SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

Neueste Einträge

Filter zurücksetzen
everestPWCGB

Beschreibung der Täter

[AI generated] PwC (PricewaterhouseCoopers) is a multinational professional services network headquartered in London, United Kingdom. It is one of the "Big Four" accounting firms, offering audit and assurance, tax, consulting, and advisory services to businesses, governments, and organizations worldwide. PwC operates across numerous industries including finance, technology, healthcare, and energy, serving clients in over 150 countries globally.

Herkunft

auroraAllmand-Smith LimitedGB
finanzen

Beschreibung der Täter

[distributor, manufacturer] Allmand-Smith Limited (trading as Stormguard) — a UK manufacturer and distributor of building products headquartered in Stoke-on-Trent. Domain admin credentials in plaintext and a full DC dump — STORMGUARD\MichaelAdmin / 5t0rmGuard Complete NatWest banking infrastructure — blfw.db (21.3 MB live Bankline database with account numbers, sort codes, payee details, and transaction logs), plus WorldPay payment gateway credentials (WorldPay Account Details.xlsx), plus Sage 200 AR/AP containing bank details for every customer and supplier across all 15 entities. NatWest has 3 outstanding registered charges (Jun 2026). Full payroll for every employee, current and former — Payroll.zip (6.1 GB, 1,185 files) from Sage Payroll: NI numbers (lifetime identifiers), tax codes, PAYE history, gross/net pay per period, bank account details for BACS salary payments, pension contributions, P45/P60 records. Complete financial records for 15 entities — Sage 200 databases for Allmand-Smith Ltd, Stormguard Fabrications, Stormguard Sills, Rainwater Systems, Floodplan, Bridgemill, Chelford, Paradise, MJ Associates, SAS Partners, Specialised Aluminium Supplies, two pension funds

Herkunft

brain ciphernovagroupgbc.comGB

Beschreibung der Täter

Total size - 70GB. Contents: Invoices with numbers and amounts, draw payment schedules, unit costs; reports listing owners' names; property details. If you think you are here by m...

Herkunft

mimoriAvevaGB

Beschreibung der Täter

AVEVA is a British multinational industrial software company headquartered in Cambridge, England, and operating as an autonomous business unit of Schneider Electric. It provides engineering, design, operations management, data visualization, asset performance, and cloud-based industrial intelligence solutions for sectors including oil and gas, power, chemicals, manufacturing, marine, mining, and infrastructure. AVEVA's technology helps thousands of enterprises worldwide optimize industrial processes, improve operational efficiency, and support digital transformation across complex engineering and asset lifecycle management. Sector: Technology - Files: 177234 - Publication planned: 2026-10-23T19:09:39Z

Herkunft

qilinJohnson & PaceGB

Beschreibung der Täter

N/A

Herkunft

the gentlemenWellington College International School BangkokGB

Beschreibung der Täter

wellingtoncollege.ac.th Wellington College Bangkok is a British international school for ages 2 to 18, opened in 2018 as part of Wellington College UK, with around 1100 students on a 28 acre campus in eastern Bangkok. The curriculum runs from the English National Curriculum to IGCSE and A Levels, with the first graduating class in 2026. Fees range from about 639000 baht per year in pre nursery up to 1283500 baht in Year 12, plus a 225000 baht registration fee and a 175000 baht refundable deposit. Results are elite level with 80 percent A star or A at IGCSE and every graduate of 2026 admitted to their first choice university including Stanford, Yale and Imperial College. Admissions are selective with CAT4 testing and interviews, and strong English is required from Year 10. The school is famous for its Olympic pool, FIFA standard pitch, 600 seat theatre, wellbeing curriculum and scholarships in music, swimming, golf and academics.

Herkunft

qilinKemlows Diecasting Products LimitedGB

Beschreibung der Täter

Business Services

Herkunft

akiraVidekGB

Beschreibung der Täter

Videk is a leading global provider of vision-based print verification systems, inserter input and output scanning systems, and data management software.We will upload 8gb of corporate data soon. Employee information, customer information, contracts, financials, NDA, and so on.

Herkunft

iah647camden-livingGB

Beschreibung der Täter

status: public | hosting: preparing…

Herkunft

ransomhouseExcess BaggageGB
transport

Beschreibung der Täter

Baggage Express is a dynamic national and international excess baggage shipping company with a heritage stretching back some 25 years. We're dedicated to the task of moving the holdalls, cartons, computers, bikes, luggage and material lives of students, backpackers, expats and anyone else who has found themselves in the UK needing their belongings sent elsewhere. Flexibility is the key to the company's success, tailoring the company's baggage shipping services to the specific individual needs of the company's customers.

Herkunft

majinahanashiRobert Hitchins LimitedGB

Beschreibung der Täter

PENDING Publication scheduled: 2026-10-15T01:36:00Z Attachments: 1

Herkunft

n0nBMT IQ (marine surveying and inspection)GB
transport

Beschreibung der Täter

Marine surveying · United Kingdom | Commercial e-invoice records and equipment interchange receipts | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC]

Herkunft

nightspireCognosis LimitedGB

Beschreibung der Täter

Data is not available now.

Herkunft

nightspireKP IndustriesGB

Herkunft

majinahanashiThe Margo HotelGB

Beschreibung der Täter

The Margo Hotel is a leading 4-star business hotel in Depok that offers premium service, modern facilities for large-scale conferences, and a comfortable stay, and regularly receives top ratings fr...

Herkunft

black xlopayGB
finanzen

Beschreibung der Täter

<p>Lopay is a UK-based fintech company that provides a payment platform enabling small and medium-sized enterprises (SMEs) and sole traders to accept credit card and mobile payments, as well as manage their sales and settlements.<br>This includes financial information belonging to client companies, such as customer payment details, card information, banking data, transaction history, and payment terminal information.</p>

Herkunft

the gentlemenAnyTech365GB

Beschreibung der Täter

anytech365.com zoominfo.com/c/anytech365/368510725 AnyTech365 (Anteco Systems, S.L.) is a Spanish IT security and remote tech support company founded in 2014 by Danish entrepreneur Janus R. Nielsen, headquartered in Marbella, Spain, operating in 25+ countries with 250–400 employees. The company generates estimated annual revenue of $17–21M (2024) and was valued at $200–220M in a 2023 SPAC merger deal with Zalatoris Acquisition Corp. (NYSE: TCOA) involving $172.5M in financing. Its flagship products include IntelliGuard (AI-powered protection), AntiScam, and SystemCleaner, sold via subscription to consumers and small businesses. It ranked 27th in the FT 1000 fastest-growing European companies (2019)

Herkunft

qilinSports Events365GB

Beschreibung der Täter

Business Services

Herkunft

the gentlemenWestrop Primary & Nursery SchoolGB

Beschreibung der Täter

westropprimaryschool.co.uk Westrop Primary & Nursery School is a state-funded community school in Highworth, Swindon (Wiltshire, UK), founded in 1969, serving children aged 2–11. It currently has ~380 enrolled students (capacity 495), with 18.6% on free school meals and 16.3% on SEN support. The school employs ~47 staff (15 teachers + 32 teaching assistants, 20:1 student-teacher ratio) under Headteacher Cindy Acres (since 2018). Annual income is approximately £2 million (~£5,461 per pupil), with a healthy £75K surplus and ~£100K reserves. Rated "Good" by Ofsted (October 2022, maintained since 2012), though 2024/25 exam results showed weaker math progress and 0% at higher standards compared to strong 2018/19 performance. It runs 11 primary classes plus a three-room nursery and is known for its Forest School program and strong pupil premium support.

Herkunft

chaosparkdental.comGB
healthcare

Beschreibung der Täter

To the Management of Park Dental: Time is running out. Our previous attempts to establish a constructive dialogue regarding the security breach have been met with silence. If the management of Park Dental fails to get in touch with our team within the next 24 hours, we will proceed with the full p…

Herkunft

qilinDynamic Office SolutionsGB

Beschreibung der Täter

Furniture

Herkunft

brain ciphermaxwell-group.comGB

Beschreibung der Täter

We have over 115 GB of data — 150k files and documents containing: Complete corporate financial statements, budgets, and forecasts; Bank accounts and reconciliations (Truist);...

Herkunft

n0nPrecision Facades LtdGB

Beschreibung der Täter

Facade engineering and construction (UK) · United Kingdom

Herkunft

inc ransomukbjja.orgGB

Herkunft

imnotavillainRevolutGB
finanzen

Herkunft

qilinGDM PipelinesGB
energie

Beschreibung der Täter

Software

Herkunft

clopSAUL-ORG.UKGB

Herkunft

clopAMEY-CO.UKGB

Herkunft

the gentlemenCrystal GlassGB

Beschreibung der Täter

crystalglassltd.co.uk Crystal Glass (Leeds) Ltd is a family-owned glass company based in Leeds, West Yorkshire, UK, founded in 1962 and officially registered as a limited company in 1974. It operates 5 branches — Leeds (HQ), Bradford, Harrogate, Wakefield, and Castleford — covering all of West Yorkshire. Its core services are 24/7/365 emergency glazing, double glazing replacement, and custom glasswork (shower screens, shopfronts, mirrors, partitions, and commercial facades). The company runs a lean family-managed SME model with roughly 10–25 employees and estimated revenue of £1–3 million per year

Herkunft

brain cipherhoyletanner.comGB

Beschreibung der Täter

We have 33,500 (33.5k) files, the contents of which include: Contracts and agreements; Commercial proposals; Invoices; Customer database; HR ; W-9 tax forms; ACH/banking documents;...

Herkunft

dragonforceOwen Leigh OptometryGB
healthcare

Beschreibung der Täter

Full DATA 400 GB+ The brain uses the eyes to gather information about our surroundings. The brain cannot process all our view so it must first decide what to l...

Herkunft

the gentlemenHigh Oakham Primary SchoolGB

Beschreibung der Täter

highoakham.co.uk zoominfo.com/c/high-oakham-primary-school/345650404 High Oakham Primary School community primary school in Mansfield, Nottinghamshire — opened September 2001 through the amalgamation of schools during Mansfield's education reorganisation; URN 133278, maintained by Nottinghamshire County Council (not an academy). Size: 464 pupils aged 3–11 (nursery to Year 6, mixed) against a capacity of 428 — over-subscribed, with just 9% free-school-meal eligibility (a relatively affluent intake for Mansfield). Headteacher Stephanie Astle (since 2019); chair of governors Lisa Vann; leadership includes a deputy, assistant head, SENCO (Michelle Pollard's inclusion team) and early-years lead. Ofsted (May 2022): "a good school" — English and maths standards above average by Year 6, an excellent start in Reception, teaching "consistently good, some outstanding." Culture: "Be true to yourself,"

Herkunft

qilinGilco ScaffoldingGB

Beschreibung der Täter

Construction

Herkunft

qilinThe Big TableGB

Beschreibung der Täter

Hospitality

Herkunft

akiraScrubaDub Auto Wash CentersGB
finanzen

Beschreibung der Täter

ScrubaDub Car Wash is New England's leading auto wash, offering customizable tunnel and touchless washes, interior cleaning, and detailing services across over 20 locations in Massachusetts,New Hampshire, Maine, and Rhode Island.We will upload corporate data soon. Employee personal information (passport numbers, DLs of 22 employees, contact information), clients information (addresses, contacts and so on), company financials, payment details.

Herkunft

anubisMarlborough PartnersGB
finanzen

Beschreibung der Täter

Major data breach at a capital solutions advisory firm.

Herkunft

inc ransomwww.lichtvision.comGB

Herkunft

qilinAbsolute Consultancy ServicesGB

Beschreibung der Täter

Business Services

Herkunft

the gentlemenBreburGB

Beschreibung der Täter

breburltd.co.uk zoominfo.com/c/brebur-ltd/445718566 Brebur Ltd is a UK specialist subcontractor for steel frame systems (SFS), dry-lining, partitions, plastering and suspended ceilings, founded in 2002 (trading as Ace Fire Solutions Ltd until Dec 2012); it is based at Unit 1 Capitol Close, Dodworth, Barnsley, South Yorkshire. It delivers projects across the North of England for main contractors such as BAM, Kier and Willmott Dixon, and also installs lead-lined radiation-protection partitions for hospitals and acoustic raft/baffle solutions. It holds long-standing manufacturer partnerships (British Gypsum, Siniat/Knauf, and Ecophon's EPIC status since 2016) and has won a Gold National Quality Award plus BAM's Regional Contractor of the Year. With ~20 staff and net assets of ~£2.7m (2025), it sits under the Brebur Holdings / Brebur Group Ltd structure created in 2024 (directors Jamie Brenton and Vincenzo Lilley);

Herkunft

the gentlemenMB AssociatesGB

Beschreibung der Täter

mbassociates.org zoominfo.com/c/mb-associates/372858181 MB Associates is a UK social impact consultancy founded in 2005 by Mandy Barnett (London Business School MBA, chair of Social Value UK), based in Holmfirth, West Yorkshire; its legal entity is Mandy Barnett Associates Ltd (incorporated 7 Sep 2005, registered in Welwyn Garden City). It helps people, projects and organisations understand and increase their social impact — impact evaluation, SROI analysis, consultation and research, creative facilitation, training and toolkits — working through a Plan–Do–Review cycle that starts with a "Story of Change". Clients include Arts Council England, the National Lottery, UKRI-AHRC, Natural Resources Wales, Bristol City Council, the National Children's Orchestra, museums and charities; it also runs its own learning platform, Culture3 (culturecubed.org). In February 2026 the founder handed the firm over to colleagues — directors Jael Williams and Emily Wilson — and the brand

Herkunft

chaossingleton.comGB

Beschreibung der Täter

Founded in 1986, Singleton Reynolds is a law firm. They are headquartered in Vancouver, British Columbia.

Herkunft

booba teamDavrocGB

Beschreibung der Täter

Furniture and Home Furnishings Manufacturing Website: www.davroc.co.uk Stolen data: 15 GB.

Herkunft

the gentlemenCRASLGB

Beschreibung der Täter

crasl.co.uk zoominfo.com/c/crasl-accounting-services/355829364 CRASL Accounting Services is an approachable, user-friendly accounting firm based in Suffolk, UK, dedicated to supporting individuals, sole traders, and growing businesses. They combine traditional financial values with modern efficiency, offering personalized bookkeeping, tax planning, and strategic business advice. Their client-focused approach ensures you receive the clear insights and practical tools needed to make confident decisions and achieve your financial goals.

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.