Privacy UnpackedRansomware gang
Play
Claims on its leak site since 26 November 2022, number 9 of all gangs in the last 12 months
- Claims, 12 months
- 286
- Last 30 days
- 23
- All claims
- 1,340
- Last claim
- 27 October 2026
Where its claimed victims are
Sectors
Claims matched to an official notice
15 organisations Play claimed also filed a breach notice with a regulator, all of them after the claim (a median of 113 days later). Matched by name: the notice does not say who the attacker was.
- Encore Roofing Inc
Claimed 23 January 2026 · notice filed with the Indiana Attorney General 21 August 2026 - Ampex Data Systems Corporation
Claimed 30 March 2026 · notice filed with the California Attorney General 27 May 2026 - Lusamerica Foods
Claimed 13 February 2026 · notice filed with the California Attorney General 18 May 2026 - Rockrose Development L.L.C.
Claimed 14 July 2025 · notice filed with the California Attorney General 12 December 2025 - Lydig Construction, Inc.
Claimed 3 July 2025 · notice filed with the Washington Attorney General 12 December 2025 - Gl Veneer, Inc.
Claimed 9 September 2025 · notice filed with the California Attorney General 12 November 2025 - Farmers Rice Cooperative
Claimed 4 September 2024 · notice filed with the California Attorney General 19 August 2025 - Hyper Ice, Inc.
Claimed 11 July 2024 · notice filed with the California Attorney General 6 January 2025 - Dome Construction Corporation
Claimed 6 November 2024 · notice filed with the California Attorney General 22 November 2024 - Bel-Air Bay Club Ltd
Claimed 10 September 2024 · notice filed with the California Attorney General 11 October 2024 - GreenWaste Recovery, LLC d/b/a GreenWaste
Claimed 7 December 2023 · notice filed with the California Attorney General 5 April 2024 - Ridge Vineyards
Claimed 7 December 2023 · notice filed with the California Attorney General 29 March 2024 - SinglePoint Outsourcing, Inc.
Claimed 28 November 2023 · notice filed with the California Attorney General 8 February 2024 - Brodart Co.
Claimed 30 October 2023 · notice filed with the California Attorney General 22 November 2023 - Hill International, Inc
Claimed 22 June 2023 · notice filed with the California Attorney General 9 November 2023
Government advisories
What a claim is, and is not
A claim is a ransomware gang naming an organisation on its leak site, usually to pressure it into paying. It is the gang’s word: some claims are false, recycled from older breaches or exaggerated, and a claim says nothing about whose personal data, if any, was taken. That is why we count claims but do not list the organisations, and why a breach goes on the tracker as confirmed only when the organisation or a regulator says so.
How this is counted
Claims as collected from the gangs’ leak sites by ransomware.live, which says itself that they are unverified. We read its list every day and keep only counts: by month, by the victim’s country and by sector (as ransomware.live classifies them). Matches with official notices are by the organisation’s name, from 30 days before the claim to a year after it, against California’s and Washington’s full breach registers and every official notice on the tracker. A match is not a confirmation rate: those registers only see breaches of their own residents, and names are written differently. We never link to or visit leak sites.
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.