On October 26, 2023, Canadian debt-collection and landlord-tenant litigation firm Suite Excel Collections Canada Inc. (SECCI) appeared on the leak site operated by the Black Basta ransomware group. The listing states that internal files were exfiltrated during a ransomware attack; the exact number of records and the specific data types remain undisclosed by both the threat actor and the company.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch secci.ca
Get alerted the next time secci.ca files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about secci.ca’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details from the Listing
The Black Basta leak page for secci.ca states that the firm suffered a ransomware intrusion in which attackers successfully exfiltrated internal files before encrypting systems. The disclosure does not quantify affected records, name the precise data categories, or reveal any ransom demand. SECCI, which provides collection and litigation services for property managers, REITs, and landlords across every Canadian province and territory, has not yet issued a public breach notification detailing the incident. Public reporting on Black Basta indicates the group typically posts a sample of stolen data as proof before threatening full publication if payment is not received.
Why This Matters for You and Your Family
If your landlord, property manager, or tenant file was handled by SECCI, information you provided during a dispute, eviction proceeding, or debt collection may now sit in an attacker-controlled archive. Internal files from a litigation and collections company routinely contain full names, current and previous addresses, phone numbers, email addresses, financial details, government identifiers, and case notes. Even though the leak site does not specify what was taken, the nature of SECCI’s work means personal and financial data tied to housing and debt is at elevated risk of exposure. For ordinary families, this translates into concrete downstream harm: unexpected debt-collection calls, fraudulent loan applications, or targeted scams that reference your rental history or court matters.
Doxxing and Identity-Chain Risks
Stolen internal files from a collections firm create long identity chains. An email address or phone number lifted from one SECCI record can be correlated with gaming usernames, social-media handles, or breached credentials from unrelated services. Attackers then map these connections to locate family members, including children whose school or activity records sometimes appear in parental litigation files. Once doxxed, the information fuels account takeovers, SIM swaps, or extortion attempts that feel deeply personal. Credential leaks of this kind frequently cascade into gaming-account compromises; children’s Xbox, PlayStation, or Roblox profiles linked to a parent’s reused password become easy secondary targets.