THREAT ACTOR
LEAKNET_
ActiveLEAKNET is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of LEAKNET, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
69
Victims tracked
1 / 3
Active mirrors
2025-08-18
First listing
2026-09-06
Most recent
Victims by year
- 2026 32
- 2025 37
Leak site mirrors
3 mirrors tracked, 1 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
nleakk6sejx45jxtk7x6iyt65hwvfrkifc5v7ertdlwm3gttbpvlvxqd.onionNews Blog snapshot · 2026-09-23 05:20 -
ahic5qo3qbjgsyv7x2h5w7uh6nuh45km5srblj7i2amxt57xp4wud2qd.onionsnapshot · 2025-08-18 05:00 -
bnlluetsuf6pv7mchgue46h43v66uxtccpg3n5vcdzbeqften5cedlid.onionsnapshot · 2026-09-23 01:00
Recent victims
The 50 most recent victims claimed by LEAKNET. Total in the index: 69.
| Date listed | Victim | Description |
|---|---|---|
| 2026-09-06 | Will the Katecho,LLC be able to handle the hack and prevent a data breach in time? | #DataLeak #HIPAA #CyberSecurity #DataBreach #MedicalRecords #Healthca… |
| 2026-08-18 | The 11TB NYC Health + Hospitals Archive is Now Public | #NYCHealthHospitals #HealthcareBreach #DataLeak #HIPAA #SenateHELP #Ca… |
| 2026-08-06 | Data Exfiltration Diaries: The Shocking Stories Inside NYC Health + Hospitals | #NYCHealthHospitals #HealthcareBreach #DataLeak #HIPAA #SenateHELP #Ca… |
| 2026-07-29 | NYC Health + Hospitals: Over 12 Million Patients. Lie to the Senate. Hospital and Mayor's | #NYCHealthHospitals #HealthcareBreach #DataLeak #HIPAA #SenateHELP #Ca… |
| 2026-07-22 | FULL DATA of MagMutual Company: 1.1 TB Of Sensitive Information From Cybersecurity Experts | #Leaknet #Magmutual #SecurityCulture #DigitalPrivacy #PasswordSecurity… |
| 2026-07-15 | Anglo Belgian Corp: NATO's Nightmare? 6TB of Submarine Secrets, Nuclear Plant Schematics, | #Leaknet #CyberResilience #SecurityCulture #DigitalPrivacy #PasswordSe… |
| 2026-06-25 | The Cyber Insurer Who Couldn't Cyber: MagMutual Leaves 7.3M Records Out to Dry | When the vault has no lock: A cyber insurance giant forgot to insure i… |
| 2026-06-15 | Ktunaxa Nation Council: Breach Highlights Growing Risks Facing Public Institutions | #Leaknet #BreachAlert #PrivateData #SystemCompromised #Ktunaxa #Ktunax… |
| 2026-05-23 | The Far East Horizon Limited Full Database Leak: When Corporate Security Became a Illusion | #Leaknet #FarEastHorizonLimited #MalwareAlert #DigitalSecurity #CyberT… |
| 2026-05-12 | When Scale Outruns Safety: The Far East Horizon Limited Story | #Leaknet #SensitiveData #PrivacyAlert #HackedData #CyberIncident #Dat… |
| 2026-04-30 | Ktunaxa Nation Council: A Government Agency’s Guide to Doing the Opposite | #Leaknet #OnlineSafety #SecurityAlert #CyberAwareness #DigitalRisk #K… |
| 2026-04-27 | The City That Leaked Itself: Greenfield City | #Leaknet #Greenfield #InfoExposure #CyberIncident |
| 2026-04-21 | The Boston Capital Leak: A Story of Stolen Data and Broken Confidence | #DataBreach #LeakNET #BostonCapital #CyberSecurity |
| 2026-04-15 | First 1% Out: Greenfield City Breach Is Officially Public | #DataBreach #LeakNET #Greenfield |
| 2026-04-01 | The Bayside Distributing Breach: A Costly Lesson in Neglected Security | #Leaknet #SecurityMatters #ProtectYourData #InfoLeak #PrivacyRisk #Cyb… |
| 2026-03-31 | Brute Wrestling Was Brute Forced and Fully Compromised. | #Leaknet #DataCompromise #PrivacyBreach #InfoExposure #DataDump #Trus… |
| 2026-03-31 | The Illusion of Security at Olde Patriot Title & Closing Services. | #Leaknet #CyberAwareness #DigitalRisk #OnlineSafety #SecurityAlert #O… |
| 2026-03-31 | Inside the Leak That Exposed Boston Capital | #Leaknet #PrivateData #FreshLeak #SystemCompromised #BreachAlert #Bost… |
| 2026-03-27 | Inside the Rosenthal Agency Data Exposure: What Was Never Meant to Be Seen. | #Leaknet #ConfidentialLeak #DataSpill #PrivacyBreach #TheRosenthalAgen… |
| 2026-03-11 | HB Brantner: When Your Trailers Are Stronger Than Your Security | #Leaknet #HackedData #CyberIncident #DataRisk #SensitiveData #PrivacyR… |
| 2026-03-10 | CIS: When Good Intentions Meet Bad Security | #Leaknet #SecurityAlert #CyberAwareness #ThreatIntelligence #CIS #Brea… |
| 2026-02-26 | Uzma Berhad: Integrated Energy, Unintegrated Security | #Leaknet #DataCompromise #BreachReport #DigitalRisk #CyberAttack #Onli… |
| 2026-02-24 | S&H Accounting: When Your Accountant Needs IT Therapy | #Leaknet #InfoSec #CyberRisk #DataExposure #SecurityFailure #DataSpill… |
| 2026-02-18 | Washington International School - FULL DATA LEAK | #Leaknet #HackedData #CyberIncident #DataRisk #SensitiveData #PrivacyA… |
| 2026-02-17 | Barry Equipment: Big Machines, Big Leaks (and Even Bigger Questions) | #LeakNet #DataLeak #BarryEquipment |
| 2026-02-10 | When the Lockers Learned to Gossip: Washington International School Data Debacle. | #Leaknet #PrivateData #FreshLeak #DataBreach |
| 2026-02-02 | Distron: The Leak That Could Threaten National Security | #SystemCompromised #BreachAlert #DataLeak #SecurityAlert |
| 2026-01-29 | RMGA Company: Horsepower: High. Cybersecurity: Optional. | #DataBreach #Leaknet #SecurityFail #PrivateData #FreshLeak |
| 2026-01-16 | The Hidden Breach: Why CIDESA Is Avoiding the Full Story. | #HackerAttack #DigitalSecurity #DataLeak #BreachAlert |
| 2026-01-08 | How Distron corporation threaten national security. First Data leakage. | #InfoLeak #DigitalThreat #DataExposed #SecurityFailure #CyberAttack |
| 2026-01-05 | Undercover Breach: Why NTH Consultant is staying silent about the FULL data Leak. | #PersonalDataLeak #CyberAttack #PrivacyMatters #DataBreach |
| 2026-01-04 | Security by Silence: How Alpine Lumber Is Burying a Breach. FULL RELEASE | #FULLDATALEAK #AlpineLumber #BLDR |
| 2025-12-30 | From Subsidiary to Security Nightmare: Alpine Lumber Becomes BFS’s Weakest Link | #FirstBatch #DataLeak #MajorBreach #AlpineBLDR #BFS |
| 2025-12-30 | Breach Report: NTH Consultant - Early data available | #DataLeak #Breach |
| 2025-12-27 | Massive Data Leak - Banco Vimenca - Dominican Bank. | Sensitive info exposed in commercial bank. #Breach #Leak Incident #Ban… |
| 2025-12-23 | BOCOC Company’s Full Leak Data | Exclusive information. #LeakNet #DataLeak #Breached |
| 2025-12-23 | Complete data leak of the company BestFormulation (SIRIO) | Data Leak, Exclusive materials! |
| 2025-12-17 | Banco Vimenca Sleeping at the Vault Door | #DataLeak #Breach #BancoVimenca 1% of data already available! |
| 2025-12-09 | BOCOC Company’s First Data Vulnerability. | #Announce #DataLeak 1% of all data. |
| 2025-11-12 | The JADCPA company was fully LEAKED | #LeakNet #DataLeak #JADCPA |
| 2025-11-06 | APMG company fully LEAKED patients data! | #LeakNet #DataLeak #APMG |
| 2025-11-03 | The JADCPA company was breached, and a significant amount of data was compromised. | Currently publishing only 1% of all data. |
| 2025-11-01 | The CPA company was breached, and a significant amount of data was compromised. | Currently publishing only 1% of all data. |
| 2025-10-31 | Medical company hacked, first set of files released online - 1% of APMG data is here! | #Announce #DataLeak |
| 2025-10-27 | The Petroecuador company’s systems were fully compromised. | Exclusive information. Full data leak. |
| 2025-10-07 | Descon company FULLY Leaked 1.6TB of DATA | Exclusive information! One of the largest companies in Pakistan! Full … |
| 2025-10-06 | Descon company FULLY Leaked. | Exclusive information! One of the largest companies in Pakistan! #Data… |
| 2025-09-20 | Major Cyber Incident: Descon Group Data Breach | #DataLeak #LeakNet #Descon #Breached |
| 2025-09-19 | ALAW LEAKED! Legal firm allows leak of theirs clients | Full Data Weight: 192GB #DataLeak #ALAW #Breached |
| 2025-08-30 | ALAW LEAKED! Legal firm allows leak of theie clients | Full Data Weight: 192GB #DataLeak #ALAW #Breached |
CONFIRMED ATTACKS
Leaknet confirmed attacks: 1 verified incident
Ransomnews has verified 1 Leaknet incident against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. All of them fall in December 2025. United States accounts for 1 of them (100%). The most affected sector is retail, at 1 confirmed victim. Where a figure was disclosed (1 case), these incidents account for 2,170 exposed records.
1Verified incidents
1Countries
December 2025Active range
—Paid, where outcome known
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Leaknet incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| December 2025 | Alpine Lumber Company | Retail | Colorado, United States | 2,170 | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Leaknet's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.