DunghillLeak
Data as of August 16, 2026.
Credential exposure before the attack
50% of DunghillLeak victims whose domain we can identify (11 of 22) had employee credentials leak in the 12 months before DunghillLeak named them as a victim.
We don't know whether any of these credentials were how DunghillLeak gained initial access.
What industries DunghillLeak targets
Sector identified for 14 of 22 victims.
| Manufacturing | 6 | |
| Healthcare | 3 | |
| Construction | 2 | |
| Financial Services | 1 | |
| Telecommunications | 1 | |
| Logistics | 1 |
Where the victims are located
Country identified for 8 of 22 victims.
| United States | 5 | |
| Brazil | 2 | |
| Canada | 1 |
Most recent DunghillLeak victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| The Printing House tph.ca | Not identified | Canada | Jul 1, 2025 |
| Linney linney.com | Logistics | Not identified | Apr 28, 2025 |
| Andrade Gutierrez andradegutierrez.com.br | Construction | Brazil | Sep 14, 2024 |
| Gentex gentex.com | Manufacturing | United States | Sep 14, 2024 |
| Incredible Technologies itsgames.com | Manufacturing | United States | Sep 14, 2024 |
| Sabre sabre.com | Not identified | Not identified | Sep 14, 2024 |
| VIVA viva.com.bo | Telecommunications | Not identified | Jul 16, 2024 |
| Roper ropertech.com | Manufacturing | Not identified | Jul 12, 2024 |
| Nexperia nexperia.com | Not identified | Not identified | Apr 11, 2024 |
| Array Networks arraynetworks.com | Not identified | Not identified | Mar 1, 2024 |
| Apollo Aerospace Components apolloaerospacecomponents.com | Not identified | Not identified | Nov 9, 2023 |
| Park-Ohio Holdings pkoh.com | Manufacturing | Not identified | Nov 9, 2023 |
| Supply Technologies supplytechnologies.com | Manufacturing | Not identified | Nov 9, 2023 |
| CannonDesign cannondesign.com | Not identified | Not identified | Sep 27, 2023 |
| The Go-Ahead Group go-ahead.com | Not identified | Not identified | Sep 27, 2023 |
| Robins & Morton robinsmorton.com | Healthcare | Not identified | Sep 27, 2023 |
| Vertafore vertafore.com | Financial Services | Not identified | Sep 27, 2023 |
| sabre.com | Not identified | Not identified | Sep 7, 2023 |
| sysco.com | Healthcare | United States | Jun 27, 2023 |
| Sysco sysco.com | Healthcare | United States | Jun 19, 2023 |
Showing the 20 most recent of 22. Browse recent data breaches for more.
DunghillLeak leak sites
Addresses we've seen DunghillLeak publish victims from. Any .onion address needs the Tor Browser.
nsalewdnfclsowcal6kn5csm4ryqmfpijznxwictukhrgvz2vbmjjjyd.onionp66slxmtum2ox4jpayco6ai3qfehd5urgrs4oximjzklxcol264driqd.onionzroxb37ghsh2xkwrkfkyz65jmuv6goaltcqxohk4syziahgjv5zou5qd.onion
DunghillLeak questions
Is DunghillLeak still active?
Not for over a year. The last victim we recorded was July 1, 2025. The leak site has published nothing since, though the data it already leaked is still out there.
How many victims has DunghillLeak claimed?
DunghillLeak has named 22 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did DunghillLeak first appear?
The first victim we recorded for DunghillLeak was posted on April 11, 2023. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does DunghillLeak target?
Manufacturing accounts for the most victims we can classify, with 6. Healthcare follows at 3. We could identify a sector for 14 of 22 victims, so treat this as the shape of the targeting rather than a full census.
Has DunghillLeak already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.