Kick Listed by mogilevich Ransomware Group

Kick, the video livestreaming platform, was listed on the mogilevich ransomware group’s leak site on March 01, 2024. The group claims it successfully breached Kick’s systems and exfiltrated 75GB of internal files containing information on streamers, users, the affiliate program, and logs. The listing states the data is also for sale and sets a public extortion deadline of March 10, 2024. Anyone whose username, email, payment details, or streaming logs touched Kick may now face heightened risk of identity theft or targeted harassment.

Reported Details from the Leak Site

The mogilevich leak site entry, archived via ransomware.live, states that the actors “successfully breached kick’s system.” It lists the compromised material as streamers/users, affiliate program and logs data and specifies an exfiltrated volume of 75GB. The disclosure does not quantify the exact number of affected individuals, nor does it itemize every file type beyond the broad categories above. It explicitly notes that the data “is also for sale” and gives interested parties until 3.10.24 to contact the group. These statements come directly from the primary listing; no independent verification of the data sample has been published by Kick at the time of writing.

Why This Matters for You and Your Family

If you or anyone in your household has streamed, chatted, subscribed, or used the affiliate program on Kick, your information may be sitting inside the 75 GB archive now circulating among criminals. Even basic details such as usernames, linked emails, or payment logs can be combined with other breaches to build a profile that leads to account takeovers, phishing, or swatting attempts. Children or teens who use the platform under a family account are equally exposed, because gaming and livestreaming credentials frequently reuse the same passwords or recovery emails that protect school accounts and family devices.

The Doxxing and Identity-Chain Risk

Ransomware groups rarely stop at simple credential lists. Once internal logs and affiliate records leave a company’s control, threat actors and opportunistic buyers can map usernames to real-world identities, wallet addresses, streaming schedules, and chat histories. That information fuels doxxing chains: a leaked email leads to a password reset on another service, which yields a phone number, which appears in a separate breach, and the cycle accelerates. Public reporting on similar incidents shows that livestreaming platforms are high-value targets precisely because their users often maintain persistent online personas that cross over into gaming accounts, Discord servers, and social media. A single 75 GB package can therefore become the starting point for sustained harassment or financial fraud against you or your children.

Mogilevich Group’s Known Track Record

Public reporting attributes the mogilevich ransomware operation to a relatively new entrant that began advertising victims in late 2023. The group takes its name from a notorious Russian organized-crime figure and has focused primarily on mid-sized technology and consumer-facing platforms. Its publicly documented playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of internal file shares and databases. After encryption, the actors publish a sample or full archive on their leak site and simultaneously offer the data for direct sale, creating dual pressure on the victim company and anyone whose records are inside the package. The March 1 listing of Kick follows this pattern exactly.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate any password you ever used on Kick wherever it has been reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household — DoxxScan family protection extends to dependents and children’s gaming or livestreaming accounts that chain back to the same address or recovery details.
• Let remediation specialists manage takedown requests for any exposed personal records appearing on data-broker or extortion sites.

The incident underscores that even platforms built for entertainment can become gateways for long-term identity compromise once internal logs escape. One timely scan and a few password changes can break the chain before criminals turn today’s leak into tomorrow’s harassment campaign. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.