NOVEXCO Listed by alphv Ransomware Group

On September 21, 2023, Canadian office-supply distributor Novexco appeared on the leak site of the Alphv ransomware group. The listing states that internal files were exfiltrated during a ransomware attack; the number of records affected and the precise data types remain undisclosed by both the threat actor and the company.

Details in the Leak-Site Listing

The Alphv leak page, still accessible via its .onion address as of the initial publication, claims successful data theft from Novexco’s network and threatens to publish the material unless payment is received. The disclosure indicates that the files were taken prior to encryption or as part of a double-extortion scheme, but supplies no sample documents, customer lists, or employee spreadsheets. Novexco has not yet issued a public breach notification detailing what, if anything, was taken beyond the generic description of “internal files.” Public reporting on Alphv’s past behavior shows the group routinely posts victim data after deadlines expire, so the absence of samples today does not guarantee they will never appear.

Why This Matters for You and Your Family

Even without exact record counts, any breach at a national distributor like Novexco creates downstream risk. Companies of this size routinely hold vendor contracts, employee payroll files, customer invoices, and partner contact lists. If your employer buys office supplies through Novexco, your workplace email, shipping address, or payment details may sit inside the stolen archive. For individual customers or employees, that exposure can quietly link your personal identity to your professional one. Internal files exfiltrated is deliberately vague language that leaves families guessing whether their home address, spouse’s name, or children’s school-related orders were included.

Doxxing and Identity-Chain Risks

Ransomware leaks rarely stop at one company. A single spreadsheet containing an employee’s work email and personal phone number can be chained with other breaches to map an entire household. Threat actors and data brokers then sell or publish these linkages, turning a corporate incident into targeted identity theft, phishing campaigns, or physical doxxing. Credential leaks from such incidents frequently cascade into account takeovers on personal email, banking portals, and especially gaming platforms used by children. Once an attacker controls a child’s Roblox or Fortnite account tied to a family address, further social-engineering attacks become trivial.

Alphv’s Publicly Known Track Record

Public reporting attributes the Alphv group, also known as BlackCat, with emerging in late 2021 after the shutdown of REvil. The gang has struck hospitals, municipalities, and retailers across North America and Europe. Their typical playbook begins with initial access gained through compromised remote-desktop credentials or phishing, followed by rapid lateral movement, data exfiltration, and deployment of custom ransomware. Alphv routinely uses double-extortion: they demand payment first to prevent encryption and a second, larger sum to stop publication. When victims refuse, the group leaks data in stages, sometimes releasing only a few gigabytes at a time to increase pressure. The Novexco listing follows this pattern exactly.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by specialists.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you used at Novexco or related vendor portals anywhere it is reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts often chained to the same residential address.
• Let remediation specialists manage takedown requests across data brokers and leak sites on your behalf while you focus on securing day-to-day accounts.

The Alphv listing of Novexco is a reminder that even seemingly routine business-to-business relationships can expose your family’s personal information without warning. Start your DoxxScan trial today; its continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage including children’s gaming accounts give you practical defense against the next wave of leaks that will inevitably follow. Source: Alphv leak site via ransomware.live