d4 · tools · leaks
Who ransomware groups are claiming to have breached, from two independent trackers of their leak sites. Unverified criminal claims, not confirmed breaches: an early signal to go and check, never a finding. Get alerts when something on your watch list is claimed. We do not record what you look up.
Tracking 3,933 claims across 137 groups, 274 of them in the last seven days.
A listing means a criminal group has said it holds data from an organisation. It does not mean a breach happened, that the data is real, or that it is recent.
Where two independent trackers carried the same claim we mark it 2 sources. That means two crawlers saw the same post, not that anyone verified it.
We publish the claim only. We do not link to leak sites, mirror screenshots, or carry any pointer to stolen data. If you are listed here and believe it is wrong, or you want the entry removed, tell us and we will act on it.
None of this is our research. The crawling is done by RansomLook, Ransomfeed and ransomware.live, and we are grateful for it. Please go to them for the full picture.
| Organisation named | Group claiming | Claimed | Where | Sources |
|---|---|---|---|---|
| AUDIT ENTITY: Cabka AUDIT ID: 1B693EF65DE3E672 / DISCOVERY DATE: 2026-10-23 | audit team | 2026-10-31 | — | ransomlook |
| AUDIT ENTITY: Pe***CT AUDIT ID: 17BACA24A3932895 / DISCOVERY DATE: 2026-10-31 | audit team | 2026-10-31 | — | ransomlook |
| AUDIT ENTITY: hn***rg AUDIT ID: 2AE3CE243E823521 / DISCOVERY DATE: 2026-10-31 | audit team | 2026-10-31 | — | ransomlook |
| AUDIT ENTITY: jl***om AUDIT ID: 1E2CF5D71F581238 / DISCOVERY DATE: 2026-10-31 | audit team | 2026-10-31 | — | ransomlook |
| AUDIT ENTITY: ro***up AUDIT ID: 57FD7689754A6F21 / DISCOVERY DATE: 2026-10-31 | audit team | 2026-10-31 | — | ransomlook |
| hn***rg | AuditTeam | 2026-10-31 | Non Disponibile, Not Found | 2 sources |
| jl***om | AuditTeam | 2026-10-31 | SG, Not Found | 2 sources |
| Pe***CT | AuditTeam | 2026-10-31 | Non Disponibile, Not Found | 2 sources |
| ro***up | AuditTeam | 2026-10-31 | Non Disponibile, Not Found | 2 sources |
| AUDIT ENTITY: Safe Data Storage AUDIT ID: D97C8C51B24F4924 / DISCOVERY DATE: 2026-10-13 | audit team | 2026-10-26 | — | ransomlook |
| AUDIT ENTITY: ADL Lift Services Limited AUDIT ID: 5E6E37AF368EF949 / DISCOVERY DATE: 2026-10-13 | audit team | 2026-10-23 | — | ransomlook |
| AUDIT ENTITY: Zena Office AUDIT ID: AE29646C5B89FA91 / DISCOVERY DATE: 2026-10-13 | audit team | 2026-10-23 | — | ransomlook |
| AUDIT ENTITY: Ca***ka AUDIT ID: 1B693EF65DE3E672 / DISCOVERY DATE: 2026-10-23 | audit team | 2026-10-23 | — | ransomlook |
| Cabka cabka.com No data breaches | AuditTeam | 2026-10-23 | Netherlands, Manufacturing | 2 sources |
| Ca***ka | AuditTeam | 2026-10-23 | Non Disponibile, Not Found | 2 sources |
| AUDIT ENTITY: Admirals Trading AUDIT ID: 57A8852C16952C8C / DISCOVERY DATE: 2026-10-02 | audit team | 2026-10-13 | — | ransomlook |
| AUDIT ENTITY: AD***ed AUDIT ID: 5E6E37AF368EF949 / DISCOVERY DATE: 2026-10-13 | audit team | 2026-10-13 | — | ransomlook |
| AUDIT ENTITY: Ze***ce AUDIT ID: AE29646C5B89FA91 / DISCOVERY DATE: 2026-10-13 | audit team | 2026-10-13 | — | ransomlook |
| AUDIT ENTITY: Sa***ge AUDIT ID: D97C8C51B24F4924 / DISCOVERY DATE: 2026-10-13 | audit team | 2026-10-13 | — | ransomlook |
| AD***ed | AuditTeam | 2026-10-13 | UK, Not Found | 2 sources |
| ADL Lift Services Limited adlliftservices.com ADL Lift Services Limited is a Scotland-based commercial lift specialist, incorporated in 2010 and now headquartered in Bellshill at Strathclyde Business Park, that under the leadership of Brian Harkin employs around 40 people with assets and shareholders’ fun... | AuditTeam | 2026-10-13 | UK, Manufacturing | 2 sources |
| Safe Data Storage safedatastorage.co.uk Safe Data Storage Ltd is an active UK-based SME IT services company founded in 2004, headquartered in Orpington, Kent, and run by David Cleaver and others; it offers managed backup and disaster recovery on its own dual-site ISO 27001 UK private-cloud infrastru... | AuditTeam | 2026-10-13 | UK, Technology | 2 sources |
| Sa***ge | AuditTeam | 2026-10-13 | UK, Not Found | 2 sources |
| Ze***ce | AuditTeam | 2026-10-13 | Italy, Not Found | 2 sources |
| Zena Office zenaoffice.it Zena Office S.r.l. is a regional small-to-mid-sized IT and office technology provider based in Piacenza, Italy, formally registered around 2000 and claiming roots that stretch back to 1930s office-furniture tradition, that with roughly 9–10 employees and about... | AuditTeam | 2026-10-13 | Italy, Professional Services | 2 sources |
| AUDIT ENTITY: Ad***ng AUDIT ID: 57A8852C16952C8C / DISCOVERY DATE: 2026-10-02 | audit team | 2026-10-02 | — | ransomlook |
| Admirals Trading admirals.ae Admirals Trading LLC (admirals.ae) is a Dubai-based food and beverage company under the Saudi conglomerate Rashed Abdul Rahman Al Rashed & Sons Group, with over 20 years of experience in the UAE market, specializing in the distribution of 60+ international and... | AuditTeam | 2026-10-02 | UAE, Financial Services | 2 sources |
| Ad***ng | AuditTeam | 2026-10-02 | Non Disponibile, Unknown | 2 sources |
| AUDIT ENTITY: steelco AUDIT ID: 661EB89AEF2A1E8D / DISCOVERY DATE: 2026-09-20 | audit team | 2026-10-01 | — | ransomlook |
| AUDIT ENTITY: ProMind IT AUDIT ID: 746464CD386A9234 / DISCOVERY DATE: 2026-09-22 | audit team | 2026-10-01 | — | ransomlook |
| Paid Victim 32373FFB7AF7E725 [AI generated] N/A I don't have reliable information about a company with this specific identifier. This appears to be an anonymized or coded reference, possibly from a ransomware leak site or threat intelligence feed, rather than a verifiable company name. Wi... | AuditTeam | 2026-09-29 | IT, Not Found | ransomwarelive |
| AUDIT ENTITY: vit.ac.in AUDIT ID: 5DC9129A6EA7F384 / DISCOVERY DATE: 2026-09-13 | audit team | 2026-09-22 | — | ransomlook |
| AUDIT ENTITY: Pr***IT AUDIT ID: 746464CD386A9234 / DISCOVERY DATE: 2026-09-22 | audit team | 2026-09-22 | — | ransomlook |
| Pr***IT | AuditTeam | 2026-09-22 | Non Disponibile, Unknown | 2 sources |
| ProMind IT promindit.com ProMind IT (promindit.com) is a small Italian IT consulting company offering website development, business solutions, and Odoo ERP/accounting software integration services, though its website is currently offline and very little public information is available... | AuditTeam | 2026-09-22 | Italy, Technology | 2 sources |
| AUDIT ENTITY: TEK SPB AUDIT ID: 993E2D59C377AFDE / DISCOVERY DATE: 2026-09-12 | audit team | 2026-09-20 | — | ransomlook |
| AUDIT ENTITY: st***co AUDIT ID: 661EB89AEF2A1E8D / DISCOVERY DATE: 2026-09-20 | audit team | 2026-09-20 | — | ransomlook |
| st***co | AuditTeam | 2026-09-20 | Non Disponibile, Not Found | 2 sources |
| steelco steelcobelimed.com Steelco is an Italian medical device company founded in 2001, specializing in cleaning, disinfection, and sterilization equipment for hospitals, laboratories, and the pharmaceutical industry; it joined Germany's Miele Group in 2017 and merged with Switzerland'... | AuditTeam | 2026-09-20 | Italy, Manufacturing | 2 sources |
| AUDIT ENTITY: td***up AUDIT ID: AB8A1616FC11F818 / DISCOVERY DATE: 2026-09-19 | audit team | 2026-09-19 | — | ransomlook |
| td***up | AuditTeam | 2026-09-19 | Non Disponibile, Unknown | 2 sources |
| Paid Victim 192EB2B6AD7B98D9 [AI generated] N/A I don't have any reliable information about a company named "Paid Victim 192EB2B6AD7B98D9." This appears to be an anonymized or coded identifier, possibly from a ransomware leak site or threat intelligence feed, rather than an actual company... | AuditTeam | 2026-09-18 | RU, Not Found | ransomwarelive |
| AUDIT ENTITY: kit-e.jp AUDIT ID: 9CB29482AF73366B / DISCOVERY DATE: 2026-09-09 | audit team | 2026-09-18 | — | ransomlook |
| AUDIT ENTITY: palletshop AUDIT ID: 13FE12E3FD98828D / DISCOVERY DATE: 2026-09-08 | audit team | 2026-09-16 | — | ransomlook |
| AUDIT ENTITY: buben AUDIT ID: 3A8CF838E9FD17A1 / DISCOVERY DATE: 2026-09-08 | audit team | 2026-09-16 | — | ransomlook |
| AUDIT ENTITY: Wise IT AUDIT ID: 2567E8139A6D7753 / DISCOVERY DATE: 2026-09-08 | audit team | 2026-09-16 | — | ransomlook |
| AUDIT ENTITY: dg.ac.kr AUDIT ID: 4FEC5C192A8A6AC3 / DISCOVERY DATE: 2026-09-08 | audit team | 2026-09-16 | — | ransomlook |
| AUDIT ENTITY: gownet.net AUDIT ID: D4AF665C36E15B6C / DISCOVERY DATE: 2026-09-08 | audit team | 2026-09-16 | — | ransomlook |
| AUDIT ENTITY: krimax.org AUDIT ID: FFFEE8E6DD3445AD / DISCOVERY DATE: 2026-09-08 | audit team | 2026-09-16 | — | ransomlook |
| AUDIT ENTITY: Ne***ox AUDIT ID: 42FFBFBFF9241F2E / DISCOVERY DATE: 2026-09-14 | audit team | 2026-09-14 | — | ransomlook |
| Ne***ox | AuditTeam | 2026-09-14 | RU, Technology | 2 sources |
| Paid Victim F9CF4B639CAC1B18 [AI generated] N/A | AuditTeam | 2026-09-13 | RU, Not Found | ransomwarelive |
| Paid Victim FDC699DE3A112669 [AI generated] N/A | AuditTeam | 2026-09-13 | DE, Not Found | ransomwarelive |
| AUDIT ENTITY: vi***in AUDIT ID: 5DC9129A6EA7F384 / DISCOVERY DATE: 2026-09-13 | audit team | 2026-09-13 | — | ransomlook |
| vi***in | AuditTeam | 2026-09-13 | Non Disponibile, Transportation | 2 sources |
| vit.ac.in vit.ac.in VIT (Vellore Institute of Technology, official site vit.ac.in) is a well-known private university in India: founded in 1984 and granted university status in 2001, with its main campus in Vellore and additional campuses in Chennai, AP, and Bhopal; it is especia... | AuditTeam | 2026-09-13 | India, Education | 2 sources |
| AUDIT ENTITY: TE***PB AUDIT ID: 993E2D59C377AFDE / DISCOVERY DATE: 2026-09-12 | audit team | 2026-09-12 | — | ransomlook |
| TEK SPB tek-spb.ru TeploEnergoKomplex (TEK SPB, tek-spb.ru) — a St. Petersburg heat-engineering company specializing in design, ZEVS-brand equipment manufacturing, installation, commissioning, and maintenance of individual/central heat points (ITP/CTP) and heat-energy metering u... | AuditTeam | 2026-09-12 | Russia, Technology | 2 sources |
| TE***PB | AuditTeam | 2026-09-12 | RU, Not Found | 2 sources |
| AUDIT ENTITY: ki***jp AUDIT ID: 9CB29482AF73366B / DISCOVERY DATE: 2026-09-09 | audit team | 2026-09-10 | — | ransomlook |
| AUDIT ENTITY: my***ru AUDIT ID: D91BED92A5A9223F / DISCOVERY DATE: 2026-09-09 | audit team | 2026-09-10 | — | ransomlook |
| AUDIT ENTITY: mo***al AUDIT ID: 2431ED9F65ADD5B1 / DISCOVERY DATE: 2026-09-10 | audit team | 2026-09-09 | — | ransomlook |
| mo***al | AuditTeam | 2026-09-09 | Non Disponibile, Not Found | 2 sources |
| AUDIT ENTITY: dg***kr AUDIT ID: 4FEC5C192A8A6AC3 / DISCOVERY DATE: 2026-09-08 | audit team | 2026-09-09 | — | ransomlook |
| AUDIT ENTITY: go***et AUDIT ID: D4AF665C36E15B6C / DISCOVERY DATE: 2026-09-08 | audit team | 2026-09-09 | — | ransomlook |
| AUDIT ENTITY: kr***rg AUDIT ID: FFFEE8E6DD3445AD / DISCOVERY DATE: 2026-09-08 | audit team | 2026-09-09 | — | ransomlook |
| ki***jp | AuditTeam | 2026-09-09 | JP, Not Found | 2 sources |
| kit-e.jp kit-e.jp No data breaches | AuditTeam | 2026-09-09 | JP, Technology | 2 sources |
| my***ru | AuditTeam | 2026-09-09 | Russia, Technology | 2 sources |
| AUDIT ENTITY: bu***en AUDIT ID: 3A8CF838E9FD17A1 / DISCOVERY DATE: 2026-09-08 | audit team | 2026-09-08 | — | ransomlook |
| AUDIT ENTITY: Wi***IT AUDIT ID: 2567E8139A6D7753 / DISCOVERY DATE: 2026-09-08 | audit team | 2026-09-08 | — | ransomlook |
| AUDIT ENTITY: pa***op AUDIT ID: 13FE12E3FD98828D / DISCOVERY DATE: 2026-09-08 | audit team | 2026-09-08 | — | ransomlook |
| buben buben.it buben.it | AuditTeam | 2026-09-08 | IT, Other | ransomwarelive |
| bu***en | AuditTeam | 2026-09-08 | RU, Unknown | 2 sources |
| dg.ac.kr dg.ac.kr No data breaches | AuditTeam | 2026-09-08 | South Korea, Education | 2 sources |
| dg***kr | AuditTeam | 2026-09-08 | Non Disponibile, Not Found | 2 sources |
| go***et | AuditTeam | 2026-09-08 | Non Disponibile, Technology | 2 sources |
| gownet.net gownet.net No data breaches | AuditTeam | 2026-09-08 | South Korea, Other | 2 sources |
| krimax.org krimax.org No data breaches | AuditTeam | 2026-09-08 | Argentina, Other | 2 sources |
| kr***rg | AuditTeam | 2026-09-08 | Non Disponibile, Not Found | 2 sources |
| palletshop palletshop.ru palletshop.ru | AuditTeam | 2026-09-08 | Russia, Retail & E-Commerce | 2 sources |
| pa***op | AuditTeam | 2026-09-08 | RU, Not Found | 2 sources |
| Wi***IT | AuditTeam | 2026-09-08 | UA, Technology | 2 sources |
| Wise IT wiseit.com.ua Wise IT (wiseit.com.ua) is a Kyiv-based Ukrainian system integrator that provides data center, networking, virtualization, cloud migration, cybersecurity, software licensing, and IT outsourcing services, partnering with vendors such as Google, Microsoft, VMwar... | AuditTeam | 2026-09-08 | Ukraine, Technology | 2 sources |
| AUDIT ENTITY: mansurovogroup AUDIT ID: DA68891EA2CD44B6 / DISCOVERY DATE: 2026-08-26 | audit team | 2026-09-04 | — | ransomlook |
| AUDIT ENTITY: PIT.local AUDIT ID: 3382542458FC4332 / DISCOVERY DATE: 2026-08-27 | audit team | 2026-09-04 | — | ransomlook |
| AUDIT ENTITY: PI***al AUDIT ID: 3382542458FC4332 / DISCOVERY DATE: 2026-08-27 | audit team | 2026-08-27 | — | ransomlook |
| PI***al | AuditTeam | 2026-08-27 | Non Disponibile, Financial Services | 2 sources |
| PIT.local pit.local unknown | AuditTeam | 2026-08-27 | Non Disponibile, Not Found | 2 sources |
| AUDIT ENTITY: Demidov Steel Group AUDIT ID: 22C42D81C3DA7328 / DISCOVERY DATE: 2026-08-18 | audit team | 2026-08-26 | — | ransomlook |
| mansurovogroup mansurovteam.com mansurovogroup is an integrated agricultural enterprise based in Kursk Oblast, Russia. It operates across four main segments: grain cultivation and seed production, cattle farming (beef and dairy), sheep farming (wool and meat), and horse breeding at a stud fa... | AuditTeam | 2026-08-26 | Russia, Other | 2 sources |
| AUDIT ENTITY: ma***up AUDIT ID: DA68891EA2CD44B6 / DISCOVERY DATE: 2026-08-26 | audit team | 2026-08-25 | — | ransomlook |
| ma***up | AuditTeam | 2026-08-25 | RU, Not Found | ransomwarelive |
| AUDIT ENTITY: De***up AUDIT ID: 22C42D81C3DA7328 / DISCOVERY DATE: 2026-08-18 | audit team | 2026-08-18 | — | ransomlook |
| Demidov Steel Group demidovsteel.ru Demidov Steel Group (ГК Демидов) is a Russian metal products manufacturer and trader, website: demidovsteel.ru. The company owns its own plants (Ryazan, Davlekanovo, Novocherkassk, and others), sells wholesale and retail, and supplies 4,000+ products including... | AuditTeam | 2026-08-18 | Russia, Manufacturing | 2 sources |
| De***up | AuditTeam | 2026-08-18 | RU, Unknown | 2 sources |
Tell us what to watch for and we will email you when a group claims it. Weekly at most, only when something matches, and never the same claim twice. Double opt-in, one-click unsubscribe, and your watch list is deleted the moment you leave.
Set up an alertSources: RansomLook (CC BY 4.0, synced 2026-11-03 12:20 UTC), Ransomfeed (CC BY 4.0, synced 2026-11-03 12:20 UTC) and ransomware.live (PRO licence, synced 2026-11-03 12:20 UTC), each used under the licence shown and refreshed a few times a day. They crawl the groups' Tor leak sites; we never do, and we store no .onion address, magnet link or leak-site screenshot. Listings are the claims of criminals and are the sole responsibility of their authors; nothing here is verified, and nothing here is advice. This site stores no personal data about what you look up.