d4 · tools · leaks
Who ransomware groups are claiming to have breached, from two independent trackers of their leak sites. Unverified criminal claims, not confirmed breaches: an early signal to go and check, never a finding. Get alerts when something on your watch list is claimed. We do not record what you look up.
Tracking 3,933 claims across 137 groups, 277 of them in the last seven days.
A listing means a criminal group has said it holds data from an organisation. It does not mean a breach happened, that the data is real, or that it is recent.
Where two independent trackers carried the same claim we mark it 2 sources. That means two crawlers saw the same post, not that anyone verified it.
We publish the claim only. We do not link to leak sites, mirror screenshots, or carry any pointer to stolen data. If you are listed here and believe it is wrong, or you want the entry removed, tell us and we will act on it.
None of this is our research. The crawling is done by RansomLook, Ransomfeed and ransomware.live, and we are grateful for it. Please go to them for the full picture.
| Organisation named | Group claiming | Claimed | Where | Sources |
|---|---|---|---|---|
| South Weber City Government Administration Website: www.southwebercity.gov Stolen data: 295 GB. | booba team | 2026-10-29 | — | ransomlook |
| Programs for Parents, Inc. Non-profit Organizations Website: www.programsforparents.org Stolen data: 95 GB. | booba team | 2026-10-29 | — | ransomlook |
| Circleville Police Department Government Administration Website: www.circlevillepolice.com Stolen data: 15 GB. | booba team | 2026-10-29 | — | ransomlook |
| Terrebonne Parish Government Government Relations Services Website: www.tpcg.org Stolen data: 105 GB. | booba team | 2026-10-29 | — | ransomlook |
| LifeFone Medical Equipment Manufacturing Website: www.lifefone.com Stolen data: Less than 1 GB. | booba team | 2026-10-29 | — | ransomlook |
| National Association of Credit Management Financial Services Website: www.nacm.org Stolen data: 38 GB. | booba team | 2026-10-29 | — | ransomlook |
| California School Boards Association Education Management Website: www.csba.org Stolen data: 80 GB. | booba team | 2026-10-29 | — | ransomlook |
| Horizon Eye Specialists & LASIK Center Medical Practices Website: www.horizonlaservision.com Stolen data: 121 GB. | booba team | 2026-10-27 | — | ransomlook |
| Aesthetic Specialty Centre Medical Practices Website: www.asc-psd.com Stolen data: 22GB. | booba team | 2026-10-27 | — | ransomlook |
| City of Big Spring Government Administration Website: www.mybigspring.com Stolen data: 151 GB. | booba team | 2026-10-27 | — | ransomlook |
| Charter Township of Commerce Government Administration Website: www.commercetwp.com Stolen data: 155 GB. | booba team | 2026-10-27 | — | ransomlook |
| KING FAMILY MEDICAL Hospitals and Health Care Website: www.kingfamilymedical.net Stolen data: 67 GB. | booba team | 2026-10-27 | — | ransomlook |
| RCOA- Regent Christian Online Academy Hospitals and Health Care Website: www.rcoa.ca Stolen data: 1 GB. | booba team | 2026-10-27 | — | ransomlook |
| Kerckstede vzw Hospitals and Health Care Website: www.althus.be Stolen data: 10 GB. | booba team | 2026-10-27 | — | ransomlook |
| BASS Medical Group Medical Practices Website: www.bassmedicalgroup.com Stolen data: 100 GB. | booba team | 2026-10-27 | — | ransomlook |
| Hudson River Museum Museums, Historical Sites, and Zoos Website: www.hrm.org Stolen data: 115 GB. | booba team | 2026-10-27 | — | ransomlook |
| COASTAL CAROLINA NEUROPSYCHIATRIC CENTER, PA Medical Practices Website: www.coastalcarolinapsych.com Stolen data: 10 GB. | booba team | 2026-10-20 | — | ransomlook |
| Research Foundation of The City University of New York Education Administration Programs Website: www.rfcuny.org Stolen data: 295 GB. | booba team | 2026-10-20 | — | ransomlook |
| Chicago Vein Institute Medical Practices Website: www.chicagoveininstitute.com Stolen data: 3 GB. | booba team | 2026-10-20 | — | ransomlook |
| Pearland Pediatrics Hospitals and Health Care Website: www.pearlandpediatrics.com Stolen data: 35 GB. | booba team | 2026-10-20 | — | ransomlook |
| City of Mt. Angel, Oregon Government Administration Website: www.ci.mt-angel.or.us Stolen data: 18 GB. | booba team | 2026-10-20 | — | ransomlook |
| City Hall - Everett, MA Government Administration Website: ci.everett.ma.us Stolen data: 15 GB. | booba team | 2026-10-20 | — | ransomlook |
| MorseLife Health System, Inc. Hospitals and Health Care Website: www.morselife.org Stolen data: 344 GB. | booba team | 2026-10-04 | — | ransomlook |
| Raleigh Family Medicine Hospitals and Health Care Website: www.rfppa.com Stolen data: 1 GB. | booba team | 2026-10-02 | — | ransomlook |
| EdgeEndo® USA Medical Device Website: www.edgeendo.com Stolen data: 103 GB. | booba team | 2026-10-02 | — | ransomlook |
| Soni Medical Centre IT Services and IT Consulting Website: www.lakewoodmedical.ca Stolen data: 5.5 GB. | booba team | 2026-10-02 | — | ransomlook |
| University of Illinois Chicago Higher Education Website: www.uic.edu Stolen data: 344 GB. | booba team | 2026-10-02 | — | ransomlook |
| FUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel" Government Relations Services Website: funap.sp.gov.br Stolen data: 26 GB. | booba team | 2026-10-01 | — | ransomlook |
| ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P.C Medical Practices Website: www.gastrocny.com Stolen data: 70 GB. | booba team | 2026-10-01 | — | ransomlook |
| COSEF - Consorzio di Sviluppo Economico del Friuli Facilities Services Website: cosef.fvg.it Stolen data: 200 GB. | booba team | 2026-09-23 | — | ransomlook |
| The Merrimack County Government Administration Website: www.merrimackcounty.net Stolen data: 3 GB. | booba team | 2026-09-23 | — | ransomlook |
| Smart Eye Care Optometrists Website: www.smarteyecare.com Stolen data: 7 GB. | booba team | 2026-09-23 | — | ransomlook |
| Washington County Government Administration Website: washingtoncountymaine.com Stolen data: 2 GB. | booba team | 2026-09-23 | — | ransomlook |
| Tulare Western High School Education Administration Programs Website: www.tjuhsd.org Stolen data: 35 GB. | booba team | 2026-09-22 | — | ransomlook |
| GOTTHELF Healthcare Website: www.gotthelfmd.com Stolen data: 2 GB. | booba team | 2026-09-22 | — | ransomlook |
| Mestechkin Law Group P.C. Law Practice Website: www.lawmlg.com Stolen data: 37 GB. | booba team | 2026-09-14 | — | ransomlook |
| Atlas Ocean Voyages Travel Arrangements Website: www.atlasoceanvoyages.com Stolen data: 37 GB. | booba team | 2026-09-14 | — | ransomlook |
| Davroc Furniture and Home Furnishings Manufacturing Website: www.davroc.co.uk Stolen data: 15 GB. | booba team | 2026-08-24 | — | ransomlook |
| Chernyy & Associates Law Practice Website: www.chernyy-law.com Stolen data: 67 GB. | booba team | 2026-08-24 | — | ransomlook |
| Country-Wide Insurance Insurance Website: www.cwico.com Stolen data: 92 GB. | booba team | 2026-08-24 | — | ransomlook |
| Federis Abogados Law Practice Website: www.federisabogados.com Stolen data: 61 GB. | booba team | 2026-08-24 | — | ransomlook |
| Index of | booba team | 2026-07-31 | — | ransomlook |
| STAY TUNED FOR UPCOMING LEAKS | booba team | 2026-07-31 | — | ransomlook |
| Telecommunications Telecommunications Website: www.telewave.com Stolen data: 37 GB Telewave.io will exhibit at Booth #1146 at APCO 2026 – Association of Public Safety Communications Officials in San Antonio, Texas! They will have what to tell about. Download here | booba team | 2026-07-31 | — | ransomlook |
| Fonsan Construction Website: www.fonsan.com Stolen data: 23.4 GB | booba team | 2026-07-31 | — | ransomlook |
| Nfinite 9000 S.L. IT Services and IT Consulting Website: nfinite9000.com Stolen data: 3 GB Piece of data below: File: canvas.png | booba team | 2026-07-31 | — | ransomlook |
| Upstaging Entertainment Providers Website: www.upstaging.com Stolen data: 10 GB Piece of data below: File: Edwards_Michael.pdf | booba team | 2026-07-31 | — | ransomlook |
| URA Group Website: uragroup.com Stolen data: 5 GB | booba team | 2026-07-31 | — | ransomlook |
Tell us what to watch for and we will email you when a group claims it. Weekly at most, only when something matches, and never the same claim twice. Double opt-in, one-click unsubscribe, and your watch list is deleted the moment you leave.
Set up an alertSources: RansomLook (CC BY 4.0, synced 2026-11-03 12:20 UTC), Ransomfeed (CC BY 4.0, synced 2026-11-03 12:20 UTC) and ransomware.live (PRO licence, synced 2026-11-03 12:20 UTC), each used under the licence shown and refreshed a few times a day. They crawl the groups' Tor leak sites; we never do, and we store no .onion address, magnet link or leak-site screenshot. Listings are the claims of criminals and are the sole responsibility of their authors; nothing here is verified, and nothing here is advice. This site stores no personal data about what you look up.