D4RK4RMY

Quiet since August 21, 2025
19 victims named on the leak site
0 in the last 30 days
3 in the last 12 months
Jul 2025 first victim we recorded
Aug 21, 2025 most recent victim posted
1 leak site tracked

Data as of August 16, 2026.

What industries D4RK4RMY targets

Sector identified for 13 of 19 victims.

Financial Services4
Hospitality2
Legal2
Education2
Logistics1
Manufacturing1
Construction1

Where the victims are located

Country identified for 15 of 19 victims.

United States5
Taiwan2
Brazil2
Australia1
Japan1
United Kingdom1
Italy1
Poland1

Every D4RK4RMY victim

VictimSectorCountryPosted
The Millennium Group tmgofficeservices.comNot identifiedUnited StatesAug 18, 2025
Vinson & Elkins velaw.comLegalUnited StatesAug 18, 2025
MMA Transfers mmatransfers.comNot identifiedUnited KingdomAug 13, 2025
Bridgewater Associates bridgewater.comFinancial ServicesUnited StatesAug 8, 2025
Magellan Financial Group magellangroup.com.auFinancial ServicesAustraliaAug 8, 2025
Mizuho Financial Group mizuhogroup.comFinancial ServicesJapanAug 8, 2025
Onex onex.comNot identifiedNot identifiedAug 8, 2025
Tsai Capital tsaicapital.comFinancial ServicesUnited StatesAug 8, 2025
Big Rock Resort bigrockresort.netHospitalityUnited StatesAug 4, 2025
Dimerco dimerco.comLogisticsTaiwanAug 4, 2025
Monte Carlo Société des Bains de Me montecarlosbm.comHospitalityNot identifiedAug 4, 2025
Digitall Evolution digitallevolution.com.brNot identifiedBrazilJul 9, 2025
Loyola University Chicago luc.eduEducationNot identifiedJul 9, 2025
VRA Advogados vradv.com.brLegalBrazilJul 9, 2025
Big Silver Manufacturing bigsilvermanu.comManufacturingItalyJul 8, 2025
ELZAB elzab.com.plNot identifiedPolandJul 8, 2025
Mafate Business Enterprises mafate.co.zaConstructionSouth AfricaJul 8, 2025
Taiwan Digital Streaming twds.com.twNot identifiedTaiwanJul 8, 2025
University of Puerto Rico, Recinto de Río Piedras uprrp.eduEducationNot identifiedJul 8, 2025

Browse recent data breaches for more.

D4RK4RMY leak site

The address we've seen D4RK4RMY publish victims from. Any .onion address needs the Tor Browser.

  • d4rkd2fybtclo44hss2dpqpw7gmofboxhruax2az3uejw7puxxbpkvqd.onion

D4RK4RMY questions

Is D4RK4RMY still active?

It's gone quiet. The last victim we recorded was August 21, 2025, and nothing has appeared since. Groups do go quiet and come back, so we're still watching.

How many victims has D4RK4RMY claimed?

D4RK4RMY has named 19 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 3 of them were posted in the last 12 months.

When did D4RK4RMY first appear?

The first victim we recorded for D4RK4RMY was posted on July 8, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does D4RK4RMY target?

Financial Services accounts for the most victims we can classify, with 4. Hospitality follows at 2. We could identify a sector for 13 of 19 victims, so treat this as the shape of the targeting rather than a full census.

Has D4RK4RMY already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.