BARRACUDA
Data as of September 15, 2026.
What industries BARRACUDA targets
Sector identified for all 7 victims.
| Manufacturing | 3 | |
| Healthcare | 2 | |
| Legal | 1 | |
| Technology | 1 |
Where the victims are located
Country identified for all 7 victims.
| United States | 4 | |
| South Korea | 1 | |
| Brazil | 1 | |
| Turkey | 1 |
Every BARRACUDA victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| i2i Systems i2i-systems.com | Technology | Turkey | Sep 14, 2026 |
| Clinical Associates of the Finger Lakes clinassoc.com | Healthcare | United States | Aug 25, 2026 |
| VR Advogados vradvogados.com.br | Legal | Brazil | Aug 17, 2026 |
| Micro-Comm micro-comm-inc.com | Manufacturing | United States | Aug 7, 2026 |
| Namyang Nexmo nynexmo.com | Manufacturing | South Korea | Aug 7, 2026 |
| RS Automation USA rsautomationusa.com | Manufacturing | United States | Aug 7, 2026 |
| Skyline Implants & Periodontics skylineperio.com | Healthcare | United States | Aug 7, 2026 |
Browse recent data breaches for more.
BARRACUDA leak site
The address we've seen BARRACUDA publish victims from. Any .onion address needs the Tor Browser.
uvm6hk4wwstfddja5z5htgtlehmfyflffijz6iozsuqyacyibzxefkqd.onion
BARRACUDA questions
Is BARRACUDA still active?
Yes. BARRACUDA posted its most recent victim on September 14, 2026. That's 3 victims in the last 30 days.
How many victims has BARRACUDA claimed?
BARRACUDA has named 7 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did BARRACUDA first appear?
The first victim we recorded for BARRACUDA was posted on August 7, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does BARRACUDA target?
Manufacturing accounts for the most victims we can classify, with 3. Healthcare follows at 2.
Has BARRACUDA already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.