d4 · tools · leaks

Ransomware leak tracker.

Who ransomware groups are claiming to have breached, from two independent trackers of their leak sites. Unverified criminal claims, not confirmed breaches: an early signal to go and check, never a finding. Get alerts when something on your watch list is claimed. We do not record what you look up.

Tracking 183 claims across 32 groups, 171 of them in the last seven days.

Read this before you act on anything here

A listing means a criminal group has said it holds data from an organisation. It does not mean a breach happened, that the data is real, or that it is recent.

Groups fabricate. In April 2026 the group 0APT listed rival gangs as victims; the claims were invented. Removing them turned a reported 15% quarterly rise in attacks into a 6% fall.
Groups recycle. CISA has documented actors buying previously stolen data to re-extort. One study found 98 listings covering only 49 distinct victims.
Attribution is often wrong. Suppliers get listed as their customers, and shared domains get listed as the wrong organisation entirely.
It undercounts. The NCSC notes victims who pay never appear on a leak site at all.

Where two independent trackers carried the same claim we mark it 2 sources. That means two crawlers saw the same post, not that anyone verified it.

We publish the claim only. We do not link to leak sites, mirror screenshots, or carry any pointer to stolen data. If you are listed here and believe it is wrong, or you want the entry removed, tell us and we will act on it.

None of this is our research. The crawling is done by RansomLook, Ransomfeed and ransomware.live, and we are grateful for it. Please go to them for the full picture.

Claims by Orova

Organisation named	Group claiming	Claimed	Where	Sources
FixIT Tek fixittek.com Providing the best possible IT services to businesses of all sizes in Central Florida and Surrounding Areas. ##### FixIT Tek's Syncro MSP panel has been hacked and stolen big data of many clients from their network. #####	Orova	2026-08-05	US, Technology	ransomwarelive
Conceptual Designs, Inc. conceptualdesignsinc.com Conceptual Designs, Inc. proudly provides interior design services for businesses across the Quad Cities from our studio in Bettendorf, Iowa. No matter what kind of business you own, we can help make your space match your company’s culture and values in a crea...	orova	2026-08-03	US, Other	2 sources
Global Friction Products, Inc globalfrictionproducts.com GLOBAL FRICTION PRODUCTS, INC is a company that manufactures, repairs, and /or re-arcs brake and clutch bands back to original drum for even wear on friction material. We specialize in the construction, mining, marine and offshore industries, i.e., cranes, dra...	orova	2026-08-03	US, Manufacturing	2 sources
JK Capital Management Limited jkcapitalmanagement.com JK Capital Management Limited is an asset management company set up in Hong Kong in 1997 and regulated by the Securities and Futures Commission of Hong Kong. We are GIPS and MIFID II compliant. Our mutual funds are all registered with CSSF, the Luxembourg regu...	orova	2026-08-03	HK, Financial Services	2 sources
Integrated Site Management ism-sc.com Real Estate Company URL Open in a new tab\| Aug 2, 2026 76,758 files\| 15.90 GB\| Watch Data Open watch data link for Integrated Site Management in a new tab Integrated Site Management is a full service site consulting company with our foundation reinforced by de...	orova	2026-08-02	US, Professional Services	2 sources
Tat Fung Textile Co., Ltd. tatfung-tex.com Tat Fung Textile Co., Ltd. Manufacturing Company URL Open in a new tab\| Aug 1, 2026 110,238 files\| 92.20 GB\| Watch Data Open watch data link for Tat Fung Textile Co., Ltd. in a new tab Tat Fung & Panther Denim is a premium woven, denim, and print fabric mill e...	orova	2026-08-01	HK, Manufacturing	2 sources
Sanrio Hong Kong Co., Ltd sanrio.com.hk Sanrio is the global lifestyle brand best known for Hello Kitty who was created in 1974, and home to many other beloved character brands such as My Melody, Kuromi, Little Twin Stars, Cinnamoroll, Pompompurin, gudetama, Aggretsuko, Chococat, Bad Badtz-Maru and...	orova	2026-07-29	HK, Retail & E-Commerce	2 sources
SSI HOLDING (FAR EAST) LIMITED ssife.com AIMING at streamlining all aspects of business, procuring excellent quality of management and strengthening connexion of our well established affilated companies, S.S.I. Holding (Far East) Limited was found in November of 1995 with association of Simex Sport G...	orova	2026-07-27	HK, Other	2 sources
KINGSSON kingsson.com.tw Manufacturing Company URL Open in a new tab\| Jul 23, 2026 9,851 files\| 12.30 GB\| Watch Data Open watch data link for KINGSSON in a new tab KINGSSON primarily operates as an OEM/ODM manufacturer, supplying customized security sealing products under customers' o...	orova	2026-07-23	TW, Other	2 sources
Yost Home Improvements yosthomeimprovements.com Yost Home Improvements is a family-owned exterior remodeling and construction company based in Waterford, Connecticut, serving the southeastern CT region for over 50 years. They specialize in installing vinyl siding, windows, doors, gutters, roofing, and sunro...	orova	2026-07-17	US, Retail & E-Commerce	2 sources
Cardiology Associates porthuronheartcenter.com Serving the community for over 45 years, Cardiology Associates of Port Huron, P.C. offers the latest in cardiac procedures and technology, helping our qualified physicians to detect and provide comprehensive treatment for a wide variety of adult heart and arte...	orova	2026-07-10	US, Healthcare	2 sources
SURE TRAVEL COMPANY emis.com SURE TRAVEL COMPANY LIMITED was incorporated on 24-JAN-2000 as a Private company limited by shares registered in Hong Kong.	orova	2026-07-07	HK, Hospitality	2 sources
Wisdom Oral Surgery wisdom-oralsurgery.com Wisdom Oral Surgery, located in Fair Lawn, NJ, specializes in a wide range of oral surgery services including dental implants, wisdom teeth extractions, bone grafting, and facial trauma care. The clinic is dedicated to providing exceptional patient comfort and...	orova	2026-07-03	US, Healthcare	2 sources
Bjs Insurance & Financial bjsinsurance.net BJS Insurance Services, Inc. was established upon two underlying principles that continue to define the company today.... Integrity and Stability. We're all about Service, we just do what we say we're going to do. We listen to our clients and suggest what plan...	orova	2026-07-01	US, Financial Services	2 sources
Sc Regional Housing Authority scrha.net SCRHA3 provides affordable housing solutions across South Carolina, focusing on public housing, homeownership, and rental assistance programs. With over 15 years of experience, they offer subsidized housing assistance to qualified families and help low-income...	Orova	2026-06-29	US, Government & Defense	ransomwarelive
Texas Medical Screening texasmedical.com Texas Medical has helped organizations deliver health screenings without the overhead. Our self-service kiosks are trusted in workplaces, pharmacies, and community spaces across the country.	Orova	2026-06-26	US, Healthcare	ransomwarelive
EMPYREAN INT’L TECHNO DEVICES empyrean.tw Taiwan-based telecom and electronics accessories company. They specialize in wearable accessories, such as digital watches and related gear.	Orova	2026-06-18	TW, Technology	ransomwarelive
Apollo Office System apollo-net.com Since our establishment in May 1970 as an office equipment sales company, we have provided one-stop services to propose office rationalization and a more comfortable office environment.	Orova	2026-06-09	JP, Other	ransomwarelive
Northeastern Communications & Electrical northeastcne.com Northeastern Communications & Electrical LLC, based in Middletown, Connecticut, specializes in the installation of voice, data, and video systems for various building types, including small, medium, and large-scale projects. The company prides itself on delive...	Orova	2026-05-28	US, Energy & Utilities	ransomwarelive
eSysTech esystech.com.br The company offers customized software solutions and develops new modules and platforms to enhance IT asset management. Its main product, ADOTI, provides comprehensive tools for tracking and managing IT resources, serving clients across various sectors, includ...	Orova	2026-05-24	BR, Technology	ransomwarelive
ADG Healthcare adg-healthcare.com ADG Healthcare is a company that operates in the Medical Specialists industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in Cairo, Cairo, Egypt.	Orova	2026-05-21	EG, Healthcare	ransomwarelive
Ultra Fame en.ufame.com.tw As PCB design continues to evolve in complexity and customization, we believe that outstanding circuit layouts are built on a strong engineering foundation and a deep understanding of our clients’ needs. From simple double-layer boards to advanced multi-layer...	Orova	2026-05-19	TW, Other	ransomwarelive
DBM Reflex dbmreflex.com.tw DBM Technology Co., Ltd. is a leading brand in electroforming mold cores in Asia, established in 1999. With a team of over 70 professionals, the company specializes in mold core design and high-quality electroformed mold production, having produced more than 9...	Orova	2026-05-13	TW, Other	ransomwarelive
Agricultural Chemical Solutions agchemicalsolutions.com Agricultural Chemical Solutions, Inc. provides high-quality agricultural chemicals and a comprehensive marketplace aimed at enhancing farming operations. They offer a wide range of products including pesticides, herbicides, fungicides, and micro nutrients, wit...	Orova	2026-05-07	US, Agriculture and Food Production	ransomwarelive
SBI Manufacturing sbimfg.com SBI Manufacturing is a family-owned company based in Sioux Falls, SD, specializing in metal fabrication and machine welding. They provide services primarily to the agricultural, industrial, and transportation sectors.	Orova	2026-05-03	US, Manufacturing	ransomwarelive

Watch for your own name

Tell us what to watch for and we will email you when a group claims it. Weekly at most, only when something matches, and never the same claim twice. Double opt-in, one-click unsubscribe, and your watch list is deleted the moment you leave.

Set up an alert

Sources: RansomLook (CC BY 4.0, synced 2026-08-05 09:15 UTC), Ransomfeed (CC BY 4.0, synced 2026-08-05 09:15 UTC) and ransomware.live (PRO licence, synced 2026-08-05 09:15 UTC), each used under the licence shown and refreshed a few times a day. They crawl the groups' Tor leak sites; we never do, and we store no .onion address, magnet link or leak-site screenshot. Listings are the claims of criminals and are the sole responsibility of their authors; nothing here is verified, and nothing here is advice. This site stores no personal data about what you look up.