ShadowByt3$
Data as of September 15, 2026.
What industries ShadowByt3$ targets
Sector identified for all 19 victims.
| Education | 8 | |
| Technology | 4 | |
| Agriculture | 2 | |
| Real Estate | 2 | |
| Financial Services | 1 | |
| Retail | 1 | |
| Energy | 1 |
Where the victims are located
Country identified for 17 of 19 victims.
| United States | 8 | |
| India | 2 | |
| United Kingdom | 2 | |
| Singapore | 1 | |
| Argentina | 1 | |
| Switzerland | 1 | |
| Japan | 1 | |
| Indonesia | 1 |
Every ShadowByt3$ victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| RealScout realscout.com | Real Estate | United States | Sep 10, 2026 |
| Ben Leeds Properties benleedsproperties.com | Real Estate | United States | Sep 8, 2026 |
| Livable livable.com | Energy | United States | Aug 31, 2026 |
| Nottingham Trent University ntu.ac.uk | Education | United Kingdom | Aug 26, 2026 |
| PT SMART smart-tbk.com | Agriculture | Indonesia | Aug 26, 2026 |
| BreachForums breachforu.ms | Technology | Not identified | Jun 15, 2026 |
| Cropwise cropwise.com | Agriculture | Switzerland | Jun 15, 2026 |
| LEAD School leadschool.in | Education | India | Jun 15, 2026 |
| Nintendo nintendo.com | Technology | Japan | Jun 15, 2026 |
| Ellucian ellucian.com | Education | United States | Apr 20, 2026 |
| Stride Learning stridelearning.com | Education | United States | Apr 17, 2026 |
| Amplify Technology amplifytechnology.co.uk | Technology | United Kingdom | Apr 14, 2026 |
| Starbucks starbucks.com | Retail | United States | Apr 14, 2026 |
| UMSA umsa.edu.ar | Education | Argentina | Apr 14, 2026 |
| Hotelogix hotelogix.com | Technology | Singapore | Apr 13, 2026 |
| Forestal Atlántico Sur fas.com.uy | Financial Services | Not identified | Apr 10, 2026 |
| University Of Georgia uga.edu | Education | United States | Apr 10, 2026 |
| Nyaya Nagar Public School nyayanagarpublicschool.com | Education | India | Apr 7, 2026 |
| University of Georgia uga.edu | Education | United States | Apr 7, 2026 |
Browse recent data breaches for more.
ShadowByt3$ leak sites
Addresses we've seen ShadowByt3$ publish victims from. Any .onion address needs the Tor Browser.
sdwbytqeb664krp2wz2qs3lxxah2rhneuotot5hy7g4jpn2pindigcad.onionanonfilesnew.comshdwbt3ja2ptjt6poluegas44i35727lgmoqqquoww642x3zyocyhuqd.onionmfbbt65kir2drc7tuoukwibikgvxquauscnzgbeltkmidjtgqlzm2qad.onionshadoz22.io
ShadowByt3$ questions
Is ShadowByt3$ still active?
Yes. ShadowByt3$ posted its most recent victim on September 10, 2026. That's 5 victims in the last 30 days.
How many victims has ShadowByt3$ claimed?
ShadowByt3$ has named 19 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did ShadowByt3$ first appear?
The first victim we recorded for ShadowByt3$ was posted on April 7, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does ShadowByt3$ target?
Education accounts for the most victims we can classify, with 8. Technology follows at 4.
Has ShadowByt3$ already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.