SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

kazu

17 Einträge insgesamt

Zeitraum: 07.09.2026 – 07.09.2026

Veröffentlichungskanäle

  • Leak-Seite · KAZU · zuletzt erreichbar

Kanäle laut RansomLook. Die Adressen der Leak-Seiten werden bewusst nicht angezeigt — sie führen direkt zu den erbeuteten Daten.

Medienecho

Keine Meldung im Bestand nennt diese Gruppe — sie arbeitet unbeachtet. Das ist der Regelfall: von 81 aktiven Gruppen haben 23 ein Medienecho.

Neueste Einträge

Filter zurücksetzen
kazuMSM Unify: Global Education Platform - CA—

Beschreibung der Täter

MSM Unify is a global education technology platform that helps students find and apply to international universities and programs. It connects students with 1,500+ campuses and more than 50,000 programs across destinations such as Canada, the USA, the UK, Australia, and Germany. The platform provides support with course selection, university applications, scholarships, visa assistance, education loans, accommodation, and test preparation Ransom: $400 000 | Size: 1.45 TB | Records: 2,020,129 files + 319,163 users | Expires: 2026-09-21 23:59:59

Herkunft

kazuGauteng City Region Academy (GCRA)—

Beschreibung der Täter

government-funded program that helps students from Gauteng Province pursue full-time undergraduate or postgraduate studies at accredited universities and colleges. It covers tuition, accommodation, books, and sometimes living expenses, aiming to reduce financial barriers for talented students. Price: $2,000 | Size: 147 GB | Records: 429 473 Files | Dump date: 2026

Herkunft

kazuStatistics South Africa – Official National Data and Insights PortalZA
kein Firmenname im Eintrag

Beschreibung der Täter

the official online portal of South Africa’s national statistics agency, which collects, analyses and disseminates comprehensive data about the country’s people, economy, society and environment to support informed decision‑making by government, businesses and the public. It publishes official statistics on topics like population, employment, inflation, trade, and living conditions, offers data tools and interactive visuals, and provides access to reports, surveys and census results Price: $2,000 | Size: 154 GB | Records: 453 362 Files | Dump date: 2026

Herkunft

kazuHealthDaq—

Beschreibung der Täter

Healthdaq is a company that helps hospitals and care providers hire staff directly, without using recruitment agencies. They provide software and services to find, manage, and onboard workers faster and more efficiently, aiming to save costs and make in-house hiring easier.... The breach include : ID cards - Passports - Driving license - Certificates of achievement - Professional Registration Certificate - English Language Certificate - Criminal Background Check - Right to work - Occupational Health Declaration - Proof of address - Vaccine Records - Travel Clearance.... Price: $7,000 | Size: 431 GB | Records: 457 188 Files | Dump date: 2026

Herkunft

kazuHealth TimeES

Beschreibung der Täter

HT Médica is a comprehensive imaging diagnostic center that offers advanced radiology and digital pathology services for precise and personalized diagnosis. With a multidisciplinary medical team, they provide a wide range of diagnostic tests across more than 20 centers in Spain. Their commitment to patient care is reflected in their use of the latest techniques and technologies. HT Médica aims to be a trusted partner in health prevention and well-being for their clients. Price: $4,000 | Size: XXXX | Records: 2 253 981 users | Dump date: 2026

Herkunft

kazuNatclar (S.G. Natclar S.A.C.)PE

Beschreibung der Täter

Peruvian occupational health services company headquartered in Lima and founded in 1999. The company provides medical and health management services for workers, particularly in high-risk industries such as mining, construction, energy, and manufacturing. Its services include occupational medical exams, workplace health surveillance, diagnostic testing, on-site medical units, and emergency care to help companies monitor employee health and comply with safety regulations. Natclar operates clinics and medical units across Peru and uses digital health systems to support preventive healthcare and workforce health management. Price: $20,000 | Size: 1.8TB | Records: 7.6m files && 800k users && 1.7m appointments | Dump date: 2026

Herkunft

kazuGauteng Provincial GovernmentZA
behoerden

Beschreibung der Täter

Gauteng Provincial Government Breach ( www.gauteng.gov.za ) Official online portal for the government of Gauteng, a province in South Africa. The website provides residents, businesses, and visitors with access to important government information, services, and updates. It includes details about different government departments, public programs, healthcare, education, housing, and economic development initiatives. Price: $25,000 | Size: 3.8 TB | Records: 3 673 556 Files | Dump date: 2026

Herkunft

kazuConsultorioMovil: Telemedicine and Healthcare System—
healthcare

Beschreibung der Täter

digital healthcare platform designed to help doctors, clinics, and medical professionals manage their daily operations more efficiently. It provides tools for scheduling patient appointments, maintaining electronic medical records, and conducting telemedicine consultations through online video or messaging. The platform also supports clinical documentation, patient communication, and administrative tasks, helping healthcare providers reduce paperwork and improve organization. Overall, ConsultorioMovil aims to simplify medical practice management and improve the way doctors interact with and care for their patients through a single, centralized system. Price: $4 000 | Size: 1.73 TB | Records: 2 000 000+ Files | Dump date: 2026

Herkunft

kazuMeducar: Telemedicine and Patient Management SystemUS
healthcare

Beschreibung der Täter

Meducar is a Latin American healthtech platform that provides software for doctors and clinics to manage medical appointments, electronic health records, and patient communication in one system. It helps healthcare professionals organize their daily practice by offering tools such as online scheduling, clinical history management, electronic prescriptions, and telemedicine services. Price: $3 000 | Size: XXX | Records: 3 197 677 users pii | Dump date: 2026

Herkunft

kazuCentro Médico Especializado OSI: Healthcare SolutionsPE
healthcare

Beschreibung der Täter

Centro Médico Especializado OSI is a healthcare provider based in Peru that specializes in physical medicine, rehabilitation, physiotherapy, chiropractic care, and alternative medicine treatments. Founded in 1999 and headquartered in Lima, OSI has grown into one of the country's largest rehabilitation and physiotherapy networks, operating multiple clinics across the Lima metropolitan area. wellness network in Peru, focused on helping patients recover mobility, reduce pain, and improve their quality of life through specialized medical and therapeutic care Price: $1200 | Size: XXX | Records: 159 824 users && 504 413 files | Dump date: 2026

Herkunft

kazuPawlyClinic: Digital Veterinary Care Platform—

Beschreibung der Täter

PawlyClinic is a digital veterinary care platform that connects pet owners with licensed veterinarians through online consultations, appointment booking, and in-clinic referrals. It provides a convenient way for users to access veterinary advice, manage pet health records, and receive treatment without always needing to visit a clinic physically. Price: $150 | Size: XXX | Records: 28 641 users pii | Dump date: 2026

Herkunft

kazuDr Akbar Niazi Teaching HospitalPK
healthcare

Beschreibung der Täter

Dr. Akbar Niazi Teaching Hospital (ANTH) is a 500-bed tertiary care teaching hospital located in Islamabad, Pakistan. The hospital provides a wide range of healthcare services, including emergency care, surgery, cardiology, orthopedics, pediatrics, gynecology, oncology, diagnostic laboratory services, and specialized outpatient clinics. As a teaching hospital, ANTH is affiliated with medical education and training programs, supporting the development of future healthcare professionals Price: $1200 | Size: 149 GB | Records: 729 336 Files | Dump date: 2026

Herkunft

kazuCanada Yocale: Appointment Management SystemCA

Beschreibung der Täter

Yocale is a cloud-based business management platform that helps appointment-based businesses streamline their daily operations. Founded in Canada, the platform is used by healthcare providers, beauty salons, wellness centers, and other service businesses to manage appointments, client records, payments, and communications in one centralized system. Price: $5 000 | Size: 51.02 GB | Records: 6 055 490 appointments data | Dump date: 2026

Herkunft

kazuBrazil Mobilemed: Cloud PACS PlatformBR
healthcare

Beschreibung der Täter

Mobilemed is a Brazil-based health technology company that provides a cloud-based PACS (Picture Archiving and Communication System) for radiologists, hospitals, and diagnostic imaging centers. Its platform enables healthcare professionals to securely store, access, manage, and share medical images and diagnostic reports from anywhere, supporting teleradiology and improving workflow efficiency. Price: $50 000 | Size: 23.5 TB | Records: 52 243 863 files | Dump date: 2026

Herkunft

kazuInstituto Ferrero de Neurología y SueñoAR

Beschreibung der Täter

Instituto Ferrero de Neurología y Sueño (IFN) is a specialized medical center in Argentina that focuses on the diagnosis and treatment of neurological and sleep disorders. It provides services such as neurology consultations, sleep studies, diagnostic testing, and personalized treatment plans. Using advanced medical technology and a team of specialists, IFN helps patients receive comprehensive care for conditions affecting the brain, nervous system, and sleep health. Price: $1 000 | Size: 636 GB | Records: 474 826 files && 103 315 Users | Dump date: 2026

Herkunft

kazuPappyJoe: Healthcare Management SystemIN
healthcare

Beschreibung der Täter

PappyJoe is an India-based healthcare technology company that provides a cloud-based practice management platform for clinics, hospitals, and healthcare professionals. The platform helps manage appointments, electronic medical records (EMR), billing, prescriptions, patient communication, and administrative tasks in one system. Price: $3 000 | Size: 413 GB | Records: 6 873 180 patients pii + 531 673 files | Dump date: 2026

Herkunft

kazuSpirit Cultural Exchange - USUS

Beschreibung der Täter

Spirit Cultural Exchange is a U.S.-based organization that provides international cultural exchange and J-1 visa programs for students, young professionals, teachers, and international participants. Its programs include Summer Work and Travel, internships, professional training, and teaching opportunities in the United States Ransom: $100 000 | Size: 170 GB | Records: 136,817 files | Expires: 2026-09-20 23:59:59

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.