Skip to content
← All breaches
Threat actor tracker 110 incidents tracked

Toufan — every breach we're tracking

Running log of incidents attributed to or claimed by Toufan in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked110
Latest activityDecember 27, 2023
TypeRansomware / extortion

Groups like Toufan steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 110 incidents we've attributed to Toufan.

high December 27, 2023

maytronics.com Listed by Toufan Ransomware Group

maytronics.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 27, 2023

ecom.gov.il Listed by Toufan Ransomware Group

ecom.gov.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 26, 2023

carolinalemke.com Listed by Toufan Ransomware Group

carolinalemke.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 26, 2023

ari.co.il Listed by Toufan Ransomware Group

ari.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 23, 2023

allot.com Listed by Toufan Ransomware Group

allot.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 23, 2023

bconnect.co.il Listed by Toufan Ransomware Group

bconnect.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 23, 2023

super-pharm.co.il Listed by Toufan Ransomware Group

super-pharm.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 22, 2023

teldor.com Listed by Toufan Ransomware Group

teldor.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 22, 2023

erco.co.il Listed by Toufan Ransomware Group

erco.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 20, 2023

tefentech.com Listed by Toufan Ransomware Group

tefentech.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 20, 2023

zoko.co.il Listed by Toufan Ransomware Group

zoko.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

barindustrial.com Listed by Toufan Ransomware Group

barindustrial.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

butlerbros.com Listed by Toufan Ransomware Group

butlerbros.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

paragon-supply.com Listed by Toufan Ransomware Group

paragon-supply.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

product.touch-ins.co.il Listed by Toufan Ransomware Group

product.touch-ins.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

sys-cspartners.caesarstone.com.au Listed by Toufan Ransomware Group

sys-cspartners.caesarstone.com.au was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

shop.britecon.com Listed by Toufan Ransomware Group

shop.britecon.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

badgermill.com Listed by Toufan Ransomware Group

badgermill.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

berkshireesupply.com Listed by Toufan Ransomware Group

berkshireesupply.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

cdt1.com Listed by Toufan Ransomware Group

cdt1.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

wsies.com Listed by Toufan Ransomware Group

wsies.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

vehicle.touch-ins.co.il Listed by Toufan Ransomware Group

vehicle.touch-ins.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

tryhardindustrial.ca Listed by Toufan Ransomware Group

tryhardindustrial.ca was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

sys.udidagan.co.il Listed by Toufan Ransomware Group

sys.udidagan.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

sys.touch-ins.co.il Listed by Toufan Ransomware Group

sys.touch-ins.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

sys-cspartnershq1.caesarstone.com Listed by Toufan Ransomware Group

sys-cspartnershq1.caesarstone.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

sys-cspartners.caesarstoneus.com Listed by Toufan Ransomware Group

sys-cspartners.caesarstoneus.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

sys-cspartners.caesarstone.sg Listed by Toufan Ransomware Group

sys-cspartners.caesarstone.sg was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

sys-cspartners.caesarstone.co.uk Listed by Toufan Ransomware Group

sys-cspartners.caesarstone.co.uk was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

sys-cspartners.caesarstone.ca Listed by Toufan Ransomware Group

sys-cspartners.caesarstone.ca was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

sys.biopet.co.il Listed by Toufan Ransomware Group

sys.biopet.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

store.toolneeds.com Listed by Toufan Ransomware Group

store.toolneeds.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

store.brunswickindustrial.com Listed by Toufan Ransomware Group

store.brunswickindustrial.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

stage.kravitz.co.il Listed by Toufan Ransomware Group

stage.kravitz.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

shop.smithindustrialsupply.com Listed by Toufan Ransomware Group

shop.smithindustrialsupply.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

shop.shopsupply.net Listed by Toufan Ransomware Group

shop.shopsupply.net was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

shop.reggiemckenzieindustrial.com Listed by Toufan Ransomware Group

shop.reggiemckenzieindustrial.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

shop.qct.tools Listed by Toufan Ransomware Group

shop.qct.tools was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

shop.lgindustrial.com Listed by Toufan Ransomware Group

shop.lgindustrial.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

shop.emprecise.com Listed by Toufan Ransomware Group

shop.emprecise.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

shop.clador.com Listed by Toufan Ransomware Group

shop.clador.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

shefa-online.co.il Listed by Toufan Ransomware Group

shefa-online.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

selwayindustrialsupply.com Listed by Toufan Ransomware Group

selwayindustrialsupply.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

rocket-supply.com Listed by Toufan Ransomware Group

rocket-supply.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

rmpis.com Listed by Toufan Ransomware Group

rmpis.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

reserved-il.com Listed by Toufan Ransomware Group

reserved-il.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

pts-tools.com Listed by Toufan Ransomware Group

pts-tools.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

pmt-usa.com Listed by Toufan Ransomware Group

pmt-usa.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

phoenix.touch-ins.co.il Listed by Toufan Ransomware Group

phoenix.touch-ins.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

pet.touch-ins.co.il Listed by Toufan Ransomware Group

pet.touch-ins.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

pet.biopet.co.il Listed by Toufan Ransomware Group

pet.biopet.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

old.shefa-online.co.il Listed by Toufan Ransomware Group

old.shefa-online.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

norviktools.com Listed by Toufan Ransomware Group

norviktools.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

northernprecisionsales.com Listed by Toufan Ransomware Group

northernprecisionsales.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

newstore.johnstoncompanies.com Listed by Toufan Ransomware Group

newstore.johnstoncompanies.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

mortgage.touch-ins.co.il Listed by Toufan Ransomware Group

mortgage.touch-ins.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

morsecuttingtools.com Listed by Toufan Ransomware Group

morsecuttingtools.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

mitchellmckinney.com Listed by Toufan Ransomware Group

mitchellmckinney.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

mgisales.com Listed by Toufan Ransomware Group

mgisales.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

m.biopet.co.il Listed by Toufan Ransomware Group

m.biopet.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run my free scan
15 seconds · 13.1B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
The full report on what your scan found, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.