SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

Neueste Einträge

Filter zurücksetzen
qilinSalaunoMX

Beschreibung der Täter

N/A

Herkunft

lockbit5grupoabg.comMX

Beschreibung der Täter

Grupo ABG specializes in providing comprehensive solutions for organizations, focusing on business p...

Herkunft

0x00bienestarempresarialMX

Beschreibung der Täter

bienestarempresarial.mx

Herkunft

qilinComisión Municipal de Agua Potable y Alcantarillado de VictoriaMX
energie

Beschreibung der Täter

Business Services

Herkunft

arcus mediaLadrillera MecanizadaMX

Herkunft

qilinMCM TelecomMX
telekommunikation

Beschreibung der Täter

Business Services

Herkunft

the gentlemenPIR SalesMX

Beschreibung der Täter

pirsales.com zoominfo.com/c/pir-sales-inc/84001098 PIR Sales, Inc. is a private, independent manufacturers' representative firm founded in 1992 in Chandler, Arizona, serving plumbing, irrigation, waterworks, fire/life safety, and HVAC markets across Arizona, Southern Nevada, New Mexico, and El Paso TX. It generates estimated annual revenue of $20–23M with only ~17–19 employees (9 outside + 8 inside sales) — an exceptional ~$1.2–1.35M revenue per employee. The firm represents 40+ premium brands including A.O. Smith, Watts Water Technologies, Bradley Corp., Panasonic HVAC, Stiebel Eltron, and Highland Tank, backed by 25+ year manufacturer relationships and a 27,000 sq ft warehouse offering 24/7 commercial water heater pickup. It serves 20 distribution channels (architects, engineers, contractors, municipalities, utilities) and employs dedicated Specification Consultants for architects in both Arizona and Las Vegas. Led by President Bob Saylor (29 years at PIR) and VP Craig Addington

Herkunft

lamashtuGrupo Industrial TauroMX

Beschreibung der Täter

is a Mexican steel-products manufacturer based in Monterrey (Nuevo León): perimeter protection and mesh (brands Euroreja®, Reja Tauro®, Tauro®, Serpentina®), high-security/anti-glare mesh, razor coil, industrial railings and bollards;

Herkunft

lamashtuGrupo Industrial TauroMX

Beschreibung der Täter

is a Mexican steel-products manufacturer based in Monterrey (Nuevo León): perimeter protection and mesh (brands Euroreja®, Reja Tauro®, Tauro®, Serpentina®), high-security/anti-glare mesh, razor coil, industrial railings and bollards;

Herkunft

akiraThe Official Collegeof Architects of León (COAL)MX

Beschreibung der Täter

The Official College of Architects of León (COAL) was established on July 12, 1931, encompassi ng the regions of León, Asturias, and Galicia. The College of Galicia was legally separated in 1973 and the College of Asturias in 1981. Here is the access to 77gb of corporate data. Detailed personal information (passports), finan cials, students and clients information and so on. Click the download button. You will find several password-free archives. Click on any of them to start the download.

Herkunft

akiraThe Official College of Architects of León (COAL)MX

Beschreibung der Täter

The Official College of Architects of León (COAL) was established on July 12, 1931, encompassing the regions of León, Asturias, and Galicia. The College of Galicia was legally separated in 1973 and the College of Asturias in 1981.We will upload 77gb of corporate data soon. Detailed personal information (passports), financials, students and clients information and so on.

Herkunft

akiraThe Official College of Architects of León (COAL)MX

Beschreibung der Täter

The Official College of Architects of León (COAL) was established on July 12, 1931, encompassin g the regions of León, Asturias, and Galicia. The College of Galicia was legally separated in 1 973 and the College of Asturias in 1981. We will upload 77gb of corporate data soon. Detailed personal information (passports), financia ls, students and clients information and so on.

Herkunft

lamashtuVinco EnergyMX
energie

Beschreibung der Täter

vincoenergy.com - Vinco Energy Services is a Mexican oilfield services company providing engineering and operational solutions for the oil and gas sector. The company specializes in services like wireline logging, telemetry.

Herkunft

safepayauromex.comMX

Beschreibung der Täter

The company is headquartered in Samut Prakan Province and has more than five decades of experience in the surface-finishing industry. …

Herkunft

qilinXICOMX

Beschreibung der Täter

Building Materials

Herkunft

the gentlemenMagnetos y RefaccionesMX

Beschreibung der Täter

magnetos.com.mx zoominfo.com/c/magnetos-y-refacciones-sa-de-cv/1288761434 Magnetos y Refacciones, S.A. de C.V. is a Mexican trading and service company founded in 1977 and headquartered in Guadalajara, Jalisco. Its core business is supplying magnet wire, bearings, insulating varnishes, electric motors, and spare parts for motor repair — wholesale and retail, serving customers across all 32 Mexican states. Its second key business is a nationwide network of authorized service centers performing warranty and post-warranty repair for Groupe SEB brands (Krups, T-Fal, Rowenta, Moulinex) and Taurus in 8–10 Mexican cities. The company employs around 129 people and is part of a small group operated by Corporación Rodaja. It also exports to Central America (mainly El Salvador), with about US$4.2 million in shipments over the last five years. Despite nearly 50 years on the market, it has virtually no digital presence — its website is an empty placeholder.

Herkunft

qilinGrupo JusteMX

Beschreibung der Täter

Manufacturing

Herkunft

safepaylaconcepcion.com.mxMX

Beschreibung der Täter

The organization identifies itself as one of the principal private healthcare providers in the region and serves patients from Coahuila …

Herkunft

the gentlemenAurora TechnologiesMX

Beschreibung der Täter

ati-1.com zoominfo.com/c/aurora-technologies-inc/1151986102 Aurora Technologies / ATI orth America's largest fabricator and stocking distributor of thermosets, thermoplastics and other non-metallic materials — founded in 1988 by Tom C. White in a barn in Ballwin, Missouri, now run with his son Thomas White III, with ~200 employees, ~$24M revenue, 7 locations across the US and Mexico (Pacific MO HQ, Spartanburg SC, Grand Haven MI, El Paso TX, Apodaca Mexico) and 300,000+ sq ft of manufacturing/warehouse space. Capabilities: compression molding (SMC/BMC — 16 presses at its Polyply division), CNC machining of engineering plastics (30% glass-filled PEEK down to UHMW), thermoforming, waterjet and punch-press work — with an inventory moat that means days, not weeks, of lead time. Markets: electrical (a certified manufacturer of insulating components for arc furnaces — a rare, high-barrier niche), oil & gas, medical/lab, materials handling; ISO 9001 since 2003

Herkunft

the gentlemenIndicMX

Beschreibung der Täter

indicelectronics.com zoominfo.com/c/indic/353907783 INDiC Electronic Solutions Houston-based manufacturer's rep firm founded in 2001 by Jim Nussrallah, covering 6 industrial states — Texas, Louisiana, Arkansas, Oklahoma, New Mexico and West Tennessee. It represents 70+ non-competing manufacturers of industrial electronics: power supplies, sensors, industrial PCs/HMIs, enclosures, thermal management, test equipment, relays and connectors — selling to OEMs, machine builders and system integrators.

Herkunft

krybitwww.tender.mxMX

Beschreibung der Täter

Tender (Carnicería Tender) is a Mexican premium butcher shop chain (carnicería) founded under the original brand Vigar...

Herkunft

inc ransomTruckaMX
transport

Herkunft

krybittum.com.mxMX

Beschreibung der Täter

TUM Transportistas Unidos Mexicanos División Norte, S.A. de C.V. is the largest trucking company in Mexico, founded in ...

Herkunft

the gentlemenNutrypolloMX

Beschreibung der Täter

nutrypollo.com.mx zoominfo.com/c/nutrypollo/427100153 Nutrypollo / Agroindustrias Quesada, S. de R.L. de C.V. is a Mexican family-owned poultry company (4th generation) based in Aguascalientes; it began as Bernardo Quesada de Alba's egg-laying farm in 1950 and entered broiler production in 1963 under founder Jorge Quesada Morán. It is fully vertically integrated — genetics and hatching, feed milling, grow-out farms, slaughter and processing (12,000 birds/hour, up to 80,000 birds/day, ~60 million birds a year) and distribution across 30+ Mexican states. Brands include fresh chicken under Nutrypollo, the marinated Nutryfácil and Premium lines, and, since November 2023, its own NutryTienda retail concept. Certified TIF (SENASICA) and international Halal (FSSC 22000 in progress), it built a state-of-the-art plant with Marel/Stork lines in 2012–2015 — Mexico's first Marel demonstration site; the Quesada family still runs the business (CEO Cesar Quesada, Marketing Directo

Herkunft

the gentlemenServicios Aereos EstrellaMX

Beschreibung der Täter

sae.com.mx zoominfo.com/c/servicios-aéreos-estrella-s-a/457170292 Servicios Aéreos Estrella, S.A. de C.V. (SAE) is a Mexican business-aviation company and pioneer of executive aviation in Mexico with 30+ years of experience, based at Toluca International Airport — the main private-aviation gateway to Mexico City. It claims to be Latin America's largest FBO, with 12,000 m² of apron, 10,000 m² of hangar storage, four VIP lounges, a café/bar, VIP ground transport and an office next to immigration. Services include private jet charter and rental (from piston aircraft to long-range jets, plus discounted "Empty Legs"), aircraft management and administration, full handling/dispatch (permits, catering, documents, flight closures), aircraft storage and pet-friendly flights, operating 24/7 year-round.

Herkunft

qilinQuaker State MexicoMX

Beschreibung der Täter

Chemicals & Related Products

Herkunft

space bearsSEARS (Grupo Sanborns)MX

Beschreibung der Täter

SEARS (Grupo Sanborns, S.A. de C.V.) is a leading Mexican retail company and a key subsidiary of Grupo Carso, owned by the Slim family.Founded in 1903 by the Sanborn brothers, the company has grown into one of the country’s most iconic and successful retail groups.It owns and operates two of Mexico’s most famous brands: Sears (mid-range department stores) and Sanborns (the signature “store + restaurant/cafe” format).Today, Grupo Sanborns manages more than 41,000 employees and hundreds of stores nationwide, with a strong focus on e-commerce and digital transformation.Website: www.sears.com.mx and www.sanborns.com.mx.AttentionDemo files will appear here in the coming days, ahead of the full-scale release. [Link entfernt]

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.