CloudCall Listed by vicesociety Ransomware Group

On January 23, 2023, CloudCall appeared on the leak site operated by the vicesociety ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the UK-based provider of cloud IT services for small and medium-sized businesses. The number of people whose data was taken remains unknown, and the leak-site posting does not detail the specific documents or records involved.

Reported Details from the Listing

The vicesociety leak site, mirrored on ransomware.live, shows CloudCall as a victim and claims successful data exfiltration. The disclosure indicates that the company suffered a ransomware incident in which attackers copied internal files before encryption or as part of an extortion-only operation. No ransom amount, exact breach date, or list of exposed data types is provided in the primary listing. CloudCall has not published a separate public notification quantifying affected records or naming the precise systems compromised. Public reporting on vicesociety incidents consistently describes similar postings that surface weeks or months after initial access.

Why This Matters for You and Your Family

If you or any member of your household has ever used CloudCall’s hosted phone systems, Microsoft 365 management, backup services, or other cloud tools, your contact details, invoices, contracts, or support tickets may now sit in an attacker’s archive. Internal files from an IT services provider frequently contain names, addresses, phone numbers, email accounts, and sometimes payroll or HR information for the businesses they serve. When that data reaches a ransomware leak site, it becomes freely available to identity thieves, scammers, and other criminals who scan these repositories daily. Your family’s information can be stitched together with other breaches to build a complete profile that leads to account takeovers, fraudulent loan applications, or targeted phishing campaigns months or even years later.

Doxxing and Identity-Chain Risks

Ransomware groups like vicesociety rarely stop at posting a single company’s files. They publish samples as proof and threaten to release the full archive unless payment is made. Even partial leaks can expose email addresses, usernames, and internal notes that link your work identity to personal accounts. These connections create doxxing chains: an attacker who obtains your business email from CloudCall’s files can test it against consumer services, gaming platforms, and social media. Once one account falls, the rest often follow. Credential leaks of this nature routinely cascade into full identity compromise because people reuse passwords across work and home environments. Children’s gaming accounts tied to a family email or phone number become especially vulnerable in these chains.

vicesociety’s Known Track Record

Public reporting attributes the first major activity by vicesociety to mid-2021. The group has since listed dozens of organizations, focusing primarily on small and mid-sized businesses rather than large enterprises. Notable prior victims include healthcare providers, manufacturers, and other IT service companies. Their typical playbook begins with phishing or exploitation of remote desktop services for initial access, followed by lateral movement inside the victim’s network to locate and exfiltrate documents. vicesociety often relies on double-extortion tactics: they encrypt systems and simultaneously threaten to publish stolen data. Many of their leak-site postings follow the same pattern seen with CloudCall—limited samples released publicly while the full dataset is held for ransom. The group does not always deploy the most sophisticated ransomware strains, preferring speed and volume over complex malware.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you ever used with CloudCall or its hosted services anywhere it has been reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught and acted on in hours, not months.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same addresses and emails.
• Let the remediation specialists handle takedown requests across data brokers and extortion sites for you while you focus on securing your own accounts.

The CloudCall listing is a reminder that even companies chosen to simplify your IT environment can become gateways to personal exposure. Start your DoxxScan trial today and treat every breach as a prompt to tighten the connections between your digital identities before criminals do it for you. DoxxScan’s continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage give you and your family an effective way to stay ahead of these cascading risks, including protection for gaming accounts that are frequently targeted after credential leaks.