On November 18, 2024, Canadian auto recycling firm A & L Auto Recyclers appeared on the leak site operated by the blacklock ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the Ontario-based company, which buys, dismantles, and resells used vehicle parts while handling end-of-life cars in an environmentally responsible manner. Anyone whose personal information passed through the business — customers selling vehicles, vendors, or employees — may now face heightened risk of identity theft and targeted fraud.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch A & L Auto Recyclers
Get alerted the next time A & L Auto Recyclers files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about A & L Auto Recyclers’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details from the Listing
The blacklock leak site entry, mirrored on ransomware.live at the .onion link provided, states that data was stolen from A & L Auto Recyclers and is now publicly available for download. The disclosure does not quantify the number of records affected, list specific data types such as customer names, addresses, phone numbers, driver’s licence details, or payment information, nor does it state when the initial intrusion occurred. It simply presents the exfiltrated internal files as proof of compromise and follows the group’s standard practice of pressuring the victim by making samples accessible to anyone who visits the leak page.
Internal files exfiltrated is the only description given; no further breakdown appears in the primary listing. This lack of detail is common in ransomware leak sites, where the goal is to create fear and urgency rather than provide transparency.
Why This Matters for You and Your Family
When a local business like an auto recycler is hit, the people affected are rarely the executives — they are ordinary customers who sold a used car, filled out paperwork for scrap disposal, or bought a replacement fender. That paperwork often contains your full name, home address, telephone number, email, and sometimes driver’s licence or insurance details. Once those records leave the company’s control, they can be sold, traded, or used to build profiles for identity theft, loan fraud, or phishing campaigns aimed at your household.