Cry0

Active
2 victims named on the leak site
1 in the last 30 days
2 in the last 12 months
Apr 2026 first victim we recorded
Aug 7, 2026 most recent victim posted
1 leak site tracked

Data as of August 16, 2026.

What industries Cry0 targets

Sector identified for all 2 victims.

Manufacturing2

Where the victims are located

Country identified for all 2 victims.

Italy1
United States1

Every Cry0 victim

VictimSectorCountryPosted
Hope\'s Windows hopeswindows.comManufacturingUnited StatesAug 7, 2026
Dini dinisrl.itManufacturingItalyApr 7, 2026

Browse recent data breaches for more.

Cry0 leak site

The address we've seen Cry0 publish victims from. Any .onion address needs the Tor Browser.

  • cryoblogedawivdcknyd4jsjxkrx3xrqqltxla6wwjjnzm3f3jaxjzqd.onion

Cry0 questions

Is Cry0 still active?

Yes. Cry0 posted its most recent victim on August 7, 2026.

How many victims has Cry0 claimed?

Cry0 has named 2 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.

When did Cry0 first appear?

The first victim we recorded for Cry0 was posted on April 7, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.

Has Cry0 already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.