nubox.com & sumasaas.com Listed by alphalocker Ransomware Group

On September 8, 2025, the ransomware group AlphaLocker added nubox.com and sumasaas.com to its leak site and published 150 GB of internal files containing contracts, projects, client records, and customer data.

Reported Details from Reporting

Public reporting indicates the data was exfiltrated during a ransomware attack on the two companies. The leak site lists the incident with a total volume of 150 GB and describes the contents as contracts, projects, clients, customers, and related internal documents. No exact number of affected individuals has been confirmed, but the nature of the files suggests personal and business contact details for customers and clients are included. The primary source remains the AlphaLocker leak site itself, as tracked by ransomware monitoring platforms such as ransomware.live.

Why This Matters for You and Your Family

When companies that handle contracts and client information are breached, your personal data can end up in the hands of criminals without your knowledge. If you or your family have done business with Nubox or Sumasaas, details such as names, addresses, phone numbers, email addresses, or project specifics may now be exposed. This increases the risk of identity theft, phishing emails tailored to your real activities, and follow-on scams that target your household. Even if you are not a direct customer, shared vendors or partners can create unexpected exposure chains that pull your information into the same dataset.

The Doxxing and Identity-Chain Risks

Leaked contracts and client files often contain enough context to link online handles, email addresses, phone numbers, and real-world identities. Criminals use these connections to build detailed profiles, then escalate from simple credential theft to full doxxing. A password found in one breach can unlock gaming accounts, email, or financial services if it has been reused. Credential leaks like this one cascade into account takeovers and doxxing chains, especially when children’s gaming accounts are tied to the same family email or address. Once the initial data appears on a leak site, copies spread quickly across underground forums, making permanent removal difficult.

AlphaLocker’s Publicly Known Track Record

Public reporting attributes AlphaLocker with emerging in recent years as a ransomware operation that combines data theft with extortion. The group’s typical playbook involves gaining initial access, exfiltrating sensitive files, and then publishing samples or full datasets on its leak site when victims do not pay. Notable prior victims have included various companies whose internal documents were posted in batches, following a pattern of listing new targets every few weeks. Exact details on earlier incidents vary across reports, but the group consistently uses public shaming and gradual data releases to pressure payment.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by specialists.
• Rotate any password you used on nubox.com or sumasaas.com anywhere else it appears, and switch to 2FA through an authenticator app instead of SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts tied to the same contact details.
• Let remediation specialists manage takedown requests for any exposed personal documents or broker listings that surface from this incident.

The incident shows how quickly business data breaches become personal threats when contracts and client files are published. Taking targeted steps now can limit the damage before criminals stitch your information into larger doxxing profiles. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to regain control over what surfaces about you and your family.