← All breaches
Threat actor tracker 144 incidents tracked

Malas — every breach we're tracking

Running log of incidents attributed to or claimed by Malas in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked144
Latest activityApril 09, 2023
TypeRansomware / extortion

Groups like Malas steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 144 incidents we've attributed to Malas.

high April 09, 2023

spw.ru Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Iris Key Solutions Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

SkyFORS Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Onubo s.r.l. Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Asanger Modellbau Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Omniglobe Business Solutions Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Balbi Srl Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Grupo Fatecsa Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

TitanPower Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Altia Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

ArCloud Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Transitus Group Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Mobalpa Biarritz Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

The Sound Organisation Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Studio Consulenza Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Horseman Sim Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Altarix Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Azzurra Group Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

OPIT Solutions Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Spectris Business Systems Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Studio Rossetti e Partners Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Evropoly Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

TCG Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

BEI Srl Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

ISG Software Group Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Angle Metal Mfg. Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

BeeVoip Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

KriaaNet Inc Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

KondorCS Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

RusExport Ltd Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Wpat Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Hardman’s Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Kouros Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Studio Papa Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Etanova Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

KomGarant Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Sita Software Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

RepcoLite Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Pasquetti Sarti & Partners Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Grassi srl Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Sallemi Carburanti Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

MHWEB Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Fitser Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Cosmos Hotel Group Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Herold Druck Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Hoteles Globales Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

NEXT OS Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Fresh-Heads IT Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Pergler Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Preference Portugal Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Propac S.r.l. Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Studio Negri e Associati Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Amersport Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

BenarIT Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Axon Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

MetaContratas Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

ICT-LabS Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Wishmaster Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Hotel Smeraldo Listed by malas Ransomware Group

using Zimbra vulnerability…

high April 09, 2023

Mangum Construction Listed by malas Ransomware Group

using Zimbra vulnerability…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.