← All breaches
Threat actor tracker 20 incidents tracked

Hellcat — every breach we're tracking

Running log of incidents attributed to or claimed by Hellcat in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked20
Latest activityApril 07, 2025
TypeRansomware / extortion

Groups like Hellcat steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

high April 07, 2025

P**o*** Listed by hellcat Ransomware Group

We have breached a U.S.-based financial services firm. 381GB of sensitive data has been secured. The name will be made public in a few hours…

high April 07, 2025

CVTE Listed by hellcat Ransomware Group

We have breached the internal systems of Guangzhou Shiyuan Electronic Technology, securing sensitive files that, if exposed, would cause ser…

high April 07, 2025

Potomac Financial Services Listed by hellcat Ransomware Group

We have breached a U.S.-based financial services firm. 381GB of sensitive data has been secured. The name will be made public in a few hours…

high April 05, 2025

LeoVegas AB Listed by hellcat Ransomware Group

We have compromised the internal systems of LeoVegas AB. The data in our possession threatens their operations, regulatory compliance, and c…

high April 05, 2025

Racami Listed by hellcat Ransomware Group

Jiraware <<3 !! We have breached Racami’s internal systems. The data in our possession poses a serious threat to their business continuity, …

high April 05, 2025

Asseco Listed by hellcat Ransomware Group

Jiraware <<3 !! We have breached Asseco’s internal systems, stealing sensitive files, communications, financial records, and source material…

high March 29, 2025

Transsion Listed by AiLock Ransomware Group

Transsion Holdings is a diversified international telecommunications manufacturing company founded in 2006, specializing in mobility solutio…

high March 24, 2025

Omnitracs Listed by hellcat Ransomware Group

We hold sensitive files from Omnitracs, a leading provider of fleet management and logistics solutions. The company must act swiftly to prev…

high March 24, 2025

Grupo Santillana Listed by hellcat Ransomware Group

We hold sensitive files from Santillana, the largest business unit of Spain’s publicly traded Prisa media group. The company must act quickl…

high March 18, 2025

HighWire Press Listed by hellcat Ransomware Group

Jiraware <<3 !! We hold sensitive data from HighWire Press, a leading platform serving scholarly publishers. The data includes internal docu…

high March 16, 2025

Ascom Holding AG Listed by hellcat Ransomware Group

44GB of sensitive data including internal reports, sales documents, confidential contracts, development tools, and source code stolen from A…

high February 25, 2025

OneDealer Listed by hellcat Ransomware Group

We have obtained over 330,000 records from OneDealer partners, including sales reports, leads, customer data, and vehicle details with VINs …

high December 26, 2024

Car Care Plan - Turkey Listed by hellcat Ransomware Group

We have successfully stolen over50 GBof data from Car Care Plan, including financial records with sensitive information, legal documents and…

high December 25, 2024

Sistem Informasi Pengelolaan Keuangan Daerah (SIPKD) Listed by hellcat Ransomware Group

We have successfully stolen82 GBof data, including backups, from the e-Finance system of Blora Regency, known as theSistem Informasi Pengelo…

high December 25, 2024

Pinger - USA Listed by hellcat Ransomware Group

We have successfully breached Pinger, obtaining 111 GB of sensitive data. This includes over 9 million user records, private messages, voice…

high November 04, 2024

College of Business - Tanzania Listed by hellcat Ransomware Group

We have released over 500,000 records from Tanzania’s College of Business Education, containing student names, phone numbers, emails, and ad…

high November 04, 2024

Ministry of Education - Jordan Listed by hellcat Ransomware Group

We have successfully accessed and compromised a range of sensitive documents from Jordan's Ministry of Education. This includes images of id…

high November 04, 2024

Schneider Electric - France Listed by hellcat Ransomware Group

[IA generated] Schneider Electric, based in France, is a global leader in energy management and automation. The company focuses on digital t…

high October 25, 2024

The Knesset - Israel Listed by hellcat Ransomware Group

We have successfully compromised the Knesset's secure networks and extracted 64GB of sensitive data. This includes internal communications a…

high October 01, 2024

Electronics For Imaging Listed by hellcat Ransomware Group

We hold 19GB of sensitive files from Electronics For Imaging, Inc., including critical corporate data that could jeopardize the company's op…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.