ToolsCVE trackerATT&CKLeak trackerCIDRDNSEmail securityHeadersTrackersTLSMy connectionCSP builderEmail headersJWTCert decoderPassphrasePassword checkHash & encodesecurity.txtDNSSEC & CAA

d4 · tools · leaks

Ransomware leak tracker.

Who ransomware groups are claiming to have breached, from two independent trackers of their leak sites. Unverified criminal claims, not confirmed breaches: an early signal to go and check, never a finding. Get alerts when something on your watch list is claimed. We do not record what you look up.

Tracking 2,073 claims across 108 groups, 237 of them in the last seven days.

Read this before you act on anything here

A listing means a criminal group has said it holds data from an organisation. It does not mean a breach happened, that the data is real, or that it is recent.

Where two independent trackers carried the same claim we mark it 2 sources. That means two crawlers saw the same post, not that anyone verified it.

We publish the claim only. We do not link to leak sites, mirror screenshots, or carry any pointer to stolen data. If you are listed here and believe it is wrong, or you want the entry removed, tell us and we will act on it.

None of this is our research. The crawling is done by RansomLook, Ransomfeed and ransomware.live, and we are grateful for it. Please go to them for the full picture.

Claims by emperador

Organisation namedGroup claimingClaimedWhereSources
Cassias MG Government
network commitment, from government credentials to justice panels, such as access to the financial sector, police, personal data, medical (SUS), RG(CIN), BIRTH CERTIFICATE, CPF (identity number in Brazil) among other data from CASSIAS.MG.GOV departments, we wi...
emperador2026-09-19BR, Government & Defense2 sources
Westbridge Institute of Technology, Inc.
westbridge.edu.ph
Westbridge Institute of Technology, Inc. is an educational institution in the Philippines that offers various technical and vocational programs. It is designed to provide students with practical skills and knowledge in fields such as information technology, he...
emperador2026-09-17Philippines, Education3 sources
RDA MOTORS S.P.A.
rda-stellantis.it
is an Italian company engaged in premium cars. There are many customer documents and employee data Publication scheduled: 2026-09-26 20:26:23 UTC Size: 7.3 GB Sectors: Technology, Other
emperador2026-09-16Italy, Manufacturing3 sources
SEVENOAKS s.r.o.
7oaks.cz
Sevenoaks, S.R.O. is an enterprise based in Czech Republic. Its main office is in Prague. The company operates in the Computer Systems Design and Related Services industry. Publication scheduled: 2026-09-26 17:48:54 UTC Size: 3.3 GB Sectors: Technology, Other
emperador2026-09-16Czech Republic, Not Found3 sources
Navitrans
navitrans.com.co
Navitrans is a leading Colombian distributor and service provider specializing in commercial trucks and heavy machinery, offering a comprehensive range of products and services including vehicle sales, spare parts distribution, and maintenance and repair servi...
emperador2026-09-13Colombia, Transportation3 sources
Nexbex Solutions Private Limited
nexbex.in
Nexbex Solutions Private Limited is a technology consulting and software engineering firm incorporated in November 2023, headquartered in Malappuram, Kerala (India). Classified as an emerging private company, it operates with a paid-up capital of 10 million In...
emperador2026-09-11India, Not Found3 sources
EASY JOB S.A.S.
easyjobsas.com
Colombian Company. Audit and Tax Audit with more than 5 years of experience Calle 17 sur 44 - 159 Oficina 1501 EDIFICIO CLAROSCURO, Medellín Colombia. Llámanos o escríbenos: 310 447 2013 - 313 796 9917 The archives contain personal data of employees and custom...
emperador2026-09-10Colombia, Professional Services3 sources
Bosnia and Herzegovina Mine Action Center
bhmac.org
important documents Publication scheduled: 2026-09-19 12:33:49 UTC Size: 1.7 GB Sectors: Other
emperador2026-09-09Bosnia and Herzegovina, Government & Defense3 sources
BAYMER
solutions.covestro.com
Important documents Publication scheduled: 2026-09-19 11:23:44 UTC Size: 1.4 GB Sectors: Other
emperador2026-09-09USA, Manufacturing3 sources
Universal Starch-Chem Allied Ltd
universalstarch.com
important documents Publication scheduled: 2026-09-19 11:13:14 UTC Size: 3.5 GB Sectors: Other
emperador2026-09-09India, Manufacturing3 sources
Judicial Branch of the Province of Jujuy
justiciajujuy.gob.ar
The official website of the Judicial Branch of Jujuy, Argentina. It provides court information, digital case management, mediation services, legal rulings, and judicial news for legal professionals and the public. Now i have your wordpress databases, login cre...
emperador2026-09-04Argentina, Government & Defense3 sources
Uniguacu
uniguacu.com.br
full commitment of the network having full access to infrastructure, thus ensuring access to the database containing confidential and financial information! I obtained some images that compromise the financial sector. You have 13 days to trade. If the trade do...
emperador2026-08-29Brazil, Other3 sources
Hanwha Renewables
hanwharenewables.com
The data contains really sensitive information from 4 PV projects looking for investment/financing of Hanwha. We extracted around 12GB of highly sensitive information relating to the following projects: - Bonanza Peak (3GB) - Boulder Solar III (0.7GB) - Obrero...
emperador2026-08-28USA, Renewable energies3 sources
Ipro.com(revealdata.com) customer DB + full database backup
revealdata.com
Yes, this data has been posted before by ME under a different alias, yes the individual that posted the data on cracked.st is a fraud. I am posting this just for fun. Data contains: Customer identifiers, Contact & Location, Account metadata, Internal System ID...
emperador2026-08-27USA, Technology3 sources
Capitol Mechanics
mycarservice.com
Capitol Mechanics , fresh databases, important docs Publication scheduled: 2026-09-10 08:37:25 UTC Size: 120.9 MB Sectors: Finance, Transportation
emperador2026-08-27USA, Transportation3 sources
FRUCASTRO SL
frucastro.es
Recent databases, important documents Publication scheduled: 2026-09-06 11:40:43 UTC Size: 540.1 MB Sectors: Manufacturing
emperador2026-08-23Spain, Agriculture and Food Production3 sources
Vietnam Electricity(EVNHANOI)
evn.com.vn
Vietnam Electricity (EVN), legally known as Tập đoàn Điện lực Việt Nam, is the largest power company and the sole national electric utility in Vietnam. Fully owned and controlled by the Vietnamese government since its inception in 1994, EVN operates as a verti...
emperador2026-08-22VN, Energy & Utilities3 sources
Test
test test test Size: 9.8 GB Sectors: Other
emperador2026-08-22ransomlook
NetExam
netexam.com
NetExam (netexam.com) — the website of NetExam LMS+, a US-based SaaS learning management system built for external audiences rather than internal employees. It helps companies train, certify, and enable their channel partners, customers, and association member...
emperador2026-08-20USA, Technology3 sources
Prefeitura Municipal de Arcos
arcos.mg.gov.br
We hold complete, unrestricted access to your internal infrastructure. All servers, databases, emails, and admin credentials have been exfiltrated. Critical systems have been encrypted. We have your data. You do not. You have 14 days to respond. No response =...
emperador2026-08-18Brazil, Local administrations3 sources
Albania's official national teacher training portal.
rash.al
Albania’s official national teacher training portal provides centralized professional development resources and accredited programs for educators nationwide. This leak include data such as; Roughly ~100k Full national ID numbers, full names and teacher certifi...
emperador2026-08-16Albania, Training3 sources
City Government of Baguio
main.baguio.gov.ph
The City Government of Baguio stands as one of the wealthiest and most prominent local governments in the Philippines. This leak includes highly sensitive and confidential data, such as official contracts, legal permits, identification documents, financial sta...
emperador2026-08-10Philippines, Government & Defense3 sources

Watch for your own name

Tell us what to watch for and we will email you when a group claims it. Weekly at most, only when something matches, and never the same claim twice. Double opt-in, one-click unsubscribe, and your watch list is deleted the moment you leave.

Set up an alert

Sources: RansomLook (CC BY 4.0, synced 2026-09-19 08:20 UTC), Ransomfeed (CC BY 4.0, synced 2026-09-19 08:20 UTC) and ransomware.live (PRO licence, synced 2026-09-19 08:20 UTC), each used under the licence shown and refreshed a few times a day. They crawl the groups' Tor leak sites; we never do, and we store no .onion address, magnet link or leak-site screenshot. Listings are the claims of criminals and are the sole responsibility of their authors; nothing here is verified, and nothing here is advice. This site stores no personal data about what you look up.