Breach Group intelligence
Database world roc
ActiveTrack Database world roc with 13866 published victims in a single intelligence view.
DARK EYE ALERTS
Want an alert every time a new breach is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Database world roc is tracked by Dark Eye as a breach group with 13866 published victims.
United States is currently the most targeted country in this dataset.
No leak location metadata is currently available for this group.
Leak Status Distribution
No leak-status data available yet.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (0)
No known leak locations available for this group.
Top Activity Sectors
No sector intelligence available.
Victims (13866)
Search, filter and paginate the victim timeline for Database world roc. Showing 1101–1200 of 13866.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.011 id43d1f76acc9c View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.012 idb0cc5dfe38a9 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.013 ide56847e80219 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.014 idac8973791cb6 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.015 idb12441a3aefa View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.016 id0fceabdc55c7 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.017 id7032bbae6788 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.018 id1138558617b0 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.019 id3ea2a9a57c34 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.020 idd0cdc6986724 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.021 idc81b7854836e View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.022 idaf3d1eba313f View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.023 id5f6f13daf2d1 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.024 idbbd3a698ed42 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.025 id668e9023a417 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.026 idcad92edf5efd View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_fluke_shinyhunters.7z.027 id6690743671e9 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | watiqa.ma).7z id5a950111dedd View details | — | leaked | |||
|
Watiqa.ma – Moroccan Government Civil Documents Platform Date: May 2026 Format: csv Records: 695,402 |
||||||
| Breach | crunchyroll.json idbf1abc15ecb3 View details | — | leaked | |||
|
Name: Crunchyroll [Fake] Date: March 2026 Records: ~6.8M Description: In March 2026, the anime streaming service Crunchyroll suffered a data breach alleged to have impacted 6.8M users. The exposed data is reported to have originated from the company's Zendesk support system where "name, login name, email address, IP address, general geographic location and the contents of the support tickets" were exposed. A subset of 1.2M email addresses from an alleged 2M record dataset being sold was later provided to HIBP. |
||||||
| Breach | lbp-tm.fr.jsonl id3e12846c6f81 View details | France | — | leaked | ||
|
Name: LBP-TM.FR Date: January 2026 Records: 3,691,395 Sample: {"Civilite":"MME","Nom":"D ADDETTA","Prenom":"CORALIE","Adresse1":"8 RUE BLANQUI","Adresse2":"","Numero1":"","Numero2":"0668605356","Numero3":"0664991521","Mail":"[email protected]","Code_Postal":"13530","Ville":"Trets","Code_INSEE":"13110","Pays":"1","Prenom_Enfant":"Leo","Jour_Naissance_Enfant":"06","Mois_Naissance_Enfant":"09","Annee_Naissance_enfant":"2010"} |
||||||
| Breach | trasmitenota.br.7z id09860e47cd06 View details | Brazil | — | leaked | ||
|
app3.transmitenota.com.br Date: May 01, 2026 Records: 20,151,364 Format: SQL |
||||||
| Breach | shouldve_paid_the_ransom_ADT_SHINYHUNTERS_.7z.001 idf60e446498fc View details | — | leaked | |||
|
Name: ADT Size: 10.7 GB Records: 10M+ Description: This dataset is part of a leak concerning the Council of Europe, published by the ShinyHunters group on 18 June 2026 after ransom negotiations failed, following exploitation of an Oracle PeopleSoft zero-day (CVE-2026-35273). The full leak totals roughly 295GB across ~430,000 files and reportedly includes about 409,000 pay slips for over 10,000 current and former employees (2011-2026), CVs, internal HR documents, and banking and tax information. The compromised data content is particularly sensitive: • 409,000 pay slips from over 10,000 current and former employees, covering the period 2011-2026 • 14,000 CVs and 3,700 internal HR documents • Banking information including statements and account numbers • Tax and social security data • Medical records and absence/sickness reports • Performance evaluations and payroll exports • Names, IDs, addresses, phone numbers, and dates of birth of employees |
||||||
| Breach | shouldve_paid_the_ransom_ADT_SHINYHUNTERS_.7z.002 idcb2890dd17bb View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_ADT_SHINYHUNTERS_.7z.003 id54890d774c32 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_bakerdist.7z id7c03b0aa1c47 View details | — | leaked | |||
|
Baker Distributing Company A leak from Baker Distributing Company, attributed to the ShinyHunters group and dated 4 June 2026. It reportedly comprises over 260,000 Salesforce CRM records along with corporate data taken from various SharePoint sites |
||||||
| Breach | shouldve-paid-the-ransom-matchgroup-shinyhunters.7z id627aaba0bf34 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_nexstar_shinyhunters.tar.7z.001 id7313191c4b0f View details | — | leaked | |||
|
Nexstar.tv Over 1 million Salesforce records and other internal corporate data containing PII was compromised. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. 27GB+ (compressed) 1M+ Records File Size: 26.5 GB |
||||||
| Breach | shouldve_paid_the_ransom_nexstar_shinyhunters.tar.7z.002 id03be1955e672 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_nexstar_shinyhunters.tar.7z.003 id2e3d78e2fc6b View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_nexstar_shinyhunters.tar.7z.004 idc62c9406b819 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_nexstar_shinyhunters.tar.7z.005 id90f259bf5dc1 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_nexstar_shinyhunters.tar.7z.006 id68345aededb9 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | shouldve_paid_the_ransom_nexstar_shinyhunters.tar.7z.007 idcf38645d5e36 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | glendale.edu.tar.7z.001 id3cb96c4376e0 View details | — | leaked | |||
|
glendale.edu In June 2026, Glendale Community College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from Glendale was later published online and included almost 800k unique email addresses along with various other data fields, including names, addresses, phone numbers, Social Security numbers and other information relating to student enrolments. In its disclosure notice, the college advised that "the potentially impacted information may vary for each individual and may include all or just one of the above-listed types of information". |
||||||
| Breach | glendale.edu.tar.7z.002 id07a1f012cf02 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | glendale.edu.tar.7z.003 ida8a114c15ade View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | glendale.edu.tar.7z.004 id84711d9ada09 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | glendale.edu.tar.7z.005 id301d6a5b20be View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | glendale.edu.tar.7z.006 idfc5a9d2f5c6c View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | glendale.edu.tar.7z.007 ida41dd464887c View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | glendale.edu.tar.7z.008 idab5034cad33e View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | glendale.edu.tar.7z.009 id748564f49ff7 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | 7Eleven-THEFALLEN.7z.001 idd20d77ae36b6 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | 7Eleven-THEFALLEN.7z.002 id610d3c33a3cb View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | 7Eleven-THEFALLEN.7z.003 idedb3f5a8541d View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | 7Eleven-THEFALLEN.7z.004 ida06604495ce9 View details | — | leaked | |||
|
7-Eleven, Inc. Over 600k Salesforce records containing PII and other internal corporate data have been compromised. Size: 10.4GB+ (compressed) Breach date: Apr 22 ,2026 |
||||||
| Breach | ameriprise_sharepoint_.7z.001 idf6f7b40dce02 View details | — | leaked | |||
|
In March 2026, the financial services firm Ameriprise Financial was named by the ShinyHunters group in a "pay or leak" extortion campaign. The group claimed possession of more than 200GB of compressed data exfiltrated from Ameriprise's Salesforce environment and internal SharePoint infrastructure, and subsequently published the data after negotiations allegedly failed. The published data contained 500k unique email addresses as well as names, phone numbers, physical addresses and employer information. In their disclosure to state attorneys general, Ameriprise reported 47,876 affected people; the larger email address population represents contacts from Ameriprise's broader operational systems, including internal staff. Ameriprise further advised that they have "implemented heightened monitoring of your account(s) to include enhanced identity verification procedures". |
||||||
| Breach | ameriprise_sharepoint_.7z.002 id84a4decec2ee View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.003 id931d8f60b556 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.004 idb25470f6aabb View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.005 idc75a675bf8d2 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.006 ida08ac1723e8e View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.007 id61705bfb10b9 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.008 idc1796cc3753a View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.009 id6083f08cfcdf View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.010 id5edc43a0f637 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.011 iddcee976c99db View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.012 idb47085716064 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.013 ideef963ceec6e View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.014 id05fce3d32cc1 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.015 idca680cbe4fb4 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.016 id96be9a48be13 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.017 id355a3104036e View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.018 idb8fbfa185779 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.019 id936746c8cfa3 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.020 id2b43cf5d1f6a View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.021 id766dc42f2d43 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.022 iddadf698223cc View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.023 id313f8363daa2 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.024 idded84d3644bb View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.025 id35d4394eb3f3 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.026 id2fda51792e28 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.027 id8998e7293421 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.028 id758c1a161f5a View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.029 idd5efc17ad71d View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.030 idc9a6b390a3a6 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.031 id9f0d2aa9650c View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.032 id2edfa53a7637 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.033 id806ae066e298 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.034 id8116815d1d65 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.035 id3febbe23c4f1 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.036 idc35de7dbcf25 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.037 id7bbcbd7e39e9 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.038 idf4a61167654a View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.039 id963122d09099 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.040 id8fd4bdc907e5 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.041 id46561f46d566 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.042 id0434d8d7e011 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.043 idaf3d4e5ad175 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.044 iddef9edefaf09 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.045 id34dc9a532eca View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.046 ida378a6f0d15b View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.047 id4c5c68750cba View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.048 id26fdc8abb272 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | ameriprise_sharepoint_.7z.049 idef17ed8847f1 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | UniversityOfNottingham_ShinyHunters.7z_.001 id6fcd8d54f575 View details | — | leaked | |||
|
In June 2026, the University of Nottingham was the target of a cyber attack, later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published online and included 455k unique email addresses along with extensive personal information including names, addresses, phone numbers, ethnicities, disabilities, passport numbers and information relating to academic enrolments and fee payments. In a post about the incident, the university advised that the breach affected both "current students, and alumni". |
||||||
| Breach | UniversityOfNottingham_ShinyHunters.7z_.002 id46acbfc5d9b3 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | UniversityOfNottingham_ShinyHunters.7z_.003 id39b35538f1fd View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | UniversityOfNottingham_ShinyHunters.7z_.004 idfe904ac20a78 View details | — | leaked | |||
|
No additional victim description available. |
||||||
| Breach | UniversityOfNottingham_ShinyHunters.7z_.005 id36b998e820bb View details | — | leaked | |||
|
No additional victim description available. |
||||||