SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

zawoo

26 Einträge insgesamt

Zeitraum: 29.08.2026 – 24.09.2026

Veröffentlichungskanäle

  • Leak-Seite · ZaWooBlog · zuletzt nicht erreichbar

Kanäle laut RansomLook. Die Adressen der Leak-Seiten werden bewusst nicht angezeigt — sie führen direkt zu den erbeuteten Daten.

Medienecho

Keine Meldung im Bestand nennt diese Gruppe — sie arbeitet unbeachtet. Das ist der Regelfall: von 81 aktiven Gruppen haben 23 ein Medienecho.

Neueste Einträge

Filter zurücksetzen
zawooagiliance.frFR

Beschreibung der Täter

country: French | fileSize: 210814420637 | PUBLISHED | Agiliance is a French accounting and business advisory group headquartered across the Haute-Saône and Doubs regions. Its website describes Agiliance as the result of bringing together 8 small-to-medium-sized accounting firms, combining their expertise and tools while retaining a local, client-oriented approach.

Herkunft

zawooHEOLISFR

Beschreibung der Täter

country: France | fileSize: 36908810351 | PUBLISHED | LAMY is a major French real-estate services company. It provides services for property owners, tenants, buyers, sellers, and condominium owners across France. According to its website, LAMY has 140 agencies and around 2,000 employees, with more than 30 years of experience in real estate.

Herkunft

zawoowww.francare.comFR

Beschreibung der Täter

country: France | fileSize: 21463370041 | PUBLISHED | FRANCARE Industries is a French international technical-supply, engineering, and maintenance company, headquartered in Paris, France. The company was founded in 1988 and specializes in supplying equipment, technologies, and technical services to industrial and healthcare customers internationally

Herkunft

zawooamb-pvc.comFR

Beschreibung der Täter

country: France | fileSize: 64294792565 | PUBLISHED | AMB (Ateliers de Menuiseries Bidet), also known as Atelier de Menuiseries Bidet, is a French manufacturer specializing in PVC and aluminium joinery products. The company is based in Bourguenolles, Normandy, France. Its website is amb-pvc.com.

Herkunft

zawooCompany ID : bgsedfhgsbdfsFR
kein Firmenname im Eintrag

Beschreibung der Täter

country: France | fileSize: 36908810351 | UNPUBLISHED

Herkunft

zawooCompany ID : daszxvbgfnczmFR
kein Firmenname im Eintrag

Beschreibung der Täter

country: France | fileSize: 64294792565 | UNPUBLISHED

Herkunft

zawooCompany ID : vdssdcnhuysdzFR
kein Firmenname im Eintrag

Beschreibung der Täter

country: France | fileSize: 21463370041 | UNPUBLISHED

Herkunft

zawoozenithtechnology.co.nzNZ
healthcare

Beschreibung der Täter

country: New Zealand | fileSize: 72009692411 | PUBLISHED | Zenith Technology Corporation Limited (ZenTech) is a New Zealand-based Contract Research Organisation (CRO) headquartered in Dunedin, New Zealand. The company was incorporated in 1987 and specializes in clinical research and pharmaceutical analytical services for the international pharmaceutical industry.

Herkunft

zawoofes-sport.deDE

Beschreibung der Täter

country: German | fileSize: 49760098079 | PUBLISHED | FES Sport (fes-sport.de) is the Institut für Forschung und Entwicklung von Sportgeräten (FES), a German institute specializing in research, engineering, and development of high-performance sports equipment and technology. It is based in Berlin, Germany, with an additional facility in Oberhof.

Herkunft

zawooesopartnerscpa.comUS

Beschreibung der Täter

country: USA | fileSize: 90147829401 | PUBLISHED | ESOP Partners appears to be a specialized professional-services firm focused on Employee Stock Ownership Plans (ESOPs) rather than a general-purpose CPA firm.

Herkunft

zawooCompany ID : mtfszhtggfdsgNZ
kein Firmenname im Eintrag

Beschreibung der Täter

country: New Zealand | fileSize: 72009692411 | UNPUBLISHED

Herkunft

zawooCompany ID : vrfdeyhnbyukiUS
kein Firmenname im Eintrag

Beschreibung der Täter

country: USA | fileSize: 90147829401 | UNPUBLISHED

Herkunft

zawooCompany ID : htrfdrghbtnyrDE
kein Firmenname im Eintrag

Beschreibung der Täter

country: German | fileSize: 49760098079 | UNPUBLISHED

Herkunft

zawoovectorsoft.deDE

Beschreibung der Täter

country: German | fileSize: 17073414449 | PUBLISHED | vectorsoft is Vectorsoft AG, a German software-development company headquartered in Heusenstamm, Hesse, near Frankfurt am Main, Germany.

Herkunft

zawoowinterdienst-berlin.comDE

Beschreibung der Täter

country: Germany | fileSize: 35134085775 | PUBLISHED | The company is located at Boschweg 18–20, 12057 Berlin, and lists info@winterdienst-berlin.com and +49 30 684 083-6 as contact details. According to their company website, their services include:Snow and slush removal Clearing and gritting of sidewalks, roads, parking areas and public spaces Manual and machine-assisted winter maintenance Winter-service operations for businesses, private households and municipalities GPS-supported fleet and quality controls Environmentally conscious winter-service methods.Availability around the clock during winter conditions .The company says it combines around 30 years of experience with modern technology and environmentally friendly materials.

Herkunft

zawoohd-werkstaetten.deDE

Beschreibung der Täter

country: Germany | fileSize: 37740752817 | PUBLISHED | hd-werkstaetten.de belongs to Heidelberger Werkstätten der Lebenshilfe Heidelberg e. V., a German social enterprise / sheltered workshop organization supporting people with disabilities through employment, vocational training, and workplace inclusion. Its main site is in Heidelberg, Baden-Württemberg, Germany.

Herkunft

zawoong-engineering.deDE

Beschreibung der Täter

country: German | fileSize: 4674304337 | PUBLISHED | NG Engineering Gruppe is a German engineering and technical-services group headquartered in Rödental, Bavaria. The group has been operating for more than 20 years and has locations in Germany, Poland and the Czech Republic. It provides engineering services throughout the product-development process and also offers personnel/recruitment services.

Herkunft

zawooberghotel-oberhof.deDE

Beschreibung der Täter

country: Germany | fileSize: 4300776316 | PUBLISHED | Konsumhotel Berghotel Oberhof is a wellness and leisure hotel in Oberhof, Thuringia, Germany, located in the Thuringian Forest. It is operated by Berghotel Oberhof GmbH, with Markus Barth as managing director.

Herkunft

zawoorsk-immobilien.deDE

Beschreibung der Täter

country: German | fileSize: 34483870629 | PUBLISHED | RSK Immobilien GmbH is a German real-estate project developer and property company headquartered in Weißenfels, Saxony-Anhalt. Its core activities are the development, realization, renovation and marketing of residential and commercial properties, with a strong current focus on residential projects.

Herkunft

zawoomontronix.deDE

Beschreibung der Täter

country: German | fileSize: 14756317234 | PUBLISHED | MONTRONIX GmbH is a German industrial technology company specializing in machine-tool monitoring, process monitoring, machine protection, and condition monitoring. The company was founded in 1990 as a spin-off of Kennametal, Inc. and focuses primarily on monitoring solutions for metal-cutting and machining operations.

Herkunft

zawookdynium.czCZ

Beschreibung der Täter

country: Kdyně, Czech Republic | fileSize: 22341828166 | PUBLISHED | KDYNIUM a. s. is a Czech precision foundry based in Kdyně, Plzeň Region, specializing in precision castings made using the lost-wax (investment casting) process. The company says its foundry has been operating since 1954, while the current joint-stock company was incorporated in 1992.

Herkunft

zawooacqbuilt.comCA

Beschreibung der Täter

country: Canada | fileSize: 34895272422 | PUBLISHED | company based in Edmonton, Alberta, Canada. It specializes in using factory-based construction methods to build residential homes faster, with more precision, and with reduced waste compared with traditional on-site building.

Herkunft

zawoofrm.ind.brBR

Beschreibung der Täter

country: Brazil | fileSize: 41747673590 | PUBLISHED | FRM - Fábrica de Rolamentos e Mancais Ltda is a Brazilian industrial manufacturer specializing in bearings, bearing housings, and industrial movement solutions. The company is based in Curitiba, Paraná, Brazil and has been operating since 1980.

Herkunft

zawooBOTEC-CZDE

Beschreibung der Täter

country: German | fileSize: 29524637347 | PUBLISHED | boTec helps companies in process and production industries improve efficiency, manage data, and optimize business operations using software solutions, consulting, and integration services.

Herkunft

zawoon-tree.comAT

Beschreibung der Täter

country: Austria | fileSize: 70788003456 | PUBLISHED | They develop software and hardware solutions mainly for visitor management and ticketing systems used by: swimming pools and wellness centers, museums and exhibitions, leisure parks, climbing gyms and fitness facilities, mountain railways and ski lifts, industrial visitor systems. Their main locations include: Bregenz, Austria (head office), Delitzsch, Germany, Heimberg, Switzerland, Riazzino, Switzerland/Italian region.

Herkunft

zawooCompany ID : adscynfdkjuihDE
kein Firmenname im Eintrag

Beschreibung der Täter

country: Germany | fileSize: 18677604120 | UNPUBLISHED

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.