catiglass.com $100.000 Listed by BlackSuit Ransomware Group

On April 29, 2024, the domain catiglass.com appeared on the BlackSuit ransomware group’s leak site with a $100,000 extortion demand. The listing states that internal files were exfiltrated during a ransomware attack, though the exact number of people whose information is contained in those files remains unknown.

Details from the Leak Site

The BlackSuit leak page explicitly lists catiglass.com and claims the company’s internal data was stolen. The disclosure indicates that samples of the allegedly stolen material have been published, a standard tactic used to pressure victims. No specific record count or detailed inventory of data types is provided in the listing itself. The group gives the victim a deadline to pay the $100,000 ransom or face full publication of the remaining exfiltrated files.

Why This Matters for You and Your Family

When a company that handles customer orders, payments, or personal information suffers a breach, your data can be exposed even if you never directly interacted with the leaked internal files. Names, addresses, phone numbers, email accounts, and order histories are common in such thefts. Once released, this information can be sold or used to target you and your family with identity theft, phishing, or harassment. The uncertainty around the exact data stolen only heightens the risk; you must assume sensitive personal details may now be in criminal hands.

Doxxing and Identity-Chain Risks

Internal company files frequently contain spreadsheets that link customer identities to email addresses, phone numbers, shipping addresses, and sometimes payment details. These fragments allow attackers to build complete identity chains. A single leaked email can lead to compromised accounts on other services, especially if passwords were reused. Credential leaks like this one often cascade into gaming account takeovers, where children’s usernames, linked emails, and shared family addresses create additional exposure points for doxxing and further extortion.

BlackSuit’s Known Track Record

Public reporting attributes BlackSuit as a rebrand of the earlier Royal ransomware operation that emerged in late 2022. The group has targeted organizations across healthcare, manufacturing, and professional services, typically gaining initial access through phishing or exploited remote desktop protocols. After exfiltration, BlackSuit follows a double-extortion playbook: they encrypt victim systems and simultaneously threaten to publish stolen data on their dark-web leak site if the ransom is not paid. Past incidents show they often release small samples quickly and escalate pressure with countdown timers, exactly as seen in the catiglass.com listing.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including cleanup of exposed records.
• Rotate any password you used at catiglass.com or any related service, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle takedown requests across data brokers and leak sites on your behalf.

The catiglass.com breach is a reminder that even mid-sized vendors can become gateways to your personal information. Taking deliberate steps now limits how far criminals can travel down the identity chain created by this incident. DoxxScan’s continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage provide a practical way for you and your family to stay ahead of cascading threats, including those that reach children’s gaming accounts.