King International LLC Listed by Gammax Ransomware Group

On August 06, 2026, the ransomware group Gammax added King International LLC (also known as DL International) to its public leak site. The company, a wholesaler and distributor of fresh fruits and vegetables supplying retail and foodservice operations, has not publicly confirmed the claim as of this writing. According to the leak-site listing, Gammax claims it exfiltrated internal files during a ransomware attack on the company.

Leak-Site Claim Details

The primary disclosure comes exclusively from the Gammax ransomware leak site, hosted on an onion domain and mirrored by trackers such as ransomware.live. The listing states that internal files were exfiltrated but does not specify the volume or exact types of data taken. It also does not disclose the number of records affected or any ransom demand. Because the claim originates solely from the threat actor’s own site and King International LLC has issued no official breach notification, regulator filing, or SEC disclosure, this remains an unconfirmed claim. The organisation has not, as of this writing, acknowledged that a breach occurred or that any data was allegedly stolen.

Why This Matters for You and Your Family

When a supplier in the food distribution chain is targeted, the ripple effects can reach ordinary consumers. King International LLC handles ongoing procurement for retail grocers and restaurants; any internal files that contain vendor contracts, customer lists, delivery schedules, or invoicing data could indirectly expose personal or business contact information tied to your local stores or favorite produce brands. Even without confirmed consumer records, the precedent is clear: ransomware operators increasingly target mid-sized logistics and wholesale businesses precisely because their networks connect to thousands of downstream partners and customers. If your name, address, phone number, or payment details appear in any of those internal files, the exposure puts you and your household at risk.

Doxxing and Identity-Chain Risks

Internal files from a wholesaler often contain more than just business documents. Employee directories, vendor spreadsheets, customer account records, and even scanned driver’s licenses or tax forms can surface. These documents frequently link names to home addresses, personal emails, phone numbers, and sometimes dates of birth. Once published on a leak site, the information becomes searchable fodder for identity thieves, phishing campaigns, and doxxing operations. Credential reuse across personal and business accounts turns a single leaked file into a gateway for account takeovers. Gaming accounts belonging to you or your children are particularly vulnerable because usernames, emails, and passwords exposed in corporate leaks are routinely tested against Steam, Roblox, Epic, and Discord. A compromised child’s gaming profile can quickly chain back to a shared family address and phone number, accelerating full identity exposure.

Gammax Ransomware Group Track Record

Public reporting attributes Gammax as a relatively new ransomware-as-a-service operation that emerged in late 2025. The group follows a double-extortion model: it encrypts victim systems and simultaneously exfiltrates data before threatening to publish it unless a ransom is paid. Prior victims listed on its leak site have included manufacturing, logistics, and food-sector companies. Typical initial access involves phishing, compromised remote desktop credentials, or exploited vulnerabilities in public-facing applications. After gaining entry, Gammax focuses on locating and exfiltrating documents rather than immediately detonating ransomware, giving victims a short window before data appears on the leak site. The group’s playbook emphasizes speed of publication once negotiations fail, often setting short deadlines to pressure payment.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can begin cleanup of exposed records.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information appears it is caught within hours rather than months.
• Rotate any password you used at King International LLC or any related vendor portal anywhere it is reused, and switch to 2FA using an authenticator app instead of SMS.
• Let remediation specialists handle takedown requests across data brokers and leak-related sites on your behalf while you focus on securing accounts.
• Note that a leaked home address from supplier files can expose everyone living at that location; your own timely removal requests are what ultimately reduce that exposure in public databases.

The speed with which ransomware groups move from initial access to public shaming continues to shrink. Treating every supplier breach claim as a potential personal exposure is now basic digital hygiene. Running DoxxScan gives you both immediate visibility into how this incident may already connect to your identity chain and ongoing protection against the next one. Its AI-powered mapping and hands-on remediation specialists remain one of the few practical tools available to ordinary families facing this rising tide of corporate data leaks.

Source: Gammax Leak Site Listing for King International LLC (via ransomware.live)