LIBERTY PULTRUSIONS Listed by karakurt Ransomware Group

On December 20, 2022, the Canadian construction materials and civil engineering company Liberty Pultrusions, part of Le Groupe Bau-Val inc., was listed on the leak site of the karakurt ransomware group. The listing claims that 87 GB of the company’s internal files were exfiltrated during a ransomware attack. The disclosure does not specify the exact number of individuals whose data may have been exposed, nor does it detail the precise categories of records taken.

Details in the Leak-Site Listing

The karakurt leak site states that Liberty Pultrusions, formerly known as BauVal and founded in 1954 near Montreal, had its corporate data stolen. The posting explicitly claims 87 GB of corporate data and offers to show samples. It does not quantify how many customer, employee, vendor, or partner records were included. The listing does not provide a ransom demand figure or a public deadline, which is consistent with karakurt’s typical approach of private negotiation followed by selective data publication when payments are not made. Public reporting on the group indicates that such postings serve both as proof of compromise and as pressure to force payment.

Why This Matters for You and Your Family

When a regional construction and materials company like Liberty Pultrusions suffers a breach, the people most directly affected are often local employees, recent job applicants, suppliers, and customers whose personal or financial details may sit in the stolen files. Even though the exact data types remain unknown, internal corporate files frequently contain employee tax documents, payroll records, insurance forms, vendor contracts that list home addresses, and customer invoices. Any of these can be used to commit identity theft, file fraudulent tax returns, or open accounts in your name. If you or a family member worked for or did business with Bau-Val, Le Groupe Bau-Val inc., or Liberty Pultrusions in the past two decades, your information could be among the 87 GB now in attackers’ hands.

The Doxxing and Identity-Chain Risk

Stolen internal files rarely stop at one company. A single spreadsheet linking an employee’s work email, personal phone number, home address, and spouse’s name can become the starting point for an identity chain that reaches your children’s school records, online gaming accounts, and social-media profiles. Attackers routinely combine corporate leaks with later consumer breaches to build detailed dossiers. Credential leaks from this incident could allow account takeovers on personal email, banking, or gaming platforms. DoxxScan by GalaxyWarden is built for exactly these cascading risks. Its continuous monitoring across 13.1B+ breach records and 100+ platforms, combined with AI-powered identity-chain mapping and hands-on remediation by specialists, helps connect the dots between a corporate breach like this one and the personal accounts that may be next. The service’s household coverage also extends protection to dependents and children’s gaming accounts that often chain back to the same family address and credentials.

Karakurt’s Publicly Known Track Record

Public reporting attributes karakurt’s emergence to late 2021. The group is known for targeting mid-sized organizations across North America and Europe, with a focus on manufacturing, engineering, and construction firms. Notable prior victims have included other industrial and professional-services companies whose internal documents were later posted after failed ransom negotiations. Karakurt’s typical playbook involves initial access through phishing or exploited remote-desktop services, followed by exfiltration of sensitive files before any encryption occurs. The group then demands payment for non-disclosure, publishing only a fraction of the data on its leak site when victims refuse. This dual extortion style—threatening both data exposure and potential ransomware deployment—has made karakurt a persistent actor in the underground economy.

What to do

• Run a DoxxScan to map every link between your work email from Liberty Pultrusions or Bau-Val, personal accounts, phone numbers, and real-world identity, with cleanup handled by the service.
• Rotate any password you ever used at Liberty Pultrusions or its parent companies anywhere it has been reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring so the next breach that touches your household is caught and acted on within hours instead of months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that could be compromised through the same leaked credentials or address data.
• Let the remediation specialists manage takedown requests for any exposed personal documents that surface on data-broker or underground sites.

The Liberty Pultrusions listing is a reminder that even regional industrial firms hold information that can endanger entire families once it leaves controlled systems. Acting quickly on credential hygiene and identity mapping limits how far attackers can travel down the chain. Start your DoxxScan trial today to gain both immediate visibility into your exposure and ongoing protection that follows you and your family across new breaches.