Lapsus$
Data as of August 16, 2026.
What industries Lapsus$ targets
Sector identified for 11 of 16 victims.
| Government | 2 | |
| Education | 2 | |
| Healthcare | 2 | |
| Construction | 1 | |
| Energy | 1 | |
| Real Estate | 1 | |
| Retail | 1 | |
| Technology | 1 |
Where the victims are located
Country identified for 13 of 16 victims.
| France | 6 | |
| United States | 2 | |
| Italy | 1 | |
| Germany | 1 | |
| Canada | 1 | |
| United Kingdom | 1 | |
| United Arab Emirates | 1 |
Every Lapsus$ victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| French Ministry of Agriculture agriculture.gouv.fr | Government | France | Apr 10, 2026 |
| AstraZeneca astrazeneca.com | Healthcare | United Kingdom | Apr 10, 2026 |
| Axcera axcera.io | Technology | United Arab Emirates | Apr 10, 2026 |
| Virta Health virtahealth.com | Healthcare | United States | Apr 10, 2026 |
| French Ministry of Agriculture and Food Sovereignty agriculture.gouv.fr | Government | France | Mar 5, 2026 |
| DreamUp dreamup.org | Education | United States | Mar 5, 2026 |
| Eiffage eiffage.com | Construction | France | Mar 5, 2026 |
| Eni eni.com | Energy | Italy | Mar 5, 2026 |
| Adidas Group Extranet adidas-group.com | Not identified | Germany | Mar 5, 2026 |
| Lacoste lacoste.com | Not identified | France | Mar 5, 2026 |
| Loozap loozap.com | Real Estate | Not identified | Mar 5, 2026 |
| Organisme pour la Sécurité de l\'Aviation Civile osac.aero | Not identified | France | Mar 5, 2026 |
| Salesfloor salesfloor.net | Retail | Canada | Mar 5, 2026 |
| University of Lille univ-lille.fr | Education | France | Mar 5, 2026 |
| globant.com | Not identified | Not identified | Mar 30, 2022 |
| nvidia.com | Not identified | Not identified | Feb 25, 2022 |
Browse recent data breaches for more.
Lapsus$ leak sites
Addresses we've seen Lapsus$ publish victims from. Any .onion address needs the Tor Browser.
lapsus.byt.me
Lapsus$ questions
Is Lapsus$ still active?
It's gone quiet. The last victim we recorded was April 10, 2026, and nothing has appeared since. Groups do go quiet and come back, so we're still watching.
How many victims has Lapsus$ claimed?
Lapsus$ has named 16 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 14 of them were posted in the last 12 months.
When did Lapsus$ first appear?
The first victim we recorded for Lapsus$ was posted on March 5, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does Lapsus$ target?
Government accounts for the most victims we can classify, with 2. Education follows at 2. We could identify a sector for 11 of 16 victims, so treat this as the shape of the targeting rather than a full census.
Has Lapsus$ already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.