NoEscape
Data as of August 16, 2026.
Credential exposure before the attack
2.4% of NoEscape victims whose domain we can identify (3 of 124) had employee credentials leak in the 12 months before NoEscape named them as a victim.
We don't know whether any of these credentials were how NoEscape gained initial access.
What industries NoEscape targets
Sector identified for 55 of 124 victims.
| Manufacturing | 11 | |
| Healthcare | 9 | |
| Education | 8 | |
| Construction | 7 | |
| Financial Services | 6 | |
| Logistics | 3 | |
| Agriculture | 2 | |
| Legal | 2 |
Where the victims are located
Country identified for 54 of 124 victims.
| United Kingdom | 9 | |
| France | 8 | |
| Germany | 5 | |
| Italy | 4 | |
| Australia | 4 | |
| Netherlands | 3 | |
| Spain | 3 | |
| Colombia | 2 |
Most recent NoEscape victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Nida nida.com | Manufacturing | Not identified | Dec 5, 2023 |
| UF Resources ufresources.com | Education | Not identified | Dec 5, 2023 |
| Grupo Prides com.com | Not identified | Not identified | Dec 1, 2023 |
| Science History Institute sciencehistory.org | Not identified | Not identified | Nov 30, 2023 |
| Verdecora verdecora.es | Retail | Spain | Nov 30, 2023 |
| Talentum talentum.com.co | Not identified | Colombia | Nov 27, 2023 |
| Enware enware.com.au | Manufacturing | Australia | Nov 21, 2023 |
| R.C. Moore rcmoore.com | Logistics | Not identified | Nov 21, 2023 |
| Kwik kwikind.com | Automotive | Not identified | Nov 20, 2023 |
| PruittHealth pruitthealth.com | Healthcare | Not identified | Nov 20, 2023 |
| carespring.com | Healthcare | Not identified | Nov 14, 2023 |
| landercountynv.org | Not identified | Not identified | Nov 14, 2023 |
| sosbonedocs.com | Not identified | Not identified | Nov 14, 2023 |
| mprlift.se | Manufacturing | Sweden | Nov 13, 2023 |
| pargroup.com | Not identified | Not identified | Nov 13, 2023 |
| putzelelectric.com | Construction | Not identified | Nov 13, 2023 |
| Action Sante Travail actionsantetravail.fr | Not identified | France | Nov 10, 2023 |
| Ezi Floor ezifloor.com.au | Manufacturing | Australia | Nov 10, 2023 |
| Jeffcoat jeffcoat.us | Not identified | United States | Nov 10, 2023 |
| Avianor avianor.com | Manufacturing | Not identified | Nov 8, 2023 |
Showing the 20 most recent of 124. Browse recent data breaches for more.
NoEscape leak sites
Addresses we've seen NoEscape publish victims from. Any .onion address needs the Tor Browser.
noescapemsqxvizdxyl7f7rmg5cdjwp33pg2wpmiaaibilb4btwzttad.onionrhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onionalphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onionwww.sendspace.com
NoEscape questions
Is NoEscape still active?
Not for over a year. The last victim we recorded was December 5, 2023. The leak site has published nothing since, though the data it already leaked is still out there.
How many victims has NoEscape claimed?
NoEscape has named 124 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did NoEscape first appear?
The first victim we recorded for NoEscape was posted on June 12, 2023. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does NoEscape target?
Manufacturing accounts for the most victims we can classify, with 11. Healthcare follows at 9. We could identify a sector for 55 of 124 victims, so treat this as the shape of the targeting rather than a full census.
Has NoEscape already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.