SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

lamashtu

23 Einträge insgesamt

Zeitraum: 30.09.2026 – 22.10.2026

Veröffentlichungskanäle

  • Leak-Seite · zuletzt erreichbar

Kanäle laut RansomLook. Die Adressen der Leak-Seiten werden bewusst nicht angezeigt — sie führen direkt zu den erbeuteten Daten.

Medienecho

Keine Meldung im Bestand nennt diese Gruppe — sie arbeitet unbeachtet. Das ist der Regelfall: von 81 aktiven Gruppen haben 23 ein Medienecho.

Neueste Einträge

Filter zurücksetzen
lamashtuHecker HolzsystembauDE

Beschreibung der Täter

German construction company specializing in custom timber houses, sustainable wood construction, and prefabricated buildings. It offers complete project planning, roofing, extensions, renovations, and turnkey solutions for residential, commercial.

Herkunft

lamashtuGräfliches Hofbrauhaus FreisingDE

Beschreibung der Täter

German brewery specializing in the production and distribution of traditional Bavarian beers. The company uses traditional brewing methods and supplies beer products to local and regional markets.

Herkunft

lamashtuVERGI MuensterDE
energie

Beschreibung der Täter

German tax advisory and business consulting firm providing tax return preparation, bookkeeping, annual financial statements, auditing, fiduciary services, and consulting for start-ups and established businesses.

Herkunft

lamashtuFuG-GruppeDE

Beschreibung der Täter

A German IT systems integrator and general contractor (Systemhaus) based in Halver, North Rhine-Westphalia (NRW), founded in 1950. The company specializes in IT/EDP integration and ERP solutions for industrial businesses, steel trading companies

Herkunft

lamashtuMECA-PRECISFR

Beschreibung der Täter

Méca-Précis is a French industrial manufacturer specializing in precision stamping dies, sheet metal stamping, and metal component production. It serves the automotive, construction, and home appliance industries, offering custom tooling

Herkunft

lamashtuWEPOS ChemieDE

Beschreibung der Täter

WEPOS Chemie is a German company founded in 2007 that develops, manufactures, and sells specialized cleaning and care products for homes, gardens, floors, tiles, and hygiene, including mold removers. Its products are made in Germany.

Herkunft

lamashtuFluge AudiovisualesES

Beschreibung der Täter

Fluge Audiovisuales is a Spanish company and market leader in AV equipment rental (sound, lighting, video, staging) for concerts, festivals, corporate events, TV and film. It operates across Spain (Madrid, Barcelona, Bilbao, Valencia, Ibiza, Galicia)

Herkunft

lamashtuFluge AudiovisualesES

Beschreibung der Täter

Fluge Audiovisuales is a Spanish company and market leader in AV equipment rental (sound, lighting, video, staging) for concerts, festivals, corporate events, TV and film. It operates across Spain (Madrid, Barcelona, Bilbao, Valencia, Ibiza, Galicia)

Herkunft

lamashtuBender TribunenbauDE

Beschreibung der Täter

Bender GmbH Tribunenbau is a German manufacturer of mobile and permanent grandstands, stages, podiums and temporary structures for events. It designs, rents, sells and services tribunes for stadiums, festivals and concerts.

Herkunft

lamashtuTRANS LOGROÑO SOCIEDAD ANONIMAES
transport

Beschreibung der Täter

TRANS-LOGROÑO, S.A. is a Spanish road freight and logistics company based in Logroño (La Rioja). It provides road haulage (CNAE 4941), freight forwarding, and warehouse services including storage, order picking, and tank cleaning.

Herkunft

lamashtuTRANS LOGROÑO SOCIEDAD ANONIMAES
transport

Beschreibung der Täter

TRANS-LOGROÑO, S.A. is a Spanish road freight and logistics company based in Logroño (La Rioja). It provides road haulage (CNAE 4941), freight forwarding, and warehouse services including storage, order picking, and tank cleaning.

Herkunft

lamashtuGrupo Industrial TauroMX

Beschreibung der Täter

is a Mexican steel-products manufacturer based in Monterrey (Nuevo León): perimeter protection and mesh (brands Euroreja®, Reja Tauro®, Tauro®, Serpentina®), high-security/anti-glare mesh, razor coil, industrial railings and bollards;

Herkunft

lamashtuGrupo Industrial TauroMX

Beschreibung der Täter

is a Mexican steel-products manufacturer based in Monterrey (Nuevo León): perimeter protection and mesh (brands Euroreja®, Reja Tauro®, Tauro®, Serpentina®), high-security/anti-glare mesh, razor coil, industrial railings and bollards;

Herkunft

lamashtuDr Damiel PuglieseAR
healthcare

Beschreibung der Täter

pugliese.loс - Dr. Daniel P. Pugliese is a certified Argentine accountant graduated from the prestigious University of Buenos Aires (U.B.A.). He is officially registered with the Professional Council of Economic Sciences of Buenos Aires (C.P.C.E.C.A.B.A.), which

Herkunft

lamashtuAstidental di SabbioneIT

Beschreibung der Täter

bquadro.it - is a leading Italian distributor with over 60 years of experience specializing in dental equipment, instruments, and dental laboratory supplies. The company provides comprehensive services, including dental office turnkey design, digital workflow

Herkunft

lamashtuBecker LogistikDE
transport

Beschreibung der Täter

becker-logistik.de - German logistics and transportation company specializing in national and international freight transport, particularly bulk goods. The company operates its own fleet and provides reliable transport services across Germany and Europe.

Herkunft

lamashtuVinco EnergyMX
energie

Beschreibung der Täter

vincoenergy.com - Vinco Energy Services is a Mexican oilfield services company providing engineering and operational solutions for the oil and gas sector. The company specializes in services like wireline logging, telemetry.

Herkunft

lamashtuWilhelm KühneDE

Beschreibung der Täter

wilhelm-kuehne.de - Wilhelm Kühne is a German facility services company specializing in professional cleaning and building maintenance. Founded in 1950, it serves offices, schools, healthcare facilities, and commercial properties.

Herkunft

lamashtuFIDUCIALFR
finanzen

Beschreibung der Täter

fiducial.fr - Expert accounting, payroll, legal advice, audit, online banking (Fiducial Banque), IT solutions (Fiducial Informatique), office supplies and equipment (Fiducial Office Solutions), security, and asset management.

Herkunft

lamashtuVirtual IdeasAU

Beschreibung der Täter

virtualideas.com.au - Virtual Ideas is an Australian 3D visualisation and digital content studio based in Sydney. It specialises in architectural visualisation (CGI), 3D animation, marketing films, product visualisation, shadow and visual-impact studies etc.

Herkunft

lamashtuPROJAHNDE

Beschreibung der Täter

projahn.de - German manufacturer and distributor of professional precision and hand tools (drill bits, masonry/wood/steel tools, thread tools, measuring tools, sockets, wrenches, screwdrivers, pliers, flashlights, workbenches).

Herkunft

lamashtuAltmannshofer Sicherheits-VideotechnikDE

Beschreibung der Täter

altmannshofer.de - Altmannshofer Sicherheits-Videotechnik OHG is a German installer of electronic security systems from Affing near Augsburg, Bavaria. Since 1999 it plans and installs CCTV, burglar alarms (EMA), access control, electronic locks, fingerprint scanners

Herkunft

lamashtuGERLONFR

Beschreibung der Täter

gerlon.com - GERLON is a French company (SAS, SIREN 349008284) based in Abbeville (Somme, Hauts-de-France) manufacturing and selling steel wool (laine d'acier), brushes, abrasives, tools (outillage) and cleaning products.

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.