Onsupport Corporation Listed by 8base Ransomware Group

Onsupport Corporation, an IT services provider established in 1992 that assists small and mid-sized businesses with managed network services, hosting, and application development, was listed on the leak site of the 8base ransomware group on June 19, 2023. The listing states that internal files were exfiltrated during a ransomware attack. The number of records affected remains unknown, and the precise data types contained in the files have not been detailed by the group.

Details from the Leak Site

The primary disclosure on the 8base leak site indicates that Onsupport Corporation suffered a ransomware incident in which attackers successfully exfiltrated internal files before encrypting systems. The entry does not quantify the volume of data taken, nor does it list specific categories such as customer records, employee information, or financial documents. Public mirrors of the leak site, including ransomware.live, preserve the original posting date of June 19, 2023, confirming when the threat actor first publicly named the company. No ransom demand figure or payment deadline appears in the available listing.

Why This Matters for You and Your Family

If you or any member of your family has worked with Onsupport Corporation as a client, vendor, or employee, your personal or business information may now sit in an attacker-controlled archive. Internal files exfiltrated from an IT provider frequently contain contracts, invoices, remote-access credentials, and contact lists that can be repurposed for identity theft or targeted phishing. Even when exact record counts are unknown, the exposure of data from a managed service provider creates downstream risk for every small business and household that relied on its network or hosting services.

Doxxing and Identity-Chain Risks

Stolen internal files often include email addresses, phone numbers, and usernames that attackers can cross-reference with other breaches. These connections allow criminals to build detailed profiles linking your professional identity to personal accounts, social-media handles, and even your children’s gaming profiles. A single credential set taken from an IT provider’s systems can cascade into account takeovers across multiple services, turning one corporate breach into prolonged harassment or financial fraud against your entire household.

8base Group Track Record

Public reporting attributes the emergence of 8base to early 2022. The group has since listed hundreds of victims, focusing primarily on small and mid-sized organizations rather than large enterprises. Typical playbooks involve initial access through compromised remote desktop protocol accounts or vulnerable web applications, followed by exfiltration of internal documents and deployment of ransomware. 8base maintains a double-extortion model: it threatens both data encryption and public release of stolen files, often setting short payment deadlines before uploading samples to its leak site.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate any password you ever used at Onsupport Corporation or its hosted systems, and enable 2FA through an authenticator app everywhere that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts vulnerable to credential-based takeovers.
• Let remediation specialists perform hands-on takedown requests across data brokers and extortion sites on your behalf.

The incident underscores how quickly an IT provider breach can ripple outward to affect ordinary clients and their families. Staying ahead requires more than changing a few passwords; it demands ongoing visibility into how your information travels across the internet. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and direct assistance from specialists who can help secure both adult and children’s accounts before criminals exploit the next link in the chain.