SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

wallstreet

39 Einträge insgesamt

Zeitraum: 10.08.2026 – 16.10.2026

Veröffentlichungskanäle

  • Leak-Seite · Wallstreet | DLS · zuletzt nicht erreichbar
  • Dateiablage · Wallstreet | MISC · zuletzt erreichbar

Kanäle laut RansomLook. Die Adressen der Leak-Seiten werden bewusst nicht angezeigt — sie führen direkt zu den erbeuteten Daten.

Medienecho

Keine Meldung im Bestand nennt diese Gruppe — sie arbeitet unbeachtet. Das ist der Regelfall: von 81 aktiven Gruppen haben 23 ein Medienecho.

Neueste Einträge

Filter zurücksetzen
wallstreetGirl Scouts of Eastern MassachusettsUS

Beschreibung der Täter

Girl Scouts of Eastern Massachusetts, Inc. (GSEMA) is a 501(c)(3) nonprofit serving girls and young people across eastern Massachusetts. Its mission is to help girls build courage, confidence, and character so they can make the world a better place

Herkunft

wallstreetTGM Manufacturing, IncUS

Beschreibung der Täter

TGM Manufacturing provides machining services, including automobile machine-shop work.

Herkunft

wallstreetE-Z Pack TrucksUS
transport

Beschreibung der Täter

E-Z Pack Trucks (E-Z Pack Manufacturing) is a U.S. maker of refuse and recycling truck bodies and related parts. Its product range includes front loaders, rear loaders, and automated or manual side loaders, designed for municipal and commercial waste-collection fleets. The company emphasizes durable equipment, hydraulics, and support for demanding collection routes. Its headquarters are in Cynthiana, Kentucky.

Herkunft

wallstreetGreen ClinicUS
healthcare

Beschreibung der Täter

Green Clinic is a community-based healthcare provider serving Ruston and North Central Louisiana. Founded in 1948, it brings primary care, pediatrics, specialty care, pharmacy, laboratory and imaging services together across its clinics [Link entfernt]

Herkunft

wallstreetAhlqvist & Almqvist Arkitekter ABSE

Beschreibung der Täter

Stockholm architecture and urban-planning practice working on buildings and sustainable city development

Herkunft

wallstreetEnglunds Konsultbyrå ABSE

Beschreibung der Täter

[AI generated] N/A I don't have reliable, verified information about a company called "Englunds Konsultbyrå AB." While the name suggests a Swedish consulting firm (Sweden, "konsultbyrå" meaning "consulting agency" in Swedish), I cannot confirm its existence, industry focus, services, or operational details from verified sources, and I would not want to fabricate specifics about a business entity.

Herkunft

wallstreetSpectrum Arkitekter ABSE

Beschreibung der Täter

Stockholm architecture and interior-design firm, with work including commercial properties, workplaces, hotels, property development, and product design.

Herkunft

wallstreetVendus Sweden ABSE

Beschreibung der Täter

Swedish property company that acquires, owns, and manages properties, with a focus on grocery-anchored retail real estate

Herkunft

wallstreetFab Support ABSE
telekommunikation

Beschreibung der Täter

Swedish supplier of electronic components and telecommunications equipment; also provides installation and technical support related to industrial equipment.

Herkunft

wallstreetByrån för Arkitektur och UrbanismSE

Beschreibung der Täter

Stockholm architecture firm working in architecture and urban development, including housing, offices, retail, and renovation projects

Herkunft

wallstreetBriab Group ABSE

Beschreibung der Täter

[AI generated] N/A I don't have reliable, verified information about a specific company called "Briab Group AB." Rather than provide potentially fabricated details about its operations, industry specifics, or founding information, I'm indicating this as unknown to avoid generating inaccurate threat intelligence. If you have source material or additional context about this company, please share it and I can help analyze it.

Herkunft

wallstreetDanvikshem (Stiftelsen Danviks Hospital)SE
healthcare

Beschreibung der Täter

A Swedish foundation that operates elder-care services, including residential care at Danvikshem in Nacka

Herkunft

wallstreetBrunnberg & Forshed ArkitektkontorSE

Beschreibung der Täter

Stockholm architecture practice focused on community buildings and urban development

Herkunft

wallstreetMantum Holding ABSE

Beschreibung der Täter

A holding company associated with Mantum, a Swedish transport and logistics group serving construction, recycling, and freight sectors

Herkunft

wallstreetLambertinum SeniorenwohnanlageDE
healthcare

Beschreibung der Täter

A nonprofit senior-living facility in Hildesheim, Germany, providing residential nursing care, short-term care, respite care, and assisted living

Herkunft

wallstreetSt. Francis Healthcare Systems of HawaiiUS
healthcare

Beschreibung der Täter

St. Francis Healthcare System of Hawaiʻi is a Catholic, nonprofit healthcare organization that has served Hawaiʻi families since 1927

Herkunft

wallstreetWorld Cup 2034SA

Beschreibung der Täter

We compromised the network of the China Railway Construction Corporation Saudi Branch / Sama Construction consortium, the MAIN CONTRACTOR building the Jeddah Central Stadium for the FIFA World Cup 2034. 17 TB / 1.5M files exfiltrated, including: - Main contract documents, interim payment certificates, and claims against the owner (Jeddah Central Development Company, PIF) - Active dispute and suspension claim records - Personal data of 150,000+ employees, incl. Saudi employees - IFC design documentation for the stadium - Supplier and subcontractor commercial data (bid tabulations)

Herkunft

wallstreetWorld Cup 2034SA

Beschreibung der Täter

We compromised the network of the China Railway Construction Corporation Saudi Branch / Sama Construction consortium, the MAIN CONTRACTOR building the Jeddah Central Stadium for the FIFA World Cup 2034. 17 TB / 1.5M files exfiltrated, including: - Main contract documents, interim payment certificates, and claims against the owner (Jeddah Central Development Company, PIF) - Active dispute and suspension claim records - Personal data of 150,000+ employees, incl. Saudi employees - IFC design documentation for the stadium - Supplier and subcontractor commercial data (bid tabulations)

Herkunft

wallstreetTronex A/SDK

Beschreibung der Täter

Tronex A/S is a Danish Electronics Manufacturing Services (EMS) company headquartered in Fredensborg, Denmark. Founded in 1988, Tronex provides electronics manufacturing, assembly, testing, procurement, prototyping, and technical production solutions for industrial customers

Herkunft

wallstreetGibson Area Hospital & Health ServicesUS
healthcare

Beschreibung der Täter

Gibson Area Hospital & Health Services is a nonprofit community hospital located in Gibson City, Illinois. It provides a range of healthcare services, including emergency care, inpatient and outpatient treatment, diagnostic testing, rehabilitation, primary care, and services for women and newborns

Herkunft

wallstreetTobin & CompanyUS

Beschreibung der Täter

Tobin & Company, CPA’s is a small accounting firm based in Harrison, New York, providing accounting, tax, auditing, and business consulting services, with a particular focus on nonprofit organizations.

Herkunft

wallstreetAr Valve Resources—

Beschreibung der Täter

AR Valve Resources is a UK-based distributor of industrial valves, actuators, regulators, instrumentation, and spare parts. Based in Kent, the company serves national and international customers with product sourcing, technical support, testing, certification, documentation, and shipping services.

Herkunft

wallstreetGTFM—

Beschreibung der Täter

GTFM LLC is a company operating through gtfmllc.com. Its website currently provides limited publicly accessible information, so its specific products or services could not be confirmed.

Herkunft

wallstreetBeatus Cartons—

Beschreibung der Täter

Beatus Cartons is a UK-based, privately owned manufacturer of printed folding cartons and packaging. Established in 1940, it produces solidboard, litho-laminated, and plastic packaging for industries including confectionery, pharmaceuticals, food, health and beauty, and automotive.

Herkunft

wallstreetBreast Implant Center of HawaiiUS

Beschreibung der Täter

Breast Implant Center of Hawaii is a plastic surgery and aesthetics clinic serving patients across Hawaii. Based in Kailua-Kona, it offers breast augmentation, implant revision, breast lifts, body contouring.

Herkunft

wallstreetPrater & Ridley Attorneys At LawUS

Beschreibung der Täter

Prater, Ridley & Llamas – Attorneys at Law is a law firm based in Temple, Texas, United States. Established in 1993, it provides legal services in family law, criminal defense, probate, estate administration, and related civil matters for clients throughout Central Texas.

Herkunft

wallstreetCatholic University of El Salvador—

Beschreibung der Täter

The Catholic University of El Salvador (UNICAES) is a private Catholic university founded in 1982 in Santa Ana, El Salvador.

Herkunft

wallstreetOdyssey Charter School, Inc.US

Beschreibung der Täter

Odyssey Charter School, Inc. is a nonprofit organization operating tuition-free public charter schools in Florida for students from preschool through 12th grade, with a focus on academic achievement and whole-child development.

Herkunft

wallstreetRoshd Sanat—

Beschreibung der Täter

Roshd Sanat is an Iranian industrial company providing engineering, manufacturing, and technical services, with a focus on industrial and energy-sector projects.

Herkunft

wallstreetNcbChurch—

Beschreibung der Täter

New Covenant Believers’ Church is a faith-based ministry focused on spiritual, emotional, and mental growth through God’s Word

Herkunft

wallstreetOn Demand Occupational MedicineUS

Beschreibung der Täter

On Demand Occupational Medicine provides occupational health, drug testing, workplace safety, and employee wellness services in Austintown, Ohio.

Herkunft

wallstreetGoldston Oil CorporationUS

Beschreibung der Täter

Goldston Oil Corporation is a Houston-based oil and gas exploration and production company operating in Texas and Louisiana

Herkunft

wallstreetAmerica’s Food BasketUS

Beschreibung der Täter

America’s Food Basket is a U.S. cooperative grocery-store network. Its site, afbasket.com, provides store locations, weekly ads, online shopping, delivery, recipes, and job listings. It operates under the America’s Food Basket and Ideal Food Basket names.

Herkunft

wallstreetOrmond Beach FloridaUS

Beschreibung der Täter

Ormond Beach, Florida, is a scenic coastal city just north of Daytona Beach, known for its beaches, relaxed atmosphere, historic charm, and outdoor activities.

Herkunft

wallstreetTotal Education Solutions—

Beschreibung der Täter

TES IDEA provides personalized educational, therapeutic, and developmental solutions that help students, families, and schools achieve better outcomes.

Herkunft

wallstreetCedar County Memorial Hospital—
healthcare

Beschreibung der Täter

Cedar County Memorial Hospital is a community hospital providing emergency, inpatient, outpatient, diagnostic, surgical, and rehabilitation services.

Herkunft

wallstreetAndoverUS

Beschreibung der Täter

The Town of Andover, Massachusetts, is a municipal government organization that provides public services, administration, community programs, education resources, infrastructure support, and civic information to residents and businesses in Andover.

Herkunft

wallstreetT.RAD North AmericaUS

Beschreibung der Täter

T.RAD North America (tradna.com) is a Hopkinsville, Kentucky-based manufacturer focused on heat exchangers for thermal-management applications such as vehicle powertrains, HVAC/architectural systems, and emerging technologies like battery and fuel-cell cooling.

Herkunft

wallstreetBlack Hills BentoniteUS

Beschreibung der Täter

Black Hills Bentonite LLC (bhbentonite.com) is a Wyoming-based producer of high-quality sodium bentonite, along with lignite-related products, supplying global industrial and commercial uses such as drilling fluids, environmental/civil engineering sealing, absorbents (including cat litter), and metal casting/foundry applications

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.