On March 1, 2024, the ransomware group Black Basta added linksunlimited.com to its public leak site, listing roughly 500 GB of stolen internal files from the Cincinnati-based incentive and fulfillment company Links Unlimited.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch linksunlimited.com
Get alerted the next time linksunlimited.com files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about linksunlimited.com’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Primary Disclosure Details
The Black Basta leak site states that the company suffered a ransomware attack in which attackers exfiltrated data before encryption. The listing explicitly names six categories of information: Company Data, Users Shared Data, Accounting, 401k, Payrolls, and Personnel Files. The disclosure does not specify the exact number of individuals whose records were taken, nor does it list individual data elements such as Social Security numbers. It simply states that a large volume of internal business and employee-related files changed hands. The sample files shown on the leak site are presented as proof that the theft occurred, a standard practice for this group.
Why This Matters for You and Your Family
If you have ever worked at Links Unlimited, received an incentive gift card through one of its programs, or had your information stored in its payroll, accounting, or 401(k) systems, your personal details may now sit on a dark-web server controlled by extortionists. Even when the leak site does not publish every record, the mere fact that 500 GB of internal files left the company creates long-term exposure. Payroll spreadsheets, personnel folders, and shared user data frequently contain home addresses, dates of birth, bank routing information, and dependent details that criminals can weaponize months or years later. For families, a single breach like this can ripple outward, placing spouses, children, and even elderly relatives at risk when attackers cross-reference the stolen files with other leaks.
Doxxing and Identity-Chain Risks
Personnel files and “Users Shared Data” often include email addresses, usernames, and internal notes that link work identities to personal accounts. Once attackers possess those connections, they can map an individual’s entire digital footprint. A corporate email from this claimed breach can be tested against gaming platforms, streaming services, and shopping accounts. When the same password appears in multiple places, one leak becomes the starting point for account takeovers that expose photos, chat logs, and location history. Children’s gaming accounts are especially vulnerable because parents frequently reuse credentials or link them to a family address that also appears in payroll records. The result is a doxxing chain that can lead to harassment, targeted phishing, or identity theft aimed at the entire household.