← All breaches
Threat actor tracker 84 incidents tracked

Ransomexx — every breach we're tracking

Running log of incidents attributed to or claimed by Ransomexx in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked84
Latest activityJune 20, 2026
TypeRansomware / extortion

Groups like Ransomexx steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 84 incidents we've attributed to Ransomexx.

high June 20, 2026

Go2Joy (go2joy.vn) Listed by ransomexx Ransomware Group

We have released the complete database of Go2Joy, Vietnam’s leading platform for hourly and short-stay hotel bookings.…

high April 17, 2026

SOGO Auction Listed by ransomexx Ransomware Group

SOGO Auction - 951MB leaked. SOGO Auction is a prominent Japan-based, specialized auctioneer with over 30 years of experience in trading use…

high April 17, 2026

GoTip Listed by ransomexx Ransomware Group

GoTip - 1.13GB leaked. Gotip.jp is a Japanese live-streaming enhancement tool that connects digital tips (donations) to physical Bluetooth-e…

high March 07, 2025

ADDA (adda.io) Listed by ransomexx Ransomware Group

ADDA is SaaS for Residential Community Management. 12 millions residents, visitors and stuff records leaked.…

high February 09, 2025

Makesworth Accountants Listed by ransomexx Ransomware Group

Makesworth Accountants is multi-award-winning accountancy practice of a chartered accountant, tax and business advisers. Leak size: 176.4GB.…

high January 31, 2025

Lakeshore Title Agency Listed by ransomexx Ransomware Group

Lakeshore Title Agency has closed over $100 million in commercial transactions and over $700 million in residential refinances and purchases…

high December 21, 2024

Grupo Vargas Listed by ransomexx Ransomware Group

Laboratorios Vargas stands out in the pharmaceutical sector, not just for its longevity but also through continuous innovation and dedicatio…

high September 14, 2024

Retemex Listed by ransomexx Ransomware Group

Retemex is a virtual mobile operator in Mexico, operating on the country’s 4.5G LTE network. 24883 clients data even with PLAINTEXT PASSWORD…

high August 10, 2024

Brontoo Technology Solutions Listed by ransomexx Ransomware Group

OstaApp, developed by Brontoo Technology Solutions India Private Limited, is a digital payment platform designed to offer a secure, fast, an…

high August 03, 2024

nursing.com Listed by ransomexx Ransomware Group

NURSING.com is an all-in-one online platform designed to help nursing students succeed in their studies and pass the NCLEX® exam with confid…

high July 26, 2024

Planet Group International Listed by ransomexx Ransomware Group

Planet Group International is a multinational corporation specializing in innovative technology solutions and consulting services. With a pr…

high July 25, 2024

LITEON Listed by ransomexx Ransomware Group

LITEON Technology Corporation, based in Taiwan, is a leading company in the electronics industry known for its diverse range of products. Fo…

high July 08, 2024

Wagner-Meinert Listed by ransomexx Ransomware Group

Wagner-Meinert is a company that specializes in industrial refrigeration, food process systems, and mechanical contracting. They provide ser…

high April 17, 2024

Asteco Listed by ransomexx Ransomware Group

Asteco is a real estate services firm based in the United Arab Emirates (UAE), with its headquarters in Dubai. It offers a wide range of rea…

high April 13, 2024

Tyler Technologies Listed by ransomexx Ransomware Group

Tyler Technologies was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high March 24, 2024

Ministry of Defense of Peru Listed by ransomexx Ransomware Group

The Peruvian Ministry of Defense (Ministerio de Defensa del Perú) is the government agency responsible for overseeing the defense and securi…

high December 30, 2023

Kenya Airways Listed by ransomexx Ransomware Group

Kenya Airways Ltd., more commonly known as Kenya Airways, is the flag carrier airline of Kenya. The company was founded in 1977, after the d…

high November 26, 2023

AlJaber Engineering Listed by ransomexx Ransomware Group

AlJaber Engineering (JEC) is a leading general contractor based in the State of Qatar.…

high November 17, 2023

Admilla ELAP Listed by ransomexx Ransomware Group

Elap (formerly Admilia) offers its expertise and support throughout the implementation of your budget and accounting solution. Huge clients,…

high October 09, 2023

Telecommunications Services of Trinidad and Tobago Listed by ransomexx Ransomware Group

Telecommunications Services of Trinidad and Tobago (TSTT) is the primary telecommunications provider in the twin-island nation of Trinidad a…

high July 01, 2023

DVA - DVision Architecture Listed by ransomexx Ransomware Group

Dalla digitalizzazione del progetto alla realizzazione di prototipi costruttivi: l’attività di DVA spazia dal concept di un intervento, all’…

high July 01, 2023

DVision Architecture Listed by ransomexx Ransomware Group

Dvision Architecture is a global architecture and design firm known for its innovative approach to architectural projects. Leaked data size:…

high June 24, 2023

Jacobs Farm / Del Cabo Listed by ransomexx Ransomware Group

Jacobs Farm / Del Cabo is an organic farming company known for its commitment to sustainable agriculture and ethical business practices. Lea…

high June 24, 2023

Jacobs Farm Listed by ransomexx Ransomware Group

Jacobs Farm was founded in 1980 as a small organic family farm dedicated to growing fresh, high quality, delicious food without damaging the…

high March 02, 2023

Bettuzzi And Partners Listed by ransomexx Ransomware Group

Lo Studio BETTUZZI & PARTNERS - Dottori Commercialisti è stato fondato dal dott. Alvaro Bettuzzi, nell'anno 2005, dopo aver maturato signifi…

high February 22, 2023

Badan Urusan Logistik Listed by ransomexx Ransomware Group

BULOG, or Badan Urusan Logistik, is the state-owned logistics agency of Indonesia Leaked data size: 12.77GB.…

high February 22, 2023

BULOG Listed by ransomexx Ransomware Group

BULOG adalah perusahaan umum milik negara yang bergerak di bidang logistik pangan.…

high December 11, 2022

REC Silicon Listed by ransomexx Ransomware Group

REC Silicon is a global leader in silane-based, high-purity silicon materials.…

high October 19, 2022

Unimed Belem Listed by ransomexx Ransomware Group

A Unimed é a maior realidade cooperativista na área da saúde em todo o mundo e também a maior rede de assistência médica do Brasil, presente…

high October 11, 2022

Consorci Sanitari Integral & Geseme Listed by ransomexx Ransomware Group

El Consorci Sanitari Integral (CSI) és un ens públic de serveis sanitaris i socials que neix l'any 2000 assumint els antics hospitals de la …

high October 11, 2022

Consorci Sanitari Integral Listed by ransomexx Ransomware Group

Consorci Sanitari Integral (CSI) is a healthcare consortium based in Catalonia, Spain Leaked data size: 52.47GB.…

high October 02, 2022

Ferrari Listed by ransomexx Ransomware Group

Some internal documents, datasheets, repair manuals, etc.…

high October 01, 2022

Bombardier Recreational Products (BRP) - SOURCE CODES Listed by ransomexx Ransomware Group

Here are some codes from BRP's repos. atgk.brp.ApprenticeShopAPI, atgk.brp.ApprenticeShopMobileAppBackend, atgk.brp.Tools.RemoteConnectionMa…

high September 03, 2022

Fundo Nacional de Desenvolvimento da Educação Listed by ransomexx Ransomware Group

The National Fund for Educational Development (FNDE) is a federal agency under the Ministry of Education, responsible for implementing progr…

high August 24, 2022

Bombardier Recreational Products (BRP) - BONUS CONTENT (!!!) Listed by ransomexx Ransomware Group

In addition to previous leak: employees credentials, if you need netflix, battle.net, paypal or pornhub account feel free to use it; employe…

high August 23, 2022

Bombardier Recreational Products (BRP) Listed by ransomexx Ransomware Group

BRP Inc. is the holding company for Bombardier Recreational Products Inc., operating as BRP, a Canadian manufacturer of snowmobiles, all-ter…

high August 23, 2022

Bombardier Recreational Products Listed by ransomexx Ransomware Group

Bombardier Recreational Products (BRP) is a Canadian company that designs, manufactures, distributes, and markets motorized recreational veh…

high April 05, 2022

Sonae Listed by ransomexx Ransomware Group

Sonae was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high March 29, 2022

Stago Listed by ransomexx Ransomware Group

Stago was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high March 20, 2022

Scottish Association for Mental Health Listed by ransomexx Ransomware Group

Scottish Association for Mental Health was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

medium March 14, 2022

Viva Air Data Breach (2022)

In March 2022, the now defunct Colombian airline Viva Air suffered a data breach and subsequent ransomware attack. Among a trove of other ra…

high March 01, 2022

Diagnostica Stago Listed by ransomexx Ransomware Group

Diagnostica Stago is a global leader in the field of in-vitro diagnostics, specializing in hemostasis and thrombosis.Leaked data size: 423MB…

high February 15, 2022

POP TV Listed by ransomexx Ransomware Group

POP TV was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high January 28, 2022

KCA Deutag Listed by ransomexx Ransomware Group

KCA Deutag was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high December 15, 2021

Hellmann Worldwide Logistics Listed by ransomexx Ransomware Group

Hellmann Worldwide Logistics was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high December 10, 2021

UMW Group Listed by ransomexx Ransomware Group

UMW Group was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high December 06, 2021

Ruwac Industrial Vacuums Listed by ransomexx Ransomware Group

Ruwac Industrial Vacuums is a leading manufacturer of industrial vacuum cleaners and vacuum systems designed for specialized cleaning applic…

high December 06, 2021

Ruwac Listed by ransomexx Ransomware Group

Ruwac was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high November 16, 2021

Unione dei Comuni Terre di Pianura Listed by ransomexx Ransomware Group

Unione dei Comuni Terre di Pianura was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high October 24, 2021

Digicel Group Listed by ransomexx Ransomware Group

Digicel Group was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high September 26, 2021

Unione Reno Galliera Listed by ransomexx Ransomware Group

Unione Reno Galliera was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high September 20, 2021

United Carton Industries Company Listed by ransomexx Ransomware Group

United Carton Industries Company (UCIC) is a leading packaging solutions provider based in Saudi Arabia Leaked data size: 26.37GB.…

high September 09, 2021

Soluzioni Infrastrutturali Telefoniche ed Elettriche S.p.A. Listed by ransomexx Ransomware Group

Soluzioni Infrastrutturali Telefoniche ed Elettriche S.p.A. was listed on the ransomexx ransomware leak site. The group claims to have stole…

high September 09, 2021

Ultrapar Participações S.A. Listed by ransomexx Ransomware Group

Ultrapar Participações S.A. was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

Indura SA Listed by ransomexx Ransomware Group

Indura SA was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

Liberty Group & ForHousing Listed by ransomexx Ransomware Group

Liberty Group & ForHousing was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

Corporación Nacional de Telecomunicación Listed by ransomexx Ransomware Group

Corporación Nacional de Telecomunicación was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

Consiglio Nazionale del Notariato Listed by ransomexx Ransomware Group

Consiglio Nazionale del Notariato was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

Ajuntament de Castelló Listed by ransomexx Ransomware Group

Ajuntament de Castelló was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

high September 09, 2021

Nobiskrug Listed by ransomexx Ransomware Group

Nobiskrug was listed on the ransomexx ransomware leak site. The group claims to have stolen internal data.…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.