Dark Web Intelligence
Ransomware leak sites, victim enrichment, and underground market activity.
Get an email or Slack alert when a victim in your sector or supply chain is listed. Free account, no card.
Get a free account →Ransomware Groups
164
Victims (30d)
1,269
Victim distribution (all time): 20,217 victims across 191 countries.
Top countries
1. United States9,123
2. Germany954
3. Canada910
4. United Kingdom851
5. Italy556
6. France531
7. Brazil489
8. India468
9. Spain420
10. Australia387
Recent ransomware victims
View all →endzone
listed
Momentum Telecom
Revenue: $221.7 million
Momentum is a telecommunications company founded in 2001 that provides cloud-based communication solutions for businesses, specializing in cloud voice services, managed networks, SD-WAN solutions, and Microsoft Teams Phone integration. We gained access to a diagnostic and provisioning tool used by Momentum through a compromised Multi-Service Operator (MSO). Upon reconnaissance, we identified multiple critical vulnerabilities throughout the system. This tool controls inte
Technology Nov 14, 2026
endzone
listed
A
Absolute Bail Bonds
Revenue: $15.1 million
Absolute Bail Bonds is a surety bail bond agency that has provided 24/7 pretrial release services across California since 1987. Founded in Lancaster and headquartered in Los Angeles, the company operates statewide through a network of local branch offices and licensed bail agents. We successfully exfiltrated 5GB of Database Files and Source Code plus 3.5TB encrypted on the DC including backups.
Financial Services · US Nov 14, 2026
everest
listed
G
Grundbaulabor Trier GmbH
[AI generated] N/A
I don't have verified, reliable information about a specific company called "Grundbaulabor Trier GmbH." While the name suggests a geotechnical or soil mechanics testing laboratory (Grundbau relates to foundation engineering) based in Trier, Germany, I cannot confirm details about this specific entity's operations, services, or corporate status with sufficient confidence to provide an accurate factual description.
Manufacturing · DE Nov 14, 2026
netrunner
.com Locked, Exfiltrated
I****** A*****
Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates (MAGOPSA) is one of the largest single groups of gynecologic oncologists in the mid-Atlantic region.
Healthcare · USA Nov 16, 2026
interlock
listed
K&A Industries
K&A Industries is a "secure identity architecture" company that manages the entire authentication lifecycle for government and enterprise clients. As a result, their own security weaknesses led to the compromise of sensitive personal data, biometric templates, and government contract data. K&A also provides PIV credentials to government agencies, such as the Los Alamos National Laboratory, which involves processing the personal data of federal employees. A breach of this data would trigger a cas
Not Found · US Nov 13, 2026
everest
listed
F
Final Notice Before Publication
[AI generated] N/A
"Final Notice Before Publication" does not correspond to a known company. This phrase is commonly used in extortion or double-extortion ransomware campaigns, where threat actors threaten to publish stolen data unless a ransom is paid. If you encountered this term in a specific context, please share more details so I can assist further.
Other Nov 13, 2026
panzer
listed
R
RE/MAX Germany
Company internal records financial, Broker, Customers purchase, Invoice, Passwords, and 86GB of Outlook archive [[email protected], [email protected], [email protected], and other] RE/MAX Germany specializes in real estate services, including the buying, selling, and renting of residential and commercial properties. They also offer opportunities for individuals to become real estate agents or franchisees, emphasizing professional training and a strong support network. Their uniqu
Professional Services · DE Nov 13, 2026
curious worm
listed
I
i*t*r***t.com
Status: Pending (publication 2026-11-16 20:46 UTC) | Revenue: $343M | ██████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████
Technology Nov 13, 2026
curious worm
listed
T
t**a.com
Status: Pending (publication 2026-11-17 21:13 UTC) | Revenue: $████ | ██████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████
Not Found Nov 13, 2026
play
.com publication date: 2026-11-17
Frey Properties of Highland LLC
Real Estate
Real Estate · US Nov 13, 2026
play
.net ARRB Group PLAY
ARRB Group
Private and personal confidential data, clients documents, budget, payroll, IDs, taxes, finance information and etc.
Architecture, Engineering & Design · AU Nov 13, 2026
incransom
listed
A
Advantage Archives
Advantage Archives partners with communities to preserve and provide digital access to their historical newspapers and documents. We preserve the past make it accessible in the present, and ensure it has a future. Who We Are - We work to digitize history to make it discoverable and easily accessible, allowing communities to understand and connect to their past in a meaningful way.
Professional Services · US Nov 13, 2026



