What this service is, what it is not, and the conditions for using it.
Records on this site are criminal-group allegations observed by data providers. The site reports observations; authority-confirmed records are separately marked.
This free service is provided as-is. Data may be incomplete or temporarily unavailable. Do not rely on it alone for consequential decisions; liability is disclaimed to the maximum extent permitted by law.
Don't scrape the site or overload it with automated requests, use the contact form for data requests, and never use the data to harass, intimidate, or extort named organizations or people.
Research, defence, and reporting use is welcome, provided the observed-claim caveat and upstream provider licence and attribution obligations travel with the data. MITRE ATT&CK terms and trademarks apply to ATT&CK content.
Challenges submitted from a claim page enter human review. Accepted corrections are annotated in record history and withdrawals persist. Other matters can be raised through the contact form.
These terms may change; the date on the live page records the latest change. See also the privacy notice.
Victim records are provider-reported allegations, not independently verified breaches. Published for research, defense, and educational use.