← All breaches
Threat actor tracker 22 incidents tracked

Ryuk — every breach we're tracking

Running log of incidents attributed to or claimed by Ryuk in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked22
Latest activityNovember 07, 2024
TypeRansomware / extortion

Groups like Ryuk steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

high November 07, 2024

Finastra Listed by ryuk Ransomware Group

Finastra was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high May 18, 2021

Visalia Unified School District Listed by ryuk Ransomware Group

Visalia Unified School District was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high April 01, 2021

Unnamed biomolecular institute Listed by ryuk Ransomware Group

Unnamed biomolecular institute was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high February 15, 2021

Villefranche-sur-Saône (Rhône) Hospital Center Listed by ryuk Ransomware Group

Villefranche-sur-Saône (Rhône) Hospital Center was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high November 24, 2020

Baltimore County Public Schools (BCPS) Listed by ryuk Ransomware Group

Baltimore County Public Schools (BCPS) was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high November 15, 2020

K12 (AKA Stride Inc) Listed by ryuk Ransomware Group

K12 (AKA Stride Inc) was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high October 28, 2020

University of Vermont (UVM) Health Network Listed by ryuk Ransomware Group

University of Vermont (UVM) Health Network was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high October 27, 2020

St. Lawrence Health System Hospitals (Canton-Potsdam, Gouverneur, and Massena) Listed by ryuk Ransomware Group

St. Lawrence Health System Hospitals (Canton-Potsdam, Gouverneur, and Massena) was listed on the ryuk ransomware leak site. The group claims…

high October 27, 2020

Sky Lakes Medical Center Listed by ryuk Ransomware Group

Sky Lakes Medical Center was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high October 22, 2020

Steelcase Inc. Listed by ryuk Ransomware Group

Steelcase Inc. was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high October 20, 2020

Sopra Steria Listed by ryuk Ransomware Group

Sopra Steria was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high October 17, 2020

Dickinson County Health Listed by ryuk Ransomware Group

Dickinson County Health was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high October 11, 2020

Sonoma Valley Hospital Listed by ryuk Ransomware Group

Sonoma Valley Hospital was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high September 27, 2020

Universal Health Services (UHS) Hospitals Listed by ryuk Ransomware Group

Universal Health Services (UHS) Hospitals was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high March 06, 2020

City of Durham Listed by ryuk Ransomware Group

City of Durham was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high February 29, 2020

Epiq Global (MSP) Listed by ryuk Ransomware Group

Epiq Global (MSP) was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high February 15, 2020

EMCOR Listed by ryuk Ransomware Group

EMCOR was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high February 04, 2020

Havre Public Schools Listed by ryuk Ransomware Group

Havre Public Schools was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high February 01, 2020

Port Lavaca City Hall Listed by ryuk Ransomware Group

Port Lavaca City Hall was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high January 24, 2020

Electronic Warfare Associates (EWA) Listed by ryuk Ransomware Group

Electronic Warfare Associates (EWA) was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high January 23, 2020

Tampa Bay Times Listed by ryuk Ransomware Group

Tampa Bay Times was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

high January 09, 2020

Volusia County Library System Listed by ryuk Ransomware Group

Volusia County Library System was listed on the ryuk ransomware leak site. The group claims to have stolen internal data.…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.