Skip to content
← All breaches
Threat actor tracker 1 incident tracked

Collective — every breach we're tracking

Running log of incidents attributed to or claimed by Collective in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked1
Latest activityJanuary 5, 2026
TypeRansomware / extortion

Groups like Collective steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run my free scan
15 seconds · 13.1B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
The full report on what your scan found, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.