SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

interlock

22 Einträge insgesamt

Zeitraum: 11.08.2026 – 21.10.2026

Medienecho

Meldungen, die den Gruppennamen neben einem Fachbegriff nennen. Kein Maß für die Schwere eines Vorfalls und kein Beleg, dass ein bestimmtes Opfer in der Presse stand.

Neueste Einträge

Filter zurücksetzen
interlockCoastal Alabama Community CollegeUS
finanzen

Beschreibung der Täter

[Link entfernt] Coastal Alabama Community College demonstrates an extreme disregard for its own security and the security of its students and makes no attempt to address these deficiencies. Therefore, we are publishing their sensitive information, such as student education records, protected health information, financial aid and loan information, employee personnel files, Social Security numbers, and payment card data. They are also known for their incidents, and we are making this information publicly available to you. As a result, they violate laws such as HIPAA, FERPA, GLBA, and PCI DSS.

Herkunft

interlockNu-Quest Distribution IncUS

Beschreibung der Täter

[Link entfernt] Nu-Quest Distribution Inc. is a privately held pharmaceutical wholesaler based in Newfoundland and Labrador. The company specializes in the distribution of brand-name and generic medications, as well as medical devices. Its negligent attitude toward security and unwillingness to negotiate led to the leak of confidential documents, including supplier/customer pricing and price lists, drug transaction and compliance records, financial statements, employee personnel files, and legal documents. Due to our disclosure of these details, the company faces regulatory fines, license revocation, lawsuits, and damage to its competition and reputation.

Herkunft

interlockPedigo Products, Inc.US
healthcare

Beschreibung der Täter

[Link entfernt] Pedigo Products, Inc. is a privately held American manufacturer of stainless steel and chromium medical equipment for the healthcare industry. It disregards its own security, as well as that of its customers and employees, and makes no attempt to negotiate agreements to prevent data leaks. As a result, we provide you with 1.3 TB of sensitive corporate data, such as: carrier account numbers, customer-specific pricing, commission adjustments, customs/MDEL identifiers and customer/employee contact information, customer contracts, price and discount schedules, shipping and routing instructions, employee and customer personal data, FDA quality records (DMR, DHR, DHF, CAPA, complaints, MDR), CAD files and trade secrets, intellectual property and non-disclosure agreements, financial statements, tax returns, payroll records, bank details, and legal documents. Contractual obligations to customers and confidentiality, as well as HIPAA/GDPR/CCPA/PIPEDA regulations, were violated. We urge the authorities to pay attention to these issues. Due to Pedigo's negligence, it will also suffer losses in the form of loss of trade secrets and intellectual property protection, cop

Herkunft

interlockValenti ManagementCL
finanzen

Beschreibung der Täter

[Link entfernt] Valenti Management is known as the Tampa-based Wendy's franchise operator. They are extremely lax when it comes to cybersecurity and are unwilling to cooperate in preventing data leaks, which is why we offer you commercial and confidential documents such as: price lists and discount agreements with key suppliers/distributors; new product/menu launch plans and marketing strategies; franchise and partnership contracts; terms of supplier discounts and promotions; employee personal data (Social Security numbers, wage data, taxes, benefits, medical records); financial statements, tax returns, bank statements, and debt agreements; real estate leases, construction contracts, and area development plans; customer loyalty program and payment card data; supply chain logistics data, inventory, and confidential operational data; litigation, insurance, and internal audit files. As a result, they will lose their reputation with clients and employees and face legal action due to the leak.

Herkunft

interlockConcord Eye CenterUS
healthcare

Beschreibung der Täter

[Link entfernt] A private ophthalmology clinic specializing in various fields. However, it completely fails to ensure the security of itself and its clients and is extremely lax in its recordkeeping. The structure of its confidential records is determined by the categories of protected health information (PHI) it creates and stores. Because Concord Eye Center makes no attempt to regulate security, we provide you with the following information: patient identification and administrative data: this includes names, addresses, dates of birth, social security numbers, and contact information; clinical and medical history: detailed symptom records, ophthalmological and systemic medical history, and family history; diagnostic and lab results; surgical and treatment documentation; billing and financial information: insurance information, claims data, and payment records. Leaking these documents would primarily violate the HIPAA Privacy and Security Rules (45 CFR Parts 160 and 164) and the HITECH Act, which provide for tiered civil penalties for each category of violation, leading to distrust of their business by customers and partners and its collapse.

Herkunft

interlockGreentech Environmental—
energie

Beschreibung der Täter

[Link entfernt] Greentech Environmental LLC, a manufacturer of air purification systems using patented ODOGard and ARC technologies, has failed to fully secure and address the breach, and therefore we are publishing their confidential information such as (intellectual property/trade secrets, financial statements, employee data, operational/strategic plans, legal documents, corporate governance documents, and manufacturing drawings) that would violate the Defend Trade Secrets Act (CFAA) and state privacy laws, which would subject us to injunctive relief, treble damages, penalties, mandatory notification, class action lawsuits, loss of patent rights and competitive advantage, and possible business failure.

Herkunft

interlockEngineers Contractors Fabricators Inc. (ECF)US

Beschreibung der Täter

[Link entfernt] ECF, Inc., a piping and insulation contractor specializing in the design and construction of terminals for the transshipment of liquid hydrocarbons such as asphalt, crude oil, and renewable fuels, has completely failed to ensure the security of its systems and is unwilling to compromise. Therefore, we are providing you with access to confidential information (proprietary pipeline designs, CAD drawings, customer lists, pricing models, financial data, employee information, and trade secrets), which violates the Complaints and Abuse Act (CFAA) and state civil liability laws and may result in injunctions, damages, fines, mandatory notices, class actions, loss of competitive advantage, and possibly termination of operations.

Herkunft

interlockShalom Christian AcademyUS

Beschreibung der Täter

[Link entfernt] As a school, Shalom Christian Academy is legally and ethically obligated to maintain a wide range of confidential information. However, they are grossly negligent in protecting their own security and that of their students and staff. Consequently, we provide you with student grades, disciplinary and special education records, health and immunization records, financial aid and tuition information, donation history, employee background checks, salary data, and internal security documents. This leak into the public domain constitutes an unacceptable betrayal that can lead to identity theft, financial fraud, extortion, harassment, and devastating harm to children and families. The school is culpable for this act and must be held accountable to the fullest extent of the law.

Herkunft

interlockRiviera Healthcare CenterUS
healthcare

Beschreibung der Täter

[Link entfernt] Riviera Healthcare Center is a for-profit skilled nursing facility in operation for over 50 years. It provides 24-hour nursing and rehabilitation services. Due to negligence and poor security practices, confidential data was exposed, including patient protected health information (PHI)names, diagnoses, medical histories, fall/fracture and treatment information, payment records, and employee/HR data. This breach violates HIPAA and the California CMIA (and potentially the CCPA/CPRA) and will result in mandatory breach notification, federal and state fines, civil lawsuits, corrective action plans, and significant reputational and financial damage.

Herkunft

interlockH&L Manufacturing—

Beschreibung der Täter

H&L Manufacturing is a contract manufacturer serving various industries, including automotive, consumer goods, and transportation. However, due to negligence, H&L filesnon-disclosure agreements, CAD models, material specifications, quotes, prototypes, 3D printing data, process specifications, quality control records, supplier and employee datawere compromised and are now publicly available. These files represent commercially valuable assets and confidential intellectual property. This leak, which the company is unwilling to address, allows competitors to copy its work, undercut tender prices, lure customers, provoke lawsuits and fines, and damage its reputation, draining the company's resources.

Herkunft

interlockO2 Dental GroupUS
healthcare

Beschreibung der Täter

O2 Dental Group of Wilmington makes your dental care easy by providing a variety of family dentistry services under one roof! As a dental provider, O2 Dental Group is subject to strict privacy protections, primarily the Health Insurance Portability and Accountability Act (HIPAA) in the United States, but they have not complied with security measures, resulting in compromised patient health records (PHI), billing and insurance documents, consent and authorization forms.

Herkunft

interlockO2 Dental GroupUS
healthcare

Beschreibung der Täter

[Link entfernt] O2 Dental Group of Wilmington makes your dental care easy by providing a variety of family dentistry services under one roof! As a dental provider, O2 Dental Group is subject to strict privacy protections, primarily the Health Insurance Portability and Accountability Act (HIPAA) in the United States, but they have not complied with security measures, resulting in compromised patient health records (PHI), billing and insurance documents, consent and authorization forms.

Herkunft

interlockBlaise C. Bender, PCUS

Beschreibung der Täter

[Link entfernt] The law firm of Blaise C. Bender, PC handles confidential client tax records/working papers, mergers and acquisitions (M&A) and transaction agreements, estate/trust documents, corporate management records, and confidential attorney-client communications, and fails to maintain security. Due to this negligent mishandling, we disclose confidential information that will subject Blaise C. Bender, PC to disciplinary action by the Bar/CPA, penalties under Section 7216 of the Internal Revenue Code and the Texas Privacy Act, civil claims for professional negligence/breach of fiduciary duty/breach of contract, and serious damage to our reputation and clients.

Herkunft

interlockTekko Enterprises, IncUS

Beschreibung der Täter

[Link entfernt] Tekko Enterprises, Inc., a Tooele, Utah-based prime contractor with a U.S. Air Force contract at Mountain Home Air Force Base (worth over $5 million), an $829,227 U.S. Army Corps of Engineers contract for cranes in Sacramento, and recent projects in Jacob City ($1.21 million), DFCM ($3.5 million), and the Youth Center Boiler House ($138,000), as a result of security negligence, leaked confidential information, including drawings/diagrams/specifications for utility systems (fuel systems, HVAC systems), cranes, employee personal and identifying information, security clearances/ID cards, confidential bids/estimates, and contract prices/financials, in violation of the False Claims Act, DFARS, FISMA, and the Privacy Act.

Herkunft

interlockThe Center for Kidney CareUS
healthcare

Beschreibung der Täter

[Link entfernt] The Kidney Center is a leading provider of nephrology services in South Jersey, specializing in the diagnosis and treatment of kidney disease and hypertension. Due to their negligence in their own safety and the safety of their clients, confidential medical information, including medical records, lab/dialysis/transplant data, billing/insurance data, and patient demographics, was compromised and exposed. Their cybersecurity breaches violate the HIPAA privacy and security regulations.

Herkunft

interlockSpringfield Public SchoolsUS

Beschreibung der Täter

[Link entfernt] Springfield Public Schools in Springfield, Massachusetts, is the third-largest school district in the state, with over 23,500 students and over 4,200 full-time employees. The school budget accounts for more than two-thirds of the city's total budget, which is approximately $700 million. Yet, they fail to ensure student safety and do nothing to address this problem. As a result, their negligence has led to a major breach of student and employee data. Extensive student databases are now available, containing last name, first name, student number, enrollment status, grade level, home address, home phone number, and ethnicity. You also have access to more than 10,000 company contacts, incident databases, phone records, and medical information. This raises the question: where are the allocated funds going? Why aren't they keeping their students safe?

Herkunft

interlockCity of Fort Smith ArkansasUS

Beschreibung der Täter

[Link entfernt] The City of Fort Smith is committed to providing high-quality, resident-focused services to foster a thriving community. This is how they try to position themselves, but in reality, they are very negligent towards their residents and organizations within the city due to their negligent attitude towards security and lack of desire to solve problems, were compromised resulting in a major leak of confidential data over 5.6 TB of data, which includes key infrastructure facilities of Fort Smith (Public Safety System: Police Station, Fire Department, Communications Center (responsible for the 911 emergency dispatch service), Water System: including numerous water and sewer treatment plants, Information Systems: computer systems and networks that support the operation of various departments of the city). As a result of a major leak of the city, you are provided with databases and documents of all their structures (Police and Crime Information: The Arkansas Crime Information Center and the FBI Criminal Justice Information Service system are available information on license plates and driver's licenses, Confidential law enforcement data, such as personally identifia

Herkunft

interlockNFM LendingUS
finanzen

Beschreibung der Täter

[Link entfernt] NFM Lending is a national mortgage lender with over 1,000 employees that originated approximately $7.15 billion in mortgages in the past 12 months. The data breach exposed over 2.5 TB of sensitive personal customer information (names, Social Security numbers, bank accounts, credit information, loan terms, addresses, phone numbers, email addresses, borrower and loan identifiers, loan pricing, and itemized loan expense reports), as well as proprietary pricing/profit formulas, in violation of federal GLBA/FCRA, state privacy laws, and the CFPB's data breach reporting rules. You also have access to data from the Encompass database, which contains information on more than 1 million clients, as well as internal databases, an extensive database of tax forms, and employees' personal information.

Herkunft

interlockSuper Systems IncUS

Beschreibung der Täter

[Link entfernt] Super Systems, Inc. develops and manufactures products for the heating industry. However, it is extremely negligent in its own security and that of its customers, resulting in data breaches. You can view documents revealing confidential control schemes and vulnerabilities in customer systems, SSi's entire client portfolio, and confidential financial information about outstanding customer accounts, which undermines trust and damages the company's reputation. You are also provided with a list of over 500 customers with their contact information and price lists for products and services. You are also provided with SSi's intellectual property, a full suite of software for process control, data collection, analysis, and product tracking.

Herkunft

interlockSoutheastern Oklahoma State UniversityUS

Beschreibung der Täter

[Link entfernt] Southeastern Oklahoma State University is a public, four-year university located in Durant, Oklahoma. A data breach exposed student educational records (including names, contact information, Social Security numbers, grades, enrollment data, financial aid information, disciplinary records, and medical information contained in educational records). This breach violates the Family Educational Rights and Privacy Act (FERPA), the HIPAA Privacy Rule, and students' common-law privacy rights. The breach affected employee personal data and injury information, including employee name, date of birth, date of injury, as well as Social Security number, Medicare card, and child custody/consent status. More than 90,000 student names, Social Security numbers, and student identification numbers, as well as Forms 1095-C and more than 490 documents.

Herkunft

interlockConnell Enterprises LLC—

Beschreibung der Täter

He performs system administration for domain networks but is unable to ensure his own security. As a result, his data was compromised, and he was caught distributing pornographic content, storing over 200 terabytes of pornographic data on his network-attached storage (NAS). He administers pornographic websites and publishes content there, creates content featuring real people and sells it for money, and engages in blackmail by generating pornographic content using artificial intelligence. He finds victims and demands money from them. Various victims, including minors, as well as prominent public figures and political figures, including President Donald Trump, have been discovered in his computer files. Law enforcement is advised to pay attention to this individual as he is a sexual predator and distributor of pornography. You can view his directory structure, browser profiles, and saved HTML pages, where you can read his 4chan correspondence and much more.

Herkunft

interlockAngMar Companies—

Beschreibung der Täter

[Link entfernt] AngMar is a private organization comprised of numerous corporate holdings, LLCs, and companies, operating a network of home health care facilities. They disregard the safety of their clients and the people they care for. As a result, 710 GB of confidential information about the companies they serve has been exposed. Most importantly, patient data has been leaked, including their medical records, medical histories, personal information such as Social Security numbers, home addresses and phone numbers, and much more.

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.