FulcrumSec
Data as of August 16, 2026.
Credential exposure before the attack
14.8% of FulcrumSec victims whose domain we can identify (4 of 27) had employee credentials leak in the 12 months before FulcrumSec named them as a victim.
We don't know whether any of these credentials were how FulcrumSec gained initial access.
What industries FulcrumSec targets
Sector identified for 16 of 27 victims.
| Technology | 5 | |
| Healthcare | 4 | |
| Education | 3 | |
| Financial Services | 2 | |
| Logistics | 1 | |
| Manufacturing | 1 |
Where the victims are located
Country identified for 26 of 27 victims.
| United States | 9 | |
| India | 4 | |
| United Kingdom | 3 | |
| Germany | 3 | |
| France | 1 | |
| Czech Republic | 1 | |
| Colombia | 1 | |
| Japan | 1 |
Most recent FulcrumSec victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Novo Nordisk novonordisk.com | Healthcare | Denmark | Jun 17, 2026 |
| Global Schools Group globalschools.com | Education | Singapore | Jun 11, 2026 |
| Arup Group arup.com | Not identified | United Kingdom | May 11, 2026 |
| Prospector Portal prospectorportal.com | Technology | United States | May 8, 2026 |
| Analog Gold analogau.com | Financial Services | United States | Apr 30, 2026 |
| Bookblock bookblock.com | Not identified | United Kingdom | Apr 30, 2026 |
| Crank Communications crankcommunications.com | Not identified | United States | Apr 30, 2026 |
| CrediElite credielite.com | Financial Services | France | Apr 30, 2026 |
| Fashinza fashinza.com | Logistics | India | Apr 30, 2026 |
| Gennet AI gennet.ai | Not identified | Czech Republic | Apr 30, 2026 |
| Hatica hatica.io | Technology | India | Apr 30, 2026 |
| IMEVI imevi.com.co | Healthcare | Colombia | Apr 30, 2026 |
| Interzero interzero.de | Not identified | Germany | Apr 30, 2026 |
| JOTNW jotnw.or.jp | Education | Japan | Apr 30, 2026 |
| Lena Health lena.io | Healthcare | United States | Apr 30, 2026 |
| LexisNexis lexisnexis.com | Not identified | United States | Apr 30, 2026 |
| My Compliance Office mycomplianceoffice.com | Technology | United States | Apr 30, 2026 |
| Nordstern Technologies nordsterntech.com | Technology | Germany | Apr 30, 2026 |
| ParkEngage parkengagesolutions.in | Not identified | India | Apr 30, 2026 |
| Raptor Supplies raptorsupplies.com | Manufacturing | United Kingdom | Apr 30, 2026 |
Showing the 20 most recent of 27. Browse recent data breaches for more.
FulcrumSec leak sites
Addresses we've seen FulcrumSec publish victims from. Any .onion address needs the Tor Browser.
4e3p3in2bl67hxchuwza7qvnpe7pyeloyztr5fnh257fxkovfhappjyd.onionfulcrumsec.netgsgot6tua7ffammwdv6vpxkog32b4z7qivtqkxz55afq2hkt2o24w5yd.onion
FulcrumSec questions
Is FulcrumSec still active?
Yes. FulcrumSec posted its most recent victim on June 17, 2026.
How many victims has FulcrumSec claimed?
FulcrumSec has named 27 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did FulcrumSec first appear?
The first victim we recorded for FulcrumSec was posted on April 30, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does FulcrumSec target?
Technology accounts for the most victims we can classify, with 5. Healthcare follows at 4. We could identify a sector for 16 of 27 victims, so treat this as the shape of the targeting rather than a full census.
Has FulcrumSec already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.