New Century Advisors, LLC Listed by 8base Ransomware Group

On July 07, 2023, investment management firm New Century Advisors, LLC appeared on the leak site operated by the 8base ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the company, which has provided customized investment strategies to public funds, corporations, endowments, foundations, healthcare systems, and insurance companies since 2002. Anyone whose personal or financial records were stored with the firm may now face heightened risk of identity theft and targeted fraud.

Details from the 8base Listing

The primary disclosure on the 8base leak site indicates that New Century Advisors suffered a ransomware incident in which attackers successfully exfiltrated internal files. The listing does not quantify the number of affected records, specify the exact data types beyond “internal files,” or disclose the ransom demand or payment deadline. Publicly available information about the firm confirms it is entirely employee-owned and maintains close relationships with institutional clients, meaning any exposed files could contain sensitive client data, contracts, or personal information of individuals associated with those entities. The leak site entry serves as the first and primary public notification of the breach.

Why This Matters for You and Your Family

When an investment advisor like New Century Advisors loses control of internal files, the consequences reach far beyond the company. Personal details such as names, addresses, Social Security numbers, bank account information, or investment records can be used to file fraudulent tax returns, open accounts in your name, or impersonate you to family members and employers. Even if you are not a direct client, spouses, dependents, or adult children whose information appears in joint accounts or beneficiary forms are also placed at risk. The breach underscores how data entrusted to financial professionals can suddenly surface in criminal marketplaces, turning a corporate incident into a household threat.

Credential reuse across personal and professional accounts makes the exposure especially dangerous. A single leaked email-password pair from an internal file can unlock everything from email to retirement portals to children’s online gaming profiles.

Doxxing and Identity-Chain Risks

Exfiltrated internal files often contain spreadsheets, client lists, or contact databases that link names, emails, phone numbers, and physical addresses. Attackers and data brokers can chain this information with other leaks to build detailed profiles. Once an identity chain is established, doxxing escalates quickly: harassers locate family members, scammers craft convincing spear-phishing emails, and identity thieves target high-value accounts. Gaming accounts belonging to children are particularly vulnerable because usernames and passwords reused from family financial documents can lead to account takeovers that expose chat logs, location data, and additional personal identifiers. The 8base listing does not detail what was taken, so the full scope of these chained risks remains unknown and requires active investigation.

8base Ransomware Group Track Record

Public reporting attributes the emergence of 8base to mid-2022. The group has since listed hundreds of victims, focusing primarily on small-to-medium businesses rather than pure mega-corporations. Typical playbook involves initial access through compromised remote desktop protocol credentials or vulnerable web applications, followed by deployment of ransomware and exfiltration of data before encryption. 8base then uses a double-extortion model: threatening both data publication on their leak site and potential decryption refusal. The group’s leak site is hosted on the dark web and updated with new victims on a near-weekly basis. While not considered the most technically sophisticated ransomware operation, 8base maintains steady pressure through consistent victim shaming and data publication when demands are unmet.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by Warden specialists.
• Rotate any password used at New Century Advisors or associated financial portals anywhere it is reused, and immediately enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the entire household — DoxxScan family coverage includes dependents and children’s gaming accounts that often chain back to the same breached credentials and address details.
• Let remediation specialists manage takedown requests for any exposed personal records appearing on data broker sites or underground forums.

The New Century Advisors breach is a reminder that institutional data leaks create immediate, personal exposure for ordinary families whose information travels through advisors, vendors, and partners. Taking deliberate steps now limits what criminals can build from this incident. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that explicitly protects children’s gaming accounts from cascading takeovers.