Egregor — every breach we're tracking
Running log of incidents attributed to or claimed by Egregor in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.
Groups like Egregor steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.
Tracked incidents
Center Hospitalier de Dax-Côte d’Argent Listed by egregor Ransomware Group
Center Hospitalier de Dax-Côte d’Argent was listed on the egregor ransomware leak site. The group claims to have stolen internal data.…
Kmart Listed by egregor Ransomware Group
Kmart was listed on the egregor ransomware leak site. The group claims to have stolen internal data.…
TransLink (Metro Vancouver transit system) Listed by egregor Ransomware Group
TransLink (Metro Vancouver transit system) was listed on the egregor ransomware leak site. The group claims to have stolen internal data.…
Cencosud Listed by egregor Ransomware Group
Cencosud was listed on the egregor ransomware leak site. The group claims to have stolen internal data.…
SN Servicing Corporation Listed by egregor Ransomware Group
SN Servicing Corporation was listed on the egregor ransomware leak site. The group claims to have stolen internal data.…
Barnes & Noble Listed by egregor Ransomware Group
Barnes & Noble was listed on the egregor ransomware leak site. The group claims to have stolen internal data.…
Your email leaked. See who’s selling your address.
Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.