On November 29, 2024, Canadian logistics company Delmar International Inc. appeared on the leak site operated by the Rhysida ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The company, originally founded in 1965 as a family-run customs broker in Montreal, has grown into a global supply-chain operator, meaning the exposed data likely touches employees, contractors, customers, and business partners worldwide. If your employer, shipping provider, or any company you deal with uses Delmar, your information may now sit in an attacker-controlled archive.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Delmar International
Get alerted the next time Delmar International files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Delmar International’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details from the Listing
The Rhysida leak site entry for Delmar International does not quantify how many records were taken or list specific data types beyond stating that internal files were exfiltrated. It provides no sample documents and sets no public ransom deadline in the visible posting. The disclosure indicates the incident stems from a ransomware deployment that included data theft prior to encryption. Because the primary source is the actor’s own leak page, independent verification of exact contents remains limited, yet the public presence of the listing itself confirms that negotiations between the company and the group have either failed or stalled.
Why This Matters for You and Your Family
When a logistics firm loses control of internal files, the ripple effects reach ordinary people. Employee records, vendor contracts, customer shipment details, and correspondence frequently contain names, addresses, dates of birth, government identifiers, and financial account information. Even if the leak site does not publish every file, threat actors routinely sell or trade smaller slices on underground forums. For families, this can mean sudden spikes in targeted phishing, imposter scams pretending to be Delmar customer service, or fraudulent customs declarations filed in your name. The breach also raises the odds that work-related logins used at Delmar appear in future credential-stuffing lists, exposing personal accounts that reuse the same passwords.
Doxxing and Identity-Chain Risks
Logistics and customs data create unusually rich identity graphs. A single leaked invoice might link your home address, phone number, email, and employer. Attackers chain these fragments with data from earlier breaches to build persistent profiles used for doxxing, SIM-swapping, or extortion. Children’s names sometimes appear on family travel or dependent health forms included in corporate files; once connected to parental emails, gaming accounts become easy secondary targets. Credential leaks like this one cascade into account takeovers across unrelated services. Without mapping these connections, a single exposure can quietly multiply into long-term identity compromise.