Dispossessor
Data as of August 16, 2026.
Credential exposure before the attack
54.3% of Dispossessor victims whose domain we can identify (19 of 35) had employee credentials leak in the 12 months before Dispossessor named them as a victim.
We don't know whether any of these credentials were how Dispossessor gained initial access.
What industries Dispossessor targets
Sector identified for 26 of 35 victims.
| Healthcare | 7 | |
| Financial Services | 4 | |
| Real Estate | 3 | |
| Technology | 3 | |
| Energy | 2 | |
| Education | 2 | |
| Construction | 2 | |
| Logistics | 1 |
Where the victims are located
Country identified for 3 of 35 victims.
| United States | 1 | |
| Germany | 1 | |
| United Kingdom | 1 |
Most recent Dispossessor victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Parker Development parkerdevco.com | Real Estate | Not identified | Aug 12, 2024 |
| TNT Materials tnt-materials.com | Construction | Not identified | Aug 5, 2024 |
| The Leezer Agency leezeragency.com | Financial Services | Not identified | Jul 31, 2024 |
| Aire Dental Arts airedentalarts.com | Healthcare | Not identified | Jul 30, 2024 |
| Tursso tursso.com | Not identified | Not identified | Jul 30, 2024 |
| Delhi Hospital delhihospital.com | Healthcare | Not identified | Jul 29, 2024 |
| Virginia Commonwealth University in Qatar vcu.edu | Education | Not identified | Jul 29, 2024 |
| Agilysys agilysys.com | Technology | Not identified | Jul 26, 2024 |
| Cadence Bank cadencebank.com | Financial Services | Not identified | Jul 26, 2024 |
| Care Services careservicesllc.com | Not identified | Not identified | Jul 26, 2024 |
| Crowe crowe.com | Not identified | Not identified | Jul 26, 2024 |
| Datasite datasite.com | Technology | Not identified | Jul 26, 2024 |
| Gensler gensler.com | Not identified | Not identified | Jul 26, 2024 |
| Hess hess.com | Energy | Not identified | Jul 26, 2024 |
| Hubbell hubbell.com | Construction | Not identified | Jul 26, 2024 |
| Pioneer Electronics pioneerelectronics.com | Not identified | Not identified | Jul 26, 2024 |
| AJC International ajcfood.com | Not identified | Not identified | Jul 11, 2024 |
| Brown Integrated Logistics brownintegratedlogistics.com | Logistics | Not identified | Jul 11, 2024 |
| Buckingham Properties buckprop.com | Real Estate | Not identified | Jul 11, 2024 |
| Pickens County South Carolina pickens.sc.us | Not identified | United States | Jul 11, 2024 |
Showing the 20 most recent of 35. Browse recent data breaches for more.
Dispossessor leak sites
Addresses we've seen Dispossessor publish victims from. Any .onion address needs the Tor Browser.
e27z5kd2rjsern2gpgukhcioysqlfquxgf7rxpvcwepxl4lfc736piyd.oniongg6owuhu72muoelkt2msjrp2llwr2on5634sk5v2xefzmobvryywbhid.onioncactusbloguuodvqjmnzlwetjlpj6aggc6iocwhuupb47laukux7ckid.onion
Dispossessor questions
Is Dispossessor still active?
Not for over a year. The last victim we recorded was August 12, 2024. The leak site has published nothing since, though the data it already leaked is still out there.
How many victims has Dispossessor claimed?
Dispossessor has named 35 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did Dispossessor first appear?
The first victim we recorded for Dispossessor was posted on July 11, 2024. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does Dispossessor target?
Healthcare accounts for the most victims we can classify, with 7. Financial Services follows at 4. We could identify a sector for 26 of 35 victims, so treat this as the shape of the targeting rather than a full census.
Has Dispossessor already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.