REC Silicon Listed by Ransomexx Ransomware Group

On December 11, 2022, polysilicon manufacturer REC Silicon appeared on the leak site operated by the ransomware group known as RansomExx. The listing states that internal files were exfiltrated during a ransomware attack; the exact number of records affected and the specific data types contained in those files are not detailed in the disclosure.

Primary Disclosure Details

The RansomExx leak page lists REC Silicon as a victim and claims the company’s internal documents were taken prior to encryption. No sample files are publicly shown on the page at the time of writing, and the disclosure does not quantify how many employees, customers, or partners may be impacted. The listing does not provide a ransom demand or payment deadline. REC Silicon is a global leader in silane-based, high-purity silicon materials used in solar and semiconductor production; any compromise of its internal files therefore carries implications for both corporate partners and individuals whose information may reside in those documents.

Why This Matters for You and Your Family

When a manufacturer like REC Silicon suffers a ransomware breach, the exposed internal files can contain employee records, vendor contracts, customer invoices, or correspondence that include names, addresses, dates of birth, Social Security numbers, or financial details. Even if you have never directly done business with the company, your information may have been shared by an employer, a utility provider, or a supplier that appears in those files. Once such data leaves a corporate perimeter it can be traded or sold on underground forums for years, increasing the chance that you or your family members become targets for identity theft, tax fraud, or phishing campaigns tailored with the stolen details.

Internal files exfiltrated means the breach is not limited to a customer database; it can include HR spreadsheets, scanned contracts, or email archives that inadvertently expose non-obvious connections between seemingly unrelated people and organizations.

Doxxing and Identity-Chain Risks

Credential material or personal identifiers taken from corporate networks frequently serve as the first link in a doxxing chain. An email address or password pair allegedly stolen from REC Silicon’s systems can be tested against consumer accounts, gaming platforms, and social-media profiles. Successful logins then yield additional addresses, phone numbers, and family-member names that attackers stitch together into a full identity profile. Children’s gaming accounts are especially vulnerable because they often reuse credentials or recovery emails tied to a parent’s breached corporate account. The result is a cascading exposure that can lead to account takeovers, SIM-swapping attempts, or public doxxing intended to pressure victims into paying extortion demands.

RansomExx Group Track Record

Public reporting attributes RansomExx (also known as Avaddon in earlier iterations) with emerging in 2020 and conducting double-extortion attacks that combine file encryption with data theft. The group has previously listed manufacturing, technology, and healthcare organizations, typically posting victim data on onion sites after negotiations fail. Their playbook usually begins with phishing or exploitation of remote-desktop services for initial access, followed by lateral movement to exfiltrate documents before deploying ransomware. The December 2022 listing of REC Silicon fits this established pattern, although the precise initial-access vector used against the company remains unknown.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you used at REC Silicon or any related vendor account, and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts often chained to the same addresses or recovery emails.
• Let remediation specialists handle takedown requests for any exposed personal documents or broker listings that surface from this or linked incidents.

The REC Silicon breach illustrates how ransomware operators continue to target industrial suppliers whose internal files contain personal data belonging to ordinary families. A single corporate listing can quietly feed identity theft and account takeover attempts for years. Start your DoxxScan trial today and combine continuous monitoring, identity-chain mapping, and hands-on specialist remediation to reduce the long-term risk to you and your family. DoxxScan is also effective for protecting gaming accounts because credential leaks like this one routinely cascade into doxxing chains that cross personal and household boundaries.