28 Victims for Consumer Services in 2025


Sponsored by Hudson RockUse Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business


 Manufacturing|  Construction |  Transportation/Logistics |  Technology |  Healthcare |  Financial Services |  Public Sector |  Business Services |  Retail |  Consumer Services |  Energy |  Telecommunication |  Agriculture and Food Production |  Hospitality and Tourism


This page lists all the victims of ransomware attacks in Ransomware.live database for Consumer Services in 2025. We continously scrape ransomware group site to detect new victims.
Ransomware.live uses AI to identify the activity of victims, but please note that the results may not be 100% accurate—do not hesitate to contact us if you notice any errors.
US flag

Saied Music 

Company logo
Ransomware Group:

Discovery Date: 2025-02-10 06:45

Saied Music Since 1946, Saied Music Company has been offering the most respected brands and the best selection for your piano, keyboard, organ, band, orchestra, guitar, combo, and print music needs. Visit one of our six locations in Northeast Oklahoma, Arkansas, and Texas. Saied Music Company is proud to support the effort to keep music an integral part of our nation’s elementary and secondary school curriculums.Geo: USA - Leak size: 162 GB - Contains: SQL

Group: 
 flag

Kitty cookies 

Company logo
Ransomware Group:

Discovery Date: 2025-02-09 19:07

LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQp NSUlFb3dJQkFBS0NBUUVBNENoODBXOTFVc09raE9jSDNxVjJ6e TZlUGxhTzVCeXNQOGpyVThMcVB0bVpiR3lX...

Victim:   |  Group: 
CA flag

northernresponse.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-06 19:26

Retail. “Located in Toronto, Ontario, Canada, Northern Response has been a pioneer in the Canadian market since 1984, building brands and scaling distribution via omni-channel marketing platforms including Live Shopping, TV, Print, Mass + Travel Retail and Online (TikTok, Facebook, Instagram, Twitter, Amazon etc.). ” Website: https://northernresponse.com/ Revenue : $17.4M Address: 50 Staples Ave, Richmond Hill, Ontario, L4B 0A7, Canada Phone Number: (905) 737-6698 Download link #1: https://[redacted].onion/NRESPONSE/PROOF/ Mirror: https://[redacted].onion/NRESPONSE/PROOF/ DATA DESCRIPTIONS: Personal identifiable information, database backups (including customers information), employees and executives personal folders, corporate OneDrive, financial data, legal docs, contracts\NDAs, corporate correspondence, etc.

Victim:   |  Group: 
US flag

corehandf.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-05 21:28

Founded in 2010 and headquartered in Vancouver, Washington, Core Health and Fitness is a privately-held marketer and distributor of commercial fitness solutions to health clubs, community recreational centers, hotels, and educational facilities.

Victim:   |  Group: 
ID flag

LUA Coffee 

Company logo
Ransomware Group:

Discovery Date: 2025-02-04 21:13
Estimated Attack Date: 2025-02-01

Extract from Gitlabs: PT. ITPRENEUR INDONESIA TECHNOLOGY, GFZ Helmholtz Centre for Geosciences, LUA Coffee

Victim:   |  Group: 
DE flag

escada.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-04 19:41
Estimated Attack Date: 2025-01-18

[AI generated] Escada.com is the online platform for ESCADA, a luxury women's fashion brand which is based in Germany. Established in 1978, ESCADA is known for its modern, glamorous designs, offering a unique blend of elegance, vibrancy and stand-out style. Their product line includes ready-to-wear items, accessories, footwear, fragrances, and eyewear. The brand seeks to empower women through its high-quality and fashion-forward designs.

Victim:   |  Group: 
US flag

summitmovinghouston.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-04 17:46

Extract from Taking stock of 2024 Part 2

Victim:   |  Group: 
IN flag

India car owners 

Company logo
Ransomware Group:

Discovery Date: 2025-02-04 14:54

Name / Mobile No / Address / Pin Code / City / Submodel / Model / Assettype / Misstatus / Tenor ...

Victim:   |  Group: 
US flag

cornwelltools.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-04 09:00

Hand, Power & Lawn-care Tools. “Headquartered in Wadsworth, Ohio, Cornwell Quality Tools is the oldest mobile tool company, with a market presence since 1919. A family and employee-owned company, Cornwell is committed to the pride that accompanies the sale of quality materials. With the use of high-grade alloy steel, combined with modern heat-treating methods, Cornwell has continued to produce the finest tools in the world, that have truly been "The Choice of Professionals®" for over 100 years.” Website: https://www.cornwelltools.com/ Revenue : $218.7M Address: 667 Seville Rd, Wadsworth, Ohio, 44281, United States Phone Number: (330) 336-3506 Download link #1: https://[redacted].onion/CORNWELL/PROOF/ Mirror: https://[redacted].onion/CORNWELL/PROOF/ DATA DESCRIPTIONS: Personal Identifiable information (both employees and customers), customer confidential data, corporate documents\contracts\NDAs, TechCredit scans with customer personal information, corporate financial docs\payroll\taxes, corporate and personal correspondence, outlook exports, databases with Personal Identifiable Infomation and Credit Cards information, including SSN + DOB, credit card number and expiration date (over 1 million records) with decryption keys and much more.

Victim:   |  Group: 
JM flag

derrimon.com 

Company logo
Ransomware Group:

Discovery Date: 2025-02-03 21:21
Estimated Attack Date: 2025-01-22

[AI generated] Derrimon Trading Company Limited is a Jamaican-based firm engaged in the distribution and trading of a wide array of product categories from food items to personal care. The company has also ventured into retail with the acquisition of Sampars Cash and Carry, and operates numerous supermarkets throughout Jamaica. Derrimon aims to consistently provide its customers with high quality products while prioritizing sustainable growth.

Victim:   |  Group: 
US flag

Zamzow's 

Company logo
Ransomware Group:

Discovery Date: 2025-02-01 20:27
Estimated Attack Date: 2025-01-30

How is Zamzows.com secured? What attack vectors might be relevant? We explore the architecture, test security mechanisms, and look for interesting vulnerabilities. A hacker’s perspective on a new target! 🔥

Victim:   |  Group: 
CA flag

Fayez Spa 

Company logo
Ransomware Group:

Discovery Date: 2025-01-31 18:47

Fayez Spa - the company provides services of spa-therapists and stylists, anti-aging and relaxing procedures including spa kuhnya, in addition, conducts anti-aging treatment including anti-aging injections. Fayez Spa corporate office is located in 2224 Wharncliffe Rd S, London, Ontario, N6P 1L1, Canada and has 24 employees.

Victim:   |  Group: 
CA flag

Dolmor Salon 

Company logo
Ransomware Group:

Discovery Date: 2025-01-31 18:46

Dolmor Salon (founded in 1952) - services of hairdressers and stylists. Dolmor Salon corporate office is located in 42 Kent St N, Simcoe, Ontario, N3Y 3S2, Canada and has 11 employees.

Victim:   |  Group: 
CA flag

Beauty Works Spa 

Company logo
Ransomware Group:

Discovery Date: 2025-01-31 18:44

Beauty Works Spa - full service day spa, offering medical treatments, esthetics, massage & body treatments. Beauty Works Spa corporate office is located in 615 Sidney St, Belleville, Ontario, K8P 4A7, Canada and has 19 employees.

Victim:   |  Group: 
VE flag

farmatodo.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-31 15:17

Extract from Taking stock of 2024 Part 1

Victim:   |  Group: 
GB flag

atlanticelectrics.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-31 15:08

Extract from Taking stock of 2024 Part 1

Victim:   |  Group: 
US flag

johnpaulrichard.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-30 23:18

Apparel & Accessories Retail. “JohnPaulRichard is a women's fashion line designed to fit every style and body type. Each item is meant to be comfortable and affordable, but also easy to dress up for a more elevated look. Fashion minded and customer conscious, JohnPaulRichard has always made it a priority to put quality at the forefront of its business.” Website: https://www.johnpaulrichard.com/ Revenue : $60M Address: 26775 Malibu Hills Rd Ste 100, Calabasas, California, 91301, United States Phone Number: (888) 245-8600 Download link #1: https://[redacted].onion/JOHNPAULRICHARD/PROOF/ Mirror: https://[redacted].onion/JOHNPAULRICHARD/PROOF/ DATA DESCRIPTIONS: Personal Identifiable information, corporate confidential data, financial docs, employee personal folders\docs, production data, sales, corporate correspondence, etc.

Victim:   |  Group: 
DE flag

Benuta 

Company logo
Ransomware Group:

Discovery Date: 2025-01-30 14:54

In just twelve years, Benuta has become one of the fastest growin g companies in the European online carpet retail sector. We are ready to upload a lot of private corporate documents such as: NDAs, contact numbers and e-mail addresses of employees and c ustomers, financial data (audits, payment details, reports), conf idential agreements and contracts, inside correspondence, HR docu ments, etc.

Group: 
CA flag

Aden Footwear 

Company logo
Ransomware Group:

Discovery Date: 2025-01-29 08:49

Aden Footwear & Fashion shoe store with departments for men, women and children in a space of 10,000 square feet. Aden Footwear corporate office is located in 669 Dundas St, Woodstock, Ontario, N4S 1E5, Canada and has 6 employees.

Victim:   |  Group: 
RO flag

bigotti.ro 

Company logo
Ransomware Group:

Discovery Date: 2025-01-25 20:34
Estimated Attack Date: 2025-01-14

[AI generated] Bigotti.ro is a Romania-based fashion company specializing in men's clothing and accessories. Known for its high-quality Italian design, the brand offers a wide selection of items such as suits, shirts, shoes, and ties. They focus on providing stylish, yet comfortable apparel that suits both formal and casual occasions. Customer service and satisfaction are at the core of their values.

Victim:   |  Group: 
US flag

welcomewagon.com 

Company logo
Ransomware Group:

Discovery Date: 2025-01-25 20:27

[AI generated] Welcome Wagon is a US-based company focused on creating connections between new homeowners, movers and local businesses. They specialize in welcoming new residents to their community, introducing them to products and services of local businesses through direct mail marketing, digital marketing services, and gift books. They aim to stimulate local economic growth by fostering these new relationships.

Victim:   |  Group: 
US flag

USLUGGAGE.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-01-24 17:38

[AI generated] "USLUGGAGE.COM" is an online retailer specializing in the sale of various types of luggage and travel accessories. The company offers a diverse range of products, including suitcases, backpacks, carry-on bags, duffel bags, and travel kits. It has a wide array of brands, catering to various consumer preferences and budgets. In addition to retailing luggage, the company also provides tips and recommendations for choosing the perfect travel gear.

Victim:   |  Group: 
US flag

SEATTLECHOCOLATES.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-01-24 17:31

[AI generated] Seattle Chocolates is a renowned chocolate manufacturing company based in Seattle, Washington. Recognized for their premium quality and crafted chocolates, they are committed to creating delicious, innovative products with a focus on sustainability and social responsibility. They offer a wide range of flavorful, rich chocolates including truffle bars, truffle bags, gift boxes, and seasonal treats.

Victim:   |  Group: 
US flag

WHITMOR.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-01-24 17:30

[AI generated] Whitmor.com is an online platform that offers a wide range of storage, organization, and laundry care products. The company is known for providing simple, smart, stylish, and functional solutions to home organization challenges. Their diversified product portfolio includes items like garment racks, hangers, cubes, shelves, baskets, and laundry sorters. The company prides itself on high-quality products and exceptional customer service.

Victim:   |  Group: 
US flag

KEEACTIONSPORTS.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-01-24 17:13

[AI generated] KeeActionSports.Com is a online retailer specialized in selling sports-related goods and equipment. It is dedicated to catering to the needs of sports enthusiasts, regardless of their activity preference. Their product range covers an array of sports, including but not limited to golfing, running, swimming, and team sports. Their commitment is to provide high-quality sporting goods designed to enhance performance and ensure customer satisfaction.

Victim:   |  Group: 
US flag

JAKKS.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-01-24 09:01

[AI generated] JAKKS Pacific, Inc., often referred to as JAKKS.COM, is a multi-brand company that designs and markets a broad range of toys, consumer products, and other leisure entertainment products. They provide merchandise for various franchises, such as Disney, Nintendo, and Star Wars among others. JAKKS Pacific is also known for its innovative technology application in toy manufacturing. The company started in 1995 and is situated in California, USA.

Victim:   |  Group: 
US flag

SWEETSTREET.COM 

Company logo
Ransomware Group:

Discovery Date: 2025-01-24 08:47

[AI generated] Sweetstreet.com is a renowned company that specializes in creating a wide range of delicious and indulgent gourmet desserts. These include cakes, cookies, brownies, pies, and other sweet treats. Their products are known for their quality, taste, and craftsmanship. The company caters to both individual consumers and food service providers, offering various dessert options suitable for different occasions and tastes.

Victim:   |  Group: 
JP flag

Marukai 

Company logo
Ransomware Group:

Discovery Date: 2025-01-21 00:19

Established in 1965, Marukai Corporation (d.b.a Tokyo Central) opened up its business as one of the first international Japan-based retailers in the US market. Since its early days, Marukai has been striving to serve local customers with expanding to multiple retail locations.

Victim:   |  Group: