Leak Monitor
Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.
Stand 22.10.2026, 20:32
Behauptung des Angreifers, kein bestätigter Vorfall
Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.
42
293
97
75
Neueste Einträge
Filter zurücksetzensovcaliThey Failed. 100GB Drops in 2 DaysIN
Beschreibung der Täter
Despite giving the Lucid Motors company more than enough time to respond and deliberately keeping the pressure relatively low, they have still failed to take any appropriate action.In two days we will release a further update, make our position crystal clear, and also publish 100 GB of data
Herkunft
- action.in
- Gruppe bei RansomLook
- von SecBoard erfasst: 21.10.2026 · Land aus der Domain abgeleitet
qilinWalkingTree TechnologiesIN
Beschreibung der Täter
Business Services
Herkunft
- walkingtree.tech
- Pfad auf der Leak-Seite: /site/blog?uuid=921958fc-7df4-447d-9a1a-4d75ef650aa7
- Gruppe bei RansomLook
- Gruppe bei Ransomware.live
- Gruppe bei ThreatCluster
- von SecBoard erfasst: 19.10.2026 · Land laut Quelle
thegentlemenNetcore UnbxdIN
Beschreibung der Täter
netcoreunbxd.com Netcore Unbxd AI product-discovery platform for enterprise e-commerce: smart site search, 1:1 personalization, recommendations, visual intelligence ("Complete the Look"), catalog enrichment, and — its 2026 bet — a Shopping Agent (agentic commerce). Owned by India's Netcore Cloud since March 2022 (~$100M deal, 90%), run by founders Pavan Sondur and Prashant Kumar; SaaS sits on composable, API-first infra (Cloudflare, Kubernetes, multi-region), with <10ms response on 95% of queries and 35M documents processed monthly. Recognition: Gartner Magic Quadrant Leader 3 years running, highest "Current Offering" score in Forrester Wave Q3 2025, 7 G2 badges Summer 2025. Claimed customer results (self-reported): +38% AOV, +28% conversion, −60% null searches, −53% bounce. Positioning is sharply anti-native-search and anti-generic-AI, aimed at retail merchandisers with no-code workbenches and full override control. Site's main CTA is a free "personalized site experience audit."
Herkunft
- netcoreunbxd.com
- Gruppe bei Ransomware.live
- Gruppe bei RansomLook
- von SecBoard erfasst: 16.10.2026 · Land aus dem Text abgeleitet
scarlettgrouppolice.rajasthan.gov.inIN
Beschreibung der Täter
Rajasthan Police is the official law enforcement agency of Rajasthan, India, responsible for maintaining law and order, preventing crime, ensuring public safety, and protecting citizens across the state.
Herkunft
- police.rajasthan.gov.in
- Gruppe bei RansomLook
- Gruppe bei Ransomware.live
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 15.10.2026 · Land aus der Domain abgeleitet
vexyEnchanted Fine JewelleryIN
Beschreibung der Täter
enchantedfinejewellery.in
Herkunft
- enchantedfinejewellery.in
- Gruppe bei RansomLook
- Gruppe bei Ransomware.live
- von SecBoard erfasst: 15.10.2026 · Land aus der Domain abgeleitet
hyflockIGPLINenergie
Beschreibung der Täter
Company Profile & Core Business • Overview: Established in 1988 and headquartered in Mumbai, India, IGPL operates its core manufacturing facility within the Taloja chemical industrial corridor in Maharashtra. The company is a publicly traded, international petrochemical products manufacturer listed on both the National Stock Exchange of India (NSE) and the Bombay Stock Exchange (BSE). • Core Products: The company primarily specializes in the production of Phthalic Anhydride (PAN). Leveraging economies of scale, it also recovers valuable by-products such as Maleic Anhydride and Benzoic Acid, and further extends its downstream value chain to manufacture plasticizers like Di-Ethyl Phthalate (DEP). Industry Influence • Market Dominance: IGPL stands as India's largest single-site Phthalic Anhydride (PAN) producer, commanding a massive domestic market share of approximately 50%. Its Taloja complex is also recognized as one of the largest single-location PAN manufacturing facilities globally, boasting an annual production capacity of 270,000 Metric Tonnes Per Annum (MTPA). • Critical Supply Chain Link: Phthalic Anhydride serves as an indispensable chemical intermediate in the industrial v
Herkunft
- igpetro.com
- Gruppe bei Ransomware.live
- von SecBoard erfasst: 13.10.2026 · Land aus dem Text abgeleitet
inc ransomGreat LakesIN
Herkunft
- greatlakes.edu.in
- Pfad auf der Leak-Seite: /blog/disclosures/6ace36569cd108bf2694586b
- Gruppe bei RansomLook
- Gruppe bei Ransomware.live
- Gruppe bei ThreatCluster
- von SecBoard erfasst: 13.10.2026 · Land aus der Domain abgeleitet
orovaDurga BearingsIN
Beschreibung der Täter
Today Durga Bearings, we're proud to be the leading supplier of top-quality bearings in the country. With a wide range of products from world-renowned brands like NSK-RHP, INA,FAG, THK, BMD, GRW and many more we ensure our customers have access to over 150,000 types of bearings.
Herkunft
- durgabrgs.com
- Gruppe bei Ransomware.live
- Gruppe bei RansomLook
- von SecBoard erfasst: 13.10.2026 · Land laut Quelle
hyflockocean beverages leaksIN
Beschreibung der Täter
Ocean Beverages is part of India's Ocean Drinks Private Limited. In the fiscal year 2025, it had annual revenue of about 936 crore INR, up 12.33% from the previous year. Founded in 2015, the company focuses on healthy functional drinks like low-sugar flavored waters, plant-based energy drinks, and natural sodas. For more info, check out oceanbeverages.in.
Herkunft
- oceanbeverages.in
- Gruppe bei RansomLook
- Gruppe bei Ransomware.live
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 13.10.2026 · Land aus der Domain abgeleitet
hyflockIGPL LeaksIN
Beschreibung der Täter
Company Profile & Core Business • Overview: Established in 1988 and headquartered in Mumbai, India, IGPL operates its core manufacturing facility within the Taloja chemical industrial corridor in Maharashtra. The company is a publicly traded, international petrochemical products manufacturer listed on both the National Stock Exchange of India (NSE) and the Bombay Stock Exchange (BSE). • Core Products: The company primarily specializes in the production of Phthalic Anhydride (PAN). Leveraging economies of scale, it also recovers valuable by-products such as Maleic Anhydride and Benzoic Acid, and further extends its downstream value chain to manufacture plasticizers like Di-Ethyl Phthalate (DEP). Industry Influence • Market Dominance: IGPL stands as India's largest single-site Phthalic Anhydride (PAN) producer, commanding a massive domestic market share of approximately 50%. Its Taloja complex is also recognized as one of the largest single-location PAN manufacturing facilities globally, boasting an annual production capacity of 270,000 Metric Tonnes Per Annum (MTPA). • Critical Supply Chain Link: Phthalic Anhydride serves as an indispensable chemical intermediate in the industrial v
Herkunft
- Gruppe bei RansomLook
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 13.10.2026 · Land aus dem Text abgeleitet
orovaLibre Wireless TechnologiesIN
Beschreibung der Täter
Explore our certified platforms, ranging from MAVID, renowned for being the industry's most integrated, energy-efficient, and compact MIC-to-cloud IoT devices to LS9 platforms, offering extensive capabilities as multi-ecosystem voice assistants and music streamers with the latest features.
Herkunft
- librewireless.com
- Pfad auf der Leak-Seite: /index.html?bclzoygmxnqwrtepis
- Gruppe bei RansomLook
- Gruppe bei Ransomware.live
- von SecBoard erfasst: 12.10.2026 · Land laut Quelle
orovaAmantya TechnologiesIN
Beschreibung der Täter
Amantya brings together deep expertise in AI, software, data, cloud, telecom, GIS, and digital engineering to help enterprises transform how they build, operate, and grow.
Herkunft
- amantyatech.com
- Pfad auf der Leak-Seite: /index.html?qmtxvnrpajksewudhf
- Gruppe bei RansomLook
- Gruppe bei Ransomware.live
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 12.10.2026 · Land laut Quelle
n0nNCT Kandla (container terminal operations)INtransport
Beschreibung der Täter
Port terminal operations · India | Operational EDI correspondence and internal systems logs | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC]
Herkunft
- nctkap.com
- Gruppe bei Ransomware.live
- Gruppe bei RansomLook
- Gruppe bei ThreatCluster
- von SecBoard erfasst: 12.10.2026 · Land aus dem Text abgeleitet
majinahanashiBONJOUR GROUPIN
Beschreibung der Täter
Bonjour Group (brand BONJOUR) is India's largest socks manufacturing company. Founded in 1988. Headquartered in Greater Noida, Uttar Pradesh, India. Legal entity: Bonjour Group (privately held) Fou...
Herkunft
- bonjourgroup.net
- Gruppe bei Ransomware.live
- von SecBoard erfasst: 10.10.2026 · Land aus dem Text abgeleitet
majinahanashiWONDR DIAMONDS & D GEM MOUNTIN
Beschreibung der Täter
- Tally Backups - CRM Backups Wondr Diamonds is a lab-grown diamond and fine jewelry retailer operating in the United States and India. Gem Mount (D Gem Mount) is an Indian diamond jewellery manufa...
Herkunft
- wondrdiamonds.com
- Gruppe bei Ransomware.live
- von SecBoard erfasst: 10.10.2026 · Land laut Quelle
umbraManipal Academy of Higher EduIN
Beschreibung der Täter
[PSA] MAHE — India’s global private university excelling in Medicine, Engineering, Business, and Research with 28,000+ students from 57 nations. | Updated on 2026-10-08 | REVENUE: $250M | SIZE: 734.4GB
Herkunft
- Gruppe bei RansomLook
- Gruppe bei Ransomware.live
- von SecBoard erfasst: 08.10.2026 · Land aus dem Text abgeleitet
umbraIIT RoorkeeIN
Beschreibung der Täter
[PSA] IIT Roorkee — India’s oldest institute excelling in Engineering, Architecture, Computer Science, Water Resources, Energy, and Applied Sciences since 1847. | Updated on 2026-10-08 | REVENUE: $157M | SIZE: 3.7TB
Herkunft
- Gruppe bei RansomLook
- Gruppe bei Ransomware.live
- von SecBoard erfasst: 08.10.2026 · Land aus dem Text abgeleitet
eclipsesimplexengg.inIN
Beschreibung der Täter
[AI generated] N/A
Herkunft
- simplexengg.in
- Gruppe bei Ransomware.live
- Gruppe bei ThreatCluster
- von SecBoard erfasst: 08.10.2026 · Land aus der Domain abgeleitet
the gentlemenMajestic Holidays India Private LimitedIN
Beschreibung der Täter
ajesticindiaholidays.com datanyze.com/companies/majestic-holidays-india/347590614 Majestic Holidays India Private Limited is a micro-sized travel and transport operator based at 2N/72, B.P., NIT Faridabad, Haryana (Delhi NCR), incorporated on 26 March 2015 (CIN U74900HR2015PTC055011, ROC Haryana, GSTIN 06AAJCM6666Q1ZK, DPIIT-recognized startup). Registered activity is "travel agency and tour operators," but the business has pivoted to corporate/government vehicle rental — sedans, SUVs, vans, and buses with professional drivers — serving institutional clients including BPCL, the Regional Centre for Biotechnology (RCB), THSTI, and AJNIFM; in July 2026 it won THSTI's monthly cab-hiring tender (₹20 lakh value) as L1 bidder at ₹16.2 lakh, beating 14 competitors. The company is run by promoter-directors Priyanka Devi (since inception) and Harinder Yadav (since December 2019), a family that controls a small cluster
Herkunft
- ajesticindiaholidays.com
- Gruppe bei RansomLook
- Gruppe bei Ransomware.live
- von SecBoard erfasst: 06.10.2026 · Land aus dem Text abgeleitet
the gentlemenSmart ValueIN
Beschreibung der Täter
smartvalue.biz zoominfo.com/c/smart-value/408286294 Smart Value Limited is an Indian MLM (multi-level marketing) / network marketing company founded in 2003–2004 in New Delhi by Manoj Kumar Gupta, operating 100+ offices across India with a claimed 2,000,000+ distributors (IBAs). The company sells health supplements, personal care, household products, and educational courses — but revenue is not publicly disclosed (private MLM). Its core business model relies on recruiting new distributors rather than actual retail sales, with heavily inflated product pricing (200–500% above market) to fund multi-level commissions. The company faces serious and widespread allegations: consumer complaints about pyramid-like structure, inability to recover investments, fake income claims on social media, and reported law enforcement scrutiny in India. ~99% of participants lose money (standard MLM economics), while only top recruitment leaders profit. Despite 20+ years of operation and membership in Indian
Herkunft
- smartvalue.biz
- Gruppe bei RansomLook
- Gruppe bei Ransomware.live
- von SecBoard erfasst: 06.10.2026 · Land aus dem Text abgeleitet
the gentlemenGreenbrook EngineeringIN
Beschreibung der Täter
greenbrookengineering.com zoominfo.com/c/greenbrook-engineering/346757767 Greenbrook Engineering Services is a private, MBE-certified steel detailing and engineering firm founded in 2000, headquartered in Middlesex, New Jersey, with 5 offices in India (Bengaluru, Chennai, Nashik, Mysuru). It employs 350–756 people (mostly offshore in India) and generates estimated group revenue of $20–30M/year, with the India entity alone growing +22% YoY (₹25.3 crore FY2025). Over 25 years it has completed 3,000+ projects (Hollywood Burbank Airport, semiconductor fabs, Fiat Chrysler, military bases) with capacity of 50,000+ engineering hours per month. Core services: steel detailing, PE-stamped connection design, BIM coordination, and HVAC using Tekla/SDS2. It is the only steel detailing firm in the world with Great Place to Work certification and won Trimble's "Feature Company of the Month" (2025) and the NISD Detailing Edge Award (2026). Led by Chairman Mukul Mehta (Wharton PhD) and MD Vasan H.R.K.
Herkunft
- greenbrookengineering.com
- Gruppe bei RansomLook
- Gruppe bei Ransomware.live
- von SecBoard erfasst: 06.10.2026 · Land aus dem Text abgeleitet
eclipsepart02.simplexengg.inIN
Beschreibung der Täter
[AI generated] N/A
Herkunft
- part02.simplexengg.in
- Gruppe bei Ransomware.live
- von SecBoard erfasst: 06.10.2026 · Land aus der Domain abgeleitet
eclipsepart02.simplexengg.inIN
Beschreibung der Täter
[AI generated] N/A
Herkunft
- part02.simplexengg.in
- Gruppe bei Ransomware.live
- Gruppe bei ThreatCluster
- von SecBoard erfasst: 05.10.2026 · Land aus der Domain abgeleitet
krybitwww.raajratna.comIN
Beschreibung der Täter
Raajratna Metal Industries Limited (RMIL) is a leading Indian public limited company incorporated on May 9, 1988, headqu...
Herkunft
- raajratna.com
- Pfad auf der Leak-Seite: /blog/13c7043c26410b6568290e470887eac03d5639a5ff14afe5bf3b7cb0ba73b917/
- Gruppe bei RansomLook
- Gruppe bei Ransomware.live
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 02.10.2026 · Land aus dem Text abgeleitet
krybitsai.org.inIN
Beschreibung der Täter
Shree Saibaba Sansthan Trust (SSST) is India's one of the wealthiest and most prominent public charitable trusts, regist...
Herkunft
- sai.org.in
- Pfad auf der Leak-Seite: /blog/e943639855000990446eaa8983d11a769d2dc9b19378bb27776e26dc6740c1dd/
- Gruppe bei RansomLook
- Gruppe bei Ransomware.live
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 02.10.2026 · Land aus der Domain abgeleitet
doommageddonChem Process Systems Pvt. Ltd.IN
Beschreibung der Täter
upcoming | — | 0 files
Herkunft
- Pfad auf der Leak-Seite: /victim/chem-process-systems-pvt--ltd-
- Gruppe bei RansomLook
- Gruppe bei ThreatCluster
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 28.09.2026 · Land laut Quelle
audit teamAUDIT ENTITY: vit.ac.inINkein Firmenname im Eintrag
Beschreibung der Täter
AUDIT ID: 5DC9129A6EA7F384 / DISCOVERY DATE: 2026-09-13
Herkunft
- vit.ac.in
- Pfad auf der Leak-Seite: /entity/4AB39A256B7A31D5
- Gruppe bei RansomLook
- Gruppe bei ThreatCluster
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 22.09.2026 · Land aus der Domain abgeleitet
krybitacilnet.comIN
Beschreibung der Täter
Ahluwalia Contracts (India) Limited (ACIL) is one of India's largest civil construction and contracting companies, incor...
Herkunft
- acilnet.com
- Pfad auf der Leak-Seite: /blog/4f64bd4cbeb824f0996d4a452888a817f61920ab51cd08b9bc364e7eb1e91982/
- Gruppe bei RansomLook
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 20.09.2026 · Land aus dem Text abgeleitet
doommageddonINCOR GroupIN
Beschreibung der Täter
upcoming | — | 0 files
Herkunft
- incor.in
- Pfad auf der Leak-Seite: /victim/incor-group
- Gruppe bei RansomLook
- Gruppe bei ThreatCluster
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 13.09.2026 · Land aus der Domain abgeleitet
krybitcapricornlogistics.comIN
Beschreibung der Täter
Capricorn Logistics Pvt. Ltd. is an Indian comprehensive supply chain and logistics company founded in 2001 in Mumbai, M...
Herkunft
- capricornlogistics.com
- Pfad auf der Leak-Seite: /blog/f1e7412278c348e23c84729e5befb9a1e2b5edd1e58903452f5578e30513a010/
- Gruppe bei RansomLook
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 12.09.2026 · Land aus dem Text abgeleitet
krybitswadeshicipl.comIN
Beschreibung der Täter
Swadeshi Civil Infrastructure Private Limited (SCIPL) is an Indian private limited company incorporated on March 11, 200...
Herkunft
- swadeshicipl.com
- Pfad auf der Leak-Seite: /blog/96a2ed6c25bce767b64fb11ed2280fd936b35cae45c11f0053a1c8b3e8278271/
- Gruppe bei RansomLook
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 12.09.2026 · Land aus dem Text abgeleitet
emperadorNexbex Solutions Private LimitedIN
Beschreibung der Täter
Nexbex Solutions Private Limited is a technology consulting and software engineering firm incorporated in November 2023, headquartered in Malappuram, Kerala (India). Classified as an emerging private company, it operates with a paid-up capital of 10 million Indian rupees (₹10 Lakhs) and a compact team, generating estimated annual revenue of less than $1.2 million USD. Its core business focuses on computer programming, custom mobile application development (such as its corporate loyalty platforms Nexi Paints and Grace Petroleum), and digital solutions for retail automation, e-commerce, and smart lead management for growing small and medium-sized enterprises. We have access to all their databases with their clients' sensitive data, which include names, emails, phone numbers, addresses, etc. 600 MB. Domains: club7ms.com, rayssportsnetwork.com, hwzthat.com, etc. Subdomains Type staging, edmontoneagles, masc, psca, live, kkr, victoriapark, staging.victoriapark, spartans, blaze, ramblers, eagle admin.bookings-staging, backend.academy, admin.spike.booking, etc. We have the source code for all 200+ of their projects. 10 GB +. going up. Publication scheduled: 2026-09-22 13:15:18 UTC
Herkunft
- club7ms.com
- Pfad auf der Leak-Seite: /post/nexbex-solutions-private-limited/
- Gruppe bei RansomLook
- Gruppe bei ThreatCluster
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 12.09.2026 · Land aus dem Text abgeleitet
global secret groupCO-OP URBAN BANK LTDINfinanzen
Beschreibung der Täter
Country: India | Website: [Link entfernt] | Revenue: $50 Million | Industry: Bank, Finance | Employees: 25-50 | Properties: 41.3 GB (125,988 Files, 14,641 Folders)
Herkunft
- indialei.in
- Pfad auf der Leak-Seite: /project/mEMbPCoMYCBhYvwy/
- Gruppe bei RansomLook
- Gruppe bei ThreatCluster
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 10.09.2026 · Land von den Tätern angegeben
vexyi2k2 NetworksIN
Beschreibung der Täter
i2k2 Networks Pvt. Ltd., established in 1999, is a leading Indian provider of cloud computing, web hosting, managed IT, data center, backup, disaster recovery, and DevOps solutions. With 25+ years of experience, 4,000+ customers, Tier III-compliant data centers, and 24/7 support, i2k2 delivers secure, scalable, and reliable IT solutions worldwide.
Herkunft
- Gruppe bei RansomLook
- von SecBoard erfasst: 10.09.2026 · Land aus dem Text abgeleitet
emperadorUniversal Starch-Chem Allied LtdIN
Beschreibung der Täter
important documents Publication scheduled: 2026-09-19 11:13:14 UTC Size: 3.5 GB Sectors: Other
Herkunft
- universalstarch.com
- Pfad auf der Leak-Seite: /post/universal-starch-chem-allied-ltd/
- Gruppe bei RansomLook
- Gruppe bei ThreatCluster
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 09.09.2026 · Land laut Quelle
vexyUnited GroupIN
Beschreibung der Täter
United Group is a diversified Indian business group delivering innovative products and services across multiple industries. Founded in 2003, the company began as a food and beverage consultancy and has since expanded into food ingredients, nutraceuticals, industrial machinery, infrastructure, fashion, digital branding, packaging, and automotive accessories. With a strong focus on quality, innovation, and customer satisfaction, United Group operates through a network of specialized businesses, serving clients across India and international markets. Backed by certified manufacturing facilities and experienced professionals, the group is committed to providing reliable, sustainable, and value-driven solutions that support business growth and long-term success.
Herkunft
- Gruppe bei RansomLook
- von SecBoard erfasst: 07.09.2026 · Land aus dem Text abgeleitet
the gentlemenSoni Dwarkadas VirchandIN
Beschreibung der Täter
dwarkadasjewellers.com zoominfo.com/c/soni-dwarkadas-virchand/562586193 We have downloaded company's data: Confidential personal data and customer information, Financial Documents and Accounting, Business correspondence and legal documents, your databases, IT infrastructure information, Accesses and credentials, Technical documentation Soni Dwarkadas Virchand is a 110-year-old family jewellery house from Bhavnagar, Gujarat — founded in 1915 with a shop rented for just ₹7, carrying a freedom-fighter legacy (founder left the shop to join India's independence movement) and a dramatic heir story (a 16-year-old son with ₹22 saved the dynasty). Now in its 5th generation, it runs Bhavnagar's biggest jewellery mall (6,100 sq ft) plus a "House of Bangles" and tech-powered "Bridal Studio" with virtual try-on. Product scale: 25,000+ designs, signature collections (Bikaneri Treasure, Sara, Menaments), Trust moat: BIS hallmark, IGI/GIA certified diamonds,4.9/5 from 1,350+ Google reviews.
Herkunft
- dwarkadasjewellers.com
- Gruppe bei RansomLook
- von SecBoard erfasst: 07.09.2026 · Land aus dem Text abgeleitet
kazuPappyJoe: Healthcare Management SystemINhealthcare
Beschreibung der Täter
PappyJoe is an India-based healthcare technology company that provides a cloud-based practice management platform for clinics, hospitals, and healthcare professionals. The platform helps manage appointments, electronic medical records (EMR), billing, prescriptions, patient communication, and administrative tasks in one system. Price: $3 000 | Size: 413 GB | Records: 6 873 180 patients pii + 531 673 files | Dump date: 2026
Herkunft
- Gruppe bei RansomLook
- von SecBoard erfasst: 07.09.2026 · Land aus dem Text abgeleitet
eclipsepart1.simplexengg.inIN
Herkunft
- part1.simplexengg.in
- Gruppe bei ThreatCluster
- von SecBoard erfasst: 29.09.2026 · Land aus der Domain abgeleitet
krybitdmt-group.comIN
Beschreibung der Täter
DMT Consulting Private Limited is an Indian private limited company incorporated on September 25, 1998, formerly known a...
Herkunft
- dmt-group.com
- Pfad auf der Leak-Seite: /blog/f6d3a75e05df78f42ef573ea36c91f4ae27682d98a1f4b152b836772912be9cd/
- Gruppe bei RansomLook
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 06.09.2026 · Land aus dem Text abgeleitet
krybitvedantaainstitute.inINhealthcare
Beschreibung der Täter
Vedantaa Institute of Medical Sciences (VIMS) is a private Indian medical education institution and hospital operated un...
Herkunft
- vedantaainstitute.in
- Pfad auf der Leak-Seite: /blog/a6192b6dd1341e11255961b0434a7f6b3ecbe1ca982dc4d8cb8035c2bbc8978e/
- Gruppe bei RansomLook
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 06.09.2026 · Land aus der Domain abgeleitet
krybitsouthsign.inIN
Beschreibung der Täter
Southsign Technologies is an Indian proprietor firm established in 2021, headquartered in Dindigul, Tamil Nadu, India, o...
Herkunft
- southsign.in
- Pfad auf der Leak-Seite: /blog/345b9d9a8ff8d46121bcb22a787654becef59c35fa7f13e5489693a22437268d/
- Gruppe bei RansomLook
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 06.09.2026 · Land aus der Domain abgeleitet
global secret groupR L Fine Chem Pvt. Ltd.IN
Beschreibung der Täter
Country: BANGALORE, Karnataka, India | Website: rlfinechem.com | Revenue: $54.3 Million | Industry: Pharmaceutical Manufacturing | Employees: 500-1000 | Properties: 18.6 GB (14,155 Files, 2,840 Folders)
Herkunft
- rlfinechem.com
- Pfad auf der Leak-Seite: /project/b6CUZMNZV4BJUiGi/
- Gruppe bei RansomLook
- Gruppe bei ThreatCluster
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 06.09.2026 · Land aus dem Text abgeleitet
dysphor1aThe University of Delhi (DU)IN
Beschreibung der Täter
Sector: Education Sector | Country: 🇮🇳 India | Records: Student records with PII, academic data, and identification documents | The University of Delhi (DU) is a major public university in New Delhi, India, founded in 1922. It is one of India's most well-known universities, offering undergraduate, postgraduate, and doctoral programs across subjects like science, arts, commerce, law, and technology. | For Sale
Herkunft
- Gruppe bei RansomLook
- von SecBoard erfasst: 06.09.2026 · Land von den Tätern angegeben
the gentlemenG R InfraprojectsIN
Beschreibung der Täter
grinfra.com zoominfo.com/c/g-r-infraprojects-ltd/353612422 We have taken NDA files, HR data, user data, employee data, technical drawings, models, bank statements, tax and legal documents, confidential files, photographs of work, screenshots, passport scans, VIP client data, and much more the total volume of data exceeds 531 GB. Grinfra G R Infraprojects Ltd is an Indian integrated infrastructure EPC company founded in 1995, headquartered in Udaipur and Gurugram. It builds roads, highways, bridges, metros, railways, tunnels, ropeways and power transmission lines across 23+ Indian states, with a 10,000-strong workforce and an order book of roughly ₹19,000+ crore ($2.3 bn). Projects are delivered under EPC, BOT, HAM and BOOT models, backed by in-house manufacturing (bitumen, paints, metal crash barriers) and ~7,500 equipment units. Listed on BSE/NSE since July 2021 (ticker GRINFRA), rated CRISIL AA / CARE AA+ (stable).
Herkunft
- grinfra.com
- Gruppe bei RansomLook
- von SecBoard erfasst: 06.09.2026 · Land aus dem Text abgeleitet
krybitjindallifescience.comIN
Beschreibung der Täter
Jindal Life Science Private Limited is an Indian full-service Contract Research Organization (CRO) established in 2023, ...
Herkunft
- jindallifescience.com
- Pfad auf der Leak-Seite: /blog/79296199a4f112d4be2996b7f1f7288fa0a02db21fd752c9ccc203e7c6bd4162/
- Gruppe bei RansomLook
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 06.09.2026 · Land aus dem Text abgeleitet
krybitfinodayacapital.comINfinanzen
Beschreibung der Täter
Finodaya Capital Private Limited is an Indian tech-enabled Non-Banking Financial Company (NBFC) incorporated on Septembe...
Herkunft
- finodayacapital.com
- Pfad auf der Leak-Seite: /blog/73eda7275091c9d7610892dec8a950cc2d802ecfdcea60159ccd3626670d9cca/
- Gruppe bei RansomLook
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 06.09.2026 · Land aus dem Text abgeleitet
krybitkarkinos.inIN
Beschreibung der Täter
Karkinos Healthcare Private Limited is an Indian comprehensive cancer care platform and healthcare technology company fo...
Herkunft
- karkinos.in
- Pfad auf der Leak-Seite: /blog/39d9ff3077a7e81c796802af473ee7c13e6d3bf1a34349b9a13471f4b47fc9db/
- Gruppe bei RansomLook
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 06.09.2026 · Land aus der Domain abgeleitet
eclipseSimplex EngineeringIN
Beschreibung der Täter
Simplex Engineering & Foundry Works Pvt. Ltd. specializes in the design, fabrication, machining, and assembly of industrial equipment and components. With over seventy years of experience, the company has successfully completed numerous turnkey projects for both private and public sector organizations. Additionally, Simplex offers refurbishment services for industrial equipment and steel procurement through its Steel Service Center. Their esteemed clientele includes some of the largest engineering companies in India.
Herkunft
- Pfad auf der Leak-Seite: /place/4y0eajbl7t5uvwui/
- Gruppe bei RansomLook
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 06.09.2026 · Land aus dem Text abgeleitet
qilinGindre IndiaIN
Beschreibung der Täter
Manufacturing
Herkunft
- Pfad auf der Leak-Seite: /site/blog?uuid=a4a0d54e-27c5-45ec-a3aa-39184e012167
- Gruppe bei RansomLook
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 06.09.2026 · Land aus dem Text abgeleitet
the gentlemenAGS CinemasIN
Beschreibung der Täter
agscinemas.com zoominfo.com/c/ags-cinemas-private-ltd/356074293 AGS Cinemas is a prominent multiplex chain and film exhibition company based in Chennai, India, operating under the AGS Entertainment brand. The theaters feature state-of-the-art technical facilities, including Dolby Atmos sound systems and 4K projection for a premium viewing experience. Their official platform allows customers to easily book tickets online and pre-order a wide variety of food and beverages for their visit.
Herkunft
- agscinemas.com
- Gruppe bei RansomLook
- von SecBoard erfasst: 06.09.2026 · Land aus dem Text abgeleitet
clopJPMGROUP.CO.ININ
Beschreibung der Täter
Data exfiltrated included the following: Database, Project - files Total size: 75,4Gb Revenue: $400,000,000
Herkunft
- jpmgroup.co.in
- Gruppe bei RansomLook
- von SecBoard erfasst: 06.09.2026 · Land aus der Domain abgeleitet
clopQCPL.ININ
Beschreibung der Täter
Data exfiltrated included the following: Database, Project Total size: 501Gb Revenue: $5,000,000
Herkunft
- qcpl.in
- Gruppe bei RansomLook
- von SecBoard erfasst: 06.09.2026 · Land aus der Domain abgeleitet
krybitlabindia.comIN
Beschreibung der Täter
Labindia Instruments Pvt. Ltd. is an Indian private limited company founded in 1982 by a group of visionary technocrats ...
Herkunft
- labindia.com
- Pfad auf der Leak-Seite: /blog/459776472b220d683a312e1fa3dc5166c3827df67d9f6b829d500ec04e52e15f/
- Gruppe bei RansomLook
- Screenshot der Veröffentlichung
- von SecBoard erfasst: 06.09.2026 · Land aus dem Text abgeleitet
Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.
Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.