SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

Neueste Einträge

Filter zurücksetzen
bravoxAMSAM 🇫🇷FR

Beschreibung der Täter

Social, Healthcare and Home Care Services.

Herkunft

lamashtuMECA-PRECISFR

Beschreibung der Täter

Méca-Précis is a French industrial manufacturer specializing in precision stamping dies, sheet metal stamping, and metal component production. It serves the automotive, construction, and home appliance industries, offering custom tooling

Herkunft

qilinCommune Du TamponFR

Beschreibung der Täter

Government

Herkunft

panzerValode & PistreFR

Beschreibung der Täter

Valode & Pistre is today one of France’s premier architecture and engineering firms. Based in Paris with a branch operating for over ten years in Beijing, the firm works on projects both in France and across the globe in Europe, Asia, the Middle East, North and Sub-Saharan Africa, Russia and Central America. Valode & Pistre’s practice focuses on very diverse scales, from developing comprehensive plans for brand new cities to designing furniture. It also includes very diverse briefs.

Herkunft

panzerZenidocFR
healthcare

Beschreibung der Täter

a French healthcare software company that helps hospitals and medical professionals automate documentation, transcribe medical dictation, manage patient records, and streamline workflows using AI and voice-recognition technology. Data Content : - 605k Patient Data, Names, Phone, SSN and more. - Zenidoc Cloud Dev, Data, Prod, Support Chats, Source Codes and more.

Herkunft

vexyKookabarra JuiceFR

Beschreibung der Täter

French manufacturer specializing in fresh-pressed fruit juices, detox juices, smoothies, nectars and other fresh fruit products, serving both professionals and consumers.

Herkunft

majinahanashiSON-VIDEOFR

Beschreibung der Täter

Son-Video.com is France's largest online retailer of hi-fi and home-cinema equipment. Founded in 2000. Headquartered in Champigny-sur-Marne, Île-de-France. 17 physical stores across France (Paris,...

Herkunft

lockbit5saintpierredescorps.frFR

Beschreibung der Täter

Une administration publique française. Voici les informations professionnelles et juridiques disp...

Herkunft

dragonforceRÉSOFR

Beschreibung der Täter

Réso specializes in secondary works, offering a wide range of products including ceilings, partitions, floors, technical floors, and facades. They provide modular and dry partitions, acoustic products, and various accessories, ensuring a comprehensive solution for construction needs. With numerous agencies across France and a team of specialists trained in the latest innovations, Réso serves a diverse clientele with thousands of available products. Their commitment to quality and service is reflected in their partnerships and significant projects. 676 GB of confidential information about their customers, partners, employees were stolen. The entire network was locked including nearly 8TB of Veeam backups. The company has failed to reach for an agreement.

Herkunft

the gentlemenMabrisFR

Beschreibung der Täter

mabris.fr) zoominfo.com/c/mabris/513443412MABRIS is a French family-owned industrial contractor based in Saint-Pierre-la-Cour (Mayenne), founded in the 1980s and registered as an SAS in 1999, with a second workshop in Airvault under the OPTEOR banner since 2006. It provides end-to-end services — boilerwork (chaudronnerie), industrial piping, metalwork, and industrial mechanics/maintenance — split ~60% maintenance / 40% design, with an in-house design office using AutoCAD, SolidWorks, and 3D point-cloud scanning. Working B2B-only across 18 departments in western France (zero export), it serves chemical, food, and energy industry clients, and partners with neighboring firm AROM for tungsten-carbide hardfacing (whose facility it acquired in 2022 for €45,000). Led by president Jacques Belaud since 2011, it employs ~26 people and holds MASE safety certification (renewed November 2025). Financially it staged a strong turnaround: revenue grew from €6.37M (2021) to a record €7.97M (2024)

Herkunft

vexyKOOKABARRA JUICEFR

Beschreibung der Täter

French manufacturer specializing in fresh-pressed fruit juices, detox juices, smoothies, nectars and other fresh fruit products, serving both professionals and consumers.

Herkunft

the gentlemenSAS H2O MICHELFR

Beschreibung der Täter

h2o-michel.fr huissiers-bordeaux.com SAS H2O MICHEL is a French commissaire de justice firm (public judicial officer — serving court documents, enforcing judgments, debt recovery) created in 2018 and based in Tours/Chinon, Val de Loire (Indre-et-Loire). It is led by President Alexandra Michel and operates 5 offices (Tours, Chinon, Bourgueil, Langeais, Château-la-Vallière) with a small team of 3–7 employees. Revenue grew rapidly from €223K in 2018 to €631K in 2019 (+183%), with a strong 16.4% net margin (€103.5K net profit, ROE 85.8%) — though all accounts since 2020 are filed confidentially (estimated €600K–1M today). The firm is part of H2O Réseau National, France's first national network of commissaires de justice specialized in debt recovery (group network: 160+ staff, 6 major offices). Core services: enforcement of court decisions (saisie-attribution, wage garnishment, evictions, property seizures), debt collection, legal constats, and auction sales.

Herkunft

krybiteuroditel.comFR
telekommunikation

Beschreibung der Täter

Groupe Euroditel is a French telecommunications and IT systems integrator founded in 1966, headquartered in Bagneux, Îl...

Herkunft

krybiteuroditel.comFR
telekommunikation

Beschreibung der Täter

Groupe Euroditel is a French telecommunications and IT systems integrator founded in 1966, headquartered in Bagneux, Îl...

Herkunft

krybitwww.pierrefeu.frFR

Beschreibung der Täter

Pierrefeu Immobilier is an independent French real estate agency founded in 1963, headquartered in Tarare, in the Nord-O...

Herkunft

krybitEURODITEL/RESOTELECOMFR

Beschreibung der Täter

Euroditel is a French managed services provider (MSP) specializing in telephony and unified communications. Based in th...

Herkunft

kairosLe Centre National de l'Expertise Hospitalière (CNEH)FR
healthcare

Beschreibung der Täter

Le Centre National de l'Expertise Hospitalière (CNEH) est une école de référence et un organisme français fondé en 1974 qui accompagne les professionnels de santé et les établissements sanitaires et médico-sociaux.

Herkunft

lamashtuFIDUCIALFR
finanzen

Beschreibung der Täter

fiducial.fr - Expert accounting, payroll, legal advice, audit, online banking (Fiducial Banque), IT solutions (Fiducial Informatique), office supplies and equipment (Fiducial Office Solutions), security, and asset management.

Herkunft

lamashtuGERLONFR

Beschreibung der Täter

gerlon.com - GERLON is a French company (SAS, SIREN 349008284) based in Abbeville (Somme, Hauts-de-France) manufacturing and selling steel wool (laine d'acier), brushes, abrasives, tools (outillage) and cleaning products.

Herkunft

the gentlemenAgospapFR

Beschreibung der Täter

agospap.com zoominfo.com/c/agospap/357851962 AGOSPAP (founded 2 November 1981, Paris) is a non-profit association (loi 1901) that manages social, cultural and leisure benefits for ~150,000 staff of the AP-HP hospital system and the City of Paris plus ~20 affiliated public bodies — effectively a cross-institutional works-council fund. With 45 employees and income tied to 0.5% of the two founders' payroll (≈€28M/year in subsidies; €49M total budget), it provides income-scaled holiday stays, children's camps (4–17), a cultural ticketing platform, Christmas gifts, social grants (birth/marriage/service medals) and the new Pass'Sport sports voucher. Led by president Jean-Paul Brandela (since Oct 2023) and director-general Anne Schaetzel (since 2013), it is ISO 9001-certified and holds an Atout France travel-operator license with UNAT financial guarantees. Funding remains politically sensitive: a €2M cut by the City in 2023 briefly suspended camp registrations

Herkunft

the gentlemenEuroprimFR

Beschreibung der Täter

euro-prim.com zoominfo.com/c/europrim/1128488637 EURO-PRIM (founded 1998, Grenoble, France) is a local digital printing and reprographics company working together with its sister firm CINRA (est. 2003) as "Europrim & CINRA" — two production sites, ~25 staff, serving students, SMEs, large regional companies and property-management firms. Services cover digital color/B&W printing up to A3+, large-format scanning up to A0, graphic design, finishing, personalized mass mailings (including for homeowners' association meetings) and prefecture-approved numbered event tickets. The business was taken over in 2016 by Fleur Henno and Philippe Baffert-Rey, who modernized the equipment and pushed an online store with 200+ products; it holds a solid 4.2/5 rating on 222 Google reviews. However, on 2 July 2025 the Grenoble commercial court opened redressement judiciaire (receivership)

Herkunft

the gentlemenGroupe APROSEPFR

Beschreibung der Täter

groupe-aprosep.com guyanasso.org Groupe APROSEP (founded 1994, Cayenne, French Guiana) is a solidarity-economy network (groupement d'économie solidaire) that unites and professionalizes associations across the region, focusing on employment insertion, training and social innovation. It runs several affiliated structures — LIANE (job integration), OFA Guyane (training), GEIQ Jeun'ESS and GEPSL (shared employers for sports/youth/childcare jobs) and the Conciergerie Solidaire — all housed in "L'Accordeur," a 1,600 m² PTCE-labeled cooperative hub in downtown Cayenne supporting about 500 jobs and 240 associations. Led since 1997 by director Jean-David Poquet under president José Othily, the group celebrated its 30th anniversary in June 2025 and runs flagship projects like an AVIP integration crèche (30 places), the EVA illiteracy-assessment center and the social enterprise Tisanes de Camopi. Its partner network spans France Travail, ANLCI, Orange

Herkunft

vexyGroupe ProxitelFR

Beschreibung der Täter

French B2B technology provider offering professional Internet connectivity (fiber/DSL, 4G/5G backup), fixed and mobile telephony, cybersecurity, IT backup, collaboration, networking and computer hardware. The group is based in Avignon and serves businesses and public-sector organizations.

Herkunft

zawooagiliance.frFR

Beschreibung der Täter

country: French | fileSize: 210814420637 | PUBLISHED | Agiliance is a French accounting and business advisory group headquartered across the Haute-Saône and Doubs regions. Its website describes Agiliance as the result of bringing together 8 small-to-medium-sized accounting firms, combining their expertise and tools while retaining a local, client-oriented approach.

Herkunft

zawooHEOLISFR

Beschreibung der Täter

country: France | fileSize: 36908810351 | PUBLISHED | LAMY is a major French real-estate services company. It provides services for property owners, tenants, buyers, sellers, and condominium owners across France. According to its website, LAMY has 140 agencies and around 2,000 employees, with more than 30 years of experience in real estate.

Herkunft

zawoowww.francare.comFR

Beschreibung der Täter

country: France | fileSize: 21463370041 | PUBLISHED | FRANCARE Industries is a French international technical-supply, engineering, and maintenance company, headquartered in Paris, France. The company was founded in 1988 and specializes in supplying equipment, technologies, and technical services to industrial and healthcare customers internationally

Herkunft

zawooamb-pvc.comFR

Beschreibung der Täter

country: France | fileSize: 64294792565 | PUBLISHED | AMB (Ateliers de Menuiseries Bidet), also known as Atelier de Menuiseries Bidet, is a French manufacturer specializing in PVC and aluminium joinery products. The company is based in Bourguenolles, Normandy, France. Its website is amb-pvc.com.

Herkunft

qilinAgora coopérative agricoleFR

Beschreibung der Täter

Agriculture

Herkunft

dragonforceBMGP GroupeFR

Beschreibung der Täter

BMGP Groupe (Polyresine) is an established French manufacturer specializing in the formulation, production, and distribution of synthetic resins and high-perfor...

Herkunft

panzerStimFR

Beschreibung der Täter

Stim France specializes in video surveillance solutions within the security industry. The company offers a range of video recorders, video receivers, storage expansion, and integration services for surveillance cameras, as well as software for video surveillance management.

Herkunft

zawooCompany ID : bgsedfhgsbdfsFR
kein Firmenname im Eintrag

Beschreibung der Täter

country: France | fileSize: 36908810351 | UNPUBLISHED

Herkunft

zawooCompany ID : daszxvbgfnczmFR
kein Firmenname im Eintrag

Beschreibung der Täter

country: France | fileSize: 64294792565 | UNPUBLISHED

Herkunft

zawooCompany ID : vdssdcnhuysdzFR
kein Firmenname im Eintrag

Beschreibung der Täter

country: France | fileSize: 21463370041 | UNPUBLISHED

Herkunft

qilinThema FoundriesFR

Beschreibung der Täter

Business Services

Herkunft

the gentlemenAforpaFR

Beschreibung der Täter

aforpa.fr zoominfo.com/c/aforpa/427085810 Aforpa French electrical engineering & installation contractor based in Roissy-en-France (next to Paris-CDG airport) — founded 1965 (current SAS registered 1978), specializing in high-power electrical works (HTA/BT networks, lighting) and industrial automation for airports, power plants, tunnels, telecom and residential towers. Its verified credentials: RATP certificate Q19 (electrical works for Paris transport — tunnels/stations) and registration on SFR's contractor registry (telecom power infrastructure). Headcount ~100–250, revenue est. €30–60M (private, undisclosed).

Herkunft

eclipseRosello et FilsFR

Beschreibung der Täter

Rosello & Fils is a fruit and vegetable wholesaler based in Saint-Laurent-Blangy, France. With over 100 years of experience, the company operates exclusively within the Hauts-de-France region, serving professionals in the Nord, Pas-de-Calais, and Somme departments. Its client base includes commercial and collective catering, local shops, and large and medium-sized retail surfaces

Herkunft

panzerFinancière d'UzèsFR

Beschreibung der Täter

Financière d'Uzès offers a range of financial services tailored for individuals, entrepreneurs, and professionals, focusing on wealth management, investment strategies, and fiscal optimization. Their services include asset management, financial analysis, and dedicated funds, catering to clients looking to enhance their income, organize their assets, and manage their taxes. With over 35 years of experience and a commitment to independence, they have supported 2000 families and manage 1.5 billion euros in assets. The company operates six offices across France, providing personalized service through a single point of contact.

Herkunft

qilinCARIDRO VAL DE LOIREFR

Beschreibung der Täter

Business Services

Herkunft

krybiteracm.frFR

Beschreibung der Täter

ERACM (École Régionale d'Acteurs de Cannes et Marseille) is a French non-profit association and regional drama school ...

Herkunft

qilinJouvet SASFR

Beschreibung der Täter

Construction

Herkunft

kairosVille de LibercourtFR

Beschreibung der Täter

Libercourt is a commune in the Pas-de-Calais department of the Hauts-de-France region in northern France.

Herkunft

dysphor1aNetim CompanyFR

Beschreibung der Täter

Sector: Business / Domain Registrar | Country: 🇫🇷 France | Records: Source code, IPs, payment databases, customer PII — full infrastructure | Netim is a French domain name registrar and web hosting provider. Full compromise of internal systems — source code, infrastructure IPs, payment processing databases, customer PII, and internal business data. | For Sale

Herkunft

the gentlemenGeb SasFR

Beschreibung der Täter

geb.fr zoominfo.com/c/geb-sas/372743980 GEB SAS is a historic French chemical manufacturing company established in 1860. They specialize in formulating and producing essential sealing solutions, adhesives, and PVC glues. The family-owned business primarily provides high-quality maintenance and installation products for plumbing and heating professionals.

Herkunft

lockbit5actua.frFR

Beschreibung der Täter

Groupe Actua is a recruitment and temporary staffing agency headquartered in Strasbourg, founded in...

Herkunft

lockbit5dupouy-associes.frFR

Beschreibung der Täter

Dupouy et Associes - Crowe Horwath is a company that operates in the Accounting Services industry.

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.