SBC Global, Bitfinex, Coinmama, and Rutgers University Part 2 Leak Listed by flocker Ransomware Group

SBC Global, Bitfinex, Coinmama, and Rutgers University were listed on the Flocker ransomware leak site on May 05, 2024, after the group claimed the four organizations refused to pay following a ransomware attack that resulted in exfiltration of internal files.

Primary Disclosure Details

The Flocker leak-site posting explicitly names the four victims and states they were targeted in a single campaign. It declares that internal files were allegedly exfiltrated during a ransomware attack and warns that the data will be released because the organizations declined to pay the demanded ransom. The listing does not specify the volume of records involved, the exact file types beyond “internal files,” or the precise date of initial compromise. Public reporting on Flocker indicates the group follows a double-extortion model: encryption of victim systems paired with threats to publish stolen data.

May 05, 2024 marks the first public disclosure of this particular leak listing. The notification appears directly on the group’s onion site, hosted via ransomware.live mirror, and follows the group’s standard format of naming non-paying victims.

Why This Matters for You and Your Family

When universities, financial platforms, and service providers lose control of internal files, the ripple effects reach ordinary customers and students. Bitfinex and Coinmama handle cryptocurrency transactions that frequently link to personal wallets, exchange accounts, and payment methods. Rutgers University maintains records on current and former students, faculty, and applicants. SBC Global provides communications services that often store billing, support tickets, and contact details. If any of these organizations held information connected to you or your family, that data may now sit in an attacker-controlled archive.

Internal files exfiltrated can include spreadsheets, configuration files, customer databases, or logs that contain names, email addresses, phone numbers, partial financial details, or account metadata. Even without a precise victim count listed in the disclosure, the exposure creates immediate risks for anyone whose data touched these systems.

Doxxing and Identity-Chain Implications

Ransomware operators rarely stop at publishing one dataset. They map relationships across breaches to build persistent identity profiles. A leaked email from Rutgers combined with a Coinmama wallet address and an SBC Global support ticket can quickly link your real name, physical address, and online handles. These chains allow follow-on attacks: credential stuffing, SIM-swapping, targeted phishing, or sale of the compiled dossier on dark-web marketplaces.

Gaming accounts belonging to children or teenagers are especially vulnerable because they often reuse the same email addresses or passwords exposed in these incidents. A single credential leak can cascade into account takeovers that expose chat logs, friend lists, and location data, feeding the doxxing cycle. Continuous monitoring across large breach corpora is the only practical way to detect these linkages before they are exploited.

Flocker Ransomware Group Track Record

Public reporting attributes Flocker’s emergence to late 2023. The group has targeted organizations across education, financial services, and technology sectors with a consistent playbook: initial access through phishing or exploited remote services, deployment of ransomware for encryption, exfiltration of sensitive files, and subsequent extortion via leak sites when victims refuse payment. Notable prior victims listed on their site include mid-sized enterprises and public institutions, though exact success rates remain unconfirmed. Their public communications emphasize “naming and shaming” non-payers, a tactic designed to pressure future targets.

What to do

• Run a DoxxScan to map every link between your emails, phones, usernames, and real-world identity so you can see exactly what chains back to this incident.
• Rotate any password used at Bitfinex, Coinmama, Rutgers systems, or SBC Global wherever it has been reused, and switch to 2FA through an authenticator app instead of SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure that touches you or your family is caught and flagged within hours.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts commonly targeted through credential reuse.
• Let remediation specialists handle data-broker takedown requests and follow-up notifications on your behalf while you focus on securing accounts.

The exposure of internal files from these four organizations shows how quickly corporate breaches become personal ones. Staying ahead requires more than checking a single list; it demands ongoing visibility and expert help. Start your DoxxScan trial and let its continuous monitoring, AI-powered identity-chain mapping, hands-on remediation specialists, and household coverage—including children’s gaming accounts—work for your family before the next leak appears.