D1R
Data as of August 16, 2026.
What industries D1R targets
Sector identified for all 3 victims.
| Technology | 2 | |
| Manufacturing | 1 |
Where the victims are located
Country identified for 2 of 3 victims.
| United Kingdom | 1 | |
| Germany | 1 |
Every D1R victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Arm arm.com | Technology | United Kingdom | Jul 13, 2026 |
| Bosch bosch.com | Manufacturing | Germany | Jul 13, 2026 |
| Synopsys synopsys.com | Technology | Not identified | Jul 13, 2026 |
Browse recent data breaches for more.
D1R leak site
The address we've seen D1R publish victims from. Any .onion address needs the Tor Browser.
dirone3rl3vvq64ckcnrvhe2ogrhjrwu5u7hqzrlotu3rfvmqmmbsuqd.onion
D1R questions
Is D1R still active?
Yes. D1R posted its most recent victim on July 13, 2026.
How many victims has D1R claimed?
D1R has named 3 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did D1R first appear?
The first victim we recorded for D1R was posted on July 13, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.
Has D1R already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.