BusinessDataLeaks

Active
113 victims named on the leak site
6 in the last 30 days
42 in the last 12 months
Dec 2024 first victim we recorded
Sep 23, 2026 most recent victim posted
2 leak sites tracked

Data as of October 1, 2026.

Credential exposure before the attack

70.8% of BusinessDataLeaks victims whose domain we can identify (80 of 113) had employee credentials leak in the 12 months before BusinessDataLeaks named them as a victim.

We don't know whether any of these credentials were how BusinessDataLeaks gained initial access.

What industries BusinessDataLeaks targets

Sector identified for 96 of 113 victims.

Legal60
Financial Services29
Manufacturing2
Retail1
Real Estate1
Education1
Hospitality1
Energy1

Where the victims are located

Country identified for 45 of 113 victims.

United States44
Australia1

Most recent BusinessDataLeaks victims

VictimSectorCountryPosted
Clark Hill clarkhill.comLegalUnited StatesSep 23, 2026
Cozen O\'Connor cozen.comLegalUnited StatesSep 23, 2026
Hogan Lovells Cadwalader hlc.comLegalUnited StatesSep 22, 2026
Katten Muchin Rosenman katten.comLegalUnited StatesSep 4, 2026
Greenberg Traurig gtlaw.comLegalUnited StatesSep 3, 2026
Holland & Knight hklaw.comLegalUnited StatesSep 2, 2026
Troutman Pepper Locke troutman.comLegalNot identifiedAug 19, 2026
Reminger reminger.comLegalUnited StatesAug 14, 2026
Riker Danzig riker.comLegalUnited StatesAug 13, 2026
Barclay Damon barclaydamon.comLegalUnited StatesAug 10, 2026
Farella Braun and Martel fbm.comLegalUnited StatesAug 10, 2026
Floyd Skeren Manukian Langevin floydskerenlaw.comLegalNot identifiedAug 10, 2026
Fox Rothschild foxrothschild.comLegalUnited StatesAug 10, 2026
Marshall Dennehey marshalldennehey.comLegalUnited StatesAug 10, 2026
Mayer Brown mayerbrown.comLegalUnited StatesAug 10, 2026
Moses & Singer mosessinger.comLegalUnited StatesAug 10, 2026
Porter Wright Morris & Arthur porterwright.comLegalUnited StatesAug 10, 2026
Ropers Majeski ropers.comLegalUnited StatesAug 10, 2026
Rutan & Tucker rutan.comLegalUnited StatesAug 10, 2026
Sandberg Phoenix sandbergphoenix.comLegalUnited StatesAug 10, 2026

Showing the 20 most recent of 113. Browse recent data breaches for more.

BusinessDataLeaks leak sites

Addresses we've seen BusinessDataLeaks publish victims from. Any .onion address needs the Tor Browser.

  • business-data-leaks.com
  • ep6pheij.com

BusinessDataLeaks questions

Is BusinessDataLeaks still active?

Yes. BusinessDataLeaks posted its most recent victim on September 23, 2026. That's 6 victims in the last 30 days.

How many victims has BusinessDataLeaks claimed?

BusinessDataLeaks has named 113 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 42 of them were posted in the last 12 months.

When did BusinessDataLeaks first appear?

The first victim we recorded for BusinessDataLeaks was posted on December 14, 2024. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does BusinessDataLeaks target?

Legal accounts for the most victims we can classify, with 60. Financial Services follows at 29. We could identify a sector for 96 of 113 victims, so treat this as the shape of the targeting rather than a full census.

Has BusinessDataLeaks already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.