Doman Listed by interlock Ransomware Group

On March 11, 2025, Canadian building materials supplier Doman Building Materials Group appeared on the leak site of the interlock ransomware group. The company, which supplies lumber and specialty wood products to retailers across North America from its headquarters in Vancouver, British Columbia, is claimed to have had internal files exfiltrated during a ransomware attack.

What's Publicly Reported from Reporting

Public reporting indicates that interlock posted Doman to its leak page, claiming to have stolen internal company files. The exact number of records exposed remains unknown, and the specific types of data have not been detailed in available reporting. Doman has not yet issued a public statement confirming the breach or describing what was taken. The listing follows the group’s typical pattern of publishing victim data after an initial encryption attempt and unsuccessful ransom negotiation.

Why This Matters for You and Your Family

When a company like Doman suffers a breach, the information it holds about suppliers, customers, employees, and business partners can end up in the hands of criminals. Internal files often contain names, addresses, phone numbers, email accounts, and sometimes payment details. Once that data leaves the company’s control, it can be sold, traded, or used to target you directly. For ordinary families who have shopped at stores that carry Doman products or whose employers do business with the company, the exposure creates a quiet but real risk that personal details could surface on dark-web markets months or even years later.

The Doxxing and Identity-Chain Implications

Ransomware leaks rarely stop at one company. Criminals frequently use stolen internal documents to map relationships between people, email addresses, phone numbers, and online handles. A single leaked supplier spreadsheet can link your home address to your child’s school email or a family member’s gaming username. These connections allow attackers to build detailed profiles that lead to account takeovers, spear-phishing, or full doxxing. Credential leaks of this nature often cascade into gaming accounts belonging to you or your children, where stolen passwords grant entry to communities that reveal even more personal information.

Interlock Ransomware Group Track Record

Public reporting attributes interlock with emerging in late 2023. The group has targeted organizations across manufacturing, logistics, and retail sectors. Notable prior victims include mid-sized industrial and distribution companies whose internal documents were published after ransom demands went unpaid. Their standard playbook involves gaining initial access through phishing or exploited remote desktop services, exfiltrating data before deploying encryption, then pressuring victims with a short deadline before leaking samples on their onion site. The group typically demands payment in cryptocurrency and follows through with partial or full data publication when negotiations fail.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what chains back to this incident.
• Rotate any password you used at Doman or with its retail partners and enable 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours instead of months.
• Cover the household with DoxxScan family protection that includes dependents and children’s gaming accounts where credential leaks commonly lead to takeovers.
• Let remediation specialists handle data-broker takedown requests and follow-up monitoring while you focus on securing your own accounts.

The speed with which ransomware groups move stolen data means ordinary families must act quickly rather than wait for official notices. Starting with concrete steps today limits how far this claimed breach can reach into your life. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects scattered online handles to real identities, and hands-on remediation by specialists who manage takedowns for you. Its household coverage also protects children’s gaming accounts that often become the next link in doxxing chains after corporate leaks like Doman’s.