SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

Neueste Einträge

Filter zurücksetzen
qilinToyota CanariasES
automotivetransport

Beschreibung der Täter

Business Services

Herkunft

emperadorLuzco IluminationES
energie

Beschreibung der Täter

Spanish company that specializes in professional lighting for shops and commercial spaces. There are many customer documents and employee data. [Sector: Manufacturing, Finance]

Herkunft

thegentlemenSBI Audiovisual MedinboxES
healthcare

Beschreibung der Täter

sbiav.com SBI Audiovisuel is a Quebec AV company founded in 1991 (HQ in Saint-Bruno-de-Montarville, ~11 staff), doing corporate event production — sound, lighting, video, webcasting — plus its signature niche: live streaming of surgical operations for medical training. It deploys its own CASTER mobile system and claims exclusive North American rights to France's Medinbox tech, which is used at hospitals like Mount Sinai NY; note SBI is an integrator, not the tech's manufacturer. Public activity runs from 2018 through 2026 (US tours, medical congresses, hiring), with no lawsuits or scam signs found. Revenue is not disclosed — third-party estimates vary ($1–5M range), all unverified. Weak spots: no independent client reviews, no published certificates, and the site blurs its own brand with Medinbox's. For Quebec/Canada corporate events or live-surgery broadcasts it's a credible pick; for critical projects, verify team size, redundancy plans, and patient-data handling in writing.

Herkunft

thegentlemenNewport Beach DentistryES
healthcare

Beschreibung der Täter

dentistryofnewportbeach.com Newport Beach Dentistry family dental practice in Newport Beach, CA (1401 Avocado Ave, Ste 209), founded 30+ years ago and currently run by brothers Dr. F. Frank Foroutan (USC DDS 1998) and Dr. F. Ryan Foroutan (USC DDS 1996) — a practice that changed ownership from Dr. Rasch → Kantor/Appelsies → Foroutan over the decades. Services: implants, crowns, veneers, Invisalign, root canals, periodontics, extractions, sedation, whitening, emergency care (same-day); accepts Delta Dental Premier/PPO and most major insurance, CareCredit financing; $99 new-patient special (exam + X-rays + cleaning). Team ~10 (Nancy — office manager, Monica — front desk, Erica — hygienist); languages: English, Farsi, Spanish. Related entities: Foroutan Dental Inc. (Buena Park), OC Elite Dental (Buena Park + Anaheim Hills); also connected to F. Foroutan DDS Inc. (Corona). No revenue disclosed (private practice, est. $2–5M/yr for 3 doctors in this location).

Herkunft

qilinSegres SystecES

Beschreibung der Täter

Office Products Retail & Distribution

Herkunft

auroraEstrategias BigMat S.L.U.ES

Beschreibung der Täter

[distribution] Estrategias BigMat S.L.U. — the Spanish master franchisee of BigMat International, a French cooperative and one of Europe's largest building materials distribution networks. 624 SEPA payroll XML files (2022–2025) — every monthly salary payment for 300–500 employees across 15+ entities, with full names, DNI/NIE numbers, IBANs, and exact euro amounts. 20 SILTRA Social Security databases — the complete filing history for every subsidiary's workforce, containing números de afiliación, contribution bases, and employment records. <redacted> 2,690 customer loyalty cards with DNI/NIF identifiers — the entire customer-identity database. 888 Modelo 347 tax notifications — annual declarations to the Agencia Tributaria naming customers and suppliers with their DNI and transaction amounts. Complete financial records — 5 years of accounting journals, bank reconciliations, insurance policies, loan agreements, and invoices. Occupational health data (PRL) for 12+ subsidiaries — workplace injury reports, medical certificates, and risk assessments.

Herkunft

qilinProdielES
energie

Beschreibung der Täter

Civil Engineering Construction

Herkunft

n0nTTI Algeciras (container terminal operations)ES
transport

Beschreibung der Täter

Port terminal operations · Spain | Operational EDI message archives and internal terminal systems documentation | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC]

Herkunft

majinahanashiCALICHEES
telekommunikationenergie

Beschreibung der Täter

Grupo Caliche is a major Spanish corporation engaged in international logistics, freight transportation, and the provision of telecommunications services. The company coordinates the delivery of go...

Herkunft

majinahanashiTERRACOM & MONTCAUES

Beschreibung der Täter

Montcau ERP SaaS is a Spanish cloud-based ERP and POS solution developed by Terrassenca de Telecomunicacions, SLU (Terracom), designed for the management of production, sales, retail operations, in...

Herkunft

nightspireMedcom Tech InformationES
healthcare

Herkunft

qilinMatadero Frigorífico AvinyóES

Beschreibung der Täter

N/A

Herkunft

qilinEPTISAES

Beschreibung der Täter

N/A

Herkunft

lamashtuFluge AudiovisualesES

Beschreibung der Täter

Fluge Audiovisuales is a Spanish company and market leader in AV equipment rental (sound, lighting, video, staging) for concerts, festivals, corporate events, TV and film. It operates across Spain (Madrid, Barcelona, Bilbao, Valencia, Ibiza, Galicia)

Herkunft

lamashtuFluge AudiovisualesES

Beschreibung der Täter

Fluge Audiovisuales is a Spanish company and market leader in AV equipment rental (sound, lighting, video, staging) for concerts, festivals, corporate events, TV and film. It operates across Spain (Madrid, Barcelona, Bilbao, Valencia, Ibiza, Galicia)

Herkunft

lamashtuTRANS LOGROÑO SOCIEDAD ANONIMAES
transport

Beschreibung der Täter

TRANS-LOGROÑO, S.A. is a Spanish road freight and logistics company based in Logroño (La Rioja). It provides road haulage (CNAE 4941), freight forwarding, and warehouse services including storage, order picking, and tank cleaning.

Herkunft

lamashtuTRANS LOGROÑO SOCIEDAD ANONIMAES
transport

Beschreibung der Täter

TRANS-LOGROÑO, S.A. is a Spanish road freight and logistics company based in Logroño (La Rioja). It provides road haulage (CNAE 4941), freight forwarding, and warehouse services including storage, order picking, and tank cleaning.

Herkunft

qilinEmserES

Beschreibung der Täter

N/A

Herkunft

qilinEmserES

Beschreibung der Täter

N/A

Herkunft

thegentlemenHospital de la Santa Creu i Sant PauES
healthcare

Beschreibung der Täter

santpau.cat zoominfo.com/c/hospital-de-la-santa-creu-i-sant-pau/372615247 Hospital de la Santa Creu i Sant Pau is a 625-year-old Barcelona medical institution (founded 1401) and a UNESCO World Heritage Site since 1997. It combines a major academic hospital (2009) with the Recinte Modernista, a masterpiece of Catalan Modernism designed by Lluís Domènech i Montaner. The hospital employs ~4,965 people, runs on a ~€490M annual budget, and has 600 beds and 25 operating rooms, serving 400,000+ patients a year. Its research institute (IR Sant Pau, founded 1992) employs 1,632 staff with 1,058+ publications and 705 active clinical trials.

Herkunft

the gentlemenHospital de la Santa Creu i Sant PauES
healthcare

Beschreibung der Täter

santpau.cat zoominfo.com/c/hospital-de-la-santa-creu-i-sant-pau/372615247 Hospital de la Santa Creu i Sant Pau is a 625-year-old Barcelona medical institution (founded 1401) and a UNESCO World Heritage Site since 1997. It combines a major academic hospital (2009) with the Recinte Modernista, a masterpiece of Catalan Modernism designed by Lluís Domènech i Montaner. The hospital employs ~4,965 people, runs on a ~€490M annual budget, and has 600 beds and 25 operating rooms, serving 400,000+ patients a year. Its research institute (IR Sant Pau, founded 1992) employs 1,632 staff with 1,058+ publications and 705 active clinical trials.

Herkunft

the gentlemenAurenES

Beschreibung der Täter

auren.es zoominfo.com/c/auren/1115886722 AUREN (founded 1998, Madrid) is Spain's leading home-grown multidisciplinary professional-services firm — audit, legal/tax advisory, consulting and corporate finance — with €104 million revenue in Spain and 1,100+ staff in 15 offices (2,500+ people and 62 offices worldwide). Founded and chaired by Mario Alonso Ayala, it sells an integrated "Big Four-style" service portfolio to mid-market companies with a "humanist, close-to-client" culture, plus standout niches in forensic/expert-witness work, public-sector audit and M&A. In March 2025, Dutch private equity fund Waterland took a 49% stake — the first PE investment in a Spanish professional-services firm — giving it firepower for acquisitions. Revenue is split roughly Legal €42M, Consulting €35M, Audit €24M, Corporate Finance €3.4M, and the firm is now on a buy-and-build spree (15–18 deals planned for 2026, its largest being the absorption of Moore España's Madrid and Barcelona offices).

Herkunft

safepaycromados.comES

Beschreibung der Täter

The company's registered business activities include thermal treatment of metals, organic and electrolytic coatings, and the manufacture and commercialization of …

Herkunft

qilinRevenga Smart SolutionsES

Beschreibung der Täter

Business Services

Herkunft

qilinIberia Compositech ManufacturingES

Beschreibung der Täter

Manufacturing

Herkunft

inc ransomSECOND HOUSEES

Herkunft

qilinThe Gran Hotel InglesES

Beschreibung der Täter

Hospitality

Herkunft

qilinTaurus IbéricaES

Beschreibung der Täter

Real Estate

Herkunft

qilinGeiegES

Beschreibung der Täter

Fitness & Dance Facilities

Herkunft

the gentlemenTMI Tecnicas Mecanicas IlerdensesES

Beschreibung der Täter

tmipal.com zoominfo.com/c/tmi-técnicas-mecánicas-ilerdenses-sl/372767545 TMI Tecnicas Mecanicas Ilerdenses Spanish machining and metal-casting factory from Lleida, Catalonia — founded 1991, producing and repairing components for agricultural machinery and industrial customers (custom parts made to customer drawings; "Ilerdenses" refers to Ilerda, the Roman name of Lleida). Classic quiet Catalan workshop serving Spain's fruit-growing capital, where farm equipment wears out fast and OEM replacement parts aren't always available.

Herkunft

panzerAgencia Estatal de MeteorologíaES
transport

Beschreibung der Täter

Agencia Estatal de Meteorología - AEMET is a governmental agency of Spain that provides comprehensive meteorological services, including weather observation, predictions, and climate analytics. It serves various sectors such as agriculture, aviation, maritime activities, and emergency services. AEMET aims to support public safety and management through accurate weather forecasts, climate data, and educational resources. The agency also engages in research and international collaboration to enhance meteorological science and technology.

Herkunft

safepaygayafores.esES

Beschreibung der Täter

The company is headquartered in Onda, Castellón, one of Europe's most important ceramic manufacturing regions. Established in 1949, Gayafores has …

Herkunft

safepaygsngestion.esES

Beschreibung der Täter

The company is based in Villaviciosa de Odón, Madrid, and operates through the GSN Gestión brand. Its website states that …

Herkunft

the gentlemenZaniniES

Beschreibung der Täter

zanini.com zoominfo.com/c/zanini/359207305 Zanini is the global market leader in automotive wheel trim — a Spanish family firm founded in 1965 in Barcelona, owned by the Torras family since 1976, with 1,800 employees across 12 plants on 3 continents. It makes 1 in 4 wheel covers sold worldwide (~100M units/year) for virtually every major OEM, plus grilles, emblems, EV charge-port covers and pedestrian airbag parts. Its strategic pivot: radar-transparent, heated & illuminated front emblems (radomes) — first launched on VW Atlas, now featured on the new Mercedes CLA (2025) — the key sensor window for the autonomous-driving era. Proprietary tech: ZANICHROME® metallization (chrome-look without chrome, "night & day" effects, electromagnetic transparency) + 17 patent families and TactoTek IMSE license (2024). Funded privately (€81.5M debt raise, Oct 2025), chairman Joan Miquel Torras, CEO Jordi Torras (twice a Dakar Rally racer).

Herkunft

qilinJbcES

Herkunft

kazuHealth TimeES

Beschreibung der Täter

HT Médica is a comprehensive imaging diagnostic center that offers advanced radiology and digital pathology services for precise and personalized diagnosis. With a multidisciplinary medical team, they provide a wide range of diagnostic tests across more than 20 centers in Spain. Their commitment to patient care is reflected in their use of the latest techniques and technologies. HT Médica aims to be a trusted partner in health prevention and well-being for their clients. Price: $4,000 | Size: XXXX | Records: 2 253 981 users | Dump date: 2026

Herkunft

inc ransomAsfaltos y Pavimentos S.A. (Asfalpasa)ES

Herkunft

brain ciphericot.esES

Beschreibung der Täter

If you use this hosting service, we have some bad news for you. We'll soon be publishing more than 200 database backups that belong to you. Demo download: h4zmek6bf3lebauy7dtyxmui6...

Herkunft

brain ciphersyc.esES

Beschreibung der Täter

We have about 57,000(57k) documents and files of your company, with a total size of over 40 GB. Contents: Personal data of thousands of candidates for top positions; Data on the fi...

Herkunft

the gentlemenTEC ContainerES

Beschreibung der Täter

teccontainer.com TEC Container is a Spanish manufacturer of spreaders, lifting frames, and container-handling equipment, based in Algete (Madrid) since 1988. The company supplies ports and terminals worldwide, offering brands like TECSPREADER and TECGENSET (its diesel genset line for reefer containers).

Herkunft

m3rxtecnoabi.comES

Beschreibung der Täter

Tecnologías de Código Abierto S.L., trading as Tecnoabi, is a Málaga, Spain-based B2B software development firm registered in 2008 that specializes in Java, .NET, and proprietary solutions such as VirtRoom and CMMS software. Located in Málaga TechPark, the company maintains extensive expertise in after-sales management systems and is an official Google Play developer. For more details, visit the official website at tecnoabi.com. Stolen: 300 GB 63,434 Files

Herkunft

the gentlemenPremier PigsES

Beschreibung der Täter

premierpigs.com zoominfo.com/c/premier-pigs/458500816 Grupo Premier Pigs is a family-owned agricultural company based in Spain, founded in 1992 and specializing in the swine farming industry. Operating as a major pig farming integrator, the business manages its own breeding and fattening farms alongside a dedicated feed production mill. The organization is committed to sustainable livestock practices and comprehensive agricultural management, which also includes cereal farming.

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.