MEDIALAB Listed by payoutsking Ransomware Group

On May 15, 2025, ransomware group payoutsking added MediaLab to its leak site and began publishing what it claims are the company’s internal files. MediaLab owns popular social and entertainment platforms including Whisper, Kik, Datpiff, and Worldstar Hip Hop that together reach more than 60 million users each month. Anyone who has an account on those services, or whose email, phone number, or personal messages appear in the stolen files, is now at risk of identity theft, doxxing, or targeted scams.

What's Publicly Reported from Reporting

Public reporting indicates that payoutsking exfiltrated internal documents during a ransomware attack on MediaLab. The group posted proof packets and sample data on its dark-web leak site, a common tactic used to pressure victims. No confirmed total number of affected user records has been released, and the precise volume and sensitivity of the files remain unclear. Available reporting describes the incident as a classic ransomware double-extortion case in which data is both encrypted and stolen for later public release.

Why This Matters for You and Your Family

If you or your children use Kik, Whisper, or any of the other MediaLab properties, your messages, usernames, or contact details could be sitting in a criminal database. Stolen internal files often contain support tickets, moderation logs, email addresses, phone numbers, and sometimes partial payment records. Once that information leaks, it can be sold on underground forums and used to impersonate you, reset passwords on other sites, or launch phishing attacks against your family. The breach affects ordinary people far more than corporate executives because everyday users rarely monitor dark-web mentions of their kids’ chat apps or gaming-linked emails.

The Doxxing and Identity-Chain Implications

A single credential leak rarely stays isolated. Public reporting shows that ransomware actors and data brokers routinely combine leaked emails, usernames, and phone numbers to build detailed profiles. One exposed Kik handle can link to a Discord account, a gaming username, a school email, and ultimately a home address. This identity chain turns a minor breach into long-term harassment or financial fraud. Credential leaks like this one cascade into account takeovers and doxxing chains that can follow your family for years if left unmonitored.

Payoutsking’s Publicly Known Track Record

Public reporting attributes payoutsking with emerging in late 2024 as a ransomware-as-a-service operator. The group has claimed responsibility for attacks on mid-sized technology, healthcare, and media organizations. Its typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files and deployment of ransomware. After encryption, payoutsking demands payment and, if unmet, publishes stolen data on its leak site with countdown timers. Exact prior victim counts are difficult to verify, but industry trackers list the group among the more active new entrants in the ransomware ecosystem.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours rather than months.
• Rotate any password you used on Whisper, Kik, Datpiff, or Worldstar Hip Hop and enable two-factor authentication through an authenticator app everywhere that password was reused.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that chain back to the same addresses or emails.
• Let remediation specialists perform hands-on takedown requests across data brokers and leak sites on your behalf.

The MediaLab incident is a reminder that popular apps teenagers and adults use every day can become gateways for long-term privacy loss. Taking deliberate steps now limits how far criminals can travel down the identity chain created by this and future breaches. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to regain control of your family’s digital footprint.