← All breaches
Threat actor tracker 26 incidents tracked

Underground — every breach we're tracking

Running log of incidents attributed to or claimed by Underground in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked26
Latest activityAugust 15, 2025
TypeRansomware / extortion

Groups like Underground steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

high August 15, 2025

SFA Engineering Listed by underground Ransomware Group

Revenue: $1.7 Billion Type: Industry Size: 2,3 TBytes…

high June 25, 2025

GMORS Co., Ltd Listed by underground Ransomware Group

Revenue: $100 million Type: Manufacturing Size: 302,7 GBytes…

high April 15, 2025

semex.com Listed by underground Ransomware Group

Revenue: $170 million Type: Research Size: 214,2 GBytes…

high March 30, 2025

shengyusteel.com Listed by underground Ransomware Group

Revenue: $431.6 million Type: Manufacturing Size: 353,9 GBytes…

high February 13, 2025

Afa Systems Ltd. Listed by underground Ransomware Group

Revenue: $37.2 million Type: Industry Size: 1,1 TBytes…

high December 16, 2024

Simmtech Co., Ltd. Listed by underground Ransomware Group

Revenue:$ 760M - Country :South Korea…

high October 25, 2024

hcsgcorp.com Listed by underground Ransomware Group

Revenue:$1.7 Billion - Country :USA…

high October 05, 2024

Casio Computer Co., Ltd Listed by underground Ransomware Group

Revenue:$1.858 billion - Country :Japan…

high July 03, 2024

ramservices.com Listed by underground Ransomware Group

Revenue:$162M - Country :USA…

high June 20, 2024

Ethypharm Listed by underground Ransomware Group

Revenue:$ 670M - Country :France…

high May 24, 2024

A-Line Staffing Solutions Listed by underground Ransomware Group

Revenue:$96.1M - Country :USA…

high May 15, 2024

CentralSecurities.com Listed by underground Ransomware Group

Revenue:$230M - Country :USA…

high May 04, 2024

belcherpharma.com Listed by underground Ransomware Group

Revenue:$25.7M - Country :USA…

high May 04, 2024

www.belcherpharma.com Listed by underground Ransomware Group

Revenue:$25.7M - Country :USA…

high April 15, 2024

cochraneglobal.com Listed by underground Ransomware Group

Revenue:$270.8 Million - Country :United Arab Emir...…

high March 21, 2024

Skender Construction Listed by underground Ransomware Group

Revenue:$318.3 Million - Country :USA…

high March 17, 2024

Creative Business Interiors Listed by underground Ransomware Group

Revenue:$27M - Country :USA…

high March 14, 2024

Y. Hata & Co., Ltd. Listed by underground Ransomware Group

Revenue:$268M - Country :USA…

high March 06, 2024

KyungChang Listed by underground Ransomware Group

Revenue:$650M - Country :South Korea…

high February 23, 2024

kc.co.kr Listed by underground Ransomware Group

Revenue:$650M - Country :South Korea…

high January 26, 2024

Triathlon.group Listed by underground Ransomware Group

Revenue:$176M - Country :Australia, Germa...…

high January 25, 2024

awwg.com Listed by underground Ransomware Group

Revenue:€585M - Country :France, Spain, U...…

high July 18, 2023

frenckengroup.com Listed by underground Ransomware Group

Revenue:$50.0M - Country :Singapore…

high July 14, 2023

bulldogbag.com Listed by underground Ransomware Group

Revenue:$20.6M - Country :Canada…

high July 04, 2023

tpa-group.sk Listed by underground Ransomware Group

Revenue:tpa-group.com $281M; tpa-group.sk $15M - Country :Slovakia…

high May 30, 2023

synology.com Listed by underground Ransomware Group

Revenue:$183.6M - Country :Germany, Taiwan…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.