Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks
Credential exposure data sourced from HudsonRock — covering domains linked to ransomware victims tracked on this platform.
| # | Domain | Employees | Users | 3rd Parties | Total |
|---|---|---|---|---|---|
| 1 | epicgames.com | 236 | 2,771,943 | 79 | 2,772,179 |
| 2 | github.com | 299 | 2,504,650 | 117 | 2,504,949 |
| 3 | ubisoft.com | 378 | 2,080,174 | 375 | 2,080,552 |
| 4 | sony.com | 273 | 1,899,260 | 643 | 1,899,533 |
| 5 | nintendo.com | 115 | 1,237,367 | 32 | 1,237,482 |
| 6 | udemy.com | 40 | 1,157,708 | 17 | 1,157,748 |
| 7 | hbomax.com | 259 | 1,005,189 | 100 | 1,005,448 |
| 8 | reddit.com | 147 | 857,694 | 29 | 857,841 |
| 9 | wordpress.com | 382 | 780,450 | 166 | 780,832 |
| 10 | hp.com | 2,799 | 567,357 | 1,522 | 570,156 |
| # | Group | Victims with stealer data | % of group victims | |
|---|---|---|---|---|
| 1 | ralord | 12 / 12 | 100.0% | |
| 2 | lapsus$ | 17 / 18 | 94.4% | |
| 3 | siegedsec | 10 / 11 | 90.9% | |
| 4 | shinyhunters | 74 / 85 | 87.1% | |
| 5 | dunghill | 13 / 15 | 86.7% | |
| 6 | hellcat | 16 / 20 | 80.0% | |
| 7 | dragonransomware | 31 / 39 | 79.5% | |
| 8 | ransomexx | 23 / 31 | 74.2% | |
| 9 | snatch | 44 / 62 | 71.0% | |
| 10 | apt73 | 98 / 143 | 68.5% | |
| 11 | coinbasecartel | 109 / 163 | 66.9% | |
| 12 | funksec | 101 / 154 | 65.6% | |
| 13 | babuk2 | 88 / 135 | 65.2% | |
| 14 | moneymessage | 16 / 25 | 64.0% | |
| 15 | nova | 73 / 115 | 63.5% | |
| 16 | darkvault | 34 / 54 | 63.0% | |
| 17 | fulcrumsec | 15 / 24 | 62.5% | |
| 18 | ransomed | 30 / 48 | 62.5% | |
| 19 | stormous | 77 / 135 | 57.0% | |
| 20 | lockbit2 | 13 / 23 | 56.5% |