d4 · tools · leaks
Who ransomware groups are claiming to have breached, from two independent trackers of their leak sites. Unverified criminal claims, not confirmed breaches: an early signal to go and check, never a finding. Get alerts when something on your watch list is claimed. We do not record what you look up.
Tracking 3,979 claims across 138 groups, 285 of them in the last seven days.
A listing means a criminal group has said it holds data from an organisation. It does not mean a breach happened, that the data is real, or that it is recent.
Where two independent trackers carried the same claim we mark it 2 sources. That means two crawlers saw the same post, not that anyone verified it.
We publish the claim only. We do not link to leak sites, mirror screenshots, or carry any pointer to stolen data. If you are listed here and believe it is wrong, or you want the entry removed, tell us and we will act on it.
None of this is our research. The crawling is done by RansomLook, Ransomfeed and ransomware.live, and we are grateful for it. Please go to them for the full picture.
| Organisation named | Group claiming | Claimed | Where | Sources |
|---|---|---|---|---|
| [DISCLOSED]Phillips Nizer | ransomhouse | 2026-11-03 | — | ransomlook |
| [DISCLOSED]Namibian Defence Force | ransomhouse | 2026-11-02 | — | ransomlook |
| [DISCLOSED]Pertamina | ransomhouse | 2026-11-02 | — | ransomlook |
| [DISCLOSED]Terca | ransomhouse | 2026-10-13 | — | ransomlook |
| [DISCLOSED]Hospital Hermilio Valdizán | ransomhouse | 2026-10-13 | — | ransomlook |
| Phillips Nizer phillipsnizer.com Phillips Nizer LLP offers sophisticated legal services at cost-effective rates, ensuring that clients' interests are fiercely protected and promoted. The firm provides resourceful representation across various legal matters, catering to a diverse clientele. Wi... | ransomhouse | 2026-10-11 | USA, Professional Services | 3 sources |
| Excess Baggage excess-baggage.com Baggage Express is a dynamic national and international excess baggage shipping company with a heritage stretching back some 25 years. We're dedicated to the task of moving the holdalls, cartons, computers, bikes, luggage and material lives of students, backpa... | ransomhouse | 2026-10-05 | UK, Transportation | 3 sources |
| [DISCLOSED] California School Employees Association | ransomhouse | 2026-09-15 | — | ransomlook |
| Namibian Defence Force mod.gov.na The Namibian Defence Force comprises the national military forces of Namibia. It was created when the country, then known as South West Africa, gained independence from apartheid South Africa in 1990. | ransomhouse | 2026-09-12 | Namibia, Government & Defense | 3 sources |
| PT Indo Tambangraya Megah itmg.co.id PT Indo Tambangraya Megah, founded in 1987, is a leading coal producer based in Asia. The company focuses on maintaining high standards in corporate governance, environmental practices, and workplace safety. PT Indo Tambangraya Megah operates with a commitment... | ransomhouse | 2026-09-12 | Indonesia, Energy & Utilities | 3 sources |
| [EVIDENCE]REXT Holdings Co., Ltd. | ransomhouse | 2026-09-02 | — | ransomlook |
| REXT Holdings Co., Ltd. rext.jp Private retail and holding company based in Tokyo, Japan. | ransomhouse | 2026-09-01 | JP, Retail (distribution) | 3 sources |
| California School Employees Association csea.com The California School Employees Association (CSEA) is dedicated to supporting classified school employees and advocating for public education. They offer a range of member benefits including financial services, legal help, and educational resources. CSEA aims... | ransomhouse | 2026-08-21 | USA, Education | 3 sources |
| Hospital Hermilio Valdizán hhv.gob.pe HHV public psychiatric hospital in Lima, Peru, operated by MINSA. It provides specialized mental health services, including inpatient and outpatient psychiatric care, psychotherapy, rehabilitation, and neurology. Its main clients are low-income patients, many... | ransomhouse | 2026-08-21 | Peru, Healthcare | 3 sources |
| Pertamina pertamina.com Pertamina is an energy company primarily in the oil and gas sector. The company provides services for new and renewable energy, and other activities related to or supporting business activities in energy. | ransomhouse | 2026-08-21 | Singapore, Oil | 3 sources |
| Terca terca.com.br TERCA Zilli is a leading logistics operator in Espírito Santo, Brazil, offering innovative solutions and synonymous with logistical efficiency. The company provides a wide range of services including general warehousing, customs areas, and specialized storage... | ransomhouse | 2026-08-21 | Brazil, Other | 3 sources |
| [DISCLOSED]Alya Construtora | ransomhouse | 2026-08-18 | — | ransomlook |
| [DISCLOSED]PCL Holding | ransomhouse | 2026-08-14 | — | ransomlook |
| [DISCLOSED]TECHVENTURES BANK S.A. | ransomhouse | 2026-08-13 | — | ransomlook |
| [DISCLOSED]City of Beacon | ransomhouse | 2026-08-12 | — | ransomlook |
| [DISCLOSED]City of McMinnville OR | ransomhouse | 2026-08-10 | — | ransomlook |
| [DISCLOSED]Nichirei | ransomhouse | 2026-08-09 | — | ransomlook |
| [DISCLOSED]Fidelity Services Group | ransomhouse | 2026-08-03 | — | ransomlook |
| City of McMinnville OR mcminnvilleoregon.gov The City of McMinnville provides a range of municipal services including public works, parks and recreation, and community development. It aims to serve the residents and businesses of McMinnville, Oregon, by facilitating community events, maintaining public f... | ransomhouse | 2026-08-03 | USA, Government & Defense | 3 sources |
| TECHVENTURES BANK S.A. techventures.bank TechVentures Bank is a Romanian universal bank undergoing a strategic digital transformation to become a technology-driven, client-oriented financial institution . Rebranded from Banca Comercială Feroviară in 2020 and backed by an IT entrepreneur, the bank is... | ransomhouse | 2026-08-03 | Romania, Financial Services | 3 sources |
| City of Beacon beaconny.gov The City of Beacon is committed to protecting online users' privacy. If you send the company an electronic mail message with a question or comment that contains personally identifying information, or fill out a form that e-mails the company this information, t... | ransomhouse | 2026-07-23 | USA, Government & Defense | 3 sources |
| PCL Holding pclholding.com PCL Holding Public Company Limited is a Thai-based holding entity operating as a premier importer and distributor of diagnostic instruments, reagents, and consumables for medical and research laboratories. The company manages a comprehensive portfolio of produ... | ransomhouse | 2026-07-18 | Thailand, Professional Services | 3 sources |
| Alya Construtora alyaconstrutora.com Álya Construtora is one of Brazil's leading privately owned engineering and construction companies, specializing in complex infrastructure, industrial, energy, urban mobility, and building projects with more than 70 years of operating experience. | ransomhouse | 2026-07-16 | Brazil, Manufacturing | 3 sources |
| lya Construtora mcminnvilleoregon.gov Álya Construtora is one of Brazil's leading privately owned engineering and construction companies, specializing in complex infrastructure, industrial, energy, urban mobility, and building projects with more than 70 years of operating experience. | ransomhouse | 2026-07-16 | US, Manufacturing | 3 sources |
Tell us what to watch for and we will email you when a group claims it. Weekly at most, only when something matches, and never the same claim twice. Double opt-in, one-click unsubscribe, and your watch list is deleted the moment you leave.
Set up an alertSources: RansomLook (CC BY 4.0, synced 2026-11-04 15:20 UTC), Ransomfeed (CC BY 4.0, synced 2026-11-04 15:20 UTC) and ransomware.live (PRO licence, synced 2026-11-04 15:20 UTC), each used under the licence shown and refreshed a few times a day. They crawl the groups' Tor leak sites; we never do, and we store no .onion address, magnet link or leak-site screenshot. Listings are the claims of criminals and are the sole responsibility of their authors; nothing here is verified, and nothing here is advice. This site stores no personal data about what you look up.