
Meow
Data as of August 16, 2026.
Credential exposure before the attack
32.6% of Meow victims whose domain we can identify (44 of 135) had employee credentials leak in the 12 months before Meow named them as a victim.
We don't know whether any of these credentials were how Meow gained initial access.
What industries Meow targets
Sector identified for 65 of 135 victims.
| Manufacturing | 14 | |
| Financial Services | 11 | |
| Construction | 11 | |
| Legal | 6 | |
| Healthcare | 5 | |
| Education | 4 | |
| Hospitality | 2 | |
| Technology | 2 |
Where the victims are located
Country identified for 31 of 135 victims.
| Italy | 4 | |
| Israel | 4 | |
| United States | 4 | |
| United Kingdom | 3 | |
| Colombia | 2 | |
| Norway | 2 | |
| Australia | 2 | |
| Brazil | 1 |
Most recent Meow victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| San Francisco Ballet sfballet.org | Not identified | Not identified | Nov 20, 2024 |
| Cottles Asphalt Maintenance cottlesinc.com | Construction | Not identified | Nov 15, 2024 |
| DieTech North America dietechna.com | Construction | Not identified | Nov 15, 2024 |
| Herron Todd White htw.com.au | Not identified | Australia | Nov 15, 2024 |
| JST jst.es | Manufacturing | Spain | Nov 15, 2024 |
| Karl Malone Toyota malonetoyota.com | Not identified | Not identified | Nov 15, 2024 |
| OMara Ag Equipment omara-ag.com | Manufacturing | Not identified | Nov 15, 2024 |
| Pine Belt Cars pinebeltcars.com | Not identified | Not identified | Nov 15, 2024 |
| Finger Beton Unternehmensgruppe finger-beton.de | Construction | Germany | Nov 11, 2024 |
| Karman karmaninc.com | Retail | Not identified | Nov 11, 2024 |
| Equator Worldwide equatorworldwide.co.uk | Not identified | United Kingdom | Nov 8, 2024 |
| Lexco lexco-cobranzas.com | Not identified | Not identified | Nov 8, 2024 |
| Lincoln University lincolnu.edu | Education | Not identified | Nov 7, 2024 |
| Houston Housing Authority housingforhouston.com | Not identified | Not identified | Nov 1, 2024 |
| PT Transportasi Gas Indonesia tgi.co.id | Logistics | Indonesia | Oct 28, 2024 |
| The Eye Clinic Surgicenter theeyeclinicsurgicenter.com | Healthcare | Not identified | Oct 28, 2024 |
| Westwood Country Club westwood-cc.com | Not identified | Not identified | Oct 28, 2024 |
| By Design LLC bydesignllc.com | Not identified | Not identified | Oct 24, 2024 |
| Youngs Timber Builders Merchants doityoungs.com | Construction | Not identified | Oct 24, 2024 |
| KEE Process keeservices.com | Manufacturing | Not identified | Oct 24, 2024 |
Showing the 20 most recent of 135. Browse recent data breaches for more.
Meow leak sites
Addresses we've seen Meow publish victims from. Any .onion address needs the Tor Browser.
meow6xanhzfci2gbkn3lmbqq7xjjufskkdfocqdngt3ltvzgqpsg5mid.oniontotos7fquprkecvcsl2jwy72v32glgkp2ejeqlnx5ynnxvbebgnletqd.onionvkvsgl7lhipjirmz6j5ubp3w3bwvxgcdbpi3fsbqngfynetqtw4w5hyd.onionaw5q5nzdok52cgprlzik4n44qstoajrlbixqqukqqcennjyas4x4opad.onionzohlm7ahjwegcedoz7lrdrti7bvpofymcayotp744qhx6gjmxbuo2yid.onion
Meow questions
Is Meow still active?
Not for over a year. The last victim we recorded was November 20, 2024. The leak site has published nothing since, though the data it already leaked is still out there.
How many victims has Meow claimed?
Meow has named 135 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did Meow first appear?
The first victim we recorded for Meow was posted on November 27, 2023. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does Meow target?
Manufacturing accounts for the most victims we can classify, with 14. Financial Services follows at 11. We could identify a sector for 65 of 135 victims, so treat this as the shape of the targeting rather than a full census.
Has Meow already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.