← All breaches
Threat actor tracker 14 incidents tracked

Freecivilian — every breach we're tracking

Running log of incidents attributed to or claimed by Freecivilian in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked14
Latest activityDecember 31, 2022
TypeRansomware / extortion

Groups like Freecivilian steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

high December 31, 2022

minagro.gov.ua Listed by freecivilian Ransomware Group

minagro.gov.ua was listed on the freecivilian ransomware leak site. The group claims to have stolen internal data.…

high December 31, 2022

mon.gov.ua Listed by freecivilian Ransomware Group

mon.gov.ua was listed on the freecivilian ransomware leak site. The group claims to have stolen internal data.…

high December 31, 2022

kmu.gov.ua Listed by freecivilian Ransomware Group

kmu.gov.ua was listed on the freecivilian ransomware leak site. The group claims to have stolen internal data.…

high December 31, 2022

gkh.in.ua Listed by freecivilian Ransomware Group

gkh.in.ua was listed on the freecivilian ransomware leak site. The group claims to have stolen internal data.…

high December 31, 2022

bdr.mvs.gov.ua Listed by freecivilian Ransomware Group

bdr.mvs.gov.ua was listed on the freecivilian ransomware leak site. The group claims to have stolen internal data.…

high December 31, 2022

kyivcity.com Listed by freecivilian Ransomware Group

kyivcity.com was listed on the freecivilian ransomware leak site. The group claims to have stolen internal data.…

high December 31, 2022

motorsich.com Listed by freecivilian Ransomware Group

motorsich.com was listed on the freecivilian ransomware leak site. The group claims to have stolen internal data.…

high December 31, 2022

mtsbu.ua Listed by freecivilian Ransomware Group

mtsbu.ua was listed on the freecivilian ransomware leak site. The group claims to have stolen internal data.…

high December 31, 2022

health.mia Listed by freecivilian Ransomware Group

health.mia was listed on the freecivilian ransomware leak site. The group claims to have stolen internal data.…

high December 31, 2022

minregion.gov.ua Listed by freecivilian Ransomware Group

minregion.gov.ua was listed on the freecivilian ransomware leak site. The group claims to have stolen internal data.…

high December 31, 2022

e-driver.hsc.gov.ua Listed by freecivilian Ransomware Group

e-driver.hsc.gov.ua was listed on the freecivilian ransomware leak site. The group claims to have stolen internal data.…

high December 31, 2022

diia.gov.ua Listed by freecivilian Ransomware Group

diia.gov.ua was listed on the freecivilian ransomware leak site. The group claims to have stolen internal data.…

high December 31, 2022

mfa.gov.ua Listed by freecivilian Ransomware Group

mfa.gov.ua was listed on the freecivilian ransomware leak site. The group claims to have stolen internal data.…

high December 31, 2022

wanted.mvs.gov.ua Listed by freecivilian Ransomware Group

wanted.mvs.gov.ua was listed on the freecivilian ransomware leak site. The group claims to have stolen internal data.…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.