d4 · tools · leaks
Who ransomware groups are claiming to have breached, from two independent trackers of their leak sites. Unverified criminal claims, not confirmed breaches: an early signal to go and check, never a finding. Get alerts when something on your watch list is claimed. We do not record what you look up.
Tracking 3,933 claims across 137 groups, 277 of them in the last seven days.
A listing means a criminal group has said it holds data from an organisation. It does not mean a breach happened, that the data is real, or that it is recent.
Where two independent trackers carried the same claim we mark it 2 sources. That means two crawlers saw the same post, not that anyone verified it.
We publish the claim only. We do not link to leak sites, mirror screenshots, or carry any pointer to stolen data. If you are listed here and believe it is wrong, or you want the entry removed, tell us and we will act on it.
None of this is our research. The crawling is done by RansomLook, Ransomfeed and ransomware.live, and we are grateful for it. Please go to them for the full picture.
| Organisation named | Group claiming | Claimed | Where | Sources |
|---|---|---|---|---|
| Indiana Area School District A school district in Indiana, Pennsylvania (approximately 2,800 students) is required to protect student education records, including medical records and personal information, in accordance with the Pennsylvania Educational Rights and Privacy Act (FERPA). Howe... | interlock | 2026-11-02 | — | ransomlook |
| Jerome School District Jerome School District 261 is a public school district located in Jerome, Idaho with an average enrollment of approximately 4,000 students. They have compromised student records (names, dates of birth, contact information, grades, attendance, disciplinary acti... | interlock | 2026-11-02 | — | ransomlook |
| Highland Mountain Bike Park Highland Mountain Bike Park, located in Northfield, New Hampshire, USA, was founded in 2003. It bills itself as "America's Bike Park" and as a park 100% dedicated to mountain biking. However, its security lapses led to the compromise of customer and employee d... | interlock | 2026-11-01 | — | ransomlook |
| Assiniboine Dental Group Assiniboine Dental Group is a private dental practice in Winnipeg, Manitoba, operating as a "trustee." It is required to securely store patients' personal health information in accordance with the province's Personal Health Information Protection Act (PHIA). H... | interlock | 2026-11-01 | — | ransomlook |
| Meadows Valley School District The Meadows Valley School District strives to prepare all students for life's demands, adventures, and challenges. While the district offers educational services designed to foster student growth and development, its negligence in security has exposed its staf... | interlock | 2026-10-31 | — | ransomlook |
| Ridgway High School Ridgeway R-2 School District states its commitment to providing a safe and inclusive learning environment for students, however, their failure to secure your data and their failure to address this issue resulted in a breach of student and employee personal dat... | interlock | 2026-10-31 | — | ransomlook |
| Southwest Orthopedic & Reconstructive Specialists Southwest Orthopedic & Reconstructive Specialists, a clinic located in Oklahoma, is required by law to maintain protected health information (PHI) as a healthcare facility. However, due to its negligent attitude toward security and unwillingness to resolve the... | interlock | 2026-10-29 | — | ransomlook |
| Madison Honda Madison Honda, located in Madison, New Jersey, offers a wide selection of new and used vehicles, as well as flexible financing options.They are negligent when it comes to their own security and that of their customers, which is why we disclose non-public perso... | interlock | 2026-10-23 | — | ransomlook |
| Custom Floors Unlimited Custom Floors Unlimited designs and installs high-quality, custom-made solid wood flooring. They specialize in creating unique designs. However, they do not specialize in ensuring their own security or the security of their customers' data. Therefore, we provi... | interlock | 2026-10-23 | — | ransomlook |
| Coastal Alabama Community College coastalalabama.edu Coastal Alabama Community College demonstrates an extreme disregard for its own security and the security of its students and makes no attempt to address these deficiencies. Therefore, we are publishing their sensitive information, such as student education re... | interlock | 2026-10-21 | USA, Education | 3 sources |
| Pedigo Products, Inc. Pedigo Products, Inc. is a privately held American manufacturer of stainless steel and chromium medical equipment for the healthcare industry. It disregards its own security, as well as that of its customers and employees, and makes no attempt to negotiate agr... | interlock | 2026-10-12 | USA, Manufacturing | 3 sources |
| Valenti Management valentichilisrestaurants.com Valenti Management is known as the Tampa-based Wendy's franchise operator. They are extremely lax when it comes to cybersecurity and are unwilling to cooperate in preventing data leaks, which is why we offer you commercial and confidential documents such as: p... | interlock | 2026-10-12 | USA, Professional Services | 3 sources |
| Concord Eye Center A private ophthalmology clinic specializing in various fields. However, it completely fails to ensure the security of itself and its clients and is extremely lax in its recordkeeping. The structure of its confidential records is determined by the categories of... | interlock | 2026-10-12 | USA, Healthcare | 3 sources |
| Greentech Environmental Greentech Environmental LLC, a manufacturer of air purification systems using patented ODOGard and ARC technologies, has failed to fully secure and address the breach, and therefore we are publishing their confidential information such as (intellectual propert... | interlock | 2026-10-12 | USA, Energy & Utilities | 3 sources |
| Engineers Contractors Fabricators Inc. (ECF) ECF, Inc., a piping and insulation contractor specializing in the design and construction of terminals for the transshipment of liquid hydrocarbons such as asphalt, crude oil, and renewable fuels, has completely failed to ensure the security of its systems and... | interlock | 2026-10-12 | USA, Manufacturing | 3 sources |
| Nu-Quest Distribution Inc Nu-Quest Distribution Inc. is a privately held pharmaceutical wholesaler based in Newfoundland and Labrador. The company specializes in the distribution of brand-name and generic medications, as well as medical devices. Its negligent attitude toward security a... | interlock | 2026-10-12 | USA, Retail & E-Commerce | 3 sources |
| Shalom Christian Academy shalomca.com As a school, Shalom Christian Academy is legally and ethically obligated to maintain a wide range of confidential information. However, they are grossly negligent in protecting their own security and that of their students and staff. Consequently, we provide y... | interlock | 2026-10-09 | USA, Education | 3 sources |
| Riviera Healthcare Center Riviera Healthcare Center is a for-profit skilled nursing facility in operation for over 50 years. It provides 24-hour nursing and rehabilitation services. Due to negligence and poor security practices, confidential data was exposed, including patient protecte... | interlock | 2026-10-07 | USA, Healthcare | 3 sources |
| H&L Manufacturing H&L Manufacturing is a contract manufacturer serving various industries, including automotive, consumer goods, and transportation. However, due to negligence, H&L filesnon-disclosure agreements, CAD models, material specifications, quotes, prototypes, 3D print... | interlock | 2026-10-05 | USA, Manufacturing | 3 sources |
| O2 Dental Group o2smiles.com O2 Dental Group of Wilmington makes your dental care easy by providing a variety of family dentistry services under one roof! As a dental provider, O2 Dental Group is subject to strict privacy protections, primarily the Health Insurance Portability and Account... | interlock | 2026-10-05 | USA, Healthcare services | 3 sources |
| Blaise C. Bender, PC bcbenderlaw.com The law firm of Blaise C. Bender, PC handles confidential client tax records/working papers, mergers and acquisitions (M&A) and transaction agreements, estate/trust documents, corporate management records, and confidential attorney-client communications, and f... | interlock | 2026-09-30 | USA, Professional Services | 3 sources |
| Tekko Enterprises, Inc Tekko Enterprises, Inc., a Tooele, Utah-based prime contractor with a U.S. Air Force contract at Mountain Home Air Force Base (worth over $5 million), an $829,227 U.S. Army Corps of Engineers contract for cranes in Sacramento, and recent projects in Jacob City... | interlock | 2026-09-29 | USA, Not Found | 3 sources |
| The Center for Kidney Care The Kidney Center is a leading provider of nephrology services in South Jersey, specializing in the diagnosis and treatment of kidney disease and hypertension. Due to their negligence in their own safety and the safety of their clients, confidential medical in... | interlock | 2026-09-28 | USA, Healthcare | 3 sources |
| Springfield Public Schools springfieldpublicschools.com Springfield Public Schools in Springfield, Massachusetts, is the third-largest school district in the state, with over 23,500 students and over 4,200 full-time employees. The school budget accounts for more than two-thirds of the city's total budget, which is... | interlock | 2026-09-15 | USA, Education | 3 sources |
| City of Fort Smith Arkansas fortsmithar.gov The City of Fort Smith is committed to providing high-quality, resident-focused services to foster a thriving community. This is how they try to position themselves, but in reality, they are very negligent towards their residents and organizations within the c... | interlock | 2026-09-15 | USA, Government & Defense | 3 sources |
| NFM Lending NFM Lending is a national mortgage lender with over 1,000 employees that originated approximately $7.15 billion in mortgages in the past 12 months. The data breach exposed over 2.5 TB of sensitive personal customer information (names, Social Security numbers,... | interlock | 2026-09-07 | USA, Financial Services | 3 sources |
| Super Systems Inc Super Systems, Inc. develops and manufactures products for the heating industry. However, it is extremely negligent in its own security and that of its customers, resulting in data breaches. You can view documents revealing confidential control schemes and vul... | interlock | 2026-08-31 | USA, Technology | 3 sources |
| Southeastern Oklahoma State University Southeastern Oklahoma State University is a public, four-year university located in Durant, Oklahoma. A data breach exposed student educational records (including names, contact information, Social Security numbers, grades, enrollment data, financial aid infor... | interlock | 2026-08-19 | USA, Universities | 3 sources |
| Connell Enterprises LLC connellenterprisesinc.com He performs system administration for domain networks but is unable to ensure his own security. As a result, his data was compromised, and he was caught distributing pornographic content, storing over 200 terabytes of pornographic data on his network-attached... | interlock | 2026-08-14 | US, Other | 3 sources |
| AngMar Companies angmarcompanies.com AngMar is a private organization comprised of numerous corporate holdings, LLCs, and companies, operating a network of home health care facilities. They disregard the safety of their clients and the people they care for. As a result, 710 GB of confidential inf... | interlock | 2026-08-11 | USA, Not Found | 3 sources |
| Gardiner Family Chiropractic gardinerfamilychiropractic.com Gardiner Family Chiropractic has been providing medical services to residents of Gardiner and the surrounding area since 1989. However, it is not responsible for its patients and makes no attempt to ensure the security of its stored information. Therefore, pat... | interlock | 2026-07-31 | USA, Healthcare services | 2 sources |
Tell us what to watch for and we will email you when a group claims it. Weekly at most, only when something matches, and never the same claim twice. Double opt-in, one-click unsubscribe, and your watch list is deleted the moment you leave.
Set up an alertSources: RansomLook (CC BY 4.0, synced 2026-11-03 12:20 UTC), Ransomfeed (CC BY 4.0, synced 2026-11-03 12:20 UTC) and ransomware.live (PRO licence, synced 2026-11-03 12:20 UTC), each used under the licence shown and refreshed a few times a day. They crawl the groups' Tor leak sites; we never do, and we store no .onion address, magnet link or leak-site screenshot. Listings are the claims of criminals and are the sole responsibility of their authors; nothing here is verified, and nothing here is advice. This site stores no personal data about what you look up.