BusinessDataLeaks

Active
110 victims named on the leak site
4 in the last 30 days
39 in the last 12 months
Dec 2024 first victim we recorded
Sep 4, 2026 most recent victim posted
2 leak sites tracked

Data as of September 14, 2026.

Credential exposure before the attack

70.9% of BusinessDataLeaks victims whose domain we can identify (78 of 110) had employee credentials leak in the 12 months before BusinessDataLeaks named them as a victim.

We don't know whether any of these credentials were how BusinessDataLeaks gained initial access.

What industries BusinessDataLeaks targets

Sector identified for 93 of 110 victims.

Legal57
Financial Services29
Manufacturing2
Retail1
Real Estate1
Education1
Hospitality1
Energy1

Where the victims are located

Country identified for 42 of 110 victims.

United States41
Australia1

Most recent BusinessDataLeaks victims

VictimSectorCountryPosted
Katten Muchin Rosenman katten.comLegalUnited StatesSep 4, 2026
Greenberg Traurig gtlaw.comLegalUnited StatesSep 3, 2026
Holland & Knight hklaw.comLegalUnited StatesSep 2, 2026
Troutman Pepper Locke troutman.comLegalNot identifiedAug 19, 2026
Reminger reminger.comLegalUnited StatesAug 14, 2026
Riker Danzig riker.comLegalUnited StatesAug 13, 2026
Barclay Damon barclaydamon.comLegalUnited StatesAug 10, 2026
Farella Braun and Martel fbm.comLegalUnited StatesAug 10, 2026
Floyd Skeren Manukian Langevin floydskerenlaw.comLegalNot identifiedAug 10, 2026
Fox Rothschild foxrothschild.comLegalUnited StatesAug 10, 2026
Marshall Dennehey marshalldennehey.comLegalUnited StatesAug 10, 2026
Mayer Brown mayerbrown.comLegalUnited StatesAug 10, 2026
Moses & Singer mosessinger.comLegalUnited StatesAug 10, 2026
Porter Wright Morris & Arthur porterwright.comLegalUnited StatesAug 10, 2026
Ropers Majeski ropers.comLegalUnited StatesAug 10, 2026
Rutan & Tucker rutan.comLegalUnited StatesAug 10, 2026
Sandberg Phoenix sandbergphoenix.comLegalUnited StatesAug 10, 2026
Cox, Castle & Nicholson coxcastle.comLegalUnited StatesApr 20, 2026
Fagen Friedman & Fulfrost f3law.comLegalUnited StatesApr 20, 2026
Goulston & Storrs goulstonstorrs.comLegalUnited StatesApr 20, 2026

Showing the 20 most recent of 110. Browse recent data breaches for more.

BusinessDataLeaks leak sites

Addresses we've seen BusinessDataLeaks publish victims from. Any .onion address needs the Tor Browser.

  • business-data-leaks.com
  • ep6pheij.com

BusinessDataLeaks questions

Is BusinessDataLeaks still active?

Yes. BusinessDataLeaks posted its most recent victim on September 4, 2026. That's 4 victims in the last 30 days.

How many victims has BusinessDataLeaks claimed?

BusinessDataLeaks has named 110 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 39 of them were posted in the last 12 months.

When did BusinessDataLeaks first appear?

The first victim we recorded for BusinessDataLeaks was posted on December 14, 2024. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does BusinessDataLeaks target?

Legal accounts for the most victims we can classify, with 57. Financial Services follows at 29. We could identify a sector for 93 of 110 victims, so treat this as the shape of the targeting rather than a full census.

Has BusinessDataLeaks already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.