On July 15, 2024, Canadian manufacturer Posi+ appeared on the leak site of the Black Basta ransomware group. The listing states that internal files totaling roughly 350 GB were exfiltrated during a ransomware attack on the company, which has made aerial devices, digger derricks, and telecom equipment since 1981. Anyone whose personal or employment records are among those files now faces the concrete risk that their information sits on a criminal data marketplace.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch posiplus.com
Get alerted the next time posiplus.com files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about posiplus.com’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details from the Listing
The Black Basta leak page for posiplus.com explicitly lists three categories of stolen material: company data, confidential and employee data, and financial data. It does not publish sample files or specify exact record counts, nor does it name individual victims or quantify how many employees or customers are affected. The disclosure indicates the data was taken in a ransomware incident and is now published as part of the group’s double-extortion playbook. The physical address and toll-free number for Posi+ in Victoriaville, Quebec, appear on the same page, confirming the target’s identity.
Why This Matters for You and Your Family
If you have ever worked at Posi+, applied for a job there, or had your information shared with the company as a customer or vendor, your details may now be in criminal hands. Employee records frequently contain full names, dates of birth, Social Insurance Numbers, home addresses, direct-deposit banking information, and sometimes family-member contacts. Financial documents can expose supplier contracts, payroll runs, or even personal guarantees signed by owners. Once that material leaves the company’s control, it can be sold, swapped, or used to launch targeted fraud against you or your household for years to come.
The Doxxing and Identity-Chain Risk
Ransomware leaks rarely stop at one company. A single exposed email or phone number becomes the starting point for an identity chain that links your work history, personal accounts, and family members. Threat actors combine the Posi+ files with other breaches to map usernames across gaming platforms, social media, and email providers. Children’s gaming accounts that reuse an exposed parent email are especially vulnerable; a compromised Roblox or Fortnite credential can lead to doxxing that reveals the family’s real address. DoxxScan by GalaxyWarden continuously monitors 13.1 billion+ breach records across more than 100 platforms and uses AI-powered identity-chain mapping to surface these connections before criminals exploit them.