Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business
Group: Cactus
Discovered by ransomware.live: 2025-02-04
Estimated attack date: 2025-01-23
Description:
<p>Business Services.<br><br>“Packaging supply chains require absolute efficiency to handle the modern digital and storefront buying habits of todays consumer. MGA Innovation makes it easy for partners to meet ever evolving demands. How do we do it? Ingenuity and flexibility to help you shape quality, food safety and the complete customer experience.”<br><br>Website: <a href="https://www.mgainnovation.com/">https://www.mgainnovation.com/</a><br><br>Revenue : $30.9M<br><br>Address: 3818 Grandville Ave, Gurnee, Illinois, 60031, United States<br><br>Phone Number: (224) 656-6730<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/MGAPRINTING/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/MGAPRINTING/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror: </strong></mark><a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/MGAPRINTING/PROOF/"><mark class="marker-yellow"><strong>https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/MGAPRINTING/PROOF/</strong></mark></a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information. corporate confidential docs, employees\executives personal data, corporate correspondence, financial docs, production data, customer information, contracts\NDAs, etc.</p><p><img src="/uploads/Passport_Chris_Vela_1e6fa6381b.png" alt="Passport Chris Vela.png"><img src="/uploads/signed_2025_BL_contract_57bee589c1.png" alt="signed 2025 BL contract.png"><img src="/uploads/SKM_C36824020111570_958eef6fc9.png" alt="SKM_C36824020111570.png"><img src="/uploads/COI_24_25_666349573d.png" alt="COI 24-25.png"><img src="/uploads/CONFIDENTIAL_Kinter_Cat18_Mailing_List_08_10_2021_sent_to_MGA_a6ac8b6f70.png" alt="CONFIDENTIAL Kinter Cat18 Mailing List 08.10.2021 sent to MGA.png"></p>
DNS Records:
The following DNS records were found for the victim's domain.
Leak Screenshot:
Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.