SECUROTROP

Active
40 victims named on the leak site
3 in the last 30 days
26 in the last 12 months
Jul 2025 first victim we recorded
Sep 14, 2026 most recent victim posted
1 leak site tracked

Data as of September 16, 2026.

Credential exposure before the attack

25% of SECUROTROP victims whose domain we can identify (10 of 40) had employee credentials leak in the 12 months before SECUROTROP named them as a victim.

We don't know whether any of these credentials were how SECUROTROP gained initial access.

What industries SECUROTROP targets

Sector identified for 31 of 40 victims.

Manufacturing9
Construction6
Legal4
Energy3
Retail2
Financial Services2
Education1
Logistics1

Where the victims are located

Country identified for 29 of 40 victims.

United States24
Canada5

Most recent SECUROTROP victims

VictimSectorCountryPosted
Shelco Filters shelco.comManufacturingUnited StatesSep 14, 2026
ADL Embedded Solutions adl-usa.comNot identifiedUnited StatesAug 19, 2026
Lepi Enterprises lepienterprises.comConstructionUnited StatesAug 17, 2026
MAG USA magusainc.comManufacturingUnited StatesJul 31, 2026
Advantage Sintered Metals advantagesintered.comHealthcareUnited StatesJul 27, 2026
ProDirectional prodirectional.comEnergyUnited StatesJul 15, 2026
Charisma Media charismamedia.comMediaUnited StatesJun 15, 2026
Kriete Truck Centers krietetrucks.comLogisticsUnited StatesJun 8, 2026
Thompson Builders tbcorp.comConstructionNot identifiedMay 5, 2026
Synergy Engineering synergy-eng.comManufacturingCanadaApr 22, 2026
Tax Prep And More taxprepandmore.comFinancial ServicesUnited StatesApr 14, 2026
Jones Haber and Rollings joneshaberlaw.comLegalUnited StatesMar 31, 2026
University of Missouri St Louis Email Services umsmail.comEducationUnited StatesFeb 20, 2026
Marshal and Renee Law Firm marshalrenee.comLegalUnited StatesFeb 18, 2026
Living Realty livingrealty.comFinancial ServicesCanadaJan 14, 2026
Spartan Carbide spartancarbide.comManufacturingUnited StatesDec 23, 2025
Cadman Power Equipment cadmanpower.comManufacturingCanadaDec 8, 2025
Delta Coast Consultants deltacoastllc.comNot identifiedUnited StatesDec 3, 2025
Pocatello Ready Mix horrocksreadymix.comConstructionUnited StatesNov 10, 2025
Superior Air Parts superiorairparts.comManufacturingNot identifiedOct 23, 2025

Showing the 20 most recent of 40. Browse recent data breaches for more.

SECUROTROP leak site

The address we've seen SECUROTROP publish victims from. Any .onion address needs the Tor Browser.

  • securo45z554mw7rgrt7wcgv5eenj2xmxyrsdj3fcjsvindu63s4bsid.onion

SECUROTROP questions

Is SECUROTROP still active?

Yes. SECUROTROP posted its most recent victim on September 14, 2026. That's 3 victims in the last 30 days.

How many victims has SECUROTROP claimed?

SECUROTROP has named 40 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 26 of them were posted in the last 12 months.

When did SECUROTROP first appear?

The first victim we recorded for SECUROTROP was posted on July 22, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does SECUROTROP target?

Manufacturing accounts for the most victims we can classify, with 9. Construction follows at 6. We could identify a sector for 31 of 40 victims, so treat this as the shape of the targeting rather than a full census.

Has SECUROTROP already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.