Vortex — every breach we're tracking
Running log of incidents attributed to or claimed by Vortex in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.
Groups like Vortex steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.
Tracked incidents
Cresa Listed by Vortex Ransomware Group
Deadline: 2026-11-12T23:18:56Z…
Pyramid Healthcare Listed by Vortex Ransomware Group
Deadline: 2026-11-12T23:18:56Z…
Alexion Listed by Vortex Ransomware Group
Deadline: 2026-11-12T23:18:56Z…
Arthrex Listed by Vortex Ransomware Group
MORE TIERS WILL RELEASE…
Solenis Listed by Vortex Ransomware Group
SOLENIS — full corporate data dump 1.65 TB · 58,249 files · 336,782,341 CRM records · 20.9 billion Foundry rows · captured October 2026 SO…
Andersen Construction Listed by Vortex Ransomware Group
════════════════════════════════════════════════════════════════ ANDERSEN CONSTRUCTION — CONSOLIDATED FINANCIALS Sources: SLT Meeting Financ…
Solenis Listed by Vortex Ransomware Group
SOLENIS — full corporate data dump 1.65 TB · 58,249 files · 336,782,341 CRM records · 20.9 billion Foundry rows · captured October 2026 SOLE…
Karlstorz Listed by Vortex Ransomware Group
Surgical-device R&D and product design files, regulatory and quality documentation, thousands of hospital and vendor contracts, tens of thou…
Bozzuto Listed by Vortex Ransomware Group
Bozzuto was listed on the Vortex ransomware leak site. The group claims to have stolen internal data.…
El Camino Health Listed by Vortex Ransomware Group
Severe healthcare exposure: tens of thousands of patient clinical records and PHI, physician credentialing files with licensure and identity…
Air Communities Listed by Vortex Ransomware Group
accounts payable/receivable, audited financials FY2006–FY2013, TRS restructuring, total ownership summaries, disposition closing CDs, debt d…
Samtec Listed by Vortex Ransomware Group
Samtec was listed on the Vortex ransomware leak site. The group claims to have stolen internal data.…
SimonMed Listed by Vortex Ransomware Group
Imaging-center operations: tens of thousands of mailbox exports, patient scheduling and imaging-adjacent documents, HR, insurance and vendor…
Storage Mart Listed by Vortex Ransomware Group
Massive tenant PII exposure at scale: tens of thousands of rental agreements containing names, addresses, ID and driver's-license copies and…
Scripps Listed by Vortex Ransomware Group
Patient clinical records and PHI, physician credentialing files, workforce timekeeping and leave records, emergency notification and contact…
Arthrex Listed by Vortex Ransomware Group
MORE TIERS WILL RELEASE…
Your email leaked. See who’s selling your address.
Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free DoxxScan™ scan shows you which breaches exposed your email. Then you pick what fits.