Mount Vernon Mills Listed by avoslocker Ransomware Group

On December 26, 2022, Mount Vernon Mills appeared on the leak site operated by the AvosLocker ransomware group. The South Carolina-based textiles manufacturer, founded in 1947, had its internal files exfiltrated during a ransomware attack. The listing does not specify how many individuals were affected or exactly which records were taken, but anyone whose personal or employment data passed through the company now faces heightened risk of exposure.

Details from the Leak-Site Listing

The primary disclosure on the AvosLocker portal, archived via ransomware.live, states that Mount Vernon Mills suffered a ransomware incident and that attackers successfully exfiltrated internal files. No victim count, no sample documents, and no ransom demand figure are provided in the public listing. The notification simply confirms that data was allegedly stolen and warns that it will be published if the company does not meet the group’s demands. This matches the standard format AvosLocker uses across its victims: a brief company name, the word “ransomware,” and a link to the encrypted or redacted proof-of-exfiltration package.

Why This Matters for You and Your Family

When a manufacturer like Mount Vernon Mills loses control of internal files, the information often includes employee records, vendor contracts, customer details, and HR documents. If your name, address, Social Security number, or payroll data ever touched the company—as an employee, contractor, supplier, or even as a dependent on a family member’s benefits—the breach puts you directly in the path of identity thieves. Internal files exfiltrated can contain exactly the combination of details needed to open accounts, file fraudulent taxes, or impersonate you in government systems. Families are affected because one person’s work records frequently list spouses, children, and emergency contacts.

The Doxxing and Identity-Chain Risk

Stolen internal files rarely stay isolated. Attackers and subsequent buyers link an exposed work email or phone number to gaming accounts, social-media handles, and personal breaches that have already occurred elsewhere. This creates an identity chain that can lead to doxxing, SIM-swapping, or targeted extortion. Credential leaks of this type frequently cascade into account takeovers on Steam, Roblox, or other platforms children use. A single reused password from an old employee portal can hand over a family member’s entire digital life. The longer the data sits on a ransomware leak site, the more likely it is to be packaged and sold on multiple underground forums.

AvosLocker’s Known Track Record

Public reporting attributes the first AvosLocker activity to mid-2021. The group has targeted organizations across manufacturing, healthcare, education, and local government. Notable prior victims include a string of U.S. manufacturing and logistics firms where operational data and employee information were allegedly exfiltrated. Their typical playbook begins with phishing or exploited remote-desktop credentials, followed by rapid lateral movement, data theft, and then dual extortion: demanding payment both to decrypt systems and to prevent publication of the stolen files. AvosLocker has repeatedly shown willingness to publish sensitive internal documents when victims refuse to pay, and the group maintains an active leak site that is updated within days of unmet deadlines.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you ever used at Mount Vernon Mills or related vendor portals and replace it with a unique passphrase; enable 2FA through an authenticator app everywhere that option exists.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same address or parent email.
• Let remediation specialists handle takedown requests for any exposed personal documents appearing on data-broker or extortion sites.

The incident is a reminder that ransomware groups continue to treat employee and vendor data as currency long after the initial attack. One timely scan and a few concrete steps can break the chain before thieves turn stolen files into lasting harm. DoxxScan’s continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage—including children’s gaming accounts—give families the practical defense needed in an environment where breaches like Mount Vernon Mills keep surfacing.