Getly Listed by killsec Ransomware Group

On February 9, 2026, the ransomware group killsec added Getly to its leak site and began publishing what it claims are the company’s internal files. The breach affects anyone whose personal information was stored in Getly’s systems, including customers, employees, and potentially their family members whose details were shared in contracts, support tickets, or employee records.

What's Publicly Reported from Reporting

Public reporting indicates that killsec exfiltrated internal files during a ransomware attack on Getly. The group listed the victim on its leak site on February 9, 2026 and has begun releasing samples of the stolen data. No exact victim count has been confirmed, and the precise volume or sensitivity of the exposed files remains unclear from available reporting. The data is described as internal files, which in similar incidents often include customer records, employee information, contracts, and operational documents.

Why This Matters for You and Your Family

When a company that holds your name, address, email, phone number, or payment details is breached, that information does not stay contained. It can appear on dark-web markets within days. For ordinary families this means increased risk of identity theft, loan fraud in your name, or targeted scams that reference your real purchases or family details. If you or your children have accounts linked to the same email or phone used with Getly, the exposure creates a direct path for attackers to attempt account takeovers.

Credential leaks like this one frequently cascade into gaming platforms, where children’s accounts become entry points for doxxing or further extortion.

The Doxxing and Identity-Chain Implications

Once basic contact information escapes, attackers can link it to usernames, social profiles, and other breached records. This identity-chain process turns a single leak into a map of your digital life. Public reporting describes how such chains allow criminals to locate home addresses, family relationships, and even children’s online handles. In households where the same passwords or email addresses are reused across work, shopping, and gaming, one breach can expose the entire family.

Killsec’s Publicly Known Track Record

Public reporting attributes the group’s activity to a ransomware operation that emerged in late 2024. Killsec typically gains initial access through phishing or exploited remote desktop services, exfiltrates data before encrypting systems, and then posts samples on its leak site while demanding payment. The group has listed a range of organizations, often focusing on companies with limited public security profiles. Its playbook combines data theft with extortion pressure, releasing additional files if ransoms are not paid by its deadlines.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours rather than months.
• Rotate any password you used at Getly anywhere else it appears, and switch on two-factor authentication through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that chain back to the same contact details.
• Let remediation specialists handle takedown requests across data brokers and exposed profiles on your behalf.

The Getly incident is a reminder that personal data held by everyday service providers can surface without warning. Taking concrete steps now limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.