AddWeb Solution Pvt Listed by mallox Ransomware Group

On March 05, 2023, Indian offshore development firm AddWeb Solution Pvt appeared on the leak site of the mallox Ransomware Group. The listing states that internal files were exfiltrated during a ransomware attack and warns that if the company does not “take responsibility for their security weakness,” both its own and its clients’ confidential data will be published. A file tree was posted as proof, with a deadline of 19 March 2023 and a Tox chat contact for negotiations.

Details in the Leak-Site Posting

The mallox leak-site entry, archived via ransomware.live, states that AddWeb Solution Pvt suffered a ransomware intrusion in which attackers successfully exfiltrated internal files. The posting does not quantify the number of records involved, nor does it list specific data types beyond the generic description “confidential” files belonging to the company and its clients. It includes a direct link to a text file tree hosted on anonfiles.com and provides a Tox ID for further communication. The disclosure indicates the threat actors are prepared to release the full archive if their demands are not met by the stated deadline.

Why This Matters for You and Your Family

If you or any member of your family has done business with AddWeb Solution Pvt — whether as a website or mobile-app client, a cloud-services customer, or a digital-marketing partner — your information may now sit inside the exfiltrated archive. Even though the exact contents remain unknown, ransomware groups routinely obtain contracts, invoices, client databases, employee records, and internal correspondence. Any of those documents can contain names, addresses, phone numbers, email accounts, project details, and payment information that criminals can weaponize. For ordinary families this translates into heightened risk of identity theft, phishing campaigns tailored to your relationship with the vendor, and potential financial fraud stemming from leaked business records.

The Doxxing and Identity-Chain Implications

Once internal files leave a company’s control, they frequently feed long-term doxxing chains. A single leaked email or phone number can be cross-referenced with credential-stuffing databases, public records, and social-media handles to build a complete profile of you and your household. Children’s gaming accounts are especially vulnerable because the same passwords or recovery emails parents reuse for work projects often protect those accounts. A breach like this can therefore cascade into account takeovers on Steam, Roblox, Fortnite, or Discord, exposing chat logs, payment methods, and real-world identities linked to your home address. The longer the data circulates on dark-web markets, the more likely it is to surface in future extortion attempts or identity-fraud schemes.

Mallox Group’s Known Track Record

Public reporting attributes the mallox Ransomware Group with emerging in late 2021 as a ransomware-as-a-service operation that rebranded from earlier activity under the name “target.” The group is known for targeting mid-sized businesses across Asia, Europe, and North America, with notable prior victims including manufacturing firms, logistics providers, and software-development companies. Their typical playbook begins with phishing or exploited remote-desktop credentials for initial access, followed by rapid lateral movement, data exfiltration, and deployment of their custom encryptor. Extortion is dual-layered: they demand payment to prevent file encryption and a second, often larger sum to stop publication of stolen data on their leak site. The group maintains an active presence on dark-web leak portals and uses Tox for direct negotiation, exactly as seen in the AddWeb Solution Pvt listing.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you ever used at AddWeb Solution Pvt — or any password you have reused anywhere — and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same credentials or addresses.
• Let remediation specialists handle ongoing takedown requests across data-broker sites and extortion portals on your behalf.

The AddWeb Solution Pvt incident is a reminder that even mid-sized vendors can become gateways to your personal data. Acting quickly on credential hygiene and identity mapping can limit how far this claimed breach travels. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that explicitly includes children’s gaming accounts vulnerable to credential-stuffing attacks that follow ransomware leaks.