Kryptos

Quiet since November 7, 2025
3 victims named on the leak site
0 in the last 30 days
3 in the last 12 months
Oct 2025 first victim we recorded
Nov 7, 2025 most recent victim posted
1 leak site tracked

Data as of August 16, 2026.

What industries Kryptos targets

Sector identified for all 3 victims.

Education1
Construction1
Healthcare1

Where the victims are located

Country identified for 2 of 3 victims.

India1
United States1

Every Kryptos victim

VictimSectorCountryPosted
Provincial Department of Health Services nw.gov.lkHealthcareNot identifiedNov 7, 2025
Adichunchanagiri Institute of Technology aitckm.edu.inEducationIndiaOct 23, 2025
Mead & Hunt meadhunt.comConstructionUnited StatesOct 23, 2025

Browse recent data breaches for more.

Kryptos leak site

The address we've seen Kryptos publish victims from. Any .onion address needs the Tor Browser.

  • kryptospnjzz7vfkr663bnqv3dxirmr3svo5zwq7cvu2wdfngujgknyd.onion

Kryptos questions

Is Kryptos still active?

It's gone quiet. The last victim we recorded was November 7, 2025, and nothing has appeared since. Groups do go quiet and come back, so we're still watching.

How many victims has Kryptos claimed?

Kryptos has named 3 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.

When did Kryptos first appear?

The first victim we recorded for Kryptos was posted on October 23, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.

Has Kryptos already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.