Ransomware Leak
play
S&H Express
Data leak attributed to play, first discovered on 2025-06-14. Approximately 20,540 records were reported exposed.
Threat group
play
Records exposed
20,540
Discovered
2025-06-14
Country
US
Indexed
2025-07-23
Website
www.sandhexpress.com
Source ID
20668
About this leak
United States
What is inside this leak sample
Indexed records
20,540
With email
•••
ID documents
•••
File types
•••
Corporate vs personal email
66.68% corporate · 33.32% personal
Top corporate email domains
% of corporate emails
indeedemail.com
51.3%
sandhexpress.com
16.64%
6 more hidden ·
Enterprise
Analysed 2026-09-03
More leaks attributed to play
Worried your information is in this or another leak?
Run a free, anonymous search
across millions of ransomware and infostealer records.