← All breaches
Threat actor tracker 308 incidents tracked

Pysa — every breach we're tracking

Running log of incidents attributed to or claimed by Pysa in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked308
Latest activitySeptember 20, 2022
TypeRansomware / extortion

Groups like Pysa steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 308 incidents we've attributed to Pysa.

high September 20, 2022

ΤΕΧΝΟΛΟΓΙΚΟ ΠΑΝΕΠΙΣΤΗΜΙΟ ΚΥΠΡΟΥ Listed by pysa Ransomware Group

ΤΕΧΝΟΛΟΓΙΚΟ ΠΑΝΕΠΙΣΤΗΜΙΟ ΚΥΠΡΟΥ was listed on the pysa ransomware leak site. The group claims to have stolen in…

high December 06, 2021

CHR Solutions Listed by pysa Ransomware Group

CHR Solutions was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

SWL Listed by pysa Ransomware Group

SWL was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Westmont Helena Listed by pysa Ransomware Group

Westmont Helena was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Eason Horticultural Resources Listed by pysa Ransomware Group

Eason Horticultural Resources was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

ΤΕΧΝΟΛΟΓΙΚΟ ΠΑΝΕΠΙΣΤΗΜΙΟ ΚΥΠΡΟΥ Listed by pysa Ransomware Group

ΤΕΧΝΟΛΟΓΙΚΟ ΠΑΝΕΠΙΣΤΗΜΙΟ ΚΥΠΡΟΥ was listed on the pysa ransomware leak site. The group claims to have stolen in…

high November 08, 2021

Property Damage Restoration Listed by pysa Ransomware Group

Property Damage Restoration was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Niemi Bil i Luleå Listed by pysa Ransomware Group

Niemi Bil i LuleÃ¥ was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Thunderbird Adventist Academy Listed by pysa Ransomware Group

Thunderbird Adventist Academy was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Raj Transport Inc. Listed by pysa Ransomware Group

Raj Transport Inc. was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Family Dentist Newbury Listed by pysa Ransomware Group

Family Dentist Newbury was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

ProActive Works Listed by pysa Ransomware Group

ProActive Works was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Community Brands Listed by pysa Ransomware Group

Community Brands was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

The Skinners Kent Academy Listed by pysa Ransomware Group

The Skinners Kent Academy was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Rusty Hardin & Associates Listed by pysa Ransomware Group

Rusty Hardin & Associates was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

R.E. Pedrotti Co. Listed by pysa Ransomware Group

R.E. Pedrotti Co. was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

UEMOA Listed by pysa Ransomware Group

UEMOA was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Skatetown Listed by pysa Ransomware Group

Skatetown was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

CHRYSO Listed by pysa Ransomware Group

CHRYSO was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

itimCloud Listed by pysa Ransomware Group

itimCloud was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Bayonet Listed by pysa Ransomware Group

Bayonet was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Fly Arik Air Listed by pysa Ransomware Group

Fly Arik Air was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Las Vegas Cancer Center Listed by pysa Ransomware Group

Las Vegas Cancer Center was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

CarpenterProjects Listed by pysa Ransomware Group

CarpenterProjects was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Woodchurch High School Listed by pysa Ransomware Group

Woodchurch High School was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Emkay Food Sales Listed by pysa Ransomware Group

Emkay Food Sales was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Premier Energy Listed by pysa Ransomware Group

Premier Energy was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Schmincke Künstlerfarben Listed by pysa Ransomware Group

Schmincke Künstlerfarben was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Stratford Land Listed by pysa Ransomware Group

Stratford Land was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Dr Schneider Listed by pysa Ransomware Group

Dr Schneider was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Rockbridge and Bath County Listed by pysa Ransomware Group

Rockbridge and Bath County was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Nordic Pharma Listed by pysa Ransomware Group

Nordic Pharma was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

The Leschaco Group Listed by pysa Ransomware Group

The Leschaco Group was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Westvale Primary School Listed by pysa Ransomware Group

Westvale Primary School was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Garner Dental Group Listed by pysa Ransomware Group

Garner Dental Group was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

MVS Mailers Listed by pysa Ransomware Group

MVS Mailers was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

EHS Listed by pysa Ransomware Group

EHS was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Comstock Johnson Architects Listed by pysa Ransomware Group

Comstock Johnson Architects was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

La Bodega Listed by pysa Ransomware Group

La Bodega was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Gulfport MS Listed by pysa Ransomware Group

Gulfport MS was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Pitts Baptist Church Listed by pysa Ransomware Group

Pitts Baptist Church was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Emi Jay Listed by pysa Ransomware Group

Emi Jay was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Department of Justice and Constitutional Development Listed by pysa Ransomware Group

Department of Justice and Constitutional Development was listed on the pysa ransomware leak site. The group claims to have stolen internal d…

high November 08, 2021

MPRL E&P Listed by pysa Ransomware Group

MPRL E&P was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Capitol Beauty School Listed by pysa Ransomware Group

Capitol Beauty School was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Bryant Industrial Services Listed by pysa Ransomware Group

Bryant Industrial Services was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Alternatives, Inc. Listed by pysa Ransomware Group

Alternatives, Inc. was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Family Dental Health Listed by pysa Ransomware Group

Family Dental Health was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Vision Source Listed by pysa Ransomware Group

Vision Source was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

AECOM Listed by pysa Ransomware Group

AECOM was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Jalasoft Listed by pysa Ransomware Group

Jalasoft was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Astera Software Listed by pysa Ransomware Group

Astera Software was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Metaenergia Listed by pysa Ransomware Group

Metaenergia was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

City of Bridgeport, WV Listed by pysa Ransomware Group

City of Bridgeport, WV was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Ferrara Listed by pysa Ransomware Group

Ferrara was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Universitat Autònoma de Barcelona Listed by pysa Ransomware Group

Universitat Autònoma de Barcelona was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Kent County Council Listed by pysa Ransomware Group

Kent County Council was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Lucton School Listed by pysa Ransomware Group

Lucton School was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Hickory Veterinary Hospital Listed by pysa Ransomware Group

Hickory Veterinary Hospital was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

high November 08, 2021

Florida Heart Associates Listed by pysa Ransomware Group

Florida Heart Associates was listed on the pysa ransomware leak site. The group claims to have stolen internal data.…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.