On November 17, 2024, genealogy platform Ge****og appeared on the leak site operated by the raworld ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The group claims to have stolen company data and is using the public posting to pressure the victim, although the exact volume of records and the full scope of information taken remain undisclosed.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Ge****og
Get alerted the next time Ge****og files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Ge****og’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Details from the Leak-Site Listing
The raworld leak site entry states that Ge****og was listed following a ransomware deployment. It states that internal files were successfully exfiltrated before encryption occurred. No specific customer record count is provided, nor does the posting itemize the precise data types beyond the general description of internal files. The disclosure does not include samples of the stolen material, and the deadline for any ransom payment—if one was issued—is not publicly detailed on the page. Public views of the onion-linked post, archived via ransomware.live, serve as the primary record of this incident.
Why This Matters for You and Your Family
When a genealogy service is breached, the exposure often reaches far beyond corporate documents. Family trees, birth records, addresses, phone numbers, and email accounts tied to multiple generations can be included in internal exports. If your family has used Ge****og to research ancestry, build trees, or upload DNA results, your personal details and those of relatives may now sit in an attacker-controlled archive. Genealogy data is permanent; once leaked it cannot be recalled, and it provides attackers with rich context for identity theft, phishing, or targeted scams against you, your parents, or your children.
The Doxxing and Identity-Chain Risk
Genealogy platforms frequently link real names, former addresses, relatives’ names, and email addresses in a single record. Attackers can chain this information with credential leaks from other sites to map your full digital footprint. A single exposed email from the breach can unlock shopping accounts, social media, or even children’s gaming profiles that reuse the same password. These chains accelerate doxxing: one leak reveals an address, another reveals a phone number, and suddenly your household is exposed to harassment, swatting, or financial fraud. Credential reuse across genealogy and gaming accounts is especially dangerous because children’s profiles often inherit parental email addresses, creating a direct path from corporate breach to family gaming compromise.