Lapsus$ — every breach we're tracking
Running log of incidents attributed to or claimed by Lapsus$ in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.
Groups like Lapsus$ steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.
Tracked incidents
AYA BANK Listed by lapsus$ Ransomware Group
Everything for the main platform is there. Full dump and PII data's. If AYA Bank dont contact us or pay the ransom we will start sale…
GITHUB INTERNAL Listed by lapsus$ Ransomware Group
Everything for the main platform is there. No ransom, we do not care about extorting Github. If no buyer is found, we leak for free.…
Ingka Group (IKEA) Targeted in Alleged Lapsus$ Data Theft
Lapsus$ claimed to have stolen and is offering for sale around 180 GB of internal data from Ingka Group, the largest IKEA franchisee. The al…
MERCOR Listed by lapsus$ Ransomware Group
This data has been acquired by a private party. No public leak will occur.…
MAPFRE ASSURANCE Listed by lapsus$ Ransomware Group
This data has been acquired by a private party. No public leak will occur.…
Lapsus$ Leaks Vodafone Source Code and Database Credentials
The Lapsus$ group publicly dumped approximately 7.1GB of Vodafone internal source code after the company reportedly refused to pay an extort…
AXCERA TRADING Listed by lapsus$ Ransomware Group
Trading Algorithms, Client Portfolios, KYC Data & Financial Logs…
CHECKMARX Listed by lapsus$ Ransomware Group
Source Code, Employee DB, API Keys, MongoDB/MySQL Creds…
VirtaHealth Listed by lapsus$ Ransomware Group
Healthcare research…
AXCERA.IO Listed by lapsus$ Ransomware Group
Source Code + Infrastructure Configs…
ASTRAZENECA CORP Listed by lapsus$ Ransomware Group
Source Code, Employee DB, API Keys, MongoDB/MySQL Creds…
Eni Energy Listed by lapsus$ Ransomware Group
Eni Energy is an Italian multinational oil and gas company headquartered in Rome. Founded in 1953, the firm is considered one of the global …
OSAC Aero Listed by lapsus$ Ransomware Group
"OSAC Aero" is a Spanish aeronautical engineering company. They provide aeronautical consulting services, product development, aircraft main…
Eiffage Listed by lapsus$ Ransomware Group
Eiffage S.A. is a French publicly-listed company established in 1993, specializing in civil engineering and construction. Its activities are…
Salesfloor Listed by lapsus$ Ransomware Group
Salesfloor is a software company that provides a mobile platform designed to connect retail store associates with online shoppers for a pers…
Loozap Listed by lapsus$ Ransomware Group
Loozap is an online marketplace that provides a platform for users to buy and sell second-hand items. They operate in multiple countries acr…
Lille University Listed by lapsus$ Ransomware Group
Lille University, also known as University of Lille, is a well-recognized public university located in Lille, France. It was established in …
DreamUp Listed by lapsus$ Ransomware Group
DreamUp is an American company that provides space-based educational opportunities to students of all ages. They offer various programs that…
FR Ministry of Agriculture Listed by lapsus$ Ransomware Group
The FR Ministry of Agriculture, or the French Ministry of Agriculture, is a governmental body in France overseeing agriculture, forestry, an…
Adidas Listed by lapsus$ Ransomware Group
Adidas is a renowned German multinational corporation that specializes in sports apparel, shoes, and accessories. Founded by Adolf Dassler i…
Lacoste Listed by lapsus$ Ransomware Group
Lacoste is a high-end French clothing company founded in 1933 by tennis player René Lacoste and André Gillier. The company is renowned for i…
Samsung Electronics Listed by lapsus$ Ransomware Group
Samsung Electronics was listed on the lapsus$ ransomware leak site. The group claims to have stolen internal data.…
NVIDIA Data Breach (2022)
In February 2022, microchip company NVIDIA suffered a data breach that exposed employee credentials and proprietary code. Impacted data incl…
Impresa Listed by lapsus$ Ransomware Group
Impresa was listed on the lapsus$ ransomware leak site. The group claims to have stolen internal data.…
Brazilian Ministry of Health Listed by lapsus$ Ransomware Group
Brazilian Ministry of Health was listed on the lapsus$ ransomware leak site. The group claims to have stolen internal data.…
Your email leaked. See who’s selling your address.
Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.