← All breaches
Threat actor tracker 117 incidents tracked

Toufan — every breach we're tracking

Running log of incidents attributed to or claimed by Toufan in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked117
Latest activityDecember 27, 2023
TypeRansomware / extortion

Groups like Toufan steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 117 incidents we've attributed to Toufan.

high December 27, 2023

ecom.gov.il Listed by toufan Ransomware Group

ecom.gov.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 27, 2023

maytronics.com Listed by toufan Ransomware Group

maytronics.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 26, 2023

carolinalemke.com Listed by toufan Ransomware Group

carolinalemke.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 26, 2023

ari.co.il Listed by toufan Ransomware Group

ari.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 23, 2023

super-pharm.co.il Listed by toufan Ransomware Group

super-pharm.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 23, 2023

allot.com Listed by toufan Ransomware Group

allot.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 23, 2023

bconnect.co.il Listed by toufan Ransomware Group

bconnect.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 22, 2023

teldor.com Listed by toufan Ransomware Group

teldor.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 22, 2023

erco.co.il Listed by toufan Ransomware Group

erco.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 20, 2023

tefentech.com Listed by toufan Ransomware Group

tefentech.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 20, 2023

zoko.co.il Listed by toufan Ransomware Group

zoko.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

m.biopet.co.il Listed by toufan Ransomware Group

m.biopet.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

tryhardindustrial.ca Listed by toufan Ransomware Group

tryhardindustrial.ca was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

berkshireesupply.com Listed by toufan Ransomware Group

berkshireesupply.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

www.herrickindustrial.com Listed by toufan Ransomware Group

www.herrickindustrial.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

libertytool.com Listed by toufan Ransomware Group

libertytool.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

shop.britecon.com Listed by toufan Ransomware Group

shop.britecon.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

sys-cspartners.caesarstone.com.au Listed by toufan Ransomware Group

sys-cspartners.caesarstone.com.au was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

product.touch-ins.co.il Listed by toufan Ransomware Group

product.touch-ins.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

www.nistx.com Listed by toufan Ransomware Group

www.nistx.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

store.toolneeds.com Listed by toufan Ransomware Group

store.toolneeds.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

shop.shopsupply.net Listed by toufan Ransomware Group

shop.shopsupply.net was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

shop.emprecise.com Listed by toufan Ransomware Group

shop.emprecise.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

shop.clador.com Listed by toufan Ransomware Group

shop.clador.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

selwayindustrialsupply.com Listed by toufan Ransomware Group

selwayindustrialsupply.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

rocket-supply.com Listed by toufan Ransomware Group

rocket-supply.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

rmpis.com Listed by toufan Ransomware Group

rmpis.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

reserved-il.com Listed by toufan Ransomware Group

reserved-il.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

pts-tools.com Listed by toufan Ransomware Group

pts-tools.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

pmt-usa.com Listed by toufan Ransomware Group

pmt-usa.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

paragon-supply.com Listed by toufan Ransomware Group

paragon-supply.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

norviktools.com Listed by toufan Ransomware Group

norviktools.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

newstore.johnstoncompanies.com Listed by toufan Ransomware Group

newstore.johnstoncompanies.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

morsecuttingtools.com Listed by toufan Ransomware Group

morsecuttingtools.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

mitchellmckinney.com Listed by toufan Ransomware Group

mitchellmckinney.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

mgisales.com Listed by toufan Ransomware Group

mgisales.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

ktstooling.com Listed by toufan Ransomware Group

ktstooling.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

keter.com Listed by toufan Ransomware Group

keter.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

its-supply.com Listed by toufan Ransomware Group

its-supply.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

goronco.com Listed by toufan Ransomware Group

goronco.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

global.keter.com Listed by toufan Ransomware Group

global.keter.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

gfwdsupply.com Listed by toufan Ransomware Group

gfwdsupply.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

drillmex.com Listed by toufan Ransomware Group

drillmex.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

dixie-tool.com Listed by toufan Ransomware Group

dixie-tool.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

dctsupply.com Listed by toufan Ransomware Group

dctsupply.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

cspartnershq1.caesarstone.com Listed by toufan Ransomware Group

cspartnershq1.caesarstone.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

cspartners.caesarstoneus.com Listed by toufan Ransomware Group

cspartners.caesarstoneus.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

catalog.fotcnc.com Listed by toufan Ransomware Group

catalog.fotcnc.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

butlerbros.com Listed by toufan Ransomware Group

butlerbros.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

blueashsupply.com Listed by toufan Ransomware Group

blueashsupply.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

barindustrial.com Listed by toufan Ransomware Group

barindustrial.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

badgermill.com Listed by toufan Ransomware Group

badgermill.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

atwoodindustries.com Listed by toufan Ransomware Group

atwoodindustries.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

arieladar.com Listed by toufan Ransomware Group

arieladar.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

apisinc.com Listed by toufan Ransomware Group

apisinc.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

amtektool.com Listed by toufan Ransomware Group

amtektool.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

alleghenytool.net Listed by toufan Ransomware Group

alleghenytool.net was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

pet.touch-ins.co.il Listed by toufan Ransomware Group

pet.touch-ins.co.il was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

www.pts-tools.com Listed by toufan Ransomware Group

www.pts-tools.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

high December 19, 2023

strauss-group.com Listed by toufan Ransomware Group

strauss-group.com was listed on the toufan ransomware leak site. The group claims to have stolen internal data.…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.