Dolmor Salon Listed by medusa Ransomware Group

On January 23, 2025, Dolmor Salon appeared on the leak site of the Medusa ransomware group. The Canadian hairdressing business, founded in 1952 and based at 42 Kent St N in Simcoe, Ontario, had internal files stolen during a ransomware attack. While the exact number of people affected remains unknown, any customer, employee, or supplier whose personal information passed through the salon’s systems may now be exposed.

What's Publicly Reported from Reporting

Public reporting indicates that Medusa actors exfiltrated internal files from Dolmor Salon before encrypting systems or demanding payment. The company employs 11 people and provides hairdressing and styling services. Available details list the corporate address as 42 Kent St N, Simcoe, Ontario, N3Y 3S2, Canada. The incident was publicly listed on the Medusa leak site on January 23, 2025, according to ransomware tracking site ransomware.live.

Why This Matters for You and Your Family

When a local business like a salon suffers a breach, the information stolen often includes names, addresses, phone numbers, email addresses, and payment details of everyday customers. If you or your family members have visited Dolmor Salon in the past seven decades, some of your contact information could be sitting in those leaked files. Internal files frequently contain appointment records, consent forms, supplier invoices, and employee payroll data — all of which can be used to build a profile on you.

Once such data leaves a small business’s control, it rarely stays contained. It can appear on dark-web markets within weeks, giving identity thieves, phishing gangs, and doxxers fresh material to work with.

The Doxxing and Identity-Chain Implications

A single salon record rarely stops at a name and phone number. Attackers combine it with other leaks to create an identity chain: your email address links to a social-media handle, the handle links to your children’s gaming usernames, and the address ties everything to your physical home. This chain makes targeted harassment, account takeovers, and even physical threats far easier. Credential leaks like this one routinely cascade into gaming account takeovers because the same password or security question used for a salon booking is often reused on Steam, Roblox, or Discord.

Medusa Ransomware Group’s Track Record

Public reporting attributes the attack to the Medusa ransomware group. The group emerged in 2021 and has since targeted organizations across North America and Europe. Notable prior victims include municipalities, manufacturers, and professional service firms. Their typical playbook involves initial access through phishing or exploited remote desktop protocols, followed by data exfiltration, encryption of victim systems, and extortion via dual pressures: threats to publish stolen files and demands for ransom payment. Medusa maintains an active leak site where it posts samples of stolen data when victims refuse to pay.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate any password you ever used when booking at Dolmor Salon or similar local businesses, then enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists perform hands-on takedown requests across data brokers and leak sites on your behalf.

The incident shows how quickly a neighborhood business breach can ripple into long-term privacy risks for ordinary families. Taking deliberate steps now limits how far attackers can travel down your identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts. Starting protective measures promptly gives you the best chance of staying ahead of the next wave of misuse.