A/C Supply Listed by interlock Ransomware Group

On May 9, 2025, A/C Supply, Inc., a family-run HVAC-R wholesaler serving southern Louisiana and Mississippi, appeared on the leak site of the interlock ransomware group. The company confirmed that internal files had been exfiltrated during a ransomware attack, though the exact number of people whose information may have been exposed remains unknown.

Reported Details of the Breach

Public reporting indicates that interlock posted evidence of the compromise on its dark-web leak portal. The data consists of internal files allegedly stolen from A/C Supply’s systems. No customer count or specific record volume has been disclosed. The company, which operates twelve branches across Louisiana and Mississippi, has stated that it takes cybersecurity and customer protection seriously, but available details about the precise timeline of initial access or the volume of records remain limited.

Why This Matters for You and Your Family

When a regional supplier like A/C Supply suffers a breach, ordinary customers and employees can find their personal information circulating on criminal forums. HVAC companies routinely store names, addresses, phone numbers, email addresses, payment details, and sometimes Social Security numbers for warranty registrations, credit applications, or service records. Once that information leaves the company’s control, it can be used for identity theft, phishing, or sold to other criminals. For families in Louisiana and Mississippi who have done business with the company, this incident represents another vector through which attackers can reach you at home.

The Doxxing and Identity-Chain Risks

Stolen internal files often contain more than isolated records. They can link customer accounts, employee directories, vendor contacts, and email correspondence. Attackers use these connections to build identity chains that tie your work email to personal accounts, phone numbers to home addresses, and online handles to real identities. Credential leaks like this one frequently cascade into account takeovers, especially for gaming platforms where children use family email addresses. A single exposed password reused across services can give attackers persistent access to email, social media, and financial accounts, turning a corporate breach into long-term personal exposure.

Interlock Ransomware Group’s Track Record

Public reporting attributes the attack to the interlock ransomware group. The group emerged in late 2024 and has targeted mid-sized businesses across multiple sectors. Notable prior victims include other regional distributors and service companies whose internal documents were published after ransom demands went unpaid. Their typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files and deployment of ransomware. If payment is not received, interlock publishes samples on its leak site and threatens full data release, applying pressure through both encryption and public exposure.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what this claimed breach connects to.
• Rotate any password you used at A/C Supply or similar vendors and enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing your family is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same addresses and emails.
• Let remediation specialists handle takedown requests across data brokers and exposed records while you focus on securing your own accounts.

The pace of ransomware leaks shows no sign of slowing, which means families must treat every vendor breach as a personal security event. Starting with clear visibility into how your information is linked and taking direct protective steps can limit the damage before criminals turn stolen files into targeted attacks. DoxxScan by GalaxyWarden delivers that visibility through continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists who also protect gaming accounts for you and your children.