Mallox
Data as of August 16, 2026.
Credential exposure before the attack
10.4% of Mallox victims whose domain we can identify (5 of 48) had employee credentials leak in the 12 months before Mallox named them as a victim.
We don't know whether any of these credentials were how Mallox gained initial access.
What industries Mallox targets
Sector identified for 25 of 48 victims.
| Manufacturing | 8 | |
| Technology | 5 | |
| Financial Services | 3 | |
| Construction | 2 | |
| Logistics | 2 | |
| Non-profit | 1 | |
| Healthcare | 1 | |
| Energy | 1 |
Where the victims are located
Country identified for 22 of 48 victims.
| Japan | 3 | |
| Brazil | 2 | |
| Saudi Arabia | 2 | |
| Thailand | 1 | |
| United States | 1 | |
| New Zealand | 1 | |
| Mexico | 1 | |
| Denmark | 1 |
Most recent Mallox victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Integra Services integraservices.com | Not identified | Not identified | Jul 16, 2024 |
| Nova Center novacenter.es | Technology | Spain | Jul 16, 2024 |
| Moshe Kahn Advocates kahn.co.il | Legal | Israel | Jun 6, 2024 |
| Madata madata.com | Technology | Not identified | Jun 5, 2024 |
| Gobierno de Río Negro rionegro.gov.ar | Not identified | Argentina | Jun 5, 2024 |
| Assist Informatica assistinformatica.com | Technology | Not identified | May 27, 2024 |
| Rafum Group rafumgroup.com | Retail | Not identified | Apr 12, 2024 |
| Spedition Grafen speditionlangen.de | Logistics | Germany | Apr 12, 2024 |
| Ramdev Chemical Industries ramdevpigments.com | Manufacturing | Not identified | Mar 14, 2024 |
| High Fashion International highfashion.com.hk | Manufacturing | Not identified | Mar 7, 2024 |
| Versatile Card Technology vct.co.in | Not identified | India | Oct 26, 2023 |
| duhocaau.vn | Not identified | Vietnam | Oct 16, 2023 |
| measuresoft.com\' | Not identified | Not identified | Oct 3, 2023 |
| kirkholm.dk | Not identified | Denmark | Oct 2, 2023 |
| bellsonica.co.jp | Manufacturing | Japan | Sep 28, 2023 |
| colsan.edu.mx | Not identified | Mexico | Sep 28, 2023 |
| Bozovich bozovich.com | Not identified | Not identified | Sep 11, 2023 |
| contecsystems.com | Technology | Not identified | Aug 11, 2023 |
| Contec Systems contecsystems.com | Technology | Not identified | Aug 11, 2023 |
| West Cargo westcargo.com.br | Logistics | Brazil | Aug 11, 2023 |
Showing the 20 most recent of 48. Browse recent data breaches for more.
Mallox leak sites
Addresses we've seen Mallox publish victims from. Any .onion address needs the Tor Browser.
wtyafjyhwqrgo4a45wdvvwhen3cx4euie73qvlhkhvlrexljoyuklaad.onionanonfiles.comdropmefiles.comnoescapemsqxvizdxyl7f7rmg5cdjwp33pg2wpmiaaibilb4btwzttad.onionlockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion
Mallox questions
Is Mallox still active?
Not for over a year. The last victim we recorded was July 16, 2024. The leak site has published nothing since, though the data it already leaked is still out there.
How many victims has Mallox claimed?
Mallox has named 48 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did Mallox first appear?
The first victim we recorded for Mallox was posted on February 16, 2022. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does Mallox target?
Manufacturing accounts for the most victims we can classify, with 8. Technology follows at 5. We could identify a sector for 25 of 48 victims, so treat this as the shape of the targeting rather than a full census.
Has Mallox already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.