Breach database

[ Live Intelligence Index ]

The AlienGate Dark Web Database

A curated index of ransomware, darknet markets, and threat actors. Intelligence accessible only in the dashboard.

3,897

Ransomware attacks

3,963

Breach disclosures

1,849

Monitored nodes

18B+

Leaked records

5min

Alert response

[ Ransomware victim index ]

Ransomware attacks & victim index

CLASSIFIED · VIEW-ONLY

3,897 leak-site listings from 121 ransomware and extortion groups, checked continuously. Victim domains are masked in the index and shown on each record; source URLs stay inside the AlienGate dashboard.

Alloha

TheGentlemen

a****.com

Apr 1, 2026

SRC-66749103

BR Sheet Metal

Genesis

b****.com

Apr 1, 2026

SRC-09605574

Brute

LeakNet

b****.com

Apr 1, 2026

SRC-20448418

Catalyst Learning

Genesis

c****.com

Apr 1, 2026

SRC-16718046

Chickasaw Telecom

Qilin

c****.com

Apr 1, 2026

SRC-05791012

Cox Design And Metal

Akira

c****.com

Apr 1, 2026

SRC-07815601

CXTC

BEAST

c****.com

Apr 1, 2026

SRC-03692370

De La Paz Law

INC_RANSOM

d****.com

Apr 1, 2026

SRC-72894388

Dean Supply

Akira

d****.com

Apr 1, 2026

SRC-91574030

Del Monte Foods

PayoutsKING

d****.com

Apr 1, 2026

SRC-98216403

Excel Healthcare RCM

Akira

e****.com

Apr 1, 2026

SRC-90930046

Fareast Fame Line DDB

TheGentlemen

f****.com

Apr 1, 2026

SRC-03502904

Showing 1–12 of 3,897 results

[ Source Coverage ]

What we monitor

REFERENCES REDACTED

1,849 nodes across four source classes, checked continuously for availability.

162

Darknet markets

Tor and I2P marketplaces where credentials and access are traded.

124 ONLINE

36 OFFLINE

594

Ransomware threat actors

Leak sites and negotiation portals run by active ransomware operations.

396 ONLINE

198 OFFLINE

126

Infostealer channels

Telegram channels distributing RedLine, Lumma, Vidar and Raccoon logs.

0 ONLINE

0 OFFLINE

967

Threat actor channels

Telegram groups used for coordination, recruitment and data brokering.

372 ONLINE

593 OFFLINE

Showing 1–12 of 162 results

Showing 1–12 of 594 results

Showing 1–12 of 126 results

Showing 1–12 of 967 results

[ Threat actor groups ]

120+ groups tracked continuously

AlienGate continuously tracks 120+ active ransomware groups across dark web leak sites, Telegram channels, and underground forums.

Get Full Access

AlienGate's dark web intelligence database covers ransomware attacks and data breach disclosures attributed to all major threat actor groups. This includes LockBit ransomware victims, Clop ransomware disclosure leaks, BlackCat (ALPHV) ransomware breach data, Medusa ransomware attacks, Akira ransomware victim organizations, DragonForce ransomware incidents, and hundreds of smaller ransomware-as-a-service (RaaS) operators. Our breach database tracks victim organizations across healthcare, manufacturing, legal, financial services, education, and government sectors. All records include the victim organization name, victim domain, threat actor attribution, and date of discovery. Dark web addresses are shown in defanged form (not clickable); breach source URLs stay inside the AlienGate secured dashboard.

[ Faq ]

Frequently asked questions

Everything you need to know about the product and billing.

Simply sign up with your email and enter your company domain. You can start with a free breach check immediately, and expand to continuous monitoring when ready.

No. AlienGate supports DAST beyond OWASP Top 10, providing comprehensive coverage including network vulnerability scanning capable of detecting 15,000+ CVEs.

AlienGate provides screenshots, port/service details, technology detection, and credential exposure context—giving you the proof needed to validate risks and justify remediation priorities.

Yes. The Investigations feature turns alerts into trackable cases with assigned owners, status tracking, and evidence collection. Reports can be generated for executives and compliance teams.

AI accelerates operations with automated risk scoring, smart summaries of findings, and next-action guidance—helping teams focus on what matters most without manual triage.

3,903 organisations are already in here. Check whether yours is.

Forty seconds against the full unmasked index. No card, no sales call, just whether your domain appears and where it came from.

Run a free exposure check

Book a demo