← All breaches
Threat actor tracker 23 incidents tracked

Doppelpaymer — every breach we're tracking

Running log of incidents attributed to or claimed by Doppelpaymer in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked23
Latest activityApril 10, 2021
TypeRansomware / extortion

Groups like Doppelpaymer steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

high April 10, 2021

Office of the Attorney General Listed by doppelpaymer Ransomware Group

Office of the Attorney General was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high March 01, 2021

Azusa police department Listed by doppelpaymer Ransomware Group

Azusa police department was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high February 21, 2021

Manutan Listed by doppelpaymer Ransomware Group

Manutan was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high February 16, 2021

Kia Motors America (KMA) Listed by doppelpaymer Ransomware Group

Kia Motors America (KMA) was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high February 08, 2021

Cuyahoga Metropolitan Housing Authority Listed by doppelpaymer Ransomware Group

Cuyahoga Metropolitan Housing Authority was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high November 29, 2020

Foxconn Listed by doppelpaymer Ransomware Group

Foxconn was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high November 28, 2020

Delaware County Listed by doppelpaymer Ransomware Group

Delaware County was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2020

Compal Listed by doppelpaymer Ransomware Group

Compal was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high November 01, 2020

Banijay Group SAS Listed by doppelpaymer Ransomware Group

Banijay Group SAS was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high October 28, 2020

Chatham County Government Listed by doppelpaymer Ransomware Group

Chatham County Government was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high October 07, 2020

Hall County Listed by doppelpaymer Ransomware Group

Hall County was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high August 30, 2020

Newcastle University Listed by doppelpaymer Ransomware Group

Newcastle University was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high August 19, 2020

4 Canadian courier divisions of TFI International's Canpar Express Listed by doppelpaymer Ransomware Group

4 Canadian courier divisions of TFI International's Canpar Express was listed on the doppelpaymer ransomware leak site. The group claims to …

high August 01, 2020

Boyce Technologies (device manufacturer- transit communication systems and now ventilators b/c of COVID-19) Listed by doppelpaymer Ransomware Group

Boyce Technologies (device manufacturer- transit communication systems and now ventilators b/c of COVID-19) was listed on the doppelpaymer r…

high June 11, 2020

Knoxville PD and City of Knoxville, TN (Knox County) Listed by doppelpaymer Ransomware Group

Knoxville PD and City of Knoxville, TN (Knox County) was listed on the doppelpaymer ransomware leak site. The group claims to have stolen in…

high June 05, 2020

City of Florence, Alabama Listed by doppelpaymer Ransomware Group

City of Florence, Alabama was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high June 03, 2020

Digital Management Inc. (NASA Contractor) Listed by doppelpaymer Ransomware Group

Digital Management Inc. (NASA Contractor) was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data…

high June 01, 2020

Mitsubishi Listed by doppelpaymer Ransomware Group

Mitsubishi was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high April 17, 2020

Afpa Listed by doppelpaymer Ransomware Group

Afpa was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high March 05, 2020

Kimchuk Listed by doppelpaymer Ransomware Group

Kimchuk was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high March 01, 2020

City of Torrance (Los Angeles County) Listed by doppelpaymer Ransomware Group

City of Torrance (Los Angeles County) was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high February 01, 2020

Visser Precision Listed by doppelpaymer Ransomware Group

Visser Precision was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

high January 01, 2020

Bretagne Telecom Listed by doppelpaymer Ransomware Group

Bretagne Telecom was listed on the doppelpaymer ransomware leak site. The group claims to have stolen internal data.…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.