IMNCrew
Data as of August 16, 2026.
What industries IMNCrew targets
Sector identified for 6 of 12 victims.
| Financial Services | 1 | |
| Automotive | 1 | |
| Healthcare | 1 | |
| Logistics | 1 | |
| Telecommunications | 1 | |
| Hospitality | 1 |
Where the victims are located
Country identified for 7 of 12 victims.
| Indonesia | 1 | |
| Mexico | 1 | |
| Croatia | 1 | |
| Colombia | 1 | |
| Italy | 1 | |
| United States | 1 | |
| Netherlands | 1 |
Every IMNCrew victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Jansen Furniture jansenfurniture.com | Hospitality | Netherlands | Sep 17, 2025 |
| One Gold onegolditalia.it | Not identified | Italy | Aug 4, 2025 |
| Asia Pacific Network apntelecom.com | Telecommunications | United States | Jul 7, 2025 |
| Repremundo repremundo.com.co | Logistics | Colombia | Jun 16, 2025 |
| STIGA stiga.com | Not identified | Not identified | May 20, 2025 |
| ABDA Insurance abdainsurance.co.id | Financial Services | Indonesia | May 6, 2025 |
| Autovías autovias.com.mx | Not identified | Mexico | May 6, 2025 |
| Hrvatska kovnica novca croatianmint.hr | Not identified | Croatia | May 6, 2025 |
| Denver Employees Retirement Plan derp.org | Not identified | Not identified | May 6, 2025 |
| Goodson Tools goodson.com | Automotive | Not identified | May 6, 2025 |
| Synthesia synthesia.com | Not identified | Not identified | May 6, 2025 |
| Visiting Nurses Association vnakc.org | Healthcare | Not identified | May 6, 2025 |
Browse recent data breaches for more.
IMNCrew leak sites
Addresses we've seen IMNCrew publish victims from. Any .onion address needs the Tor Browser.
imncrewwfkbjkhr2oylerfm5qtbzfphhmpcfag43xc2kfgvluqtlgoid.onionzfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion
IMNCrew questions
Is IMNCrew still active?
It's gone quiet. The last victim we recorded was September 17, 2025, and nothing has appeared since. Groups do go quiet and come back, so we're still watching.
How many victims has IMNCrew claimed?
IMNCrew has named 12 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 1 of them was posted in the last 12 months.
When did IMNCrew first appear?
The first victim we recorded for IMNCrew was posted on May 6, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does IMNCrew target?
Financial Services accounts for the most victims we can classify, with 1. Automotive follows at 1. We could identify a sector for 6 of 12 victims, so treat this as the shape of the targeting rather than a full census.
Has IMNCrew already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.