rashtiandrashti.com Listed by cactus Ransomware Group

On January 24, 2025, the Cactus ransomware group added rashtiandrashti.com to its public leak site, claiming that it had exfiltrated internal files from the family-owned baby products manufacturer.

What's Publicly Reported from Reporting

Public reporting indicates the company, which generates roughly $19.1 million in annual revenue and operates from 875 Avenue of the Americas in New York City, was hit in a ransomware incident. The attackers posted proof of access on their onion site, listing the breach under the title “RASHTI.” Available details describe the stolen material as internal files rather than a specific customer database. The exact number of people whose information appears in the files remains unknown. No ransom demand deadline has been publicly disclosed in the initial posting.

Why This Matters for You and Your Family

When a company that makes baby clothes, blankets, and accessories suffers a breach, the information stolen can easily include names, addresses, phone numbers, and order histories tied to real families. If your family has ever bought from Rashti & Rashti or similar specialty retailers, your contact details may now sit in an attacker-controlled archive. Once that data leaves the company’s control, it can be sold, traded, or used to launch further attacks against you. The breach is a concrete reminder that even businesses focused on children and families are not immune to cybercrime that ultimately lands on your doorstep.

The Doxxing and Identity-Chain Risk

Stolen internal files frequently contain more than one type of record. An email address listed in an order can be matched with a username from a child’s gaming account, a parent’s social-media handle, or a shared phone number. Attackers follow these links to build a complete picture of a household. What begins as a retail breach can cascade into doxxing campaigns, account takeovers, or targeted scams. Credential leaks like this one often spread quickly across underground forums, giving multiple threat actors the raw material they need to harass or impersonate you and your children online.

Cactus Ransomware Group Track Record

Public reporting attributes the Cactus group with emerging in early 2023. The gang has since claimed responsibility for attacks on dozens of organizations across multiple sectors. Notable prior victims include manufacturing firms, professional services companies, and retailers. Their typical playbook involves gaining initial access through compromised credentials or remote desktop tools, exfiltrating documents before encryption, and then publishing samples on their leak site when victims refuse to pay. The group’s extortion style combines data publication with threats of further leaks if ransom demands are not met.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what this claimed breach may have exposed.
• Rotate any password you used at rashtiandrashti.com or similar retailers and enable two-factor authentication through an authenticator app everywhere that password was reused.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next leak that touches your family is caught and addressed in hours rather than months.
• Cover the entire household with DoxxScan family protection that extends to children’s gaming accounts and other online identities that chain back to the same address or family details.
• Let remediation specialists handle the time-consuming work of sending takedown requests to data brokers and monitoring the dark web for reappearance of your information.

The incident shows that retail data breaches continue to expose ordinary families to long-term identity risks that do not disappear when the news cycle moves on. Taking deliberate steps now can limit how far this particular leak travels. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping that connects scattered online handles to real identities, and hands-on remediation by specialists who manage takedowns for you. Its household coverage also protects gaming accounts belonging to you or your children that often become the next link in a doxxing chain.