Cullum Services Listed by losttrust Ransomware Group

On September 26, 2023, Cullum Services, Inc. appeared on the leak site operated by the losttrust ransomware group. The South Carolina-based mechanical maintenance and construction services company, which has operated since 1972 with offices in North Charleston, Columbia, Florence, and Greenville, may now be listed as a victim of a ransomware attack in which internal files were allegedly exfiltrated.

Reported Details from the Listing

The losttrust leak site entry states that Cullum Services suffered a ransomware incident and that attackers successfully exfiltrated internal files. The disclosure does not quantify the number of records affected, list specific data types beyond “internal files,” or reveal the ransom demand or payment deadline. Public views of the leak site via ransomware.live show the company listed under its exact name with no additional samples published at the time of initial disclosure. The incident is therefore confirmed only at the level the operators themselves have chosen to publish: exfiltration of internal company documents following a ransomware deployment.

Why This Matters for You and Your Family

When a local business like Cullum Services is breached, the information stolen often includes documents that name vendors, employees, customers, and partners. Your name, address, Social Security number, insurance details, or payment information may sit inside those files even if you never directly contracted with the company. Internal files exfiltrated in ransomware attacks frequently contain spreadsheets, contracts, invoices, and employee records that travel far beyond the original victim. Once those documents reach dark-web markets or extortion forums, they become raw material for identity theft, loan fraud, and targeted phishing against you and your family members.

The Doxxing and Identity-Chain Risk

Ransomware operators rarely stop at dumping raw files. They map relationships between corporate data and personal identities, then sell or publish the most useful pieces. A single leaked invoice can link your home address to a phone number, email account, and online username. Those connections let attackers or subsequent buyers pursue credential-stuffing attacks against your banking, email, or social-media accounts. Children’s names and dates of birth sometimes appear in employee benefit files, creating long-term risks that follow them into adulthood. The identity chain created by this claimed breach can quietly expand for years unless actively broken.

Losttrust Group Track Record

Public reporting attributes losttrust with emerging in early 2023 as a ransomware-as-a-service operation that uses double-extortion tactics: encrypt victim systems and threaten to publish stolen data. The group has listed dozens of organizations across manufacturing, construction, and professional-services sectors. Typical playbooks begin with phishing or exploited remote-access tools, followed by lateral movement, data exfiltration, and then deployment of ransomware. After encryption, operators wait a short period before publishing samples or full datasets on their leak site if payment is not received. Losttrust follows the now-standard model of listing victims publicly to increase pressure, a pattern observed across multiple prior incidents documented by ransomware trackers.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what this claimed breach exposes about your household.
• Rotate any password you have reused at Cullum Services or any of its related entities, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become takeover targets when corporate credential leaks cascade into personal logins.
• Let DoxxScan remediation specialists handle data-broker takedown requests and opt-out processes that would otherwise require dozens of manual submissions.

The breach of Cullum Services illustrates how even regional service companies hold data that can endanger thousands of ordinary families. Acting quickly on credential hygiene and identity mapping limits how far attackers can travel down the chain that begins with this leak. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts vulnerable to the same credential-stuffing waves. Start your DoxxScan trial today to close the gaps this incident created.