Roper & Vertafore Listed by dunghill Ransomware Group

On September 26, 2023, insurance technology provider Vertafore appeared on the leak site of the dunghill ransomware group, listed alongside Roper Technologies. The disclosure indicates that internal files were exfiltrated during a ransomware attack on the Denver-based company, which supplies content management, workflow, knowledge base, data, and analytics software to insurance agencies and carriers across the United States.

Details in the Leak-Site Listing

The dunghill leak site, accessed via the .onion address tracked by ransomware.live, states that Vertafore suffered a ransomware intrusion and that attackers successfully removed internal files. The listing does not quantify the number of records affected, name specific data types beyond “internal files,” or disclose the ransom demand. It simply presents Vertafore as one of the victims whose data will be published or sold if payment is not received. Public reporting on similar dunghill postings shows that once a company is listed, samples or full archives often follow within days or weeks if the victim does not negotiate.

Why This Matters for You and Your Family

When an insurance-technology vendor like Vertafore is breached, the exposure reaches far beyond corporate walls. Insurance records frequently contain names, addresses, dates of birth, Social Security numbers, policy details, and banking information for millions of policyholders. Even if the exact volume of stolen data remains unknown, the disclosure states that sensitive internal files left the network. If you or anyone in your household holds an insurance policy through an agency or carrier that uses Vertafore’s platform, your personal information may now sit in an attacker’s archive. That single breach can quietly feed identity theft, tax fraud, or medical-insurance scams for years.

The Doxxing and Identity-Chain Risks

Ransomware operators rarely stop at one dataset. A leaked insurance file often includes email addresses, phone numbers, and policy notes that link directly to your online accounts. Attackers chain these fragments together: an email from the breach becomes the key to resetting a password on a shopping site, which then reveals a home address, which surfaces in public records and gaming profiles. Children’s accounts are especially vulnerable because parents frequently reuse credentials across family logins. The result is a widening web of doxxing that can expose your full household to harassment, SIM-swapping, or targeted phishing. Credential leaks like this one cascade into account takeovers that stretch from insurance portals into every corner of digital life.

dunghill Ransomware Group’s Track Record

Public reporting attributes the dunghill Ransomware Group with emerging in early 2023 as a double-extortion operation. The group is known for targeting mid-sized enterprises in technology, healthcare, and financial services. Notable prior victims include several North American software vendors and regional insurers. Their typical playbook begins with initial access gained through compromised remote-desktop credentials or phishing, followed by rapid lateral movement, data exfiltration, and deployment of ransomware. After encryption, dunghill posts a sample of stolen files on their leak site and sets a short payment deadline before threatening full publication or sale of the archive. The group’s listings on ransomware.live have grown steadily since spring 2023, indicating an active and expanding campaign.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to shrink your exposure footprint.
• Rotate any password you used at Vertafore or with an insurance provider that relies on their software, and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches you or your family is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts, which often chain back to the same breached address or email.
• Let remediation specialists handle takedown requests across data brokers and leak sites on your behalf while you focus on securing day-to-day accounts.

The Vertafore incident is a reminder that insurance-industry suppliers have become high-value targets whose breaches ripple outward to ordinary policyholders. One timely scan and a few deliberate steps can break the identity chains before criminals exploit them. Start your DoxxScan trial today and put continuous monitoring, identity-chain mapping, and hands-on remediation specialists to work for your entire household, including gaming accounts that attackers love to hijack.