[ For GroupLink (TOR), you need to change BAWANG with ONION, example: https://tegbmnhkbpqz637f2yd.bawang >> https://tegbmnhkbpqz637f2yd.onion ]
| Country | Discovered | Published | Group Name | Victim | Source | Description |
|---|---|---|---|---|---|---|
| US | 2026-10-22 | 2026-10-22 | N0N Google | Research | PERFORMANCE FORD INC About Victim | Screenshot GroupLink | automotive retail · United States | Network security configuration of an automotive retailer; Private network tunnel definitions between locations; Internal network maps and device inventory | [NOT PAID — EXPOSED] |
| 2026-10-22 | 2026-10-22 | N0N Google | Research | COMPANY #109 About Victim | Screenshot GroupLink | plumbing and kitchen products distribution · Cincinnati, Ohio, United States | [PENDING EXPOSURE] | |
| 2026-10-22 | 2026-10-22 | N0N Google | Research | COMPANY #108 About Victim | Screenshot GroupLink | media production (audio description and accessibility media) · Montreal, Quebec, Canada | [PENDING EXPOSURE] | |
| BG | 2026-10-22 | 2026-10-22 | N0N Google | Research | COMPANY #107 About Victim | Screenshot GroupLink | fuel trading and construction materials · Bulgaria | [PENDING EXPOSURE] |
| 2026-10-22 | 2026-10-22 | N0N Google | Research | COMPANY #106 About Victim | Screenshot GroupLink | Financial Advisory & Restructuring (US) · Chicago, Illinois, USA | [PENDING EXPOSURE] | |
| 2026-10-22 | 2026-10-22 | N0N Google | Research | COMPANY #105 About Victim | Screenshot GroupLink | diamond and lab grown diamond trading · New York, New York, United States | [PENDING EXPOSURE] | |
| 2026-10-22 | 2026-10-22 | N0N Google | Research | COMPANY #104 About Victim | Screenshot GroupLink | Legal Services - Family Law (US) · California, USA | [PENDING EXPOSURE] | |
| US | 2026-10-21 | 2026-10-21 | N0N Google | Research | HERITAGE SENIOR LIVING About Victim | Screenshot GroupLink | healthcare support services · United States | Network security configuration of a healthcare support provider; Internal network segmentation maps; Remote access account structures | [NOT PAID — EXPOSED] |
| KR | 2026-10-21 | 2026-10-21 | N0N Google | Research | HANJIN INFORMATION SYSTEMS & TELECOMMUNICATION CO., LTD. About Victim | Screenshot GroupLink | IT services · South Korea | A complete corporate identity directory of an IT services company, 999 personnel accounts with names and corporate email addresses; The client staffing structure showing which personnel are seconded to major client organizations; Third party vendor accounts and their corporate domains | [NOT PAID — EXPOSED] |
| PT | 2026-10-21 | 2026-10-21 | N0N Google | Research | COMPANY #103 About Victim | Screenshot GroupLink | engineering design and installations · Portugal | [PENDING EXPOSURE] |
| 2026-10-21 | 2026-10-21 | N0N Google | Research | COMPANY #102 About Victim | Screenshot GroupLink | network and IT services · New York, United States | [PENDING EXPOSURE] | |
| 2026-10-21 | 2026-10-21 | N0N Google | Research | COMPANY #101 About Victim | Screenshot GroupLink | wholesale distribution · Dallas, Texas, United States | [PENDING EXPOSURE] | |
| 2026-10-21 | 2026-10-21 | N0N Google | Research | COMPANY #100 About Victim | Screenshot GroupLink | rheumatology medical practice · Riverside, California, United States | [PENDING EXPOSURE] | |
| 2026-10-21 | 2026-10-21 | N0N Google | Research | COMPANY #99 About Victim | Screenshot GroupLink | health insurance administration · Guayaquil, Ecuador | [PENDING EXPOSURE] | |
| US | 2026-10-21 | 2026-10-21 | N0N Google | Research | THEHOMEMAG NORCAL About Victim | Screenshot GroupLink | home services advertising · US | Internal network configuration and access credentials of a US home-services advertising franchise; Staff contact and infrastructure records | [NOT PAID — EXPOSED] |
| US | 2026-10-21 | 2026-10-21 | N0N Google | Research | XYLANPICKS About Victim | Screenshot GroupLink | online sports betting analytics · United States | The complete database of a sports betting analysis platform, including 108,781 historical game results; Every model-generated betting pick with model probabilities and outcomes; Live paid API keys for sports data providers | [NOT PAID — EXPOSED] |
| US | 2026-10-20 | 2026-10-20 | N0N Google | Research | 51RIDGE (NEWARK NJ HOSTING/IT) About Victim | Screenshot GroupLink | IT services · USA | Complete network configuration and topology of a US IT services company; Internal infrastructure details including site-to-site VPN architecture | [NOT PAID — EXPOSED] |
| ET | 2026-10-20 | 2026-10-20 | N0N Google | Research | COMPANY #98 About Victim | Screenshot GroupLink | Environmental NGO · Ethiopia | [PENDING EXPOSURE] |
| TN | 2026-10-20 | 2026-10-20 | N0N Google | Research | COMPANY #97 About Victim | Screenshot GroupLink | textile manufacturing · Tunisia | [PENDING EXPOSURE] |
| TT | 2026-10-20 | 2026-10-20 | N0N Google | Research | COMPANY #96 About Victim | Screenshot GroupLink | medical laboratory and diagnostics · Trinidad and Tobago | [PENDING EXPOSURE] |
| CH | 2026-10-20 | 2026-10-20 | N0N Google | Research | COMPANY #95 About Victim | Screenshot GroupLink | solar energy company · Switzerland | [PENDING EXPOSURE] |
| US | 2026-10-19 | 2026-10-19 | N0N Google | Research | VORMITTAG ASSOCIATES INC About Victim | Screenshot GroupLink | ERP software and hosting company · USA | Internal network configurations and security credentials of an ERP hosting company; Administrator and remote access credentials; Network topology of corporate and hosted client environments | [NOT PAID — EXPOSED] |
| US | 2026-10-19 | 2026-10-19 | N0N Google | Research | FROGGYS FOG About Victim | Screenshot GroupLink | special-effects fog fluid manufacturer and distributor (order management and shipping operations) · Tennessee, USA | The complete shipping and order management database of a specialty fluid manufacturer, including full nightly backup copies from January 2026 to present; Employee account directory for the company domain; Shipping software and remote access configuration for their warehouse servers | [NOT PAID — EXPOSED] |
| US | 2026-10-19 | 2026-10-19 | N0N Google | Research | HOTEL DUPONT About Victim | Screenshot GroupLink | hospitality · United States | Network and phone system configurations for a hospitality property, including access credentials; Complete phone fleet and voice equipment inventory | [NOT PAID — EXPOSED] |
| US | 2026-10-19 | 2026-10-19 | N0N Google | Research | KINGWOOD ENDOSCOPY About Victim | Screenshot GroupLink | Healthcare - Ambulatory Surgery Center (US) · Texas, US | The complete network configuration of an outpatient endoscopy surgery center: every account, password and access path; Proof of total control of the center's records, camera and remote-access systems; The center's full device and systems map | [NOT PAID — EXPOSED] |
| US | 2026-10-19 | 2026-10-19 | N0N Google | Research | THE AKEELI GROUP About Victim | Screenshot GroupLink | investigations and due diligence · USA | Client investigation reports on named individuals, with dates of birth, aliases, phone numbers and addresses; Comprehensive background reports on investigation subjects, including criminal, license and relative history | [NOT PAID — EXPOSED] |
| US | 2026-10-19 | 2026-10-19 | N0N Google | Research | COMPANY #94 About Victim | Screenshot GroupLink | automotive retail · United States | [PENDING EXPOSURE] |
| US | 2026-10-19 | 2026-10-19 | N0N Google | Research | FINZLY CORP About Victim | Screenshot GroupLink | fintech payments · US | Network configuration and access secrets for payment infrastructure; Cloud environment topology and access keys | [NOT PAID — EXPOSED] |
| US | 2026-10-19 | 2026-10-19 | N0N Google | Research | COMPANY #93 About Victim | Screenshot GroupLink | healthcare support services · United States | [PENDING EXPOSURE] |
| US | 2026-10-18 | 2026-10-18 | N0N Google | Research | AMAGI MEDIA LABS About Victim | Screenshot GroupLink | media technology / broadcast playout · United States | Network and device configuration files from a US broadcast playout site; Internal network maps of the site | [NOT PAID — EXPOSED] |
| KR | 2026-10-18 | 2026-10-18 | N0N Google | Research | COMPANY #92 About Victim | Screenshot GroupLink | IT services · South Korea | [PENDING EXPOSURE] |
| EG | 2026-10-18 | 2026-10-18 | N0N Google | Research | TELECOM EGYPT About Victim | Screenshot GroupLink | computer training academy · Egypt | Course materials and programming projects; Exam preparation materials; Student account folders and work; A complete copy of the course database | [NOT PAID — EXPOSED] |
| 2026-10-18 | 2026-10-18 | N0N Google | Research | ALL BUSINESS TECHNOLOGIES (FOX HILL BOOKKEEPING AND TAX PRACTICE) About Victim | Screenshot GroupLink | Accounting & Tax Preparation (US) · Massachusetts, USA | Books and tax records of a Massachusetts bookkeeping and tax practice: live accounting company files of more than 60 client companies with all accounting backups 2014 through 2026; Per-client tax return data for tax years 2015 through 2025 and the practice billing database; Accounts receivable ledgers, client lists and scanned client legal documents: deeds, trust certifications and IRS powers of attorney | [NOT PAID — EXPOSED] | |
| US | 2026-10-18 | 2026-10-18 | N0N Google | Research | SMIC US COMPANY (SUNNYVALE, CA — US ARM OF SEMICONDUCTOR MANUFACTURING INTERNATIONAL CORPO... About Victim | Screenshot GroupLink | Semiconductor manufacturing · California, USA | Corporate business records and working files from the company's file servers; Employee and payroll related records; Financial and accounting documents | [NOT PAID — EXPOSED] |
| US | 2026-10-18 | 2026-10-18 | N0N Google | Research | COMPANY #91 About Victim | Screenshot GroupLink | home services advertising · US | [PENDING EXPOSURE] |
| US | 2026-10-18 | 2026-10-18 | N0N Google | Research | COMPANY #90 About Victim | Screenshot GroupLink | biotech manufacturing · US | [PENDING EXPOSURE] |
| US | 2026-10-18 | 2026-10-18 | N0N Google | Research | COMPANY #89 About Victim | Screenshot GroupLink | online sports betting analytics · United States | [PENDING EXPOSURE] |
| NL | 2026-10-18 | 2026-10-18 | N0N Google | Research | SOLID TRADING B.V. About Victim | Screenshot GroupLink | FX liquidity and trading technology · Netherlands | Live client trading records: order and execution data for the banks and institutions trading through this firm, with amounts and account identifiers; The client database: companies, platform users with password hashes, credit limits, clearing paths and fee schedules; FIX venue session configurations, including login credentials for liquidity providers; Trade history and bank matching audit records | [NOT PAID — EXPOSED] |
| US | 2026-10-18 | 2026-10-18 | N0N Google | Research | ECO USA About Victim | Screenshot GroupLink | manufacturing · USA | 217,186 production and check records from the plant production system; 33 company and partner accounts with plain text passwords; vendor and item master data with part numbers; bill of materials and production statistics | [NOT PAID — EXPOSED] |
| 2026-10-18 | 2026-10-18 | N0N Google | Research | SQA SERVICES INC About Victim | Screenshot GroupLink | software quality assurance (Wolters Kluwer/CCH Axcess test lab) · California, USA | VPN access credentials for all 64 employee accounts; Domain controller configuration: group policies, DNS zones, network maps; Client software test environment configuration, including stored service credentials | [NOT PAID — EXPOSED] | |
| US | 2026-10-17 | 2026-10-17 | N0N Google | Research | COMPANY #88 About Victim | Screenshot GroupLink | home healthcare services · United States | [PENDING EXPOSURE] |
| US | 2026-10-17 | 2026-10-17 | N0N Google | Research | COMPANY #86 About Victim | Screenshot GroupLink | real estate and land development · United States | [PENDING EXPOSURE] |
| US | 2026-10-17 | 2026-10-17 | N0N Google | Research | COMPANY #85 About Victim | Screenshot GroupLink | IT services · USA | [PENDING EXPOSURE] |
| US | 2026-10-17 | 2026-10-17 | N0N Google | Research | COMPANY #84 About Victim | Screenshot GroupLink | construction (custom homes) · USA | [PENDING EXPOSURE] |
| BR | 2026-10-16 | 2026-10-16 | N0N Google | Research | PRAFESTA IND. E COM. DE EMBALAGENS LTDA About Victim | Screenshot GroupLink | packaging manufacturing (extrusion) · Brazil | Senior Sapiens ERP and Vetorh HR payroll platform; eSocial government payroll filings September and October 2026; Thousands of electronic invoices with customer and supplier data; Worker and partner CPF identification numbers; Bank integration certificates and financial records | [NOT PAID — EXPOSED] |
| 2026-10-16 | 2026-10-16 | N0N Google | Research | COMPANY #80 About Victim | Screenshot GroupLink | managed IT services · Texas, USA | [PENDING EXPOSURE] | |
| US | 2026-10-16 | 2026-10-16 | N0N Google | Research | COMPANY #79 About Victim | Screenshot GroupLink | hospitality · United States | [PENDING EXPOSURE] |
| 2026-10-16 | 2026-10-16 | N0N Google | Research | COMPANY #78 About Victim | Screenshot GroupLink | Healthcare - Ambulatory Surgery Center (US) · Texas, US | [PENDING EXPOSURE] | |
| US | 2026-10-16 | 2026-10-16 | N0N Google | Research | COMPANY #77 About Victim | Screenshot GroupLink | investigations and due diligence · USA | [PENDING EXPOSURE] |
| US | 2026-10-16 | 2026-10-16 | N0N Google | Research | COMPANY #76 About Victim | Screenshot GroupLink | fintech payments · US | [PENDING EXPOSURE] |
| 2026-10-16 | 2026-10-16 | N0N Google | Research | COMPANY #72 About Victim | Screenshot GroupLink | Software / fundraising services · California, USA | [PENDING EXPOSURE] | |
| US | 2026-10-16 | 2026-10-16 | N0N Google | Research | COMPANY #71 About Victim | Screenshot GroupLink | manufacturing · USA | [PENDING EXPOSURE] |
| US | 2026-10-16 | 2026-10-16 | N0N Google | Research | COMPANY #82 About Victim | Screenshot GroupLink | hospitality · United States | [PENDING EXPOSURE] |
| 2026-10-16 | 2026-10-16 | N0N Google | Research | COMPANY #81 About Victim | Screenshot GroupLink | Healthcare - Ambulatory Surgery Center (US) · Texas, US | [PENDING EXPOSURE] | |
| 2026-10-16 | 2026-10-16 | N0N Google | Research | COMPANY #83 About Victim | Screenshot GroupLink | managed IT services · Texas, USA | [PENDING EXPOSURE] | |
| 2026-10-16 | 2026-10-16 | N0N Google | Research | XINOS CONSTRUCTION CORP AND ITS ACCOUNTING GROUP About Victim | Screenshot GroupLink | construction and accounting (US) · New York, USA | Employee W-2 forms with Social Security numbers and quarterly payroll tax filings of a New York construction group; 2024 partnership tax returns with schedules K-1 and the QuickBooks Enterprise archive; Court, lawsuit and city hearing records, and the complete 2024 New York State sales tax audit file; Client financial records and employee personal files | [NOT PAID — EXPOSED] | |
| US | 2026-10-16 | 2026-10-16 | N0N Google | Research | BLADETECH INC About Victim | Screenshot GroupLink | dental laboratory (CAD/CAM manufacturing) · Missouri, USA | Patient case designs of a dental laboratory with full patient names, tooth numbers and material/shade codes; CNC milling toolpaths and MillBox production job files for crowns, bridges and templates, September to October 2026 production; The complete 4.4 GB production archive of the lab | [NOT PAID — EXPOSED] |
| 2026-10-16 | 2026-10-16 | N0N Google | Research | ENVISION EYE CARE About Victim | Screenshot GroupLink | Healthcare - Ophthalmology (US) · Mississippi, USA | Patient records of a Mississippi ophthalmology practice: 13,308 patient records with names and dates of birth, taken from the patient database backup of December 2025; The complete patient database backup history of the practice, 2018 through 2025; Patient eye examination records with full ocular, medical and social history; The OCT eye scan archive of the practice | [NOT PAID — EXPOSED] | |
| US | 2026-10-16 | 2026-10-16 | N0N Google | Research | COMPANY #75 About Victim | Screenshot GroupLink | fintech payments · US | [PENDING EXPOSURE] |
| US | 2026-10-16 | 2026-10-16 | N0N Google | Research | COMPANY #74 About Victim | Screenshot GroupLink | media technology / broadcast playout · United States | [PENDING EXPOSURE] |
| 2026-10-16 | 2026-10-16 | N0N Google | Research | EVOLUTION SPINE / ALL LABS About Victim | Screenshot GroupLink | Medical device manufacturing (US) · Texas, USA | FDA quality system records of a Texas spinal implant manufacturer: CAPAs, device history records for implant lots, management reviews, design drawings and audit files; The complete inventory database of the business, 317 tables, with hospital and surgical-center customers, purchase orders and implant lot shipping records; Finance records: purchase orders, tax forms and payroll timesheets; Hospital product packets for spinal fusion systems and staff mailbox exports | [NOT PAID — EXPOSED] | |
| EG | 2026-10-15 | 2026-10-15 | N0N Google | Research | COMPANY #70 About Victim | Screenshot GroupLink | computer training academy · Egypt | [PENDING EXPOSURE] |
| 2026-10-15 | 2026-10-15 | N0N Google | Research | COMPANY #73 About Victim | Screenshot GroupLink | Semiconductor manufacturing · California, USA | [PENDING EXPOSURE] | |
| 2026-10-15 | 2026-10-15 | N0N Google | Research | COMPANY #69 About Victim | Screenshot GroupLink | Software / fundraising services · California, USA | [PENDING EXPOSURE] | |
| US | 2026-10-15 | 2026-10-15 | N0N Google | Research | COMPANY #68 About Victim | Screenshot GroupLink | manufacturing · USA | [PENDING EXPOSURE] |
| NL | 2026-10-15 | 2026-10-15 | N0N Google | Research | COMPANY #67 About Victim | Screenshot GroupLink | FX liquidity and trading technology · Netherlands | [PENDING EXPOSURE] |
| 2026-10-15 | 2026-10-15 | N0N Google | Research | COMPANY #66 About Victim | Screenshot GroupLink | software quality assurance (Wolters Kluwer/CCH Axcess test l · California, USA | [PENDING EXPOSURE] | |
| 2026-10-14 | 2026-10-14 | N0N Google | Research | INTERIOR TECHNOLOGIES About Victim | GroupLink | smart building & surveillance integration (US) · California, USA | The complete gateway configuration of a smart building and surveillance integration company: every client site, device, user and credential; Client site surveillance feeds: dark until settlement; Administrator access to the company's own management infrastructure: reset by us | [NOT PAID — EXPOSED] | |
| 2026-10-14 | 2026-10-14 | N0N Google | Research | TRIESCHMANN DUMALA ARCHITECTURAL GROUP About Victim | Screenshot GroupLink | architecture & design (US) · Florida, USA | The complete business email archive of the firm's principal: client correspondence, financial records and project communications spanning the firm's history; Working files and project documents from the firm's central storage | [NOT PAID — EXPOSED] | |
| BR | 2026-10-13 | 2026-10-13 | N0N Google | Research | COMPANY #65 About Victim | Screenshot GroupLink | packaging manufacturing (extrusion) · Brazil | [PENDING EXPOSURE] |
| 2026-10-13 | 2026-10-13 | N0N Google | Research | COMPANY #63 About Victim | Screenshot GroupLink | construction and accounting (US) · New York, USA | [PENDING EXPOSURE] | |
| 2026-10-13 | 2026-10-13 | N0N Google | Research | COMPANY #64 About Victim | Screenshot GroupLink | dental laboratory (CAD/CAM) · Missouri, USA | [PENDING EXPOSURE] | |
| 2026-10-13 | 2026-10-13 | N0N Google | Research | HUNTER NEUROLOGY About Victim | Screenshot GroupLink | Healthcare - Neurology (AU) · New South Wales, Australia | Patient records of an Australian neurology practice: 15,252 patient images and scans, 11,819 patient letters and reports, 439 laboratory results and 839 patient records system files; Four complete weekly backups of the practice medical records system; Protected health information including patient names, dates of birth and clinical data | [NOT PAID — EXPOSED] | |
| US | 2026-10-13 | 2026-10-13 | N0N Google | Research | MARIEBELLE NEW YORK About Victim | GroupLink | confectionery & telehealth (US) · New York, USA | Complete QuickBooks company file of a New York confectionery and luxury foods company: every transaction, customer, vendor and payroll record; Complete inventory database with product, cost and supplier data; Telehealth platform files and clinical system records from hospital partner infrastructure | [NOT PAID — EXPOSED] |
| 2026-10-13 | 2026-10-13 | N0N Google | Research | PG GROUP (PURE OPTIONS) About Victim | GroupLink | cannabis operator (US) · Lansing, Michigan, USA | Complete directory database of a Michigan cannabis operator: password data for all 577 accounts; Working password corpus for dozens of staff and administrator accounts; Financial and contract backups: payroll reports, general ledgers, signed operating and lease agreements; Complete inventory of the shared data volume | [NOT PAID — EXPOSED] | |
| ID | 2026-10-12 | 2026-10-12 | N0N Google | Research | GLOBALNET LCL (PORT AGENCY OPERATIONS) About Victim | Screenshot GroupLink | Port agency / logistics · Indonesia | Container gate movement and damage management records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| BR | 2026-10-12 | 2026-10-12 | N0N Google | Research | SANTOS BRASIL (PORT OPERATIONS) About Victim | Screenshot GroupLink | Port terminal operations · Brazil | Terminal operating system database scripts and operational records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| TR | 2026-10-12 | 2026-10-12 | N0N Google | Research | ASYAPORT (CONTAINER TERMINAL OPERATIONS) About Victim | Screenshot GroupLink | Port terminal operations · Turkey | Dangerous-goods operational records and internal database scripts | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| SG | 2026-10-12 | 2026-10-12 | N0N Google | Research | OCEAN NETWORK EXPRESS (CONTAINER SHIPPING) About Victim | Screenshot GroupLink | Container shipping · Singapore | Internal staff directories, operational voyage and fuel-consumption records, and financial-adjacent planning material | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| KR | 2026-10-12 | 2026-10-12 | N0N Google | Research | MGNP (PORT TERMINAL OPERATIONS) About Victim | Screenshot GroupLink | Port terminal operations · South Korea | Commercial invoice records and billing system material | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| BR | 2026-10-12 | 2026-10-12 | N0N Google | Research | PORTONAVE (CONTAINER TERMINAL OPERATIONS) About Victim | Screenshot GroupLink | Port terminal operations · Brazil | Terminal operating system database material and operational EDI archives | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| KR | 2026-10-12 | 2026-10-12 | N0N Google | Research | POLARIS SHIPPING (DRY BULK SHIPPING) About Victim | Screenshot GroupLink | Dry bulk shipping · South Korea | Internal financial records (sales vouchers) and vessel operational reports | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| CN | 2026-10-12 | 2026-10-12 | N0N Google | Research | ZPMC (PORT MACHINERY AND TERMINAL ENGINEERING) About Victim | Screenshot GroupLink | Port machinery / engineering · China | Operational EDI archives and cargo loading records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| JP | 2026-10-12 | 2026-10-12 | N0N Google | Research | TSUNEISHI / KAMBARA KISEN (SHIPBUILDING AND SHIP MANAGEMENT) About Victim | Screenshot GroupLink | Shipbuilding / ship management · Japan | Operational EDI archives and commercial contract records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| HK | 2026-10-12 | 2026-10-12 | N0N Google | Research | YUSEN LOGISTICS HONG KONG (3PL LOGISTICS) About Victim | Screenshot GroupLink | 3PL logistics · Hong Kong | Commercial tariff documentation | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| NL | 2026-10-12 | 2026-10-12 | N0N Google | Research | PREMIER ALLIANCE (SHIPPING NETWORK OPERATIONS) About Victim | Screenshot GroupLink | Shipping / terminal services · Netherlands | Terminal network documentation and operational EDI archives | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| CN | 2026-10-12 | 2026-10-12 | N0N Google | Research | CULINES (CONTAINER SHIPPING) About Victim | Screenshot GroupLink | Container shipping · China | Operational EDI message archives (booking and container manifest records) | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| KR | 2026-10-12 | 2026-10-12 | N0N Google | Research | BNCT BUSAN NEW CONTAINER TERMINAL About Victim | Screenshot GroupLink | Port terminal operations · South Korea | Operational EDI archives and internal database scripts | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| TW | 2026-10-12 | 2026-10-12 | N0N Google | Research | T.S. LINES (INTRA-ASIA CONTAINER SHIPPING) About Victim | Screenshot GroupLink | Container shipping · Taiwan | Operational EDI message archives (container manifests, gate movement and booking records), internal systems master data, and internal credential material | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| DE | 2026-10-12 | 2026-10-12 | N0N Google | Research | HPC HAMBURG PORT CONSULTING (PORT OPERATIONS) About Victim | Screenshot GroupLink | Port consulting / terminal operations · Germany | Operational EDI archives and cargo/bill-of-lading records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| SG | 2026-10-12 | 2026-10-12 | N0N Google | Research | APICAL GROUP (COMMODITY PROCESSING AND LOGISTICS) About Victim | Screenshot GroupLink | Commodity processing / logistics · Singapore | Cargo discharge and terminal throughput records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| BR | 2026-10-12 | 2026-10-12 | N0N Google | Research | SUPERTERMINAIS (PORT TERMINAL OPERATIONS) About Victim | Screenshot GroupLink | Port terminal operations · Brazil | Operational EDI archives and interface operational records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| SA | 2026-10-12 | 2026-10-12 | N0N Google | Research | NEOM PORTS (INDUSTRIAL PORT OPERATIONS) About Victim | Screenshot GroupLink | Industrial port operations · Saudi Arabia | Commercial tariff documentation and invoicing records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| KW | 2026-10-12 | 2026-10-12 | N0N Google | Research | GCS KUWAIT (PORT COMMUNITY SYSTEM OPERATIONS) About Victim | Screenshot GroupLink | Port community IT · Kuwait | Container movement records and operational EDI archives | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| KR | 2026-10-12 | 2026-10-12 | N0N Google | Research | GNCNET / DGT BUSAN (PORT COMMUNITY IT) About Victim | Screenshot GroupLink | Port IT services · South Korea | Billing service records and operational EDI sample material | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| ID | 2026-10-12 | 2026-10-12 | N0N Google | Research | SAMUDERA (COASTAL SHIPPING OPERATIONS) About Victim | Screenshot GroupLink | Coastal shipping · Indonesia | Charter party records and dangerous-goods operational documentation | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| KR | 2026-10-12 | 2026-10-12 | N0N Google | Research | DONGKUK STEEL (STEEL MANUFACTURING) About Victim | Screenshot GroupLink | Steel manufacturing · South Korea | Internal financial systems material (invoice and settlement records) | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| IN | 2026-10-12 | 2026-10-12 | N0N Google | Research | NCT KANDLA (CONTAINER TERMINAL OPERATIONS) About Victim | Screenshot GroupLink | Port terminal operations · India | Operational EDI correspondence and internal systems logs | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| ES | 2026-10-12 | 2026-10-12 | N0N Google | Research | TTI ALGECIRAS (CONTAINER TERMINAL OPERATIONS) About Victim | Screenshot GroupLink | Port terminal operations · Spain | Operational EDI message archives and internal terminal systems documentation | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| KR | 2026-10-12 | 2026-10-12 | N0N Google | Research | SAEHAN MARINE (SHIP AGENCY OPERATIONS) About Victim | Screenshot GroupLink | Ship agency · South Korea | Port disbursement account records and banking correspondence templates | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| ID | 2026-10-12 | 2026-10-12 | N0N Google | Research | APRIL ASIA (PORT AGENCY OPERATIONS) About Victim | Screenshot GroupLink | Port agency / logistics · Indonesia | Container gate movement and damage management records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| KR | 2026-10-12 | 2026-10-12 | N0N Google | Research | DONG-A TANKER (OIL TANKER OPERATIONS) About Victim | Screenshot GroupLink | Oil tanker shipping · South Korea | Internal financial records (demurrage/despatch and performance data) | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| KR | 2026-10-12 | 2026-10-12 | N0N Google | Research | EUSU LOGISTICS (LOGISTICS OPERATIONS) About Victim | Screenshot GroupLink | Logistics · South Korea | Internal infrastructure configuration and assessment records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| GB | 2026-10-12 | 2026-10-12 | N0N Google | Research | BMT IQ (MARINE SURVEYING AND INSPECTION) About Victim | Screenshot GroupLink | Marine surveying · United Kingdom | Commercial e-invoice records and equipment interchange receipts | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| KR | 2026-10-12 | 2026-10-12 | N0N Google | Research | BKH ICD (INLAND CONTAINER DEPOT OPERATIONS) About Victim | Screenshot GroupLink | Inland container depot · South Korea | Commercial invoice records and systems release documentation | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| KR | 2026-10-12 | 2026-10-12 | N0N Google | Research | KOREA FERRY (FERRY OPERATIONS) About Victim | Screenshot GroupLink | Ferry / RoRo shipping · South Korea | Internal staff account records with plaintext credentials and financial receipt records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| BR | 2026-10-12 | 2026-10-12 | N0N Google | Research | T2S (TERMINAL SYSTEMS OPERATIONS) About Victim | Screenshot GroupLink | Port terminal operations · Brazil | Terminal systems gap-analysis documentation and internal database material | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| KR | 2026-10-12 | 2026-10-12 | N0N Google | Research | SAMJOO MARITIME (SHIP MANAGEMENT) About Victim | Screenshot GroupLink | Ship management · South Korea | Internal financial records (expense applications and bunker cost calculations) | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| JP | 2026-10-12 | 2026-10-12 | N0N Google | Research | CAMELLIA LINE (FERRY AND RORO OPERATIONS) About Victim | Screenshot GroupLink | Ferry / RoRo shipping · Japan | Freight settlement and payment records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| MA | 2026-10-12 | 2026-10-12 | N0N Google | Research | EUROGATE TANGER (CONTAINER TERMINAL OPERATIONS) About Victim | Screenshot GroupLink | Port terminal operations · Morocco | Terminal commercial operation configuration records and systems release documentation | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| ID | 2026-10-12 | 2026-10-12 | N0N Google | Research | ILCS PELINDO (PORT LOGISTICS OPERATIONS) About Victim | Screenshot GroupLink | Port logistics · Indonesia | Operational EDI archives (container manifests) | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| KR | 2026-10-12 | 2026-10-12 | N0N Google | Research | PUSAN NEWPORT COMPANY (CONTAINER TERMINAL OPERATIONS) About Victim | Screenshot GroupLink | Port terminal operations · South Korea | Terminal operating system deployment and configuration records and operational container documentation | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC] |
| VN | 2026-10-12 | 2026-10-12 | N0N Google | Research | NAM DINH VU PORT (CONTAINER TERMINAL OPERATIONS) About Victim | Screenshot GroupLink | Port terminal operations / maritime logistics · Vietnam | The full EDI message archive of the terminal's operations server: vessel schedules, container manifests (BAPLIE), gate movement records (CODECO), booking messages (COPARN) covering multiple international shipping lines; Internal system configuration files of the operations server | [NOT PAID — EXPOSED: files publish 2026-10-19 13:19 UTC] |
| 2026-10-11 | 2026-10-11 | N0N Google | Research | COMPANY #24 About Victim | Screenshot GroupLink | smart building & surveillance integration · California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC] | |
| 2026-10-11 | 2026-10-11 | N0N Google | Research | COMPANY #23 About Victim | Screenshot GroupLink | smart building & surveillance integration · California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC] | |
| 2026-10-11 | 2026-10-11 | N0N Google | Research | COMPANY #22 About Victim | Screenshot GroupLink | architecture & design · Florida, USA | [PENDING EXPOSURE: data publishes 2026-10-14 12:00 UTC] | |
| 2026-10-11 | 2026-10-11 | N0N Google | Research | COMPANY #21 About Victim | Screenshot GroupLink | neurology practice · New South Wales, Australia | [PENDING EXPOSURE: data publishes 2026-10-13 12:37 UTC] | |
| 2026-10-11 | 2026-10-11 | N0N Google | Research | COMPANY #20 About Victim | Screenshot GroupLink | cannabis operator · Michigan, USA | [PENDING EXPOSURE: data publishes 2026-10-13 09:40 UTC] | |
| 2026-10-11 | 2026-10-11 | N0N Google | Research | COMPANY #19 About Victim | Screenshot GroupLink | confectionery & telehealth · New York, USA | [PENDING EXPOSURE: data publishes 2026-10-13 09:40 UTC] | |
| CA | 2026-10-11 | 2026-10-11 | N0N Google | Research | COMPANY #14 About Victim | Screenshot GroupLink | Financial services · Canada | [HONORED: settled 2026-10-07 17:00 UTC · before their deadline] |
| US | 2026-10-11 | 2026-10-11 | N0N Google | Research | COMPANY #29 About Victim | Screenshot GroupLink | smart building & surveillance integration · California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC] |
| US | 2026-10-11 | 2026-10-11 | N0N Google | Research | COMPANY #28 About Victim | Screenshot GroupLink | architecture & design · Florida, USA | [PENDING EXPOSURE: data publishes 2026-10-14 12:00 UTC] |
| AU | 2026-10-11 | 2026-10-11 | N0N Google | Research | COMPANY #27 About Victim | Screenshot GroupLink | neurology practice · New South Wales, Australia | [PENDING EXPOSURE: data publishes 2026-10-13 12:37 UTC] |
| US | 2026-10-11 | 2026-10-11 | N0N Google | Research | COMPANY #26 About Victim | Screenshot GroupLink | cannabis operator · Michigan, USA | [PENDING EXPOSURE: data publishes 2026-10-13 09:40 UTC] |
| US | 2026-10-11 | 2026-10-11 | N0N Google | Research | COMPANY #25 About Victim | Screenshot GroupLink | confectionery & telehealth · New York, USA | [PENDING EXPOSURE: data publishes 2026-10-13 09:40 UTC] |
| US | 2026-10-07 | 2026-10-07 | N0N Google | Research | CHIBITEK About Victim | Screenshot GroupLink | managed IT services (MSP) · USA | Complete client financial records held by this managed IT provider (accounting, inventory, payroll data); Client network credentials and configuration secrets; Internal company documents | [NOT PAID — EXPOSED: leak 2026-10-11 04:43 UTC] |
| US | 2026-10-05 | 2026-10-05 | N0N Google | Research | COMPANY #3 About Victim | Screenshot GroupLink | IT managed services · United States | [PENDING EXPOSURE: data publishes 2026-10-07 00:46 UTC] |
| CA | 2026-10-05 | 2026-10-05 | N0N Google | Research | COMPANY #2 About Victim | Screenshot GroupLink | Financial services · Canada | [PENDING EXPOSURE: data publishes 2026-10-06 15:00 UTC] |
| US | 2026-10-05 | 2026-10-05 | N0N Google | Research | COMPANY #1 About Victim | Screenshot GroupLink | data publishes 2026-10-06 12:00 UTC |
| US | 2026-09-30 | 2026-09-30 | N0N Google | Research | HOUSTON THYROID & ENDOCRINE SPECIALISTS About Victim | Screenshot GroupLink | Healthcare - Endocrinology (US) · Houston, Texas | 14,441 patient document scans from a Houston endocrinology practice: lab results, medical summaries, diagnoses, insurance records, day sheets; Protected health information of thousands of patients including SSNs, dates of birth, and clinical data; Billing and claims records with financial data | [ACTIVE: deadline 2026-10-04 12:00 UTC] |
| CA | 2026-09-30 | 2026-09-30 | N0N Google | Research | MCAP — MORTGAGEHUB COMMERCIAL LENDING PLATFORM About Victim | Screenshot GroupLink | Mortgage securitization and servicing (Canada) · Canada | The complete MortgageHub borrower database of a major Canadian mortgage company: seven years of records with social insurance numbers, dates of birth, full addresses, and complete loan and payment histories; The daily commercial servicing book: the full national portfolio of active commercial mortgages with balances, interest rates, credit scores, insurer policy numbers, arrears, and investor reporting fields; The full backup archive of the platform, 2019 through today | [ACTIVE: deadline 2026-10-03 15:00 UTC] |
| GB | 2026-09-29 | 2026-09-29 | N0N Google | Research | PRECISION FACADES LTD About Victim | Screenshot GroupLink | Facade engineering and construction (UK) · United Kingdom | The complete company file server of a UK facade engineering contractor: finance and accounts records, audits, bank mandates, board papers, budgets and business plans; Project and tender data: current tender workload, tender tracker and sales forecasts; Confidential commercial records: SHEQT confidential folder and the costing database; Director-level sale and management documents | [ACTIVE: deadline 2026-10-02 05:32 UTC] |
| GB | 2026-09-28 | 2026-09-28 | N0N Google | Research | DEDISERVE LTD About Victim | Screenshot GroupLink | Cloud infrastructure provider (iomart group) · Dublin, Ireland / FRA1 Frankfurt DC | The complete customer register of the FRA1 cloud — 167 tenant accounts with infrastructure details; Disk images of tenant servers: a regulated forex broker's portal (payment gateway configuration, trading-account records), a payment services provider's systems including its internal password vault, and a production real-estate platform; The provider's internal operations mailbox and monitoring configuration | All 46 FRA1 servers are paused and intact - restorable automatically within the hour of settlement. | [ACTIVE: deadline 2026-10-01 05:16 UTC] |
| US | 2026-09-25 | 2026-09-25 | N0N Google | Research | TAPCLICKS (MARKETING ANALYTICS PLATFORM) About Victim | Screenshot GroupLink | Marketing analytics / SaaS · United States | The complete platform source code (97,000+ commits with full history); The multi-tenant instance management system with production architecture; A customer's full marketing database: 354 advertising platform datasets, client lists, user accounts with password hashes, ad-platform connection credentials | Everything is real, complete and verifiable. | [ACTIVE: deadline 2026-09-28 01:59 UTC] |
| ML | 2026-09-22 | 2026-09-22 | N0N Google | Research | AFRICA-TECH (IT SERVICES / DOCUMENT PROCESSING) About Victim | Screenshot GroupLink | IT services / document services · Mali | Client documents: scans, attestations, insurance and embassy files, shared business folders | Operations are fully stopped. Nothing restores without settlement — all backups and shadow copies are encrypted or destroyed. | [ACTIVE: deadline 2026-09-25 16:00 UTC] |
| UZ | 2026-09-22 | 2026-09-22 | N0N Google | Research | FINSOFT (KOLIBRI RETAIL BACK-OFFICE SOFTWARE) About Victim | Screenshot GroupLink | Retail software vendor / IT services · Uzbekistan | Client databases of 10+ retail chains (keddo, marc, lancaster, comf_rus, ek, cr, bas_at, bas_juk, bas_nov, bas_zar): sales, stock, pricing, financial records; Back-office platform and API service data | One client database publishes per day after the deadline, starting with keddo. Their clients will know exactly whose software failed them. | [ACTIVE: deadline 2026-09-25 01:06 UTC] |
| US | 2026-09-20 | 2026-09-20 | N0N Google | Research | FANATICS (GLOBAL SPORTS COMMERCE PLATFORM) About Victim | Screenshot GroupLink | Sports commerce / e-commerce · United States | Complete order history: 46,902 order files (108 GB) with customer personal data; Accounts-payable invoices of league and brand partners; Customer balances, bank transaction archive, customer tax exemption certificates; The fraud-prevention data set | Their cloud data estate is under our destructive control; deletion has begun. | [ACTIVE: deadline 2026-09-23 01:01 UTC] |
| VE | 2026-09-18 | 2026-09-18 | N0N Google | Research | INTER (VENEZUELA'S LARGEST INTERNET PROVIDER) About Victim | Screenshot GroupLink | Telecommunications / ISP · Venezuela | Subscriber connection records: 15,300,000+ entries, tens of thousands of subscriber addresses with the services they contacted; Complete internal network map across all regional operations; Core infrastructure configuration evidence | Network traffic remains severed until settlement. | [ACTIVE: deadline 2026-09-20 18:39 UTC] |
| SE | 2026-09-18 | 2026-09-18 | N0N Google | Research | PAYPAL SUPPORT OPERATIONS (TRANSCOM WORLDWIDE) About Victim | Screenshot GroupLink | Outsourced customer support / financial services · Netherlands / Tunisia | 86.7M connection records: daily support-agent sessions into PayPal corporate Citrix/AAA systems; Complete infrastructure map: internal AD, PKI, Netskope/Zscaler tenants, all 8 sites | All 8 sites are enforcing a network blackout until settlement. | [ACTIVE: deadline 2026-09-21 03:01 UTC] |
| AR | 2026-09-18 | 2026-09-18 | N0N Google | Research | MINISTRY OF EDUCATION — ARGENTINA About Victim | Screenshot GroupLink | Government / education · Argentina | Complete network-security configuration of the ministry network; 1.08M connection records: national library (BNM), school-book selection platform, scholarship systems (becasprogresar), titulosvalidez, certificadosinfd, sitrared; Evidence of the Monero cryptocurrency miner operating inside the ministry network | The ministry network is under a total blackout until settlement. | [ACTIVE: deadline 2026-09-21 03:01 UTC] |
| US | 2026-09-18 | 2026-09-18 | N0N Google | Research | ARGENTEM CREEK PARTNERS (INVESTMENT FIRM) About Victim | Screenshot GroupLink | Investment management / private credit · United States | Full corporate network evidence: 2.5M+ connection records, complete internal systems map (Active Directory, SharePoint, MSP tooling, office-security integrations); Tax-season document flows of the firm and its investor document delivery platform | Corporate connectivity remains severed until settlement. | [ACTIVE: deadline 2026-09-21 03:01 UTC] |
| TR | 2026-09-18 | 2026-09-18 | N0N Google | Research | ASTRAZENECA TüRKIYE About Victim | Screenshot GroupLink | Pharmaceutical manufacturing (GxP) · Türkiye | Complete internal network-security configuration of all 3 sites (940 MB): every rule, device definition, remote-access mappings; 1.35M connection records: M365/Intune, SAP Concur, UniFi camera estate, internal applications | All sites are enforcing a total network blackout until settlement. | [ACTIVE: deadline 2026-09-21 03:01 UTC] |
| LU | 2026-09-18 | 2026-09-18 | N0N Google | Research | STOKR (DIGITAL SECURITIES PLATFORM) About Victim | Screenshot GroupLink | Digital securities / investment platform · Luxembourg - EU | KYC investor register: full names, emails, countries, nationalities, wallet addresses and tax IDs where present; Identity-to-crypto-wallet mapping of KYC-accepted investors (FR, DE, CH, BE, NL, UK and others); Internal platform admin directory with staff accounts and roles | The investor data will also be delivered to the tax authorities of the investors' countries. | [ACTIVE: deadline 2026-09-20 22:40 UTC] |
| BR | 2026-09-18 | 2026-09-18 | N0N Google | Research | KONNATUS (USUCAPIãO LEGAL SERVICES) About Victim | Screenshot GroupLink | Legal services / real estate · Brazil | The application database: chart of accounts, income/outflow structures, account types; User accounts with password hashes | Publication proceeds after the deadline. | [ACTIVE: deadline 2026-09-20 03:32 UTC] |
| VN | 2026-09-18 | 2026-09-18 | N0N Google | Research | BELI TEACHER / FSC EDUCATION CENTERS (AWS) About Victim | Screenshot GroupLink | Education / edtech · Vietnam | The complete CRM lead database: 152,044 contact records — names, emails, +84 phone numbers, cities, study interests, engagement history; The CRM file archive (tasks, forums, comments, customer files) migrated from GetFly CRM | Publication proceeds in batches after the deadline. | [ACTIVE: deadline 2026-09-20 02:47 UTC] |
| VN | 2026-09-18 | 2026-09-18 | N0N Google | Research | VIETNAMESE BETTING OPERATOR (GC789 NETWORK / BOUNDLESS TE) About Victim | Screenshot GroupLink | Online gambling / agent platform · Vietnam / Switzerland | The complete bettor database: 2,021,011 registered bettors with names, +84 phone numbers, email addresses, deposit and withdrawal amounts; The full agent network: 39,998 agent accounts, hierarchy, balances, credit lines and commission ladders; 85 million login records with IP addresses and device identifiers; Daily trading and P&L data per provider; The fraud stack: 33,000+ blacklisted emails and phones, arbitrage and odds-mover reports, multi-account detection rules | Publication proceeds in batches after the deadline. | [ACTIVE: deadline 2026-09-20 01:37 UTC] |
| US | 2026-09-18 | 2026-09-18 | N0N Google | Research | UNITED FEDERATION OF TEACHERS About Victim | Screenshot GroupLink | Education / Labor Union · US — New York | The union’s complete legal case archive — approx. 181,420 documents: grievance and arbitration files, disciplinary appeal decisions and personnel case files, each named for a member; Contract documents: CBAs, MOUs, MOAs and side letters; Nurse-federation and health-benefit-fund case materials; Teacher evaluation and class-size complaint files; Staff search and case-view audit logs | Publication proceeds in batches after the deadline. The victim can verify everything and settle in their private negotiation room. | [ACTIVE: deadline 2026-09-19 14:58 UTC] |
