← All breaches
Threat actor tracker 15 incidents tracked

AuditTeam — every breach we're tracking

Running log of incidents attributed to or claimed by AuditTeam in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked15
Latest activityJune 25, 2026
TypeRansomware / extortion

Groups like AuditTeam steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

high June 25, 2026

I-SYS Listed by AuditTeam Ransomware Group

I-SYS is a Russian software development and business automation company with 25 years of experience, offering custom development, digital tr…

high June 14, 2026

I-***YS Listed by AuditTeam Ransomware Group

I-***YS was listed on the AuditTeam ransomware leak site. The group claims to have stolen internal data.…

high June 04, 2026

Paid Victim 111CEAA5AD9DA2F1 Listed by AuditTeam Ransomware Group

N/A…

high June 02, 2026

ca***lm Listed by AuditTeam Ransomware Group

ca***lm was listed on the AuditTeam ransomware leak site. The group claims to have stolen internal data.…

high May 28, 2026

Paid Victim B35411691DDC2265 Listed by AuditTeam Ransomware Group

N/A…

high May 28, 2026

On***de Listed by AuditTeam Ransomware Group

On***de was listed on the AuditTeam ransomware leak site. The group claims to have stolen internal data.…

high May 23, 2026

Mopas Online Supermarket Listed by AuditTeam Ransomware Group

mopas.com.tr is a prominent Turkish retail chain and e-commerce platform primarily serving the Marmara region, offering an extensive online …

high May 18, 2026

Trésor Public Listed by AuditTeam Ransomware Group

DGCPT (Direction Générale de la Comptabilité Publique et du Trésor) is Senegal's public treasury authority under the Ministry of Finance, re…

high May 15, 2026

Mo***et Listed by AuditTeam Ransomware Group

Mo***et was listed on the AuditTeam ransomware leak site. The group claims to have stolen internal data.…

high May 10, 2026

Tr***ic Listed by AuditTeam Ransomware Group

Tr***ic was listed on the AuditTeam ransomware leak site. The group claims to have stolen internal data.…

high April 08, 2026

joycity Listed by AuditTeam Ransomware Group

Joycity is a prominent South Korean game developer and publisher founded in 1994 and listed on the KOSDAQ. Renowned for its innovation and g…

high April 08, 2026

Paid Victim A98A624456DA525F Listed by AuditTeam Ransomware Group

N/A…

high April 08, 2026

Paid Victim D3C1388C1B73BCA2 Listed by AuditTeam Ransomware Group

N/A…

high April 08, 2026

Kawasaki Motors Philippines Corporation Listed by AuditTeam Ransomware Group

Kawasaki Motors Philippines Corporation (KMPC), located in Muntinlupa, Metro Manila, is a leading manufacturer and distributor of Kawasaki m…

high April 08, 2026

Paid Victim CCD233FEE92FFA2D Listed by AuditTeam Ransomware Group

N/A…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.