CyberToufan
Data as of August 16, 2026.
Credential exposure before the attack
7.7% of CyberToufan victims whose domain we can identify (2 of 26) had employee credentials leak in the 12 months before CyberToufan named them as a victim.
We don't know whether any of these credentials were how CyberToufan gained initial access.
What industries CyberToufan targets
Sector identified for 18 of 26 victims.
| Financial Services | 4 | |
| Government | 3 | |
| Manufacturing | 3 | |
| Legal | 2 | |
| Technology | 2 | |
| Healthcare | 2 | |
| Telecommunications | 1 | |
| Logistics | 1 |
Where the victims are located
Country identified for 25 of 26 victims.
| Israel | 23 | |
| India | 1 | |
| United Kingdom | 1 |
Most recent CyberToufan victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| UPC Precision Castings upccastings.com | Financial Services | Israel | Dec 15, 2025 |
| Saar Engineering saarengineer.com | Not identified | India | Dec 11, 2025 |
| TMC Transformers tmc.co.il | Manufacturing | Israel | Nov 29, 2025 |
| MAYA Technologies maya-il.com | Healthcare | Israel | Oct 31, 2025 |
| ACOMSTRATEGIES acomstrategies.com | Not identified | Israel | Oct 6, 2025 |
| FNX fnx.co.il | Financial Services | Israel | Oct 6, 2025 |
| Israel Aerospace Industries iai.co.il | Government | Israel | Oct 6, 2025 |
| Izhar Engineering izharengineering.com | Manufacturing | Not identified | Oct 6, 2025 |
| Rational Solutions rational-sl.com | Healthcare | Israel | Oct 6, 2025 |
| Shiran Tours shiran-tours.co.il | Logistics | Israel | Oct 6, 2025 |
| Tamir Law Firm tamirj-law.com | Legal | Israel | Oct 6, 2025 |
| Zevulun Marine Systems zevulun.biz | Manufacturing | Israel | Oct 6, 2025 |
| DataCar datacarparts.co.il | Technology | Israel | Oct 2, 2025 |
| A.D. Edri Brothers edriltd.co.il | Government | Israel | Oct 2, 2025 |
| Ziv Car zivcar.co.il | Technology | Israel | Oct 2, 2025 |
| Yael Avidan Law Office avidan-adv.com | Legal | Israel | Sep 4, 2025 |
| Boaz Vardi boazvardi.com | Not identified | Israel | Sep 4, 2025 |
| Data Car datacar.co.il | Financial Services | Israel | Sep 4, 2025 |
| A. D. Edri Brothers edriltd.co.il | Government | Israel | Sep 4, 2025 |
| GoldenBit goldenbit.co.il | Financial Services | Israel | Sep 4, 2025 |
Showing the 20 most recent of 26. Browse recent data breaches for more.
CyberToufan leak sites
Addresses we've seen CyberToufan publish victims from. Any .onion address needs the Tor Browser.
toufanleaks.orggofile.ioshorter.me
CyberToufan questions
Is CyberToufan still active?
It's gone quiet. The last victim we recorded was December 15, 2025, and nothing has appeared since. Groups do go quiet and come back, so we're still watching.
How many victims has CyberToufan claimed?
CyberToufan has named 26 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did CyberToufan first appear?
The first victim we recorded for CyberToufan was posted on September 4, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does CyberToufan target?
Financial Services accounts for the most victims we can classify, with 4. Government follows at 3. We could identify a sector for 18 of 26 victims, so treat this as the shape of the targeting rather than a full census.
Has CyberToufan already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.