Icarus — every breach we're tracking
Running log of incidents attributed to or claimed by Icarus in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.
Groups like Icarus steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.
Tracked incidents
G* Listed by Icarus Ransomware Group
Salesforce data for this corp. Data stolen: SF data - compressed…
H* Listed by Icarus Ransomware Group
Salesforce data of H*. Data stolen: SF data - Compressed…
C* Listed by Icarus Ransomware Group
Salesforce data for this corp. Data stolen: SF data. Compressed size.…
HDS (Hdscorp) Listed by Icarus Ransomware Group
Salesforce data for this corp. Data stolen: SF data - compressed…
Gms-net Listed by Icarus Ransomware Group
Salesforce data for this corp. Data stolen: SF data - compressed…
Cqcrm Listed by Icarus Ransomware Group
Salesforce data for Cqcrm Data stolen: SF data - compressed…
Cbassociations Listed by Icarus Ransomware Group
Salesforce data for this corp. Data stolen: SF data. Compressed size.…
Klue.com Listed by Icarus Ransomware Group
As you've probably already heard, ***.com has been impacted by us recently. A number of other companies' Salesforce instances, which were pa…
Icarus Group Steals Salesforce Data via Klue OAuth Breach
Threat actor group Icarus exploited an OAuth breach in the Klue Battlecards app to access and exfiltrate Salesforce CRM data from multiple c…
thecreditpros.com Listed by Icarus Ransomware Group
TheCreditPros' Salesforce instance was breached and 263MB of data were taken from it, including: 01_input_fullcards.csv - 51,691 lines of…
Cazh.id Listed by Icarus Ransomware Group
- User DB: 300,000 Users (Email, Hash, Phone, Address, DOB) for https://bkdp.cazh.id/. - KYC Vault: 7,800 Government IDs + 4,200 Selfies …
Your email leaked. See who’s selling your address.
Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.