Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

Cook Medical LLC

cookmedical.com
Group Shinyhunters
Discovered 2026-08-14 05:59 UTC
Est. attack date 2026-08-14
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

Customer data, employee data, and other internal corporate data was compromised. The Company engaged with us but made several paltry offers, did not want to pay what we asked for and decided they are okay with the data leak to happen instead of increasing their offer by a little, then we'd likely have accepted and this post would not have gone up. The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care. | Size: 182GB+ (compressed) | Updated: 14 August 2026 | SHA256: 8a87ba511f25f20a193f05a6578a620b02302c2075a6f2dff428d1f1a826ba63
Infostealer activity detected by HudsonRock

Compromised Employees: 10

Compromised Users: 4

Third Party Employee Credentials: 9

External Attack Surface: 17

Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mxb-001b8001.gslb.pphosted.com. Proofpoint
  • mxa-001b8001.gslb.pphosted.com. Proofpoint
TXT Records
  • XPJVx/WqKCPk05KQJ0ObPekegf/+LFqV63c3VSJ4eyIvfJSGFklSrHyTWiiGSjbGBUlVh/w5DjNn9gp4DogfgA==
  • 00D0b000000whaO=1TBRk000000001d
  • ms-domain-verification=73de49e0-604f-4094-93b9-8ab9c2767e88
  • MS=ms71772798
  • QdUPWM+882HdYc+0xWxJ1JM9KCd/h3BnlgbTEh7Xsm9He6g6R0mEc3EtVbKZI+lGLntIsC4F26/fiictGq/KCw==
  • vmware-cloud-verification-a096a91c-4ae2-47d8-8607-e8f2df5e42b3
  • intersight=aa0461d8ed27233a3757aa208cb919311b5bacbfe18ddae0572212870d162645
  • infoblox-domain-mastery=e9e1cd6fba664f9d6ab966476bd641b66419f11da7cbcd612040f239f2052eff86
  • google-site-verification=uE-9G__CdjIEz62E2EHgZX-bgBHDr0E8gR8qBzUEt0c
  • hcp-domain-verification=3d2c53c5b25d4f6b9f8bfe8250ed0c4dc800ae1e7b227931a07d4a00a88734cc
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • teamviewer-sso-verification=a5cccc420a204494a35c7e91af8e5b92
  • Console0918bd53-06d6-4526-842e-dff48772dd92
  • ce9a4823171d43efb4d6cd5167ed75f1
  • cookmedical.azurewebsites.net
  • google-site-verification=-FvHMgm95O1MvXAU9ZkUMIrgFJ90fa5lbl10MQ60wvs
  • 70405a32a5fe712c1cb3b1dcfbb6cd742f067f0a61630ff71ccf4520fa6c5456
  • adobe-idp-site-verification=de98d75e8336e19e739ece482fc2a177b33812241641a2e97774725df7230124
  • ZOOM_verify_WFX6YhdzRoGvErvdNG9X1A
  • anthropic-domain-verification-ar55bg=kNiZqbxecsXUcRAbHVcLVzK7A
  • autodesk-domain-verification=eOVoFszZTWkzlqAybPk8
Cloud / SaaS Services Detected
Adobe Anthropic Autodesk Microsoft 365 Proofpoint Teamviewer Zoom

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.