Dancenter Listed by ALPHV Ransomware Group

On March 09, 2023, Danish holiday-home booking company DanCenter A/S appeared on the leak site of the Alphv ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The company, one of the largest intermediaries of holiday homes in the Danish market, has not publicly quantified how many customers or employees may be affected, nor has it detailed the exact records involved.

Primary Disclosure Details

The Alphv leak site entry states that DanCenter suffered a ransomware incident in which attackers successfully exfiltrated internal files before encryption. No specific volume of records is listed, and the disclosure does not name the precise data types exposed. The entry remains active on the onion site, indicating that negotiations between the company and the threat actors have not resolved the matter to the group’s satisfaction. Public reporting on Alphv consistently describes this pattern: initial access followed by data theft, encryption, and dual extortion.

Why This Matters for You and Your Family

If you have ever booked a holiday home through DanCenter, your personal information may sit inside the stolen files. Booking records frequently contain full names, home addresses, phone numbers, email addresses, dates of travel, and payment details. When such data leaves a company’s control, it becomes permanent fodder for identity thieves, phishing campaigns, and long-term fraud. Your family members listed on the same booking are equally exposed, even if their names never appeared in a headline.

Doxxing and Identity-Chain Risks

Stolen booking data creates immediate links between real-world identities and online handles. An email address tied to a Danish holiday rental can be cross-referenced with social-media profiles, children’s gaming accounts, and family photos posted during past vacations. These connections allow attackers to build detailed dossiers that lead to doxxing, targeted scams, or account takeovers. Credential leaks like this one cascade into gaming platforms where children often reuse passwords, turning a corporate breach into a household compromise that can follow your family for years.

Alphv’s Known Track Record

Public reporting attributes the emergence of Alphv, also known as BlackCat, to mid-2022. The group has since targeted organizations across North America, Europe, and Australia, including healthcare providers, manufacturers, and travel companies. Their typical playbook begins with phishing or exploited remote-access tools, followed by rapid lateral movement, data exfiltration, and deployment of custom ransomware. Alphv routinely publishes samples of stolen data on their leak site and pressures victims with deadlines, threatening to release the full archive if payment is not made. The DanCenter listing fits this established pattern exactly.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you used on the DanCenter website or app anywhere else it is reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure that touches you or your family is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same breached address or email.
• Let remediation specialists handle takedown requests across data brokers and extortion sites on your behalf while you focus on securing daily life.

The incident underscores that even seemingly routine booking data can fuel sophisticated identity chains long after the initial breach fades from view. Starting a DoxxScan trial gives you continuous monitoring, AI-powered identity-chain mapping, and hands-on help from specialists who understand both corporate leaks and the gaming accounts your children use. Source: Alphv leak site listing for DanCenter (via ransomware.live).