Abyss
Data as of August 16, 2026.
Credential exposure before the attack
34.1% of Abyss victims whose domain we can identify (31 of 91) had employee credentials leak in the 12 months before Abyss named them as a victim.
We don't know whether any of these credentials were how Abyss gained initial access.
What industries Abyss targets
Sector identified for 53 of 91 victims.
| Healthcare | 13 | |
| Manufacturing | 10 | |
| Construction | 8 | |
| Financial Services | 8 | |
| Education | 4 | |
| Non-profit | 3 | |
| Technology | 2 | |
| Real Estate | 2 |
Where the victims are located
Country identified for 18 of 91 victims.
| United States | 5 | |
| Switzerland | 3 | |
| United Kingdom | 3 | |
| China | 2 | |
| Germany | 2 | |
| Canada | 2 | |
| Sweden | 1 |
Most recent Abyss victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| School Facility Consultants s-f-c.org | Education | United States | Jun 2, 2026 |
| Landkreis Limburg-Weilburg landkreis-limburg-weilburg.de | Government | Germany | Jun 1, 2026 |
| Technic technic.com | Manufacturing | United States | May 15, 2026 |
| Thin Line Technologies thinlinetech.com | Technology | United States | Feb 27, 2026 |
| Sitoy Group sitoy.com | Manufacturing | China | Jan 27, 2026 |
| Dillon Yarn dillonyarn.com | Not identified | United States | Dec 10, 2025 |
| Optimum Design Associates optimumdesign.com | Not identified | Not identified | Sep 23, 2025 |
| The Moinian Group moinian.com | Financial Services | United States | Sep 12, 2025 |
| High Point Treatment Center hptc.org | Non-profit | Not identified | Jul 28, 2025 |
| Crown Laboratories crownlaboratories.com | Not identified | Not identified | Apr 3, 2025 |
| ENT and Allergy Associates entandallergy.com | Healthcare | Not identified | Mar 31, 2025 |
| MDM Insurance mdm-insurance.com | Financial Services | Not identified | Mar 17, 2025 |
| Ceratec ceratec.com | Construction | Canada | Mar 4, 2025 |
| Halex halex.com | Technology | Not identified | Feb 17, 2025 |
| Century Vision Global centuryvisionglobal.com | Not identified | Not identified | Feb 3, 2025 |
| Independence Eye independenceeye.com | Healthcare | Not identified | Feb 3, 2025 |
| JPC Group jpcgroupinc.com | Construction | Not identified | Feb 3, 2025 |
| Koch Eye kocheye.com | Not identified | Not identified | Feb 3, 2025 |
| Prairie Eye Center prairieeyecenter.com | Not identified | Not identified | Feb 3, 2025 |
| Envirosep envirosep.com | Manufacturing | Not identified | Jan 27, 2025 |
Showing the 20 most recent of 91. Browse recent data breaches for more.
Abyss leak sites
Addresses we've seen Abyss publish victims from. Any .onion address needs the Tor Browser.
3ev4metjirohtdpshsqlkrqcmxq6zu3d7obrdhglpy5jpbr7whmlfgqd.onion4dbytjsczzkwoijd54a26ojbzikig3s2oxiemv7jsngjznvng4aajoqd.onionwnwvg4xr32mzroupompo3l7vfwqo6mn36ahbk3hvfk7wk363tnu4mdqd.onionkceqbaoxmx2czutxty3mq35m5mv46dq66hpszrhbhduj7uwhu6ax3qad.onionm4ts4nqtc7cv6a4izr6luuzccrzswefilxemeqpb43ya2odpusuoozyd.onion4ovagmghlgkl56nyo2isonhuk72h26nt2eemnk4wefkecnjen3rbdhad.onion3pb6cefz6hubgyb2ph7ua7yjzjpxwapbbp5zomz7xmvrjhjfykjwu6id.onionuljqdsotxe2v2gjo6hspd72kv56236kvgg3n6cg6lkn3v5hxzdfzy6ad.onionjphyszq54moi73z3vld2ydl6fbv7ycatxitejn53xscx6js3v4d6geyd.onionr26playdtbhgykecavshgoft6xqdaglowadkr7ifhlweklbituey23ad.onion4zgjv3aaxlmgc5agckobutv4ps7iqoyijnozzfrihxz5tekshuifmqid.onionwpefgvpyuszr4vg444qed734big233itylqclte7usszbdbfyqvb2lqd.onionlychvb6gsb5vw4xabg7lprvshg6y5eocfxrnr44yofoxretiyzycwvyd.onionfrheu6drsqpehmuyrdxdrfu5bzqwxps4zlmnuxlcnxskwxcwqsyhwxyd.onionjtt4lqatjtrj5hxxi33dczkluouf5wivzdmy4v62dnhipk6ixk5mktad.oniont7fsp5hqch6xvtot2gzeeqrtisyjglmva7mpgkx4docgp4eygiegxrad.onionrq7ljuscat5c2bmplk2dkjsgzq3xgvzoli3w7eljfvlfqxbiferv23qd.onioncuft7z2xlfogrtx4ddqnjqyerye2qtagksow2fip4xbb5iw7dsgtvhqd.onionlb5lax2ljpsogfr6qgeyc5dsyl3fnte6kq333a73bvsg4j2tjjvia6id.onioncfev2mvlqooohl3af2upkgu3ju4qcgqrrgh6sprfxkgh3qldh2ykxzyd.onionn3gph4a2yzsxg2poapj4rxec4pevgg7maawnda7gavvanybrd4a6elad.onionwka7ma7rzgmzmtn65dhv5zp5p6e3uv5sydnns7xsf6kpf7noukhchhqd.onion2mhkqjcw4auxop7auchz2iijcbj63qccwodtokofbb2ul5oejkkt6xyd.onionwyz32kscr2ythqpyjwqfxcaxn5576fdurr7jag44gggnmi4cvhykhvid.onion2fzahjlleflpcyecd245xe3q6tczjkwzcm4fbhd4q4bsun45y2csyayd.onion
Abyss questions
Is Abyss still active?
Yes. Abyss posted its most recent victim on June 2, 2026.
How many victims has Abyss claimed?
Abyss has named 91 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 8 of them were posted in the last 12 months.
When did Abyss first appear?
The first victim we recorded for Abyss was posted on January 24, 2023. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does Abyss target?
Healthcare accounts for the most victims we can classify, with 13. Manufacturing follows at 10. We could identify a sector for 53 of 91 victims, so treat this as the shape of the targeting rather than a full census.
Has Abyss already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.