Skip to content
← All breaches
Threat actor tracker 11 incidents tracked

Imnotavillian — every breach we're tracking

Running log of incidents attributed to or claimed by Imnotavillian in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked11
Latest activitySeptember 28, 2026
TypeRansomware / extortion

Groups like Imnotavillian steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

high September 28, 2026

Tabacko Listed by Imnotavillian Ransomware Group

Tabacko was listed on the Imnotavillian ransomware leak site. The group claims to have stolen internal data.…

high September 28, 2026

Timmermans Listed by Imnotavillian Ransomware Group

Timmermans was listed on the Imnotavillian ransomware leak site. The group claims to have stolen internal data.…

high September 28, 2026

Bodin Fredrik Listed by Imnotavillian Ransomware Group

Bodin Fredrik was listed on the Imnotavillian ransomware leak site. The group claims to have stolen internal data.…

high September 28, 2026

Motlik Listed by Imnotavillian Ransomware Group

Motlik was listed on the Imnotavillian ransomware leak site. The group claims to have stolen internal data.…

high September 28, 2026

The Italy Files Listed by Imnotavillian Ransomware Group

The Italy Files was listed on the Imnotavillian ransomware leak site. The group claims to have stolen internal data.…

high September 28, 2026

Liu Listed by Imnotavillian Ransomware Group

Liu was listed on the Imnotavillian ransomware leak site. The group claims to have stolen internal data.…

high September 28, 2026

Kraft Listed by Imnotavillian Ransomware Group

Kraft was listed on the Imnotavillian ransomware leak site. The group claims to have stolen internal data.…

high September 28, 2026

Alontsau Listed by Imnotavillian Ransomware Group

Alontsau was listed on the Imnotavillian ransomware leak site. The group claims to have stolen internal data.…

high September 28, 2026

Mortel Listed by Imnotavillian Ransomware Group

Mortel was listed on the Imnotavillian ransomware leak site. The group claims to have stolen internal data.…

high September 28, 2026

Kokli Listed by Imnotavillian Ransomware Group

Kokli was listed on the Imnotavillian ransomware leak site. The group claims to have stolen internal data.…

high September 28, 2026

Klaassen Listed by Imnotavillian Ransomware Group

Klaassen was listed on the Imnotavillian ransomware leak site. The group claims to have stolen internal data.…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run my free scan
15 seconds · 13.1B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
The full report on what your scan found, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.