LeakNet
Data as of August 16, 2026.
Credential exposure before the attack
38.3% of LeakNet victims whose domain we can identify (18 of 47) had employee credentials leak in the 12 months before LeakNet named them as a victim.
We don't know whether any of these credentials were how LeakNet gained initial access.
What industries LeakNet targets
Sector identified for 39 of 47 victims.
| Financial Services | 11 | |
| Manufacturing | 9 | |
| Healthcare | 8 | |
| Education | 2 | |
| Government | 2 | |
| Logistics | 2 | |
| Legal | 2 | |
| Construction | 1 |
Where the victims are located
Country identified for 39 of 47 victims.
| United States | 30 | |
| Switzerland | 2 | |
| Canada | 2 | |
| Malaysia | 1 | |
| Austria | 1 | |
| China | 1 | |
| Belgium | 1 | |
| Taiwan | 1 |
Most recent LeakNet victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| NYC Health + Hospitals nychealthandhospitals.org | Healthcare | United States | Jul 30, 2026 |
| Anglo Belgian abc-engines.com | Manufacturing | Belgium | Jul 16, 2026 |
| MagMutual Insurance magmutual.com | Financial Services | United States | Jun 26, 2026 |
| Cidesa cidesa.com.py | Not identified | Not identified | May 25, 2026 |
| Petroecuador eppetroecuador.ec | Logistics | Not identified | May 25, 2026 |
| Far East Horizon fehorizon.com | Financial Services | China | May 12, 2026 |
| Ktunaxa Nation Council ktunaxa.org | Not identified | Canada | May 1, 2026 |
| City of Greenfield greenfield.wi.us | Government | United States | Apr 16, 2026 |
| Bayside baysidenh.com | Not identified | Not identified | Apr 1, 2026 |
| Brute brute.com | Manufacturing | United States | Apr 1, 2026 |
| Boston Capital bostoncapital.com | Financial Services | United States | Mar 31, 2026 |
| Olde Patriot Title oldepatriot.com | Not identified | United States | Mar 31, 2026 |
| The Rosenthal Agency therosenthalagency.com | Not identified | United States | Mar 30, 2026 |
| Brantner hb-brantner.at | Government | Austria | Mar 12, 2026 |
| Centre d’Intégration Socioprofessionnelle cisf.ch | Non-profit | Switzerland | Mar 11, 2026 |
| Uzma Group uzmagroup.com | Manufacturing | Malaysia | Feb 27, 2026 |
| S&H Accounting Services sandhaccounting.com | Financial Services | United States | Feb 25, 2026 |
| Barry Equipment barryequipment.com | Construction | United States | Feb 18, 2026 |
| Washington International School wis.edu | Education | United States | Feb 11, 2026 |
| Distron distron.com | Manufacturing | United States | Jan 9, 2026 |
Showing the 20 most recent of 47. Browse recent data breaches for more.
LeakNet leak sites
Addresses we've seen LeakNet publish victims from. Any .onion address needs the Tor Browser.
nleakk6sejx45jxtk7x6iyt65hwvfrkifc5v7ertdlwm3gttbpvlvxqd.onionbnlluetsuf6pv7mchgue46h43v66uxtccpg3n5vcdzbeqften5cedlid.onionahic5qo3qbjgsyv7x2h5w7uh6nuh45km5srblj7i2amxt57xp4wud2qd.onion
LeakNet questions
Is LeakNet still active?
Yes. LeakNet posted its most recent victim on July 30, 2026.
How many victims has LeakNet claimed?
LeakNet has named 47 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 46 of them were posted in the last 12 months.
When did LeakNet first appear?
The first victim we recorded for LeakNet was posted on January 2, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does LeakNet target?
Financial Services accounts for the most victims we can classify, with 11. Manufacturing follows at 9. We could identify a sector for 39 of 47 victims, so treat this as the shape of the targeting rather than a full census.
Has LeakNet already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.