DarkProject

Active
30 victims named on the leak site
10 in the last 30 days
30 in the last 12 months
Aug 2026 first victim we recorded
Sep 10, 2026 most recent victim posted
1 leak site tracked

Data as of September 15, 2026.

Credential exposure before the attack

30% of DarkProject victims whose domain we can identify (9 of 30) had employee credentials leak in the 12 months before DarkProject named them as a victim.

We don't know whether any of these credentials were how DarkProject gained initial access.

What industries DarkProject targets

Sector identified for 25 of 30 victims.

Manufacturing7
Healthcare6
Logistics3
Automotive2
Construction2
Technology1
Non-profit1
Education1

Where the victims are located

Country identified for 29 of 30 victims.

United States27
Canada1
Indonesia1

Most recent DarkProject victims

VictimSectorCountryPosted
SpecChem specchem.comConstructionUnited StatesSep 10, 2026
ALUR Walls alurwalls.comManufacturingUnited StatesSep 8, 2026
Master Manufacturing mastermfg.comManufacturingUnited StatesSep 8, 2026
MEI Architects meiarchitects.comNot identifiedUnited StatesSep 8, 2026
Dentist in New Britain dentistinnewbritain.comHealthcareUnited StatesAug 26, 2026
Pump Engineering pumpengineering.netManufacturingUnited StatesAug 26, 2026
Design-Aire Engineering daengineering.comEnergyUnited StatesAug 25, 2026
Furnished Quarters furnishedquarters.comNot identifiedUnited StatesAug 25, 2026
Jones, Little & Co. jonesandlittle.comFinancial ServicesUnited StatesAug 25, 2026
The Liberty Group libertygrp.comLogisticsUnited StatesAug 25, 2026
Long-Lewis Ford of Hoover longlewis.comAutomotiveUnited StatesAug 7, 2026
Brainhunter Systems brainhunter.comTechnologyCanadaAug 6, 2026
Genesis Engineering Group geneng.netNot identifiedUnited StatesAug 6, 2026
Labpharma labpharmacorp.comHealthcareUnited StatesAug 6, 2026
Laurel Institutes laurel.eduHealthcareUnited StatesAug 6, 2026
Leviton leviton.comManufacturingUnited StatesAug 6, 2026
Mayco International maycointernational.comAutomotiveUnited StatesAug 6, 2026
Mile Bluff Medical Center milebluff.comHealthcareUnited StatesAug 6, 2026
The Miller Group miller-group.comNot identifiedUnited StatesAug 6, 2026
Ohio Living ohioliving.orgHealthcareUnited StatesAug 6, 2026

Showing the 20 most recent of 30. Browse recent data breaches for more.

DarkProject leak site

The address we've seen DarkProject publish victims from. Any .onion address needs the Tor Browser.

  • darkprn3d3udnhpuxknsrhft3376lrz5tenhgkrxge5hxqe46pkbrwid.onion

DarkProject questions

Is DarkProject still active?

Yes. DarkProject posted its most recent victim on September 10, 2026. That's 10 victims in the last 30 days.

How many victims has DarkProject claimed?

DarkProject has named 30 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.

When did DarkProject first appear?

The first victim we recorded for DarkProject was posted on August 6, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does DarkProject target?

Manufacturing accounts for the most victims we can classify, with 7. Healthcare follows at 6. We could identify a sector for 25 of 30 victims, so treat this as the shape of the targeting rather than a full census.

Has DarkProject already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.