[ For GroupLink (TOR), you need to change BAWANG with ONION, example: https://tegbmnhkbpqz637f2yd.bawang >> https://tegbmnhkbpqz637f2yd.onion ]
| Country | Discovered | Published | Group Name | Victim | Source | Description |
|---|---|---|---|---|---|---|
| SG | 2026-08-31 | 2026-08-31 | CRYPTO24 Google | Research | ME*** About Victim | ||
| QA | 2026-04-17 | 2026-04-17 | CRYPTO24 Google | Research | QATAR BIOMEDICAL RESEARCH INSTITUTE (QBRI) About Victim | [AI generated] Qatar Biomedical Research Institute (QBRI) is a research institute based in Qatar, operating under Hamad Bin Khalifa University. It focuses on biomedical research in areas such as genomics, diabetes, cancer, and neurological disorders. QBRI aims to advance precision medicine and translational research to address health challenges prevalent in Qatar and the broader region, contributing to the country's science and innovation goals. | |
| MX | 2026-04-02 | 2026-04-02 | CRYPTO24 Google | Research | KATCON GLOBAL About Victim | [AI generated] "Katcon Global" is a prominent automotive supplier, specialized in the field of developing, designing, and manufacturing advanced vehicle exhaust systems. Established in 1993 in Mexico, the company has now expanded worldwide at multiple locations, including Europe, Asia, Australia, and America. Besides exhaust systems, Katcon also provides solutions in energy recovery and sustainability sectors. | |
| ES | 2026-04-02 | 2026-04-02 | CRYPTO24 Google | Research | INDUSTRIAS GUERRA, S.A. About Victim | [AI generated] Industrias Guerra, S.A. is a prominent Spanish company known for the manufacturing of marine cranes, forestry machinery, and special equipment. Its products serve sectors like construction, recycling, mining, and shipping. The company emphasizes high-quality, sustainable production and has been operating successfully since its establishment in 1947. | |
| KR | 2026-03-27 | 2026-03-27 | CRYPTO24 Google | Research | ACTIONPOWER About Victim | [AI generated] N/A | |
| AR | 2026-03-24 | 2026-03-24 | CRYPTO24 Google | Research | ESTUDIO O'FARRELL About Victim | [AI generated] Estudio O'Farrell is a prestigious law firm based in Buenos Aires, Argentina. Known for its comprehensive legal services, the firm specializes in areas such as corporate law, tax law, banking and finance, and labor law among others. Having a history of over 130 years, Estudio O'Farrell has represented multiple high-profile clients and is renowned for its professional and innovative legal solutions. | |
| IN | 2026-03-10 | 2026-03-10 | CRYPTO24 Google | Research | INVACCS SOFTWARE TECHNOLOGIES PVT LTD About Victim | [AI generated] Invaccs Software Technologies Pvt Ltd is a technology company, based in India, that specializes in providing information technology and consulting services. They offer solutions in cutting-edge technologies like Blockchain, artificial intelligence, IoT, and software development. Their services are designed to assist businesses with digital transformation, efficiency improvement, and competitive advantage creation. | |
| US | 2026-03-09 | 2026-03-09 | CRYPTO24 Google | Research | COMPREHENSIVE ORTHOPAEDICS AND MUSCULOSKELETAL CARE, LLC About Victim | HIPAA personal information for over 100,000 people... | |
| EG | 2026-03-05 | 2026-03-05 | CRYPTO24 Google | Research | ROWAD MODERN ENGINEERING About Victim | [AI generated] Rowad Modern Engineering is an Egypt-based construction firm specializing in the implementation and delivery of various construction projects. The company offers services ranging from civil engineering and construction management to project costing and risk management. It has a prominent role in constructing infrastructure, roads, commercial, and residential buildings. | |
| US | 2026-02-09 | 2026-02-09 | CRYPTO24 Google | Research | PUTNAM PRECISION, INC. About Victim | [AI generated] Putnam Precision, Inc. is a prominent manufacturing firm based in the USA, specializing in high-grade custom, precision components. The company primarily services the medical, semi-conductor and aerospace industries. Putnam uses state-of-the-art technology to ensure accuracy & quality in their products, with services including CNC machining, milling, turning, and assembly operations. | |
| GB | 2026-01-24 | 2026-01-24 | CRYPTO24 Google | Research | MRC PRION UNIT AND INSTITUTE OF PRION DISEASES About Victim | According to our guidelines, full data will be released once the timer expires. | |
| BG | 2026-01-21 | 2025-12-30 | CRYPTO24 Google | Research | YOURCE BULGARIA & GREECE About Victim | Yource Bulgaria & Greece is a customer experience and contact center services provider supporting major international clients, handling large volumes of sensitive personal and business data across its operations in Bulgaria and Greece. We possess internal data belonging to Yource Bulgaria & Greece, including HR, customer, financial, and project-related information, as well as customer datasets associated with client engagements involving organizations such as Eneco Belgium, bofrost, essent.be, Media Compentence, Sodexo, and Spotzer. | |
| US | 2025-12-23 | 2025-12-23 | CRYPTO24 Google | Research | UNIFIED ASSESSMENT PLATFORM EXAMROOM.AI About Victim | *** | |
| FR | 2025-12-17 | 2025-12-17 | CRYPTO24 Google | Research | SASP SNCC AUTOMATISME SOLUTIONS PROCESS About Victim | *** | |
| SG | 2025-12-01 | 2025-12-01 | CRYPTO24 Google | Research | HOLLYSYS ASIA PACIFIC About Victim | [AI generated] Hollysys Asia Pacific is part of Hollysys Automation Technologies Ltd, a leading provider of industrial and rail transportation automation solutions. Its core businesses include industrial automation, rail transportation, and mechanical and electrical solutions. The company utilizes advanced technologies in industrial automation and control, digital rail signaling, and mechanical and electrical solutions to address modern industrial operations and infrastructure requirements. | |
| ID | 2025-11-15 | 2025-10-20 | CRYPTO24 Google | Research | BAYU BUANA TRAVEL SERVICE About Victim | We have successfully extracted over 500GB of documents from your internal network, including internal company documents, customer and project information, and other data stored within your internal systems. | |
| US | 2025-11-12 | 2025-11-12 | CRYPTO24 Google | Research | ASAHIKASEI MICRODEVICES About Victim | ... | |
| SG | 2025-10-27 | 2025-10-24 | CRYPTO24 Google | Research | MEINHARDT GROUP About Victim | ... | |
| ID | 2025-10-27 | 2025-10-27 | CRYPTO24 Google | Research | BAYU BUANA TRAVEL About Victim | ... | |
| US | 2025-10-21 | 2025-10-20 | CRYPTO24 Google | Research | U.S. VANADIUM HOLDING COMPANY LLC About Victim | We have successfully extracted over 300GB of documents from your internal network, including internal company documents, customer and project information, and other data stored within your internal systems. | |
| UY | 2025-10-03 | 2025-10-03 | CRYPTO24 Google | Research | BANCO HIPOTECARIO DEL URUGUAY About Victim | We have exfiltrated over 700GB of most sensitive highly sensitive customer PII, financial/accounting records, legal/contracts, property/title documents, credit and risk files, market/trading operations data, and IT/security configuration information. | |
| IT | 2025-09-18 | 2025-09-18 | CRYPTO24 Google | Research | GENERALI GROUP About Victim | *** | |
| MY | 2025-08-18 | 2025-08-05 | CRYPTO24 Google | Research | PALMGOLD MANAGEMENT SDN BHD About Victim | We have exfiltrated over 500GB of most sensitive and business-critical data from palmgold's internal network. This includes data from both the Casino Division and the Credit Division, where the Casino Division holds the full operational database of over 60,000 members including PII, jackpot and play history, betting patterns, machine configurations, Power BI dashboards used for internal analytics, confidential finance, HR, and IT documents, complete scanner share contents from all branches (kmscan, toshibascan, fujiscan), as well as operational logic such as promotion formulas, game-specific revenue models, slot machine volatility settings, player-tier betting analytics, risk thresholds, fraud alert triggers, and blacklist criteria, while the Credit Division (pgcredit.com.my) contains all customer KYC information along with detailed banking and cash transaction records. | |
| DE | 2025-08-16 | 2023-12-13 | CRYPTO24 Google | Research | CMS LEGAL SERVICES EEIG About Victim | We are in possession of highly confidential data belonging to CMS, one of the largest international law firms, including government and national infrastructure project files, sensitive contracts with multinational corporations, tax authority system access records, internal financial and legal documents, as well as payroll and personnel information. The complete dataset and its full file list will be publicly released in its entirety. | |
| US | 2025-08-15 | 2025-07-25 | CRYPTO24 Google | Research | KARNDEAN INTERNATIONAL, LLC About Victim | We have exfiltrated over 600GB of your most sensitive corporate data, including financial, technical, operational, and personal information covering customers, employees, and strategic business plans. | |
| 2025-08-12 | 2025-08-12 | CRYPTO24 Google | Research | KAR *** About Victim | ... | ||
| AR | 2025-07-22 | 2025-07-14 | CRYPTO24 Google | Research | SOUBEIRAN CHOBET S.R.L. About Victim | We have exfiltrated over 300GB of most sensitive and business-critical data from internal servers including full DBs including Microsoft Dynamics GP database, financials, accounting records, HR files, inventory logs, production processes, customer contracts, and complaint records, complete data analytics and marketing materials.And also have R&D and QC datasets, such as HPLC/FASE MOVIL outputs, experimental protocols, specialized pharmaceutical formulations, master batch records detailing proprietary production know-how, ANMAT/FDA CTDs, product recall logs, GMP audit results, deviation reports, and regulatory correspondence. | |
| AE | 2025-07-20 | 2025-03-31 | CRYPTO24 Google | Research | TRANSCORE ITS, LLC About Victim | We’ve successfully breached the internal network of TransCore’s Dubai office.Over 200 GB of internal data has been exfiltrated, including in-development source code, full file sets from active and archived client projects, internal financial records, and a massive trove of unprotected customer data — all stored without proper safeguards.The stolen data contains clear violations of multiple NDAs, exposing confidential third-party materials and client information. | |
| 2025-07-17 | 2025-07-17 | CRYPTO24 Google | Research | SOU *** About Victim | ... | ||
| US | 2025-07-16 | 2025-06-18 | CRYPTO24 Google | Research | ARTEMIS HEALTHCARE, INC About Victim | It contains sensitive personal data, including medical records, official documents, and imaging files of millions of patients, as well as various databases. | |
| AZ | 2025-07-16 | 2025-06-18 | CRYPTO24 Google | Research | A-QROUP SığORTA ŞIRKəTI About Victim | The entire InsureAZ database has been leaked — including real insurance documents and all related materials such as medical, auto, and internal corporate records. | |
| MY | 2025-07-16 | 2025-07-09 | CRYPTO24 Google | Research | TAN CHONG MOTOR HOLDINGS BERHAD About Victim | We have exfiltrated over 300GB of sensitive data, including Customer databases (all dbs of tanchong - NAV, BRASSTAX, VTS, CRM, E-INVOICE,...),Legal and HR documents, Financial and employee records, Contractual documents with partners and customers. | |
| MY | 2025-07-16 | 2025-07-09 | CRYPTO24 Google | Research | WARISAN TC HOLDINGS BERHAD About Victim | We have exfiltrated over 300GB of sensitive data, including Customer databases (all dbs of wtc - TOURPLAN, CRM, E-INVOICE,...),Legal and HR documents, Financial and employee records, Contractual documents with partners and customers. | |
| IT | 2025-07-16 | 2025-07-15 | CRYPTO24 Google | Research | LARIMART S.P.A About Victim | We have secured 2TB of confidential data : NATO-linked armor specifications and ballistic protection designs,EUC/EUS certificates and UAMA export control documents,VTLM test data and confidential field performance results from Santa Severa,Strategic planning documents, internal pricing, MoD, invoices and tactical customer lists,Archives of confidential consortium contracts and weapon system development records. | |
| 2025-07-16 | 2025-07-16 | CRYPTO24 Google | Research | TRA *** About Victim | ... | ||
| VN | 2025-06-05 | 2025-06-05 | CRYPTO24 Google | Research | TIEN TUAN PHARMACEUTICAL MACHINERY CO. LTD About Victim | [AI generated] Tien Tuan Pharmaceutical Machinery Co. Ltd is a leading provider of integrated software solutions for the pharmaceutical industry. The Vietnam-based company specializes in offering digital solutions to optimize the pharmaceutical manufacturing and distribution process. Their products include solutions for pharmaceutical lifecycle management, manufacturing execution systems, and plant intelligence. Their clients are major global pharmaceutical and biotechnology companies. | |
| US | 2025-06-05 | 2025-06-05 | CRYPTO24 Google | Research | FORTÉ About Victim | [AI generated] FORTÉ is a fitness-focused technology company that provides a subscription-based streaming platform. It offers live and on-demand access to boutique fitness classes led by top fitness studios and professionals. The platform is designed for multiple devices, allowing users to participate in the fitness classes from anywhere. Workouts range across a variety of styles, including yoga, cardiovascular exercises, strength training, and cycling among others. | |
| DE | 2025-05-29 | 2025-05-29 | CRYPTO24 Google | Research | CHOICE AG About Victim | [AI generated] "Choice AG" is a Switzerland-based company that specializes in providing solutions for investment and risk management. It offers software as well as asset management services that cater towards institutional and private investors alike. Their solutions are geared to help clients manage risk while optimizing investment returns. Services range from portfolio management to risk analysis, covering various types of assets from bonds to real estate. | |
| TW | 2025-05-28 | 2025-03-06 | CRYPTO24 Google | Research | ELITE ADVANCED LASER CORPORATION ( ELASER ) About Victim | [AI generated] Elite Advanced Laser Corporation, or Elaser, is a company that specializes in the manufacturing of semiconductor and printed circuit boards. They provide the exceedingly high technology of laser drilling machines, primarily used for producing microvia holes in several applications. Headquartered in Taoyuan City, Taiwan, the company strives for the high efficiency of laser production and developing innovations in the laser industry. | |
| SG | 2025-04-23 | 2025-04-23 | CRYPTO24 Google | Research | N8XT About Victim | 3 TB data including Customer information, DB data, Technical documents, Projects data and Company-related documents etc ... in Servers and Nas. | |
| VN | 2025-04-12 | 2025-04-12 | CRYPTO24 Google | Research | CMC CORPERATION About Victim | 2 TB data including Token Data, Database Data, Website Data, ... from MariaDB, MongoDB and RARS-DB etc ... in DataCenter. | |
| MC | 2025-04-10 | 2025-04-10 | CRYPTO24 Google | Research | MODULUSGROUP,LUDI-SFM About Victim | casino customer info, db, ERP data, casino system projects source code and so on. | |
| CA | 2025-04-08 | 2025-04-08 | CRYPTO24 Google | Research | TAXPLAN About Victim | Tax-related documents and data, database and programs | |
| ID | 2025-04-08 | 2025-04-08 | CRYPTO24 Google | Research | MOCHTAR KARUWIN KOMAR: INDONESIAN LAW FIRM - MKK About Victim | Legal advice, case-related documents, financial information, contracts, billing | |
| IN | 2025-04-08 | 2025-04-08 | CRYPTO24 Google | Research | TECHNOFORTE SOFTWARE PVT LTD About Victim | All source codes of technoforte's main project - Palms(including mobile version) | |
| EG | 2025-04-08 | 2025-04-08 | CRYPTO24 Google | Research | INTERNATIONAL BUSINES SERVICE About Victim | Identity cards including front and back of about 3,000 people (image, pdf), HR reports, Pay documents | |
| CO | 2025-04-08 | 2025-04-08 | CRYPTO24 Google | Research | IRIS NEOFINANCIERA About Victim | All files of google drives, google chatting data ,workmanager documents(for last 5years) ,sql dbs and personal information of clients and staffs. |