cinder
Data as of October 16, 2026.
What industries cinder targets
Sector identified for all 8 victims.
| Manufacturing | 4 | |
| Financial Services | 3 | |
| Retail | 1 |
Where the victims are located
Country identified for all 8 victims.
| United States | 8 |
Every cinder victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| 2bYT6F3g2mn7yTTBvgKVtZfZpqsZz3jn aleragroup.com | Financial Services | United States | Oct 16, 2026 |
| wGeZUNtSNxFGTrnec5y2euQ4Zn37x4zU aleragroup.com | Financial Services | United States | Oct 16, 2026 |
| 3Xgy9EcRdcZXxmqXRqZHkmUvJL7Emkan buckle.com | Retail | United States | Oct 16, 2026 |
| v9Z7qj7zqC2EWVH5K7fwpHrAzdXFexGW camdenliving.com | Financial Services | United States | Oct 16, 2026 |
| yZaDSyAhjXUabtcZxyWeCZ6RWA8R232a hensleyind.com | Manufacturing | United States | Oct 16, 2026 |
| Hilmar Cheese hilmar.com | Manufacturing | United States | Oct 16, 2026 |
| km2DVcJzQX5XZ8867rwen6qxpZ3CQEjb middleby.com | Manufacturing | United States | Oct 16, 2026 |
| xFbpGxLJKWKMrBHSDrPnkpwfALHQ4gAZ sunshinemills.com | Manufacturing | United States | Oct 16, 2026 |
Browse recent data breaches for more.
cinder leak site
The address we've seen cinder publish victims from. Any .onion address needs the Tor Browser.
iah6477wcvisc45wl54u524fbrh4dnmtcctpg2fpe5epf3jbpkiwu4qd.onion
cinder questions
Is cinder still active?
Yes. cinder posted its most recent victim on October 16, 2026. That's 8 victims in the last 30 days.
How many victims has cinder claimed?
cinder has named 8 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did cinder first appear?
The first victim we recorded for cinder was posted on October 16, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does cinder target?
Manufacturing accounts for the most victims we can classify, with 4. Financial Services follows at 3.
Has cinder already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.