Inventory Management and Counting Solutions Listed by blacklock Ransomware Group

On January 4, 2025, the blacklock Ransomware Group listed internal files allegedly stolen from Datascan, a Texas-based company that supplies inventory management and self-scan solutions to retailers across the United States.

What Public Reporting Shows

Datascan, founded in 1970 and headquartered in Carrollton, Texas, employs 319 people and generates roughly $29.1 million in annual revenue. The company delivers on-demand inventory counting services through a Solution-as-a-Service model. Public reporting indicates the attackers exfiltrated internal files during a ransomware incident and published a sample on their leak site. The exact number of individuals whose data may have been exposed remains unknown, and the specific types of records stolen have not been fully detailed in available reporting. The listing appeared on the blacklock leak site, accessible via the onion link hosted on ransomware.live.

Why This Matters for You and Your Family

When a company like Datascan suffers a breach, the information stolen often includes details that can be linked back to customers, partners, or even employees’ families. Internal files exfiltrated in ransomware attacks frequently contain spreadsheets, customer lists, vendor contracts, or employee records that include names, addresses, phone numbers, and email accounts. Once these records reach criminal forums, they become building blocks for identity theft, phishing campaigns, and harassment that can reach your household. Even if you never shopped at a store using Datascan’s technology, any business relationship with a retailer that relied on their systems may have placed your information inside the compromised environment.

The Doxxing and Identity-Chain Implications

Stolen internal files rarely stay isolated. Attackers combine them with data from earlier breaches to construct detailed profiles. A single leaked email or phone number can be chained to your social-media handles, children’s gaming usernames, or family addresses. This linkage turns a corporate breach into personal exposure. Credential leaks of this nature frequently cascade into account takeovers on gaming platforms, where children’s accounts become entry points for further harassment or extortion. Public reporting describes how such chains allow criminals to move from one piece of information to another until they can dox an entire household.