Cosmopoint College Listed by avoslocker Ransomware Group

On December 26, 2022, Cosmopoint College appeared on the leak site operated by the AvosLocker ransomware group. The listing states that the attackers exfiltrated roughly 80 gigabytes of internal school documents, including teacher and student contact information, student loan contracts, and internal financial records. Anyone whose personal data was held by the Malaysian institution is now at risk of exposure.

Details from the Leak Site

The primary disclosure on the AvosLocker portal, archived via ransomware.live, states that attackers gained access to Cosmopoint College’s systems and removed approximately 80 GB of internal files. The listing explicitly names categories of stolen material: teacher and student contact details, student loan contracts, and various financial documents. The leak site does not specify the exact number of individuals affected, nor does it provide a public sample of the data. A deadline for payment was listed, after which the group threatened to publish or sell the archive. The notification does not detail the initial access vector or the precise systems compromised.

Why This Matters for You and Your Family

If you or your children attended or worked at Cosmopoint College, your contact information, financial agreements, and possibly dates of birth or national identification numbers may now sit in an attacker-controlled archive. This kind of data fuels identity theft, loan fraud, and targeted phishing campaigns that feel personal because they reference real school records. Families often reuse the same email address or phone number across school portals, banking apps, and government services, turning one breach into multiple points of compromise. Even if you have moved on from the institution, the exposure remains relevant for years because stolen records do not expire.

Doxxing and Identity-Chain Risks

Contact lists and loan contracts frequently contain enough breadcrumbs to link an individual’s school identity to their current home address, phone number, and online handles. Attackers can combine this information with data from other breaches to build detailed profiles. Once a real name and phone number surface, doxxing escalates quickly: gaming accounts, social-media profiles, and family members become easy follow-on targets. Credential leaks of this nature routinely cascade into account takeovers on Steam, Roblox, or Discord, especially for children who share devices or email addresses with parents. The chain from an old student record to live household exposure is shorter than most people realize.

AvosLocker’s Known Track Record

Public reporting attributes the emergence of AvosLocker to mid-2021. The group has targeted organizations across healthcare, education, and manufacturing sectors, often listing victims on their dedicated leak site when ransom demands go unmet. Their typical playbook involves deploying ransomware to encrypt systems, exfiltrating documents beforehand, then applying dual pressure through both encryption and the threat of data publication. In education breaches, AvosLocker has repeatedly highlighted the presence of student and employee personal information to increase leverage. While exact success rates remain unclear, the group continues to maintain an active presence on underground forums and leak portals more than three years after its first appearance.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity drawn from this and earlier exposures.
• Rotate any password you ever used at Cosmopoint College anywhere it has been reused and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is flagged within hours.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts commonly chained to the same contact details.
• Let remediation specialists handle data-broker takedown requests and opt-out processes that would otherwise consume months of your time.

The incident underscores how even institutions you left years ago can still expose your family to fresh threats. One timely scan and a few deliberate steps can break the chain before criminals exploit the 80 GB archive. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts at risk from credential leaks like this one.