d4 · tools · leaks
Who ransomware groups are claiming to have breached, from two independent trackers of their leak sites. Unverified criminal claims, not confirmed breaches: an early signal to go and check, never a finding. Get alerts when something on your watch list is claimed. We do not record what you look up.
Tracking 183 claims across 32 groups, 171 of them in the last seven days.
A listing means a criminal group has said it holds data from an organisation. It does not mean a breach happened, that the data is real, or that it is recent.
Where two independent trackers carried the same claim we mark it 2 sources. That means two crawlers saw the same post, not that anyone verified it.
We publish the claim only. We do not link to leak sites, mirror screenshots, or carry any pointer to stolen data. If you are listed here and believe it is wrong, or you want the entry removed, tell us and we will act on it.
None of this is our research. The crawling is done by RansomLook, Ransomfeed and ransomware.live, and we are grateful for it. Please go to them for the full picture.
| Organisation named | Group claiming | Claimed | Where | Sources |
|---|---|---|---|---|
| Galvin Brothers galvinbrothers.com N/A | qilin | 2026-08-04 | IE, Manufacturing | 2 sources |
| RUPP Spritzguss rupp-spritzguss.de N/A | qilin | 2026-08-04 | DE, Manufacturing | 2 sources |
| WD Masonry & Concrete wdmandc.com N/A | qilin | 2026-08-04 | US, Other | 2 sources |
| Universitatea De Vest Vasile Goldi Din Arad uvvg.ro N/A | qilin | 2026-08-03 | RO, Education | 2 sources |
| Service Electric secv.com Software | qilin | 2026-08-03 | USA, Energy & Utilities | 3 sources |
| Freedom Claims Management freedomclaimsinc.com N/A | qilin | 2026-08-03 | USA, Financial Services | 3 sources |
| Asset Flooring Group Australia assetflooring.com.au N/A | qilin | 2026-08-02 | Australia, Retail & E-Commerce | 3 sources |
| Mairie de Drancy drancy.fr N/A | qilin | 2026-08-02 | France, Government & Defense | 3 sources |
| Wire Products wireproducts.us N/A | qilin | 2026-08-02 | USA, Manufacturing | 3 sources |
| INTERTRUST AUSTRALIA PTY LTD seedoutsourcing.com Real Estate | qilin | 2026-08-02 | Australia, Professional Services | 3 sources |
| The Saturday Evening Post saturdayeveningpost.com N/A | qilin | 2026-08-01 | USA, Other | 3 sources |
| Commercial Furniture Interiors cfioffice.com N/A | qilin | 2026-08-01 | USA, Retail & E-Commerce | 3 sources |
| Dienst Pack Systems dienst-packsystems.de N/A | qilin | 2026-08-01 | Germany, Manufacturing | 3 sources |
| Ceragres ceragres.ca N/A | qilin | 2026-08-01 | Canada, Manufacturing | 3 sources |
| Pointe Property Group pointecre.com Real Estate | qilin | 2026-08-01 | USA, Other | 3 sources |
| Schreiner Trockenbau GmbH schreiner-trockenbau.at N/A | qilin | 2026-08-01 | Austria | 2 sources |
| Community Management Associates cmacommunities.com Real Estate | qilin | 2026-07-31 | USA, Real Estate / Real Estate Management | 2 sources |
| Hawaii Family Dental Healthcare Services | qilin | 2026-07-31 | — | ransomlook |
| The Dcoop dcoop.es N/A | qilin | 2026-07-31 | Spain, Agriculture and agribusiness | 2 sources |
Tell us what to watch for and we will email you when a group claims it. Weekly at most, only when something matches, and never the same claim twice. Double opt-in, one-click unsubscribe, and your watch list is deleted the moment you leave.
Set up an alertSources: RansomLook (CC BY 4.0, synced 2026-08-05 09:15 UTC), Ransomfeed (CC BY 4.0, synced 2026-08-05 09:15 UTC) and ransomware.live (PRO licence, synced 2026-08-05 09:15 UTC), each used under the licence shown and refreshed a few times a day. They crawl the groups' Tor leak sites; we never do, and we store no .onion address, magnet link or leak-site screenshot. Listings are the claims of criminals and are the sole responsibility of their authors; nothing here is verified, and nothing here is advice. This site stores no personal data about what you look up.