Trinity

Quiet since October 6, 2025
18 victims named on the leak site
0 in the last 30 days
1 in the last 12 months
Jun 2024 first victim we recorded
Oct 6, 2025 most recent victim posted
1 leak site tracked

Data as of August 16, 2026.

What industries Trinity targets

Sector identified for 12 of 18 victims.

Healthcare2
Manufacturing2
Financial Services2
Real Estate1
Logistics1
Legal1
Education1
Technology1

Where the victims are located

Country identified for 8 of 18 victims.

Spain2
India1
United States1
Argentina1
Brazil1
Canada1
Philippines1

Every Trinity victim

VictimSectorCountryPosted
Capital Choice capitalchoice.comFinancial ServicesUnited StatesOct 6, 2025
Kairav Chemofarbe Industries chemofarbe.comManufacturingIndiaMar 17, 2025
Consultoria & Consultores consultoria-consultores.esNot identifiedSpainMar 17, 2025
Lake Psychological Services lakepsych.comNot identifiedNot identifiedMar 17, 2025
CANAM Realty Group canamrealty.comReal EstateNot identifiedMar 6, 2025
La-Z-Boy la-z-boy.comNot identifiedNot identifiedMar 3, 2025
Consolidated Neuro Supply neurosupply.comHealthcareNot identifiedMar 3, 2025
Agencia Tributaria agenciatributaria.esNot identifiedSpainDec 2, 2024
Barnes Cohen & Sullivan bbcjustice.comLegalNot identifiedOct 4, 2024
FoccoERP foccoerp.com.brNot identifiedBrazilOct 2, 2024
Fabrica Industrial Machinery & Equipment fabricasrl.com.arManufacturingArgentinaSep 24, 2024
Rocky Mountain Gastroenterology rockymountaingastro.comNot identifiedNot identifiedSep 16, 2024
Welland welland-corp.comLogisticsNot identifiedSep 2, 2024
Cosmetic Dental Group cosmeticdentalgroup.jeHealthcareNot identifiedAug 19, 2024
Banner and Associates banneracc.comFinancial ServicesNot identifiedAug 14, 2024
Shell Glen Volunteer Fire Department sgvfr.comNon-profitNot identifiedJun 13, 2024
Canadian Business College cbstraining.comEducationCanadaJun 12, 2024
Filmetrics filmetrics.com.phTechnologyPhilippinesJun 12, 2024

Browse recent data breaches for more.

Trinity leak site

The address we've seen Trinity publish victims from. Any .onion address needs the Tor Browser.

  • txtggyng5euqkyzl2knbejwpm4rlq575jn2egqldu27osbqytrj6ruyd.onion

Trinity questions

Is Trinity still active?

It's gone quiet. The last victim we recorded was October 6, 2025, and nothing has appeared since. Groups do go quiet and come back, so we're still watching.

How many victims has Trinity claimed?

Trinity has named 18 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 1 of them was posted in the last 12 months.

When did Trinity first appear?

The first victim we recorded for Trinity was posted on June 12, 2024. That's when the group entered our collection, which isn't necessarily when it started operating.

Which sectors does Trinity target?

Healthcare accounts for the most victims we can classify, with 2. Manufacturing follows at 2. We could identify a sector for 12 of 18 victims, so treat this as the shape of the targeting rather than a full census.

Has Trinity already got your credentials?

Check whether your employees' logins have leaked on the dark web before they're exploited.

Check your exposure →

Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.