Hellcat

Dark since April 10, 2025
20 victims named on the leak site
0 in the last 30 days
0 in the last 12 months
Oct 2024 first victim we recorded
Apr 10, 2025 most recent victim posted
3 leak sites tracked

Data as of August 16, 2026.

What industries Hellcat targets

Sector identified for 14 of 20 victims.

Financial Services3
Education3
Technology2
Automotive1
Logistics1
Manufacturing1
Media1
Government1

Where the victims are located

Country identified for 7 of 20 victims.

Germany1
China1
United States1
Israel1
France1
Indonesia1
Turkey1

Every Hellcat victim

VictimSectorCountryPosted
Potomac Financial Services potomacfinancialadvisors.comFinancial ServicesUnited StatesApr 10, 2025
CVTE cvte.comNot identifiedNot identifiedApr 8, 2025
Asseco asseco.comTechnologyNot identifiedApr 7, 2025
Highwire Press highwirepress.comMediaNot identifiedApr 7, 2025
LeoVegas AB leovegasgroup.comNot identifiedNot identifiedApr 7, 2025
Racami racami.comNot identifiedNot identifiedApr 7, 2025
Transsion Holdings transsion.comManufacturingChinaMar 31, 2025
Omnitracs omnitracs.comLogisticsNot identifiedMar 25, 2025
Grupo Santillana santillana.comNot identifiedNot identifiedMar 25, 2025
EFI efi.comTechnologyNot identifiedMar 18, 2025
Ascom ascom.comNot identifiedNot identifiedMar 17, 2025
Onedealer onedealer.comAutomotiveGermanyFeb 27, 2025
Sistem Informasi Pengelolaan Keuangan Daerah blora.go.idFinancial ServicesIndonesiaDec 26, 2024
Car Care Plan carcareplan.com.trFinancial ServicesTurkeyDec 26, 2024
Jordanian Ministry of Education moe.gov.joEducationNot identifiedDec 26, 2024
Pinger pinger.comNot identifiedNot identifiedNov 18, 2024
College of Business - Tanzania cbe.ac.tzEducationNot identifiedNov 5, 2024
Ministry of Education - Jordan moe.gov.joEducationNot identifiedNov 5, 2024
Schneider Electric se.comEnergyFranceNov 5, 2024
Knesset knesset.gov.ilGovernmentIsraelOct 16, 2024

Browse recent data breaches for more.

Hellcat leak sites

Addresses we've seen Hellcat publish victims from. Any .onion address needs the Tor Browser.

  • hellcakbszllztlyqbjzwcbdhfrodx55wq77kmftp4bhnhsnn5r3odad.onion
  • dangerzone.cx
  • r7i4vprxr2vznmhnnxj36264ofwx6extopdz535f5v357nqacifymbad.onion

Hellcat questions

Is Hellcat still active?

Not for over a year. The last victim we recorded was April 10, 2025. The leak site has published nothing since, though the data it already leaked is still out there.

How many victims has Hellcat claimed?

Hellcat has named 20 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.

When did Hellcat first appear?

The first victim we recorded for Hellcat was posted on October 16, 2024. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does Hellcat target?

Financial Services accounts for the most victims we can classify, with 3. Education follows at 3. We could identify a sector for 14 of 20 victims, so treat this as the shape of the targeting rather than a full census.

Has Hellcat already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.