BOMCALCADO Listed by Mallox Ransomware Group

On January 25, 2023, Portuguese footwear retailer BOMCALCADO appeared on the leak site operated by the Mallox ransomware group. The listing states that internal files were exfiltrated during a ransomware attack and provides two password-protected archives hosted on anonfiles.com along with the decryption password. The company has not publicly quantified how many customer or employee records may have been exposed, and the leak-site entry does not detail the precise volume or categories of data beyond “internal files.”

Reported Details from the Listing

The Mallox leak page explicitly names BOMCALCADO and supplies direct download links for two zip files labeled bomcalcado1.zip and bomcalcado2.zip. It also publishes the full password required to open the archives. No specific record count is given, nor does the posting enumerate data types such as customer names, payment details, or employee payroll information. The disclosure indicates the data was obtained through a ransomware deployment, after which the victim apparently did not meet the group’s demands.

Why This Matters for You and Your Family

When a retailer’s internal files are taken, the information inside can easily include order histories, shipping addresses, email addresses, phone numbers, and sometimes partial payment records. Even without an exact count, any customer who has shopped at BOMCALCADO since its founding now faces the possibility that those details are in criminal hands. For families this translates into heightened risk of phishing campaigns, identity theft, and unwanted solicitations that target both adults and children whose names or school-related orders appear in the stolen documents.

Doxxing and Identity-Chain Risks

Retail breaches rarely stop at one dataset. A single exposed email or phone number can be cross-referenced with gaming accounts, social-media handles, and family-member profiles to build a complete identity chain. Threat actors then use these linkages to launch credential-stuffing attacks or to dox individuals by publishing home addresses alongside names and photographs. Children’s gaming accounts are especially vulnerable because the same passwords or recovery emails used for online shopping often protect Roblox, Fortnite, or Steam logins, turning one retail breach into a gateway for account takeovers and harassment directed at minors.

Mallox Group’s Known Track Record

Public reporting attributes the Mallox ransomware group’s first notable campaigns to mid-2021. The group has since listed dozens of victims across Europe, North America, and Latin America, with a focus on mid-sized manufacturing, retail, and professional-services companies. Their typical playbook begins with initial access gained through compromised remote-desktop credentials or phishing, followed by claimed exfiltration of internal shares before encryption. Extortion follows a double-pressure model: public leak-site publication combined with direct threats to release sensitive files unless payment is made. The January 2023 BOMCALCADO listing fits this pattern exactly.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you ever used at BOMCALCADO wherever it has been reused and immediately enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same breached retail data.
• Let remediation specialists handle ongoing takedown requests across data brokers and leak sites on your behalf.

The BOMCALCADO incident is a reminder that retail data leaks continue to feed long-term identity crimes even when the initial ransomware demand goes unpaid. Starting now with deliberate credential hygiene and persistent visibility is the most practical defense available to ordinary families. DoxxScan by GalaxyWarden delivers exactly that combination—continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.