Lapsus$

Active
Lapsus$ is an internationally composed data extortion group most active from mid-2021 through 2022, executing high-profile breaches against Microsoft, Nvidia, Samsung, Okta, and Uber by stealing source code and threatening leaks rather than encrypting files; several members — predominantly teenagers — were arrested in the UK.
24 Victims
Dec 9, 2021 First Discovered
Jun 13, 2026 Last Discovered
5 Days Inactive
55.6% Infostealer
1/4 Sites Online
Top Countries
US 7
FR 5
DE 2
SE 1
ES 1
GB 1
CA 1
CH 1
IT 1
JP 1
Top Sectors
Technology 6
Consumer Services 4
Business Services 2
Healthcare 2
Education 2
Public Sector 2
Telecommunication 1
Financial Services 1
Construction 1
Manufacturing 1
Known Locations (4)
LAPSUS$ | DATA REPOSITORY
lapsus.bz
LAPSUS$ | DATA REPOSITORY
lapsus.by
Origin DNS error | lapsus.cz | Cloudflare
lapsus.cz
Directory listing for /
mwojud552brg7rl3obqjvv2funhwpg6acdsuuoeytq7365kmaeoi4gqd.onion
Tools Used
CredentialTheft
Mimikatz
DiscoveryEnum
ADExplorer
LOLBAS
NTDS Utility (ntdsutil)
RMM-Tools
AnyDesk
Victims (24)
INGKA GROUP
SE Consumer Services Discovered: Jun 13, 2026 · Attack est.: Jun 13, 2026
Full mapping of global e-commerce architecture and internal coworker platforms. Supply chain logistics, cloud infrastructure, and AI/MLOps repositories
VODAFONE
DE Telecommunication Discovered: May 29, 2026 · Attack est.: May 27, 2026
Full Infrastructure, Source Code, GitHub Tree & Internal Network Maps
GITHUB INTERNAL
US Technology Discovered: Jun 13, 2026 · Attack est.: May 18, 2026
Everything for the main platform is there. No ransom, we do not care about extorting Github. If no buyer is found, we leak for free.
AXCERA TRADING
US Business Services Discovered: May 10, 2026 · Attack est.: May 9, 2026
Trading Algorithms, Client Portfolios, KYC Data & Financial Logs
MAPFRE ASSURANCE
ES Financial Services Discovered: May 31, 2026 · Attack est.: Apr 25, 2026
This data has been acquired by a private party. No public leak will occur.
CHECKMARX
US Technology Discovered: Apr 25, 2026 · Attack est.: Apr 23, 2026
Source Code, Employee DB, API Keys, MongoDB/MySQL Creds
MERCOR
Discovered: May 31, 2026 · Attack est.: Mar 30, 2026
This data has been acquired by a private party. No public leak will occur.
VirtaHealth
US Healthcare Discovered: Apr 5, 2026 · Attack est.: Mar 28, 2026
Healthcare research
ASTRAZENECA CORP
GB Healthcare Discovered: Apr 5, 2026 · Attack est.: Mar 24, 2026
Source Code, Employee DB, API Keys, MongoDB/MySQL Creds
AXCERA.IO
US Technology Discovered: Apr 5, 2026 · Attack est.: Mar 21, 2026
Source Code + Infrastructure Configs
Eiffage
FR Construction Discovered: Mar 1, 2026 · Attack est.: Mar 1, 2026
[AI generated] Eiffage S.A. is a French publicly-listed company established in 1993, specializing in civil engineering and construction. Its activities are divided into five main segments: Construction, Infrastructure, Real Estate...
OSAC Aero
FR Manufacturing Discovered: Mar 1, 2026 · Attack est.: Mar 1, 2026
[AI generated] "OSAC Aero" is a Spanish aeronautical engineering company. They provide aeronautical consulting services, product development, aircraft maintenance, and also focus on designing, prototyping, and manufacturing aerostructures. Their innovative...
Salesfloor
CA Technology Discovered: Mar 1, 2026 · Attack est.: Mar 1, 2026
[AI generated] Salesfloor is a software company that provides a mobile platform designed to connect retail store associates with online shoppers for a personalized customer experience. It empowers store associates...
Adidas
DE Consumer Services Discovered: Mar 1, 2026 · Attack est.: Mar 1, 2026
[AI generated] Adidas is a renowned German multinational corporation that specializes in sports apparel, shoes, and accessories. Founded by Adolf Dassler in 1949, its headquarters located in Herzogenaurach, Germany. The...
Loozap
CH Consumer Services Discovered: Mar 1, 2026 · Attack est.: Mar 1, 2026
[AI generated] Loozap is an online marketplace that provides a platform for users to buy and sell second-hand items. They operate in multiple countries across Africa, including Ghana and Kenya....
Lacoste
FR Consumer Services Discovered: Mar 1, 2026 · Attack est.: Mar 1, 2026
[AI generated] Lacoste is a high-end French clothing company founded in 1933 by tennis player René Lacoste and André Gillier. The company is renowned for its iconic green crocodile logo....
DreamUp
US Education Discovered: Mar 1, 2026 · Attack est.: Mar 1, 2026
[AI generated] DreamUp is an American company that provides space-based educational opportunities to students of all ages. They offer various programs that utilize the unique environment of space to spark...
Lille University
FR Education Discovered: Mar 1, 2026 · Attack est.: Mar 1, 2026
[AI generated] Lille University, also known as University of Lille, is a well-recognized public university located in Lille, France. It was established in 1562 and offers a wide range of...
FR Ministry of Agriculture
FR Public Sector Discovered: Mar 1, 2026 · Attack est.: Mar 1, 2026
[AI generated] The FR Ministry of Agriculture, or the French Ministry of Agriculture, is a governmental body in France overseeing agriculture, forestry, and food processing. It develops policies to support...
Eni Energy
IT Energy Discovered: Mar 1, 2026 · Attack est.: Mar 1, 2026
[AI generated] Eni Energy is an Italian multinational oil and gas company headquartered in Rome. Founded in 1953, the firm is considered one of the global supermajors in the oil...
Samsung Electronics
JP Technology Discovered: Mar 6, 2022 · Attack est.: Mar 6, 2022
Nvidia
US Technology Discovered: Feb 24, 2022 · Attack est.: Feb 24, 2022
Impresa
PT Business Services Discovered: Dec 31, 2021 · Attack est.: Dec 31, 2021
Brazilian Ministry of Health
BR Public Sector Discovered: Dec 9, 2021 · Attack est.: Dec 9, 2021