KillSecurity
Data as of August 16, 2026.
Credential exposure before the attack
27.3% of KillSecurity victims whose domain we can identify (78 of 286) had employee credentials leak in the 12 months before KillSecurity named them as a victim.
We don't know whether any of these credentials were how KillSecurity gained initial access.
What industries KillSecurity targets
Sector identified for 158 of 286 victims.
| Financial Services | 49 | |
| Healthcare | 32 | |
| Manufacturing | 16 | |
| Logistics | 13 | |
| Construction | 11 | |
| Education | 8 | |
| Government | 6 | |
| Technology | 6 |
Where the victims are located
Country identified for 139 of 286 victims.
| United States | 27 | |
| India | 22 | |
| Brazil | 10 | |
| United Kingdom | 8 | |
| Colombia | 8 | |
| Belgium | 7 | |
| Australia | 6 | |
| Romania | 5 |
Most recent KillSecurity victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Bulwark Exterminating bulwarkpestcontrol.com | Not identified | Not identified | Jul 24, 2026 |
| Cash Cowboy cashcowboy.net | Financial Services | Canada | Jul 24, 2026 |
| Origins IVF originsivf.com | Healthcare | India | Jul 24, 2026 |
| ACE Hospital acehospital.in | Healthcare | India | Jun 3, 2026 |
| Certus Agente de Seguros y de Fianzas csinsurance.mx | Financial Services | Mexico | Jun 3, 2026 |
| DSD Law Firm dsdlawfirm.com | Legal | United States | May 14, 2026 |
| MRS Holdings mrsholdings.com | Logistics | Nigeria | May 14, 2026 |
| MRS holdings.com | Financial Services | Nigeria | May 11, 2026 |
| Medical Pay medical-pay.jp | Healthcare | Japan | May 4, 2026 |
| Hospital Veterinário Diadema 24h hospitalvetdiadema24h.com.br | Healthcare | Brazil | Mar 18, 2026 |
| Palram Industries palram.com | Construction | Israel | Mar 18, 2026 |
| Shlomo Bit Insurance Agency shlomo-bit.co.il | Financial Services | Israel | Mar 11, 2026 |
| MedGPT App medgptapp.com | Healthcare | United States | Mar 6, 2026 |
| MyFair myfair.co | Not identified | United States | Mar 6, 2026 |
| YUR Drivers Network yurdriversnetwork.com | Logistics | United States | Mar 6, 2026 |
| Primăria Ungheni primariaungheni.ro | Government | Romania | Feb 25, 2026 |
| Online Divorce Texas onlinedivorcetexas.com | Not identified | United States | Feb 23, 2026 |
| Orain Technologies orain.io | Not identified | Spain | Feb 17, 2026 |
| Getly getly.app | Financial Services | Not identified | Feb 10, 2026 |
| Brooklyn Group brooklyngroup.com | Real Estate | United States | Feb 5, 2026 |
Showing the 20 most recent of 286. Browse recent data breaches for more.
KillSecurity leak sites
Addresses we've seen KillSecurity publish victims from. Any .onion address needs the Tor Browser.
ks5424y3wpr5zlug5c7i6svvxweinhbdcqcfnptkfcutrncfazzgz5id.onionkill432ltnkqvaqntbalnsgojqqs2wz4lhnamrqjg66tq6fuvcztilyd.oniongofile.ioijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion
KillSecurity questions
Is KillSecurity still active?
Yes. KillSecurity posted its most recent victim on July 24, 2026. That's 3 victims in the last 30 days.
How many victims has KillSecurity claimed?
KillSecurity has named 286 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 110 of them were posted in the last 12 months.
When did KillSecurity first appear?
The first victim we recorded for KillSecurity was posted on April 3, 2023. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does KillSecurity target?
Financial Services accounts for the most victims we can classify, with 49. Healthcare follows at 32. We could identify a sector for 158 of 286 victims, so treat this as the shape of the targeting rather than a full census.
Has KillSecurity already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.