O***M Listed by flocker Ransomware Group

On July 10, 2024, the ransomware group Flocker publicly listed O***M on its leak site, claiming it had breached the organization’s network at O***M.com and exfiltrated 450GB of highly confidential internal files. The disclosure indicates that anyone whose personal or financial information was stored in those systems may now be at risk of identity theft, account takeover, or targeted fraud.

Reported Details from the Listing

The Flocker leak-site posting states that the group gained access to O***M’s systems and removed 450GB of internal data. The listing does not specify the exact types of records taken, the number of individuals affected, or the precise date of initial compromise. It follows the group’s standard format: an initial access claim followed by samples of allegedly stolen material and a demand for payment to prevent full publication. No official breach notification from O***M had appeared on state attorney-general portals or SEC filings at the time the listing went live.

Why This Matters for You and Your Family

When a company that holds your data suffers a ransomware attack, the consequences reach far beyond corporate embarrassment. Internal files frequently contain names, addresses, dates of birth, Social Security numbers, medical records, or payment details. If any of that information belongs to you or someone in your household, it can be sold, traded, or used to open fraudulent accounts in your name. Children’s records are especially attractive because they often remain unused and undetected for years. The breach also signals that the company’s security posture was insufficient to stop the intrusion, raising questions about how safely your information was stored in the first place.

Doxxing and Identity-Chain Risks

Ransomware operators rarely stop at encrypting files. Once data is exfiltrated, it becomes fuel for long-term extortion and doxxing campaigns. A single leaked email or phone number can be correlated with usernames on gaming platforms, social media, and shopping sites. Attackers then build an identity chain that links your real name to your children’s Roblox or Fortnite accounts, school emails, and family address. That chain makes targeted phishing, SIM-swapping, and swatting far easier. Even if the full 450GB archive is not immediately published, subsets of the data are often circulated in underground markets where other criminals can exploit them for years.

Flocker’s Known Track Record

Public reporting attributes Flocker’s first notable campaigns to late 2023. The group has since hit dozens of organizations across healthcare, manufacturing, and professional services. Its typical playbook begins with phishing or exploitation of remote-desktop services for initial access, followed by rapid lateral movement, data exfiltration, and deployment of ransomware. Flocker then uses dual-extortion tactics: threatening both file encryption and public release of stolen documents. The group’s leak site is updated frequently, and it maintains pressure through countdown timers and sample leaks. While not the largest ransomware operation, Flocker has shown consistency in following through on publication when ransom demands are ignored.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real identity so you can see exactly what exposure this incident created.
• Rotate any password you used at O***M.com or related services and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household — DoxxScan family coverage includes dependents and children’s gaming accounts that often chain back to the same breached address or parent email.
• Let remediation specialists handle data-broker takedown requests and opt-out processes that would otherwise consume hundreds of hours of your own time.

The O***M listing is a reminder that ransomware groups continue to treat stolen personal data as a renewable revenue stream long after the initial attack. Protecting yourself requires more than changing a password; it demands visibility into how your identity is connected across the internet and decisive action to break those chains. DoxxScan’s continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage give you and your family the tools needed to stay ahead of both this claimed breach and the ones that will inevitably follow.