Stormous — every breach we're tracking
Running log of incidents attributed to or claimed by Stormous in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.
Groups like Stormous steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.
Tracked incidents
Showing the 60 most recent of 191 incidents we've attributed to Stormous.
BN: higuchi-inc Report Error & Warning Listed by stormous Ransomware Group
www.higuchi-inc.co.jp/newsrelease/company/doc/unauthorized_access_incident.pdf // We have reviewed the report issued by HIGUCHI INC. To corr…
BN Listed by stormous Ransomware Group
www.higuchi-inc.co.jp/newsrelease/company/doc/unauthorized_access_incident.pdf // We have reviewed the report issued by HIGUCHI INC. To corr…
higuchi-inc.co.jp Listed by stormous Ransomware Group
(Dallas - HongKong - LosAngeles ) Comprehensive financial statements including Balance Sheets, Asset records, Liabilities, Capital, Accounts…
HIGUCHI USA, INC Listed by stormous Ransomware Group
(Dallas - HongKong - LosAngeles ) Comprehensive financial statements including Balance Sheets, Asset records, Liabilities, Capital, Accounts…
eshacloudqa.com Listed by stormous Ransomware Group
We have breached ESHA Research / ESHA Cloud Services and compromised their core product development databases. The exfiltrated data includes…
Official Statement: Protecting palatineschool.org Infrastructure Listed by stormous Ransomware Group
During our routine network security audits, our team discovered critical structural vulnerabilities within Palatine School, which granted us…
Official Statement Listed by stormous Ransomware Group
During our routine network security audits, our team discovered critical structural vulnerabilities within Palatine School, which granted us…
eogb.co.uk Listed by stormous Ransomware Group
Deep access to Microsoft Dynamics GP containing complete corporate accounting, invoices, vendor details, and commercial transactions.Access …
monoprix.tn Listed by stormous Ransomware Group
Data description: Pending update…
maglificioliliana.com Listed by stormous Ransomware Group
Over 400 GB of data has been accessed and exfiltrated. This includes product designs, historical fashion lines, and technical specifications…
montechiaro-store.com Listed by stormous Ransomware Group
Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains a…
impulso-store.com Listed by stormous Ransomware Group
Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains a…
lorenzoni-store.com Listed by stormous Ransomware Group
Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains a…
jaggroup.com UPDATE-FULL DATA DUMP Listed by stormous Ransomware Group
Full database containing corporate emails (@jaggroup.com), Active Directory domain logins, and clear plain-text passwords.Complete Microso…
JAG Group Full Data Dump Claimed by Stormous
Stormous ransomware group claimed jaggroup.com and published what they described as a full data dump. The listing appeared on Ransomware.liv…
mlit.com.my Listed by stormous Ransomware Group
We have successfully breached the internal servers and network infrastructure of MLIT, gaining full unauthorized access to their active Micr…
SA2000.COM Listed by stormous Ransomware Group
150 GB of data has been extracted, including: COMPTABILITÉ - FACTURES ACHAT / FACTURES À PAYER / FACTURES MODIFIÉES - Banking Informations S…
katholiekamersfoort.nl Listed by stormous Ransomware Group
The church website's network (katholiekamersfoort.nl/) has been breached, resulting in the exfiltration of over 10 GB of data. This data per…
ttt.vn UPDATE-FULL DATA DUMP Listed by stormous Ransomware Group
$900k to Solve the Problem 5TB — While TTT Company was preoccupied with designing luxurious interiors and architectural masterpieces, they c…
vspsolutions.com.au SAMPLE-FREE 20GB Listed by stormous Ransomware Group
+40G Full Financial Backups (Quickbooks & Reckon)-Email Archives & Staff Personal Folders-Customer/Client Databases (Installers & Integrator…
arc-reins.com + fidelityunited.ae UPDATE-FULL DATA DUMP Listed by stormous Ransomware Group
We have gained full control over 700 GB of data, which includes: meticulous compliance audit data, complete Bank details for ARC, legal lice…
ams-group.co.uk FULL DATA DUMP 33GB Listed by stormous Ransomware Group
The extracted data comprises administrative and financial records, payroll sheets, and client and partner directories, alongside technical a…
ttt.vn TTT Corporation Listed by stormous Ransomware Group
$900k to Solve the Problem 5TB — While TTT Company was preoccupied with designing luxurious interiors and architectural masterpieces, they c…
cgcsa.co.za Listed by stormous Ransomware Group
endor & Corporate Data ( Name-Email-Numbers/PMS NAME ), Financial Accounting Records , sales Order Reports , Database Systems , SQL Server ,…
FANASA.COM Listed by stormous Ransomware Group
Personally Identifiable Information (PII), Electronic Fiscal Documents (CFDI/XML), Financial Transaction Records, Commercial Invoices & B…
or-technology.com Listed by stormous Ransomware Group
Financial & Sales Intelligence ، Sales Statistics by Quarter (Q1, Q2, Q3, Q4)، Corporate & Strategic Planning ، SQL ، Project Reports…
arc-reins.com + fidelityunited.ae Listed by stormous Ransomware Group
We have gained full control over 700 GB of data, which includes: meticulous compliance audit data, complete Bank details for ARC, legal lice…
www.futureal.hu Listed by stormous Ransomware Group
Project Planning & Execution Documents - AKTUALIS KIVITELI TERVEK (Folder)/ Confidential Contract/Scope/Munkaterelhatarolas Proprietary Tech…
www.bkcolombia.org Listed by stormous Ransomware Group
(Folders/Files) Email/Communication/System/Application Data AYEAPLICACIONES database/Log Data BDATOSFITCLOD ( Software/Installation/Program …
www.holidaypalace.com Listed by stormous Ransomware Group
All of this data is offered for sale (user information: email, phone number, full name, date of birth / payment and booking data / ID cards …
www.goodmanmfg.com Listed by stormous Ransomware Group
Administrative/System Files/ADMIN, DOAS,General operational, administrative records, and potential system configuration files /Proprietary E…
! Listed by stormous Ransomware Group
VPN access to the company’s internal network is provided…
www.danareksa.com Listed by stormous Ransomware Group
VPN access to the company’s internal network is provided…
www.wilmar.co.id Listed by stormous Ransomware Group
VPN access to the company’s internal network is provided…
www.marjane.ma Listed by stormous Ransomware Group
Marjane Group is a Moroccan retail group that owns the Marjane hypermarkets and Marjane Market supermarkets. Founded in 1990, Marjane has gr…
www.visioninksltd.in Listed by stormous Ransomware Group
Vision Inks and Resins Limited ( previously known as Vision Inks & Resins ) is established in May 1999 with Factory at MIDC, Murbad, Maharas…
www.sincroslab.com Listed by stormous Ransomware Group
Sincroslab Sas is a company in Colombia, with a head office in Bogota D.C.. It operates in the Miscellaneous Nondurable Goods Merchant Whole…
www.americanadecolchones.com Listed by stormous Ransomware Group
VPN access to the company’s internal network is provided.…
www.francetravail.fr Listed by stormous Ransomware Group
Plaintext authentication credentials (usernames/passwords)-(full names, dates of birth, gender)-(addresses, phone numbers, emails)-Employmen…
usbmemorydirect.com Listed by stormous Ransomware Group
Personal data (individual names, photos, etc.), company/business data (company names, services, tools, equipment), backup copies, system arc…
North Country HealthCare Listed by stormous Ransomware Group
Health information for 600,000 patients has been accessed from the North Country Health (NCH) care…
hy-vee.com Listed by stormous Ransomware Group
Access to Hy-Vee’s environment was obtained through compromised Atlassian accounts, including tools such as Confluence and Jira. …
bulentklise.com.tr Listed by stormous Ransomware Group
Customer names, identification numbers, production orders, client records, delivery tracking data, customer information, logos, and more…
French Gov "PYV S" Listed by stormous Ransomware Group
Stealer-type breach — enjoy!…
French Gov Listed by stormous Ransomware Group
Stealer-type breach — enjoy!…
education.gouv.fr Listed by stormous Ransomware Group
Data of over +40,000 individuals has been accessed. The data includes email addresses, passwords, dates, login URLs, names, and regions…
rinaldi.com.br Listed by stormous Ransomware Group
Data of 1,000 registered distributors and sellers – employee and customer information – admin login passwords – email addresses, phone numbe…
Volkswagen Listed by stormous Ransomware Group
CarNet system breach Internal data accessed…
French Government Listed by stormous Ransomware Group
Stealer-type breach Valid credentials, sensitive access…
French Gov 2025 Listed by stormous Ransomware Group
We present a comprehensive leak including full email addresses and password hashes from multiple high-profile French government organization…
www.seashoremotel.com Listed by stormous Ransomware Group
A large amount of valid banking card data from various sources – customer information from ID cards, passports, and driver's licenses – emai…
www.axxoshotels.com Listed by stormous Ransomware Group
IPT – customer data – 2025 bookings – identity cards and more.…
crystalhotels.com.tr Listed by stormous Ransomware Group
Full names of hotel guests a Email addresses (internal and external) Customer complaints and feedback content …
nirvanahotels.com.tr Listed by stormous Ransomware Group
Full names of hotel guests a Email addresses (internal and external) Customer complaints and feedback content Booking or referen…
thewatermansarms.net Listed by stormous Ransomware Group
?…
www.wirebangkok.com Listed by stormous Ransomware Group
?…
www.atolon-parkhotel.com Listed by stormous Ransomware Group
CVs - FACTURES - Hwawei.com - AA GROUPE 2025 - RESERVATION 2025 - PERSONNELS - INFOS - STAGIAIRES .....…
www.jparkislandresort.com Listed by stormous Ransomware Group
Full reservation databases Booking platform references (including HeyTripGo) Payment Data …
www.regencytorviscas.com Listed by stormous Ransomware Group
Full customer reservation databases (names, phones, emails, addresses, booking dates) Scanned ID documents (passports, national IDs…
www.regencycountryclub.com Listed by stormous Ransomware Group
Full customer reservation databases (names, phones, emails, addresses, booking dates) Scanned ID documents (passports, national IDs…
Your email leaked. See who’s selling your address.
Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.