Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Discovered 2026-09-07 21:52 UTC
Est. attack date 2026-09-07
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

ritzsafety.com zoominfo.com/c/ritz-safety-llc/82166398 Ritz Safety Americas largest privately-held PPE & safety equipment distributors — founded in 1983 in Pompano Beach, Florida by Emily Ritz and her son Peter Merkl, selling work boots and gloves from a truck, now HQ'd in Dayton, Ohio with ~220–250 employees and 17–18 locations nationwide. Hidden twist: in 2006 the family's uniform-rental empire Van Dyne Crotty was sold to Cintas — but the brothers Dan and Bob Crotty kept Ritz Safety out of the deal and built it into a roll-up consolidator: 9 acquisitions (2015–2022), 5,000+ customers monthly, access to 200,000+ SKUs, private-label lines, equipment rental/repair, custom embroidery and free on-site safety training. Revenue: $100–150M (2025: +12% = +$20M growth, best Q2 in the company's 42-year history), 100% family-owned (Crotty family), no PE. Bottom line: a family dynasty that lost its parent empire to Cintas but turned the "leftover" safety distributor into a new national powerhouse

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 11

Third Party Employee Credentials: 0


External Attack Surface: 7


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • mx2-us1.ppe-hosted.com. Proofpoint
  • mx1-us1.ppe-hosted.com. Proofpoint
TXT Records
  • v=spf1 ip4:149.72.202.185 ip4:207.159.133.246 ip4:52.204.98.138 ip4:40.89.244.30 ip4:71.66.33.250 ip4:216.196.234.42 ip4:24.144.211.28 ip4:209.59.154.76 a:dispatch-us.ppe-hosted.com include:spf.protection.outlook.com include:6919020.spf07.hubspotemail.net" " include:sendgrid." "net -all
  • anthropic-domain-verification-baa136=jD4fkQjjciBg0l3xLKIq1DDDQ
  • apple-domain-verification=nA6Ncc6mzWn7ou2m
  • brevo-code:4a3787d2cb24507ab1887e45b2cf9cb1
  • google-site-verification=MkslkWiL3xQLf_D7C7ynEadVpeJw_MFxW15RcDi_5IY
  • mtf9c2f204uc5afpsk67cegvm8
  • ppe-c81e146ba8fd953b74ee
  • ppe-cc2144983cf5e379740016e908d0107b9b232653
Cloud / SaaS Services Detected
Anthropic Apple Brevo HubSpot Proofpoint Essentials