources |
| The Metropolitan Entertainment & Convention Authority omahameca.org About MECA Omaha MECA is a organization that manages public event venues in Omaha, Nebraska, including the CHI Health Center, Charles Schwab Field, and The RiverFront. Established in 2000, it plays a crucial role in hosting world-class events and fostering com... | dark project | 2026-07-07 | USA, Hospitality | 3 sources |
| Ruhrpumpen ruhrpumpen.com About Ruhrpumpen Ruhrpumpen is a leading global manufacturer of highly engineered centrifugal and reciprocating pumps. A sophisticated cyberattack in the company's network led to a massive data breach. As a result of the incident, approximately 1 TB of data wa... | dark project | 2026-07-06 | Germany, Manufacturing | 3 sources |
| Genesis Engineering Group geneng.net Due to cyberattack on Genesis more than 75Gb of company personal data was stolen. Leakage contains big amount of sensitive data such as personal emlpoyes documents, company's customers data, bank and financial information documents. About 50 000 files are not... | dark project | 2026-07-06 | USA, Manufacturing | 3 sources |
| Labpharma labpharmacorp.com Labpharmacorp Labpharma is a Clinical Laboratory in Miami dedicated to delivering dependable, high-quality laboratory services for clinical trials and research. About Labpharma Labpharma is a laboratory data company supporting clinical research trials. Company... | dark project | 2026-06-25 | USA, Healthcare | 3 sources |
| Laurel Institutes laurel.edu About Laurel Institutes Laurel Institutes offers focused education and professional certifications across various fields, including business, healthcare, trades, cosmetology, and culinary arts. The institution emphasizes hands-on training and small class sizes... | dark project | 2026-06-08 | USA, Education | 3 sources |
| Ohio Living Home Health & Hospice ohioliving.org About Ohio Living Founded in 1922, Ohio Living is an experienced not-for-profit provider of life plan communities and services in Ohio. Due to cyberattack at least 600Gb of sensitive data leaked in "Ohio Living Home Health & Hospice" in April 2026. It known th... | dark project | 2026-06-08 | USA, Healthcare | 3 sources |
| Mile Bluff Medical Center milebluff.com About Mile Bluff Medical Center Located in Mauston, Wisconsin, Mile Bluff Medical center has been in operation since 1912. Its services include acute emergency care, as well as long term nursing and rehabilitation A "Mile Bluff Medical Center" company suffered... | dark project | 2026-06-08 | USA, Healthcare | 3 sources |
| Thermo King thermoking.com Due to cyberattack on Genesis more than 70 Gb of company data was stolen. Leakage contains big amount of sensitive data such as company's customers data, bank and financial information documents. About 10 000 files are not secured by THERMO KING for now. Downl... | dark project | 2026-06-08 | USA, Transportation | 3 sources |
Tell us what to watch for and we will email you when a group claims it. Weekly at most, only when something matches, and never the same claim twice. Double opt-in, one-click unsubscribe, and your watch list is deleted the moment you leave.
Set up an alertSources: RansomLook (CC BY 4.0, synced 2026-09-19 11:20 UTC), Ransomfeed (CC BY 4.0, synced 2026-09-19 11:20 UTC) and ransomware.live (PRO licence, synced 2026-09-19 11:20 UTC), each used under the licence shown and refreshed a few times a day. They crawl the groups' Tor leak sites; we never do, and we store no .onion address, magnet link or leak-site screenshot. Listings are the claims of criminals and are the sole responsibility of their authors; nothing here is verified, and nothing here is advice. This site stores no personal data about what you look up.