BusinessDataLeaks

Active
106 victims named on the leak site
13 in the last 30 days
37 in the last 12 months
Dec 2024 first victim we recorded
Aug 14, 2026 most recent victim posted
2 leak sites tracked

Data as of August 16, 2026.

Credential exposure before the attack

69.8% of BusinessDataLeaks victims whose domain we can identify (74 of 106) had employee credentials leak in the 12 months before BusinessDataLeaks named them as a victim.

We don't know whether any of these credentials were how BusinessDataLeaks gained initial access.

What industries BusinessDataLeaks targets

Sector identified for 89 of 106 victims.

Legal53
Financial Services29
Manufacturing2
Retail1
Real Estate1
Education1
Hospitality1
Energy1

Where the victims are located

Country identified for 39 of 106 victims.

United States38
Australia1

Most recent BusinessDataLeaks victims

VictimSectorCountryPosted
Reminger reminger.comLegalUnited StatesAug 14, 2026
Riker Danzig riker.comLegalUnited StatesAug 13, 2026
Barclay Damon barclaydamon.comLegalUnited StatesAug 10, 2026
Farella Braun and Martel fbm.comLegalUnited StatesAug 10, 2026
Floyd Skeren Manukian Langevin floydskerenlaw.comLegalNot identifiedAug 10, 2026
Fox Rothschild foxrothschild.comLegalUnited StatesAug 10, 2026
Marshall Dennehey marshalldennehey.comLegalUnited StatesAug 10, 2026
Mayer Brown mayerbrown.comLegalUnited StatesAug 10, 2026
Moses & Singer mosessinger.comLegalUnited StatesAug 10, 2026
Porter Wright Morris & Arthur porterwright.comLegalUnited StatesAug 10, 2026
Ropers Majeski ropers.comLegalUnited StatesAug 10, 2026
Rutan & Tucker rutan.comLegalUnited StatesAug 10, 2026
Sandberg Phoenix sandbergphoenix.comLegalUnited StatesAug 10, 2026
Cox, Castle & Nicholson coxcastle.comLegalUnited StatesApr 20, 2026
Fagen Friedman & Fulfrost f3law.comLegalUnited StatesApr 20, 2026
Goulston & Storrs goulstonstorrs.comLegalUnited StatesApr 20, 2026
Harris Beach Murtha harrisbeachmurtha.comLegalUnited StatesApr 20, 2026
Jones Day jonesday.comLegalUnited StatesApr 20, 2026
Plunkett Cooney plunkettcooney.comLegalUnited StatesApr 20, 2026
Hawaii Employers’ Mutual Insurance hemic.comFinancial ServicesUnited StatesMar 23, 2026

Showing the 20 most recent of 106. Browse recent data breaches for more.

BusinessDataLeaks leak sites

Addresses we've seen BusinessDataLeaks publish victims from. Any .onion address needs the Tor Browser.

  • business-data-leaks.com
  • ep6pheij.com

BusinessDataLeaks questions

Is BusinessDataLeaks still active?

Yes. BusinessDataLeaks posted its most recent victim on August 14, 2026. That's 13 victims in the last 30 days.

How many victims has BusinessDataLeaks claimed?

BusinessDataLeaks has named 106 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 37 of them were posted in the last 12 months.

When did BusinessDataLeaks first appear?

The first victim we recorded for BusinessDataLeaks was posted on December 14, 2024. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does BusinessDataLeaks target?

Legal accounts for the most victims we can classify, with 53. Financial Services follows at 29. We could identify a sector for 89 of 106 victims, so treat this as the shape of the targeting rather than a full census.

Has BusinessDataLeaks already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.