Lockers IT Listed by nova Ransomware Group

On June 21, 2026, the nova Ransomware Group added Lockers IT, a small Bangladeshi software development company, to its public leak site, confirming that it had exfiltrated internal files from the firm’s servers before encrypting them.

Confirmed Facts from Reporting

Lockers IT, founded in 2013 and based in Chandpur, employs between 11 and 50 people and builds custom software. Public reporting indicates the attackers gained access to multiple internal systems, including development servers and client-facing applications such as allcashdealer.com, dealmart24.com, lockersit.com, and several subdomains like dev1.lockersit.com, erp.lockersit.com, sales.lockersit.com, and cloud.debnathashu.com. The nova group posted a directory tree and sample files as proof of the theft. The number of individuals whose information appears in the stolen files remains unknown.

Available reporting describes the incident as a classic ransomware double-extortion case: the company’s data was taken, systems were locked with encryption, and the threat actors are now using the leak site to pressure Lockers IT for payment.

Why This Matters for You and Your Family

Even when a breach hits a small overseas IT firm, ordinary people can be affected. If you or any member of your family ever used one of Lockers IT’s websites, apps, or services, your email address, username, password hash, or other personal details may now sit in a ransomware leak repository. Once that data leaves the original company it can be sold, traded, or used to target you directly. Credential leaks like this one frequently cascade into account takeovers on unrelated services where the same password was reused.

Your children’s gaming accounts are especially vulnerable. Many young users rely on the same email address or simple passwords across both school-related apps and online games. A single exposed record can give attackers the starting point they need to map an entire household.

The Doxxing and Identity-Chain Implications

Ransomware operators rarely stop at posting generic files. They often comb through stolen documents for spreadsheets containing customer lists, employee contact information, or partner contracts. These records can link an email address to a real name, home address, or phone number. Attackers then chain that information with data from other breaches to build detailed profiles. The result is doxxing: your username on one site suddenly reveals your full identity on another. Public reporting shows this pattern repeats across hundreds of ransomware incidents each year.

When children’s gaming accounts are tied to the same family email or address, the chain becomes even longer. A compromised Roblox or Fortnite login can expose chat logs, payment methods, and linked social-media profiles, giving attackers more material to harass or impersonate family members.

Nova Ransomware Group’s Track Record

Public reporting attributes the nova Ransomware Group with emerging in late 2024. The group has claimed responsibility for attacks on dozens of organizations worldwide, typically targeting small-to-medium businesses in manufacturing, retail, and technology services. Its standard playbook involves initial access through phishing or unpatched remote desktop services, followed by rapid exfiltration of sensitive files and deployment of encryption software. Nova then demands payment to prevent publication of the stolen data, often releasing small samples on its leak site to demonstrate seriousness. The group’s tactics have remained consistent: short deadlines, public shaming, and opportunistic selection of victims whose data might embarrass or pressure them into paying.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with no-subscription cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 15.4B+ breach records and 100+ platforms so the next exposure is caught in hours rather than months.
• Rotate any password you used on Lockers IT or its related domains anywhere else it appears, and switch on two-factor authentication through an authenticator app instead of SMS.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same contact details.
• Let remediation specialists manage takedown requests across data brokers and leak sites so you do not have to chase them yourself.

The incident shows that data from even small, unfamiliar companies can reach criminals quickly. Taking concrete steps now limits how far any single breach can spread. DoxxScan by GalaxyWarden delivers continuous monitoring across more than 15.4 billion breach records and over 100 platforms, uses AI-powered identity-chain mapping to connect scattered online handles to real identities, and provides hands-on remediation by specialists who handle the paperwork and negotiations for you. Its household coverage also protects children’s gaming accounts that frequently become the next link in a doxxing chain.