Skip to content
← All breaches
Threat actor tracker 9 incidents tracked

Curious Worm — every breach we're tracking

Running log of incidents attributed to or claimed by Curious Worm in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked9
Latest activityNovember 11, 2026
TypeRansomware / extortion

Groups like Curious Worm steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

high November 11, 2026

sacheminc.com Listed by Curious Worm Ransomware Group

SACHEM, Inc. is a global leader in high-purity chemical solutions, specializing in the production of precise and pure products for various a…

high November 11, 2026

sbhny.org Listed by Curious Worm Ransomware Group

SBH Health System provides nonsectarian, and acute care, and community hospital care services. SBH Health System is based in the Bronx…

high November 11, 2026

shannonhealth.com Listed by Curious Worm Ransomware Group

Shannon Medical Center is a community-owned health system in West Texas, dedicated to providing exceptional healthcare services to residents…

high November 11, 2026

raleighortho.com Listed by Curious Worm Ransomware Group

Raleigh Orthopaedic is a leading provider of comprehensive orthopedic care in Wake County, NC, offering both conservative and surgical treat…

high November 11, 2026

lifelinescreening.com Listed by Curious Worm Ransomware Group

Since 1993, Life Line Screening has brought clinical-grade preventive testing to communities across America. More than 11 million people hav…

high November 11, 2026

baronandbudd.com Listed by Curious Worm Ransomware Group

Baron & Budd is a prominent plaintiffs law firm specializing in mesothelioma cases, class actions, and drug injury claims. With over four de…

high November 11, 2026

marquiscompanies.com Listed by Curious Worm Ransomware Group

Marquis Companies is a family-owned provider of senior living and care solutions, offering a range of services including assisted living, me…

high November 11, 2026

atlashp.com Listed by Curious Worm Ransomware Group

Atlas Healthcare Partners specializes in partnering with health systems and physicians to develop, manage, and invest in Ambulatory Surgery …

high November 11, 2026

safcodental.com Listed by Curious Worm Ransomware Group

Safco Dental Supply LLC specializes in providing a wide range of dental supplies, products, and equipment, including restorative and cosmeti…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free DoxxScan™ scan shows you which breaches exposed your email. Then you pick what fits.

Run my free scan
15 seconds · 13.1B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
The full report on what your scan found, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.