WikiLeaksV2
Data as of August 16, 2026.
Credential exposure before the attack
54.8% of WikiLeaksV2 victims whose domain we can identify (17 of 31) had employee credentials leak in the 12 months before WikiLeaksV2 named them as a victim.
We don't know whether any of these credentials were how WikiLeaksV2 gained initial access.
What industries WikiLeaksV2 targets
Sector identified for 16 of 31 victims.
| Legal | 3 | |
| Real Estate | 2 | |
| Financial Services | 2 | |
| Construction | 2 | |
| Government | 2 | |
| Manufacturing | 2 | |
| Education | 1 | |
| Hospitality | 1 |
Where the victims are located
Country identified for 9 of 31 victims.
| Italy | 2 | |
| Colombia | 1 | |
| France | 1 | |
| Ukraine | 1 | |
| United States | 1 | |
| Germany | 1 | |
| Austria | 1 | |
| Portugal | 1 |
Most recent WikiLeaksV2 victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| The Law Offices of Jed Silverman jedsilverman.com | Legal | Not identified | Apr 18, 2025 |
| United Animal Health unitedanh.com | Not identified | Not identified | Apr 18, 2025 |
| Town Of Whitestown whitestown.net | Not identified | Not identified | Apr 18, 2025 |
| Town of Whitestown, NY whitestown.ny.us | Not identified | United States | Apr 15, 2025 |
| Ministry of Foreign Affairs of Ukraine mfa.gov.ua | Government | Ukraine | Mar 17, 2025 |
| Spectrum Solutions spectrumsi.com | Not identified | Not identified | Mar 5, 2025 |
| Groupe PPA èsPRINT groupeppaesprint.com | Not identified | France | Mar 3, 2025 |
| IDN idn-inc.com | Not identified | Not identified | Mar 3, 2025 |
| KW Realty Group kwrealtygroup.com | Real Estate | Not identified | Mar 3, 2025 |
| LaMear & Rapert lrcpa.com | Financial Services | Not identified | Mar 3, 2025 |
| Pleasants Construction pleasantsconstruction.com | Construction | Not identified | Mar 3, 2025 |
| Robson Planning Group robsonplanning.com | Not identified | Not identified | Mar 3, 2025 |
| IDM Global idmglobal.co | Education | Colombia | Feb 24, 2025 |
| Akran akran.it | Legal | Italy | Feb 5, 2025 |
| Naughty America naughtyamerica4k.com | Not identified | Not identified | Feb 5, 2025 |
| ebrso.org ebrso.org | Not identified | Not identified | Feb 3, 2025 |
| Municipality of Chaves in Portugal chaves.pt | Government | Portugal | Jan 24, 2025 |
| Browne McGregor brownemcgregor.com | Not identified | Not identified | Jan 21, 2025 |
| Axiom axiom.work | Construction | Not identified | Jan 20, 2025 |
| Bertelkamp Automation bertelkamp.com | Manufacturing | Not identified | Jan 20, 2025 |
Showing the 20 most recent of 31. Browse recent data breaches for more.
WikiLeaksV2 questions
Is WikiLeaksV2 still active?
Not for over a year. The last victim we recorded was April 18, 2025. The leak site has published nothing since, though the data it already leaked is still out there.
How many victims has WikiLeaksV2 claimed?
WikiLeaksV2 has named 31 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did WikiLeaksV2 first appear?
The first victim we recorded for WikiLeaksV2 was posted on January 14, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does WikiLeaksV2 target?
Legal accounts for the most victims we can classify, with 3. Real Estate follows at 2. We could identify a sector for 16 of 31 victims, so treat this as the shape of the targeting rather than a full census.
Has WikiLeaksV2 already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.