← All breaches
Threat actor tracker 15 incidents tracked

Nefilim — every breach we're tracking

Running log of incidents attributed to or claimed by Nefilim in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked15
Latest activitySeptember 09, 2021
TypeRansomware / extortion

Groups like Nefilim steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

high September 09, 2021

The MADSACK Media Group. Part 2. Listed by nefilim Ransomware Group

The MADSACK Media Group. Part 2. was listed on the nefilim ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

Tegut. Part 1. Listed by nefilim Ransomware Group

Tegut. Part 1. was listed on the nefilim ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

Atlanta Allergy & Asthma. Part 1. Listed by nefilim Ransomware Group

Atlanta Allergy & Asthma. Part 1. was listed on the nefilim ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

Grimmway Farms. Part 1. Listed by nefilim Ransomware Group

Grimmway Farms. Part 1. was listed on the nefilim ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

Seven Seas. Part 1. Listed by nefilim Ransomware Group

Seven Seas. Part 1. was listed on the nefilim ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

TPG Internet. Part 1. Listed by nefilim Ransomware Group

TPG Internet. Part 1. was listed on the nefilim ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

Saipa Press. Part 1. Listed by nefilim Ransomware Group

Saipa Press. Part 1. was listed on the nefilim ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

The MADSACK Media Group. Part 1. Listed by nefilim Ransomware Group

The MADSACK Media Group. Part 1. was listed on the nefilim ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

Tegut. Part 2. Listed by nefilim Ransomware Group

Tegut. Part 2. was listed on the nefilim ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

Elliott Group / Cascade Engineering / Unitex Textile Rental Services. Teaser. Listed by nefilim Ransomware Group

Elliott Group / Cascade Engineering / Unitex Textile Rental Services. Teaser. was listed on the nefilim ransomware leak site. The group clai…

high December 01, 2020

Whirlpool Listed by nefilim Ransomware Group

Whirlpool was listed on the nefilim ransomware leak site. The group claims to have stolen internal data.…

high July 27, 2020

DKA (refrigeration and air conditioning specialist, Dussmann Group subsidiary) Listed by nefilim Ransomware Group

DKA (refrigeration and air conditioning specialist, Dussmann Group subsidiary) was listed on the nefilim ransomware leak site. The group cla…

high July 04, 2020

Orange (mobile operator) Listed by nefilim Ransomware Group

Orange (mobile operator) was listed on the nefilim ransomware leak site. The group claims to have stolen internal data.…

high June 01, 2020

Fisher and Paykel Appliances Listed by nefilim Ransomware Group

Fisher and Paykel Appliances was listed on the nefilim ransomware leak site. The group claims to have stolen internal data.…

high May 05, 2020

Toll Group Listed by nefilim Ransomware Group

Toll Group was listed on the nefilim ransomware leak site. The group claims to have stolen internal data.…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.