Helix — every breach we're tracking
Running log of incidents attributed to or claimed by Helix in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.
Groups like Helix steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.
Tracked incidents
Hypertherm Listed by Helix Ransomware Group
Hypertherm records. Yearly revenue ~$650.7 million yearly. GoFile links and passwords unlock in 24 hours.…
Westrock Coffee Listed by Helix Ransomware Group
Westrock Coffee records. Yearly revenue ~$1.2 billion yearly. GoFile links and passwords unlock in 24 hours.…
American Campus Listed by Helix Ransomware Group
American Campus records. Yearly revenue ~$1 billion yearly. GoFile links and passwords unlock in 6 hours.…
Quikrete Listed by Helix Ransomware Group
Quikrete records. GoFile links and passwords unlock in 6 hours.…
Southwire Listed by Helix Ransomware Group
Southwire records. Yearly revenue ~$9 billion. GoFile links and passwords unlock in 6 hours.…
Smith Douglas Homes Listed by Helix Ransomware Group
Smith Douglas Homes records. Yearly revenue ~$971 million. GoFile links and passwords unlock in 12 hours.…
Personify Health Listed by Helix Ransomware Group
Personify Health records. Yearly revenue ~$500 million. GoFile links and passwords unlock in 12 hours.…
Bay Alarm Listed by Helix Ransomware Group
Bay Alarm records. Yearly revenue ~$256 million. GoFile links and passwords unlock in 12 hours.…
Rheem Global Listed by Helix Ransomware Group
Rheem Global customer records. Yearly revenue ~$6 billion. GoFile links and passwords unlock in 12 hours.…
AmSpec Listed by Helix Ransomware Group
AmSpec is live. T1 unlocks on the current 24-hour cadence, then 24 hours per remaining tier.…
Delek US Listed by Helix Ransomware Group
Delek US is live. T1 unlocks in 12 hours, then 24 hours per remaining tier.…
Kennedy Jenks Listed by Helix Ransomware Group
Kennedy Jenks is live. T1 is unlocked. T2 in 24 hours, then one day each through T4.…
Highwoods Properties Listed by Helix Ransomware Group
SharePoint libraries staged T1 (least) → T4 (most). Release countdown live on Helix. Tiers unlock by stage when each set timer reaches 0.…
Uber Listed by Helix Ransomware Group
SharePoint libraries staged T1 (least) → T4 (most). Release countdown live on Helix. Tiers unlock by stage when each set timer reaches 0.…
Morguard Listed by Helix Ransomware Group
Morguard reached out, took extensions, then ignored the negotiation with no real offer. Contacting us and stalling is not a strategy. Deadli…
Westland Insurance Listed by Helix Ransomware Group
Westland reached out, got the full demand, then stalled with no serious number. Contacting us and dragging process is not negotiation.…
Venture Logistics Listed by Helix Ransomware Group
SharePoint libraries staged T1 (least) → T4 (most). Release countdown live on Helix. Tiers unlock by stage when each set timer reaches 0.…
Your email leaked. See who’s selling your address.
Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free DoxxScan™ scan shows you which breaches exposed your email. Then you pick what fits.