SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

dark project

17 Einträge insgesamt

Zeitraum: 24.08.2026 – 20.10.2026

Veröffentlichungskanäle

  • Leak-Seite · Dark Project · zuletzt erreichbar
  • Dateiablage · Home · File index · zuletzt nicht erreichbar
  • Dateiablage · zuletzt nicht erreichbar

Kanäle laut RansomLook. Die Adressen der Leak-Seiten werden bewusst nicht angezeigt — sie führen direkt zu den erbeuteten Daten.

Medienecho

Keine Meldung im Bestand nennt diese Gruppe — sie arbeitet unbeachtet. Das ist der Regelfall: von 81 aktiven Gruppen haben 23 ein Medienecho.

Neueste Einträge

Filter zurücksetzen
dark projectAsensus SurgicalUS
healthcare

Beschreibung der Täter

Asensus Surgical fell victim to a cyberattack, resulting in the theft of more than 600 GB of data and over 85,000 files containing confidential information, employees’ personal documents, research findings, and all of the company’s internal information.

Herkunft

dark projectBeach Eye Medical GroupUS
healthcare

Beschreibung der Täter

As a result of the attack on Company Beach Eye Medical Group, more than 200 GB of confidential data was stolen. The data comprises more than 250,000 files containing information about the organization’s employees and their patients, medical records, and doctors reports, as well as other important company information.

Herkunft

dark projectThe Excalibur GroupUS
finanzen

Beschreibung der Täter

Company The Excalibur Group was attacked, resulting in the theft of more than 600 GB of confidential data, such as banking and other financial information, personal data of employees and customers, and information marked “secret”. Currently, more than 400,000 files are not protected by The Excalibur Group

Herkunft

dark projectFranklin Miller Inc.US

Beschreibung der Täter

About Franklin Miller Inc. Franklin Miller has been engineering wastewater grinders, crushers, shredders, and screens for municipal and industrial applications since 1918. Their products are designed for reliability and efficiency, catering to industries such as wastewater treatment, food processing, mining, oil and gas, and recycling. The company is committed to providing comprehensive post-sale support, ensuring that their equipment operates at peak performance. Trusted by industry leaders worldwide, Franklin Miller's equipment is precision manufactured in the USA to handle the toughest jobs. As a result of the attack on "Franklin Miller", more than 250 GB of confidential data were stolen. The organization lost control over documents such as drawings and project documentation, confidential agreements, banking and other financial information, as well as employees’ personal data.

Herkunft

dark projectPennEastern Architects LCCUS

Beschreibung der Täter

About PennEastern Architects LCC The principals of PennEastern Engineers, LLC are Paul Pasonick, Andrew Pasonick, Michael Amato and Daryl Pawlush. All principals have extensive experience in commercial and residential land developments, municipal projects, sanitary sewer projects, storm water projects, pavement projects, flood control projects and soil erosion and sedimentation control plans. In addition, each has assisted in design, specification writing, cost estimating, project bidding and bid review, construction observation and project management of the various projects. The Principals of PennEastern Architects, LLC are Andrew Pasonick, Emil Jarolen and Norman Manovsky. Design Principal Emil Jarolen has been practicing Architecture since 1974 and has been a Registered Architect in the State of Pennsylvania since 1978. As a result of a cyberattack on Company PennEastern Architects, more than 100 GB of corporate data was stolen. The breach includes a large volume of confidential information, including drawings and project documentation, data on the company’s customers and employees, as well as documents containing banking and financial information. Currently, approximately 60,00

Herkunft

dark projectClaire's Inc.US

Beschreibung der Täter

About Claire's Inc. Claire's Inc. is a jewelry and accessories retailer aimed at tweens and teens, known for its ear-piercing services and mall-based stores. The company has filed for bankruptcy twice and closed many locations in recent years. It now operates through remaining stores and partnerships with retailers such as Walmart and CVS. Claire's Inc. suffered a cyberattack that disrupted its operations and compromised customers and employees data.

Herkunft

dark projectCumar Marble & GraniteTR

Beschreibung der Täter

Cumar Marble & Granite, a company specializing in luxury kitchens, bathrooms, and custom projects, has been the target of a massive cyberattack. Hackers stole 489 gigabytes of data from the company’s servers, including personal information, technical drawings, and financial documents. This incident raises serious concerns regarding the theft of intellectual property and potential breaches of employee and customer privacy.

Herkunft

dark projectSpecchem LLCUS

Beschreibung der Täter

A cyberattack on Specchem LLC resulted in a massive data breach. As a result of the incident, approximately 500 GB of data—containing roughly 700,000 files, including confidential personal and financial information—was stolen.

Herkunft

dark projectMEI ArchitectsUS

Beschreibung der Täter

As a result of the attack, 340 GB of data (approximately 130,000 files) was stolen: including Social Security numbers, passports, green cards, invoices, HR documents, and a vast number of architectural drawings—including those from past and current projects, as well as those currently under construction.

Herkunft

dark projectAlurwallsBR
finanzen

Beschreibung der Täter

Alurwalls was attacked, resulting in the theft of approximately 17 GB of confidential data. The stolen information includes banking and other financial documents, client building plans, and other personal data belonging to the company and its partners. Currently, more than 16,000 files are no longer protected by Alurwalls.

Herkunft

dark projectMaster Manufacturing Co., Inc.US

Beschreibung der Täter

Master Manufacturing Co specializing in custom metal stamping and production services has fallen victim to a significant cyberattack. Hackers reportedly exfiltrated 36 gigabytes of sensitive data from the company’s servers. The stolen information includes SQL databases containing personal data, as well as technical plans and schematics for custom metal parts. The breach raises serious concerns regarding intellectual property theft and potential privacy violations for employees and clients.

Herkunft

dark projectDentist in New Britain, CT—

Beschreibung der Täter

As a result of the attack, the following were compromised: the entire customer database, consisting of just over 8,000 files, as well as a small number of records containing Social Security numbers

Herkunft

dark projectPump Engineering Company—
finanzen

Beschreibung der Täter

During the cyberattack, 120,000 files (115 GB) were stolen, including an extensive customer database, insurance documents, confidential financial documents, and a vast number of project drawings.

Herkunft

dark projectFurnished Quarters—

Beschreibung der Täter

The company "Furnished Quarters" was the victim of a successful cyberattack, as a result of which the company’s confidential data was stolen. The volume of data stolen amounts to 155 GB. The data stolen included the company’s customer details, as well as documents containing banking and financial information. Currently, around 198,000 files are no longer under the control of "Furnished Quarters".

Herkunft

dark projectDesign-Aire Engineering, INC—

Beschreibung der Täter

Design-Aire Engineering, INC has suffered a cyberattack on its service systems, resulting in the theft of approximately 377GB of sensitive data. The breached information includes employees' personal data and detailed architectural plans of clients' buildings.

Herkunft

dark projectJones, Little & Co., CPAs, LLP—

Beschreibung der Täter

At least 100 gigabytes of company data—including financial records, internal files, and employee personal information—were stolen in a cyberattack. Hackers encrypted the firm's systems after exfiltrating the documents, leaving operations paralyzed.

Herkunft

dark projectThe Liberty Group—

Beschreibung der Täter

A company has suffered a major cyberattack resulting in the theft of approximately 27,000 internal files. The leaked documents include financial records, internal working materials, and personal data of employees. Attackers encrypted the company's systems following the breach, severely disrupting operations

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.