Vortex
Data as of November 10, 2026.
What industries Vortex targets
Sector identified for 10 of 12 victims.
| Healthcare | 5 | |
| Financial Services | 1 | |
| Construction | 1 | |
| Manufacturing | 1 | |
| Media | 1 | |
| Government | 1 |
Where the victims are located
Country identified for 11 of 12 victims.
| United States | 10 | |
| Germany | 1 |
Every Vortex victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| AIR Communities aircommunities.com | Financial Services | United States | Nov 10, 2026 |
| D8KdMfAbryV6FyTqjRKqGPqY8sWmTg7q alexion.com | Not identified | United States | Nov 10, 2026 |
| Andersen Construction andersen-const.com | Healthcare | United States | Nov 10, 2026 |
| Arthrex arthrex.com | Healthcare | United States | Nov 10, 2026 |
| Bozzuto Group bozzuto.com | Construction | United States | Nov 10, 2026 |
| El Camino Health elcaminohealth.org | Healthcare | United States | Nov 10, 2026 |
| Karl Storz karlstorz.com | Healthcare | Germany | Nov 10, 2026 |
| Samtec samtec.com | Manufacturing | United States | Nov 10, 2026 |
| The E.W. Scripps scripps.com | Media | United States | Nov 10, 2026 |
| SimonMed simonmed.com | Healthcare | Not identified | Nov 10, 2026 |
| Solenis solenis.com | Government | United States | Nov 10, 2026 |
| StorageMart storage-mart.com | Not identified | United States | Nov 10, 2026 |
Browse recent data breaches for more.
Vortex leak site
The address we've seen Vortex publish victims from. Any .onion address needs the Tor Browser.
zyz6phauvraxghujxmecpwzlg34gtogybb4wzcmw6pvps5m2nzvsriid.onion
Vortex questions
Is Vortex still active?
Yes. Vortex posted its most recent victim on November 10, 2026. That's 12 victims in the last 30 days.
How many victims has Vortex claimed?
Vortex has named 12 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did Vortex first appear?
The first victim we recorded for Vortex was posted on November 10, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does Vortex target?
Healthcare accounts for the most victims we can classify, with 5. Financial Services follows at 1. We could identify a sector for 10 of 12 victims, so treat this as the shape of the targeting rather than a full census.
Has Vortex already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.