dorimedia Listed by malekteam Ransomware Group

On December 24, 2023, Israeli media company Dori Media Group appeared on the leak site of the ransomware group Malek Team. The listing states that the attackers exfiltrated and destroyed more than 100 TB of internal files during a ransomware incident. The company, which produces and distributes television and digital content across Israel, Switzerland, Argentina, Spain, and Singapore, has not yet published a formal breach notification detailing the exact records involved.

Details from the Leak Site

The Malek Team posting claims the intrusion compromised Dori Media Group’s internal systems and that the attackers wiped more than 100 TB of data. It lists the company’s full legal name as Dori Media Group LTD and notes its operations since 1998. The group promises to release the stolen information soon but does not specify what categories of files were taken or whether customer, employee, or partner data were included. As is common with these listings, the exact number of people whose information may have been exposed remains unknown.

The disclosure indicates the data was obtained through a ransomware attack, a tactic that typically combines encryption of systems with theft of sensitive files for double-extortion pressure.

Why This Matters for You and Your Family

When a media production company is breached, the information at risk often includes contracts, personal details of actors, writers, crew members, business partners, and sometimes viewer or subscriber records. If your name, email, address, phone number, or financial information appears in any of those files, it can surface in unexpected places. Even without an exact victim count, the scale of 100 TB suggests a substantial volume of documents that could affect employees, contractors, and their families.

Once data leaves a company’s control, it can be traded or sold on underground forums for years. This creates long-term exposure for anyone whose information was stored in the compromised systems.

Doxxing and Identity-Chain Risks

Media industry files frequently contain not just names and contact details but also dates of birth, national ID numbers, banking information for payments, and private correspondence. Attackers and subsequent buyers can combine these fragments with other leaked credentials to build detailed profiles. A single email address taken from this claimed breach can be tested across streaming services, banking portals, and social media, quickly turning a corporate incident into personal account takeovers.

Credential leaks of this nature also cascade into gaming accounts. Children’s usernames, emails, or parent-linked phone numbers reused from family media subscriptions can lead to hijacked Roblox, Fortnite, or Discord profiles. These compromises often become entry points for further doxxing because gaming platforms frequently expose real names, addresses, or payment methods once initial access is gained.

Malek Team’s Known Activity

Public reporting attributes Malek Team with emerging in late 2022 and focusing primarily on double-extortion ransomware. The group typically gains initial access through phishing or exploited remote desktop services, exfiltrates documents before encrypting systems, and then posts samples on its leak site when victims do not pay. Notable prior targets have included companies in manufacturing, healthcare, and technology sectors, though the group maintains a relatively low public profile compared with larger ransomware operations. Their playbook relies on sustained pressure through data leaks rather than widespread media campaigns, often giving victims short deadlines before releasing additional batches of stolen files.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including any connections that may stem from media or entertainment industry records.
• Rotate any password you used at Dori Media Group or related services anywhere it has been reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same addresses or parent emails leaked in incidents like this.
• Let remediation specialists handle takedown requests across data brokers and underground sites on your behalf while you focus on securing your own accounts.

The speed with which ransomware groups move stolen data means protective steps must begin immediately rather than waiting for confirmation that your specific information appeared. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects online handles to real-world identities, and hands-on remediation by specialists who manage takedowns for you and your entire household, including children’s gaming accounts that frequently become targets once corporate credentials surface. Staying ahead of these cascading risks is no longer optional.