EVAS Group Listed by blacklock Ransomware Group

On January 10, 2025, the Canadian air charter company EVAS Air Charters appeared on the leak site of the blacklock ransomware group. Internal files were allegedly exfiltrated from the firm, which employs 294 people and specializes in customized business and corporate flights across Canada.

What's Publicly Reported from Reporting

Public reporting indicates that blacklock posted data stolen from EVAS Air Charters after the company apparently did not meet the group's demands. The exposed material consists of internal files taken during a ransomware incident. No confirmed count of affected individuals has been released, and the precise volume or sensitivity of the documents remains unclear from available reporting. EVAS Air Charters operates with annual revenue of approximately $12.5 million and focuses on tailored aircraft services for business travelers.

Why This Matters for You and Your Family

When a company that handles travel arrangements, passenger details, payment information, and employee records suffers a breach, the consequences can reach ordinary customers and their families. If you or someone in your household has flown with EVAS Air Charters, your name, contact details, or payment records may now sit in an attacker-controlled archive. That information can be sold, traded, or combined with other leaks to build a fuller picture of your life. Children who travel with parents on these flights can also have their names exposed, creating long-term risks that grow quietly over time.

The Doxxing and Identity-Chain Implications

A single breach rarely stays isolated. Credential leaks and personal details from one incident frequently cascade into account takeovers elsewhere. Attackers map connections between email addresses, phone numbers, usernames, and real-world identities. Once those links are established, gaming accounts, family email, social media, and financial services can fall in sequence. This is exactly why credential leaks like the EVAS incident matter for gaming accounts belonging to you or your children. A compromised handle used in a family flight booking can become the entry point for doxxing chains that expose home addresses, children's names, and daily routines.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, followed by cleanup of exposed records.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours rather than months.
• Rotate any password you used on evasair.com anywhere else it is reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family coverage that extends to dependents and children's gaming accounts that chain back to the same address or identity.
• Let remediation specialists handle takedown requests across data brokers and leak sites on your behalf while you focus on securing daily life.

The incident shows how quickly business travel data can become fuel for larger identity attacks. Taking concrete steps now limits how far this claimed breach can follow you or your family. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects online handles to real identities, and hands-on remediation by specialists who manage takedowns for you. Its household coverage includes children's gaming accounts that often become the next link in doxxing chains after credential leaks like this one.