Icefire — every breach we're tracking
Running log of incidents attributed to or claimed by Icefire in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.
Groups like Icefire steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.
Tracked incidents
*.skifgroup.com Listed by Icefire Ransomware Group
*.skifgroup.com was listed on the icefire ransomware leak site. The group claims to have stolen internal data.…
*.feesh.ch Listed by Icefire Ransomware Group
*.feesh.ch was listed on the icefire ransomware leak site. The group claims to have stolen internal data.…
*.directfn.net Listed by Icefire Ransomware Group
*.directfn.net was listed on the icefire ransomware leak site. The group claims to have stolen internal data.…
*.guneshosting.com Listed by Icefire Ransomware Group
*.guneshosting.com was listed on the icefire ransomware leak site. The group claims to have stolen internal data.…
*.vps-vds.com Listed by Icefire Ransomware Group
*.vps-vds.com was listed on the icefire ransomware leak site. The group claims to have stolen internal data.…
*.cco1.com Listed by Icefire Ransomware Group
*.cco1.com was listed on the icefire ransomware leak site. The group claims to have stolen internal data.…
*.iperactive.com.ar Listed by Icefire Ransomware Group
*.iperactive.com.ar was listed on the icefire ransomware leak site. The group claims to have stolen internal data.…
*.kodhosting.com Listed by Icefire Ransomware Group
*.kodhosting.com was listed on the icefire ransomware leak site. The group claims to have stolen internal data.…
*.kru.ac.th Listed by Icefire Ransomware Group
*.kru.ac.th was listed on the icefire ransomware leak site. The group claims to have stolen internal data.…
*.bestservers.pro Listed by Icefire Ransomware Group
*.bestservers.pro was listed on the icefire ransomware leak site. The group claims to have stolen internal data.…
*.algotrader.com Listed by Icefire Ransomware Group
*.algotrader.com was listed on the icefire ransomware leak site. The group claims to have stolen internal data.…
Your email leaked. See who’s selling your address.
Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.