GlobalSecretGroup

Active
30 victims named on the leak site
30 in the last 30 days
30 in the last 12 months
Jul 2026 first victim we recorded
Aug 11, 2026 most recent victim posted
1 leak site tracked

Data as of August 16, 2026.

Credential exposure before the attack

23.3% of GlobalSecretGroup victims whose domain we can identify (7 of 30) had employee credentials leak in the 12 months before GlobalSecretGroup named them as a victim.

We don't know whether any of these credentials were how GlobalSecretGroup gained initial access.

What industries GlobalSecretGroup targets

Sector identified for 26 of 30 victims.

Financial Services6
Healthcare5
Manufacturing4
Logistics3
Construction2
Energy2
Legal1
Retail1

Where the victims are located

Country identified for 28 of 30 victims.

United States18
Brazil2
Canada2
Spain1
Argentina1
United Kingdom1
China1
India1

Most recent GlobalSecretGroup victims

VictimSectorCountryPosted
Coggins Insurance Agency cogginsinsurance.comFinancial ServicesUnited StatesAug 11, 2026
Cook Remodeling & Custom Construction cookremodeling.comConstructionUnited StatesAug 11, 2026
MACOFIN HELLAS maco-fin.comFinancial ServicesGreeceAug 11, 2026
Pavillon pavillon.orgHealthcareUnited StatesAug 7, 2026
Pro-Tuff Decals protuffdecals.comNot identifiedUnited StatesAug 7, 2026
Vernon & Waldrep OB-Gyn Associates vernonwaldrep.comHealthcareUnited StatesAug 3, 2026
Hinduja Tech hindujatech.comAutomotiveIndiaJul 28, 2026
Louisiana Coalition Against Domestic Violence lcadv.orgEducationUnited StatesJul 28, 2026
Park Manufacturing parkmfg.comManufacturingUnited StatesJul 28, 2026
Spergel spergel.caNot identifiedCanadaJul 28, 2026
Acens acens.comNot identifiedSpainJul 27, 2026
West Sixth Law agslawyers.comLegalUnited StatesJul 27, 2026
Al Hayat alhayatco.comManufacturingNot identifiedJul 27, 2026
Baker Business & Tax Solutions bakerbusinessandtax.comFinancial ServicesUnited StatesJul 27, 2026
Carpets Direct carpetsdirectfindlay.comRetailUnited StatesJul 27, 2026
Chappell Supply and Equipment chappellsupply.comManufacturingUnited StatesJul 27, 2026
Cold Front Distribution coldfrontdist.comLogisticsUnited StatesJul 27, 2026
Farmers of Marble farmersofmarble.comFinancial ServicesUnited StatesJul 27, 2026
Transportes La Sevillanita lasevillanita.comLogisticsArgentinaJul 27, 2026
Middendorf Animal Hospital & Laser Centre middendorfanimalhospital.comHealthcareUnited StatesJul 27, 2026

Showing the 20 most recent of 30. Browse recent data breaches for more.

GlobalSecretGroup leak site

The address we've seen GlobalSecretGroup publish victims from. Any .onion address needs the Tor Browser.

  • o5lsqyar7ox25z734k6zaxt2vf7bsyi4q5rturi5iyxzqo3ica7bjsad.onion

GlobalSecretGroup questions

Is GlobalSecretGroup still active?

Yes. GlobalSecretGroup posted its most recent victim on August 11, 2026. That's 30 victims in the last 30 days.

How many victims has GlobalSecretGroup claimed?

GlobalSecretGroup has named 30 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.

When did GlobalSecretGroup first appear?

The first victim we recorded for GlobalSecretGroup was posted on July 27, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does GlobalSecretGroup target?

Financial Services accounts for the most victims we can classify, with 6. Healthcare follows at 5. We could identify a sector for 26 of 30 victims, so treat this as the shape of the targeting rather than a full census.

Has GlobalSecretGroup already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.