Abyss
Data as of September 14, 2026.
Credential exposure before the attack
33.3% of Abyss victims whose domain we can identify (31 of 93) had employee credentials leak in the 12 months before Abyss named them as a victim.
We don't know whether any of these credentials were how Abyss gained initial access.
What industries Abyss targets
Sector identified for 55 of 93 victims.
| Healthcare | 13 | |
| Manufacturing | 11 | |
| Construction | 8 | |
| Financial Services | 8 | |
| Education | 4 | |
| Non-profit | 3 | |
| Real Estate | 2 | |
| Technology | 2 |
Where the victims are located
Country identified for 19 of 93 victims.
| United States | 5 | |
| China | 3 | |
| Switzerland | 3 | |
| United Kingdom | 3 | |
| Canada | 2 | |
| Germany | 2 | |
| Sweden | 1 |
Most recent Abyss victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Memsic Semiconductor memsic.com | Manufacturing | China | Aug 27, 2026 |
| School Facility Consultants s-f-c.org | Education | United States | Jun 2, 2026 |
| Landkreis Limburg-Weilburg landkreis-limburg-weilburg.de | Government | Germany | Jun 1, 2026 |
| Technic technic.com | Manufacturing | United States | May 15, 2026 |
| Thin Line Technologies thinlinetech.com | Technology | United States | Feb 27, 2026 |
| Sitoy Group sitoy.com | Manufacturing | China | Jan 27, 2026 |
| Dillon Yarn dillonyarn.com | Not identified | United States | Dec 10, 2025 |
| Optimum Design Associates optimumdesign.com | Not identified | Not identified | Sep 23, 2025 |
| The Moinian Group moinian.com | Financial Services | United States | Sep 12, 2025 |
| High Point Treatment Center hptc.org | Non-profit | Not identified | Jul 28, 2025 |
| Crown Laboratories crownlaboratories.com | Not identified | Not identified | Apr 3, 2025 |
| ENT and Allergy Associates entandallergy.com | Healthcare | Not identified | Mar 31, 2025 |
| MDM Insurance mdm-insurance.com | Financial Services | Not identified | Mar 17, 2025 |
| Ceratec ceratec.com | Construction | Canada | Mar 4, 2025 |
| Halex halex.com | Technology | Not identified | Feb 17, 2025 |
| Century Vision Global centuryvisionglobal.com | Not identified | Not identified | Feb 3, 2025 |
| Independence Eye independenceeye.com | Healthcare | Not identified | Feb 3, 2025 |
| JPC Group jpcgroupinc.com | Construction | Not identified | Feb 3, 2025 |
| Koch Eye kocheye.com | Not identified | Not identified | Feb 3, 2025 |
| Prairie Eye Center prairieeyecenter.com | Not identified | Not identified | Feb 3, 2025 |
Showing the 20 most recent of 93. Browse recent data breaches for more.
Abyss leak sites
Addresses we've seen Abyss publish victims from. Any .onion address needs the Tor Browser.
3ev4metjirohtdpshsqlkrqcmxq6zu3d7obrdhglpy5jpbr7whmlfgqd.onion4dbytjsczzkwoijd54a26ojbzikig3s2oxiemv7jsngjznvng4aajoqd.onionwnwvg4xr32mzroupompo3l7vfwqo6mn36ahbk3hvfk7wk363tnu4mdqd.onionkceqbaoxmx2czutxty3mq35m5mv46dq66hpszrhbhduj7uwhu6ax3qad.onionm4ts4nqtc7cv6a4izr6luuzccrzswefilxemeqpb43ya2odpusuoozyd.onion3pb6cefz6hubgyb2ph7ua7yjzjpxwapbbp5zomz7xmvrjhjfykjwu6id.onion4ovagmghlgkl56nyo2isonhuk72h26nt2eemnk4wefkecnjen3rbdhad.onionuljqdsotxe2v2gjo6hspd72kv56236kvgg3n6cg6lkn3v5hxzdfzy6ad.oniongvzbeu532wwxqze3v3xcxpsbhpvwusnajzahi55dqklbunzgjp5wchad.onionjphyszq54moi73z3vld2ydl6fbv7ycatxitejn53xscx6js3v4d6geyd.onionr26playdtbhgykecavshgoft6xqdaglowadkr7ifhlweklbituey23ad.onionlychvb6gsb5vw4xabg7lprvshg6y5eocfxrnr44yofoxretiyzycwvyd.onion4zgjv3aaxlmgc5agckobutv4ps7iqoyijnozzfrihxz5tekshuifmqid.onionwpefgvpyuszr4vg444qed734big233itylqclte7usszbdbfyqvb2lqd.onionjtt4lqatjtrj5hxxi33dczkluouf5wivzdmy4v62dnhipk6ixk5mktad.onionfrheu6drsqpehmuyrdxdrfu5bzqwxps4zlmnuxlcnxskwxcwqsyhwxyd.onionlb5lax2ljpsogfr6qgeyc5dsyl3fnte6kq333a73bvsg4j2tjjvia6id.onioncuft7z2xlfogrtx4ddqnjqyerye2qtagksow2fip4xbb5iw7dsgtvhqd.onioncfev2mvlqooohl3af2upkgu3ju4qcgqrrgh6sprfxkgh3qldh2ykxzyd.oniont7fsp5hqch6xvtot2gzeeqrtisyjglmva7mpgkx4docgp4eygiegxrad.onionrq7ljuscat5c2bmplk2dkjsgzq3xgvzoli3w7eljfvlfqxbiferv23qd.onionkorcmzusurb36tdgkokzfjpucvzsc6wwzdgkucscsqp4rxcwi5xiooid.onionwka7ma7rzgmzmtn65dhv5zp5p6e3uv5sydnns7xsf6kpf7noukhchhqd.onion4nsmlpz4qceow7bfrmarxdqaj7chcqobin3mzb27uhscb2yvjs6j4xqd.onionwyz32kscr2ythqpyjwqfxcaxn5576fdurr7jag44gggnmi4cvhykhvid.onion
Abyss questions
Is Abyss still active?
Yes. Abyss posted its most recent victim on August 27, 2026.
How many victims has Abyss claimed?
Abyss has named 93 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 8 of them were posted in the last 12 months.
When did Abyss first appear?
The first victim we recorded for Abyss was posted on January 24, 2023. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does Abyss target?
Healthcare accounts for the most victims we can classify, with 13. Manufacturing follows at 11. We could identify a sector for 55 of 93 victims, so treat this as the shape of the targeting rather than a full census.
Has Abyss already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.