← All breaches
Threat actor tracker 183 incidents tracked

Devman — every breach we're tracking

Running log of incidents attributed to or claimed by Devman in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked183
Latest activityMarch 03, 2026
TypeRansomware / extortion

Groups like Devman steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 183 incidents we've attributed to Devman.

high March 03, 2026

Encompass Listed by dragonforce Ransomware Group

Founded in 2001 and headquartered in Clarksville, Virginia, Encompass Solutions is a preferred Epicor partner and Value-Added Re-seller (VAR…

high February 04, 2026

Crystal Coast Pain Management Listed by devman Ransomware Group

SSN, medical data, medical cards…

high January 30, 2026

woodwardoralsurgery.com Listed by devman Ransomware Group

Patient data, med cards…

high January 30, 2026

wjnklaw.com Listed by lockbit5 Ransomware Group

Westervelt, Johnson, Nicoll & Keller, LLC is a historic law firm based in Peoria, Illinois, with ove...…

high January 28, 2026

tiw-group.com Listed by devman Ransomware Group

TIW Group is a specialist software firm with over 30 years of experience in developing solutions for the insurance industry. Their flagship …

high January 28, 2026

zallc.org Listed by devman Ransomware Group

PII data, SSN´s financial and audit reports.…

high January 28, 2026

z*l*c.o*g Listed by devman Ransomware Group

PII data, SSN´s financial and audit reports.…

high January 28, 2026

**ps.net Listed by devman Ransomware Group

**ps.net was listed on the devman ransomware leak site. The group claims to have stolen internal data.…

high January 27, 2026

twi-group.com Listed by devman Ransomware Group

TWI Group is a specialized freight forwarder and logistics provider that primarily focuses on the trade show industry. The company provides …

high January 26, 2026

c*n**lta**i*.com Listed by devman Ransomware Group

The data contains materials of national security including BIO laboratory facilities blue prints, and infromation regardless US army nitrogl…

high January 26, 2026

consultaegis.com Listed by devman Ransomware Group

The data contains materials of national security including BIO laboratory facilities blue prints, and infromation regardless US army nitrogl…

high January 26, 2026

***vandenberg.com Listed by devman Ransomware Group

Client data, HR data…

high January 25, 2026

cs.at Listed by lockbit5 Ransomware Group

CS Pflege & Betreuung Die CS Caritas Socialis bietet Pflege- und Betreuungsangebote aus einer Hand:...…

high January 25, 2026

**.at Listed by devman Ransomware Group

**.at was listed on the devman ransomware leak site. The group claims to have stolen internal data.…

high January 24, 2026

****cr*nem*ds.c*m Listed by devman Ransomware Group

Patient data, medical cards clinic records…

high January 24, 2026

***-gr*up.com Listed by devman Ransomware Group

***-gr*up.com was listed on the devman ransomware leak site. The group claims to have stolen internal data.…

high January 21, 2026

www.mims.com Listed by devman Ransomware Group

Mims.com is an online resource for medical professionals used mainly in Asia-Pacific and Middle East regions. It provides latest drug inform…

high January 21, 2026

***om****s-***.com Listed by devman Ransomware Group

***om****s-***.com was listed on the devman ransomware leak site. The group claims to have stolen internal data.…

high January 21, 2026

www.saundersandsaunders.com Listed by devman Ransomware Group

N/A…

high January 20, 2026

www.****law.com Listed by devman Ransomware Group

www.****law.com was listed on the devman ransomware leak site. The group claims to have stolen internal data.…

high January 20, 2026

Tvgoiania Listed by devman Ransomware Group

Tvgoiania is a media and news company based in Goiânia, Brazil. It provides a platform for local news, events, and updates significant to th…

high January 20, 2026

automax.com Listed by devman Ransomware Group

AutoMax.com is a leading used car dealership group in the US. Known for its wide range of high-quality pre-owned vehicles, AutoMax.com provi…

high January 20, 2026

Syrmasgs Listed by devman Ransomware Group

N/A…

high January 20, 2026

***m*sic.fi Listed by devman Ransomware Group

***m*sic.fi was listed on the devman ransomware leak site. The group claims to have stolen internal data.…

high January 12, 2026

klhindustries.com Listed by devman Ransomware Group

N/A…

high January 12, 2026

pronaca.com Listed by devman Ransomware Group

Financial, contracts HR data…

high January 12, 2026

s***p.com Listed by devman Ransomware Group

Case data, atourney client data, hr data…

high January 12, 2026

****t*lc*a*tpm.com Listed by devman Ransomware Group

Financial, patients data, HR data…

high January 11, 2026

consigaz.com.br Listed by devman Ransomware Group

Consigaz is a Brazilian company that specializes in the distribution of Liquefied Petroleum Gas (LPG) for both industrial and residential us…

high January 11, 2026

sealbeachca.gov Listed by devman Ransomware Group

Datatheft 300gb of data stollen includes gov documents, deeds and much more…

high January 11, 2026

sealbeachpd.com Listed by devman Ransomware Group

data theft, evidence, officers personal information police reports, DEA open cases information…

high January 11, 2026

******m*di*al.com Listed by devman Ransomware Group

Patients data, plastic operations data, SSNs…

high December 28, 2025

sharinc.org Listed by devman Ransomware Group

Financial, Custommer data…

high December 27, 2025

oppor**nity*****.org Listed by devman Ransomware Group

Patients data, financial data…

high December 27, 2025

Jennings SD Listed by devman Ransomware Group

Financial data, HR data…

high December 25, 2025

kavi.fi Listed by devman Ransomware Group

HR data…

high December 25, 2025

Intonu.com Listed by devman Ransomware Group

Financial, Hr documents, claims…

high December 25, 2025

i**o**.us Listed by devman Ransomware Group

Financial, Hr documents, claims…

high December 25, 2025

***ind***es.com Listed by devman Ransomware Group

Hr data, client data…

high December 22, 2025

British Holiday & Home Parks Association Ltd Listed by devman Ransomware Group

Passport scans, Financial…

high December 22, 2025

k*v*.fi Listed by devman Ransomware Group

HR data…

high December 19, 2025

*n**e-ai Listed by devman Ransomware Group

SRC, Client data…

high December 19, 2025

transrocamar.com Listed by devman Ransomware Group

Financial, Client IDS…

high December 19, 2025

consult*****.c** Listed by devman Ransomware Group

Financial, HR data…

high December 19, 2025

****s*oc****.com Listed by devman Ransomware Group

Financial, Client IDS…

high December 18, 2025

d*v***.cl Listed by devman Ransomware Group

Patients full records, HIV tests results, ID's…

high December 18, 2025

Clínica Dávila Listed by devman Ransomware Group

Patients' full records, HIV test results, IDs. Throughout a long waiting period, and despite a vast number of phone calls and emails sent b…

high December 17, 2025

Culinary Jet Concierge Listed by devman Ransomware Group

N/A…

high December 17, 2025

Jet ******** Listed by devman Ransomware Group

Jet ******** was listed on the devman ransomware leak site. The group claims to have stolen internal data.…

high December 16, 2025

a**o*50*****.org Listed by devman Ransomware Group

Financial, HR data, Client data…

high December 16, 2025

beausejourco-op.crs Listed by devman Ransomware Group

Financial, HR…

high December 16, 2025

Axion50plus Listed by devman Ransomware Group

Financial, HR data, Client data…

high December 16, 2025

b**u**jou***-**.crs Listed by devman Ransomware Group

Financial, HR…

high December 14, 2025

***-***tems.*** Listed by devman Ransomware Group

***-***tems.*** was listed on the devman ransomware leak site. The group claims to have stolen internal data.…

high December 14, 2025

DXS SYSTEMS Listed by devman Ransomware Group

N/A…

high December 11, 2025

C*NC*R Listed by devman Ransomware Group

Financial data, clients data…

high December 11, 2025

Hopital La Rabta Listed by qilin Ransomware Group

Hopital La Rabta was listed on the qilin ransomware leak site. The group claims to have stolen internal data.…

high December 11, 2025

Hopital ** ***** Listed by devman Ransomware Group

Hopital ** ***** was listed on the devman ransomware leak site. The group claims to have stolen internal data.…

high December 11, 2025

www.digital****.com Listed by devman Ransomware Group

Data theft 80gb…

high December 11, 2025

CANCER Listed by devman Ransomware Group

Financial data, clients data…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.