Softverg Co., Ltd. Listed by noescape Ransomware Group

On August 18, 2023, Softverg Co., Ltd. appeared on the leak site operated by the noescape ransomware group. The listing states that the South Korean software firm suffered a ransomware attack in which internal files were exfiltrated. The company, a Microsoft Enterprise Partner, Hancom Large Partner, erwin master reseller, and AhnLab distributor, works with leading domestic enterprises through both local and international software agreements. The exact number of people whose information may be exposed remains unknown, and the leak-site posting does not detail the specific data types taken.

Reported Details from the Listing

The noescape leak site explicitly names Softverg Co., Ltd. and claims successful data exfiltration following a ransomware deployment. Public mirrors of the site, such as ransomware.live, preserve the original post dated August 18, 2023. The disclosure indicates that internal files were stolen but does not quantify the volume of data or list particular categories such as customer records, employee personal information, or financial documents. No ransom demand figure or payment deadline is published in the initial listing. The notification does not confirm whether any proof files or sample archives have been released to the public.

Why This Matters for You and Your Family

When a company that partners with major software vendors is breached, the ripple effects often reach ordinary customers and employees. If you hold a license, support contract, or have interacted with Softverg-resold products from Microsoft, Hancom, erwin, or AhnLab, your contact details or transaction records could be among the internal files now in attackers’ hands. Even when record counts are not published, the exposure of internal files frequently includes spreadsheets containing names, email addresses, phone numbers, and sometimes national identification numbers or passport details used in business partnerships. For your family this can mean months or years of increased risk of phishing, identity theft, or fraudulent account openings tied to data you never knew was stored by a vendor partner.

August 18, 2023 marks the moment this incident moved from private negotiation to public shaming, a common extortion tactic that pressures the victim company while simultaneously exposing bystanders.

Doxxing and Identity-Chain Risks

Stolen internal files rarely exist in isolation. A single email address or phone number taken from a partner directory can be cross-referenced with credential leaks, shopping histories, and social-media handles to build a complete identity chain. Attackers then sell or weaponize these chains for doxxing, SIM-swapping, or targeted social-engineering campaigns. Because Softverg works with enterprise software that often requires personal administrator accounts, the breach may also expose credentials that protect other business and personal services. These credential leaks cascade into account takeovers that can reach your children’s gaming accounts when family email addresses or shared phone numbers are reused.

NoEscape Group’s Known Track Record

Public reporting attributes the noescape ransomware group’s emergence to early 2023. The actors are known for double-extortion tactics: they encrypt victim systems and simultaneously threaten to publish stolen data unless a ransom is paid. Notable prior victims listed on their leak site have included mid-sized manufacturing, technology-distribution, and professional-services firms. Their typical playbook begins with initial access gained through compromised remote-desktop credentials or exploited public-facing applications, followed by rapid exfiltration of internal shares before encryption. The group maintains a Tor-based leak site where they publish victim names and, in many cases, sample data to demonstrate the seriousness of their threat. Exact success rates and average ransom payments remain unconfirmed, but their rapid appearance on the scene and consistent posting cadence indicate an organized operation focused on speed and public pressure.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including cleanup of exposed records.
• Rotate any password you have ever used at Softverg or with their partner products anywhere it is reused, and switch to 2FA via an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and your children’s gaming accounts that often chain back to the same addresses or parent emails.
• Let remediation specialists handle takedown requests across data brokers and extortion sites for you while you focus on securing day-to-day accounts.

The Softverg listing is a reminder that vendor breaches can expose you even when you never directly signed a contract with the victim company. Taking concrete steps now limits how far attackers can travel along the identity chains they have been handed. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage including children’s gaming accounts. Start your DoxxScan trial today to close the gaps this incident and others like it create.