still95.it Listed by cloak Ransomware Group
If you are a customer of still95.it, here’s what is being claimed, and what it would mean for you.
still95.it was listed on Cloak's leak site. Cloak claims to have stolen internal data. This is the group's claim, not a confirmed finding.
Editor’s note: The claims described below originate from a ransomware group’s leak-site posting and have not been independently verified by GalaxyWarden. A listing of this kind is an assertion made by the group during an extortion attempt. It is not evidence that a breach occurred, and we report it as a claim rather than as a finding.
still95.it customer?
See what’s already exposed about you — free, 15sWe check your email against known public breach records and the sites that publish your address, then show you what to do about each one. We don’t hold this company’s data. No account, no card.
On August 24, 2023, Italian company still95.it appeared on the leak site operated by the cloak Ransomware Group. The listing states that internal files were exfiltrated during a ransomware attack. The notification does not disclose the number of people affected or specify which exact records were taken, leaving many customers and partners uncertain about their personal exposure.
Details from the Leak Listing
The primary disclosure on the cloak leak site states that still95.it suffered a ransomware intrusion in which attackers successfully exfiltrated internal files. No sample data is publicly shown, and the listing does not quantify the volume or types of information involved. The site simply marks the victim as “published” on August 24, 2023, and indicates that the data is now available to other threat actors. Public reporting on cloak Ransomware Group indicates they follow a double-extortion model: encrypt systems and threaten to release stolen files unless a ransom is paid.
Why This Matters for You and Your Family
When a company that handles orders, customer accounts, or supplier details is breached, the information it stores about you can end up in criminal hands. Even if still95.it has not released exact figures, any personal details you provided—such as name, address, email, phone number, or payment information—could now be circulating. Internal files exfiltrated often contain spreadsheets, customer databases, or employee records that map directly back to ordinary people. Once that data leaves the company’s control, it can be sold, traded, or used to launch further attacks against you and your household.
Advertisement
BATECH StudioWe build it.We run it.Web apps, AI pipelines and internal tools — under your brand, not ours.Tell us what you need →
BATECH Studio and GalaxyWarden share common ownership.
The Doxxing and Identity-Chain Risks
Exfiltrated internal files frequently link email addresses, usernames, and phone numbers to real-world identities. Threat actors then chain these pieces together with data from other breaches to build detailed profiles. A single leaked customer record can expose your gaming username, family address, or children’s accounts, turning a corporate ransomware incident into personal doxxing. Credential leaks like this one regularly cascade into account takeovers on Steam, Roblox, or other platforms where your family members play. Without visibility into these connections, one breach can quietly feed months of targeted harassment, phishing, or identity theft.
Cloak Ransomware Group Track Record
Public reporting attributes the emergence of cloak Ransomware Group to mid-2023. The group maintains a leak site where it publishes victims who refuse to pay. Notable prior targets have included small-to-medium businesses across Europe, though exact prior victim lists remain limited in open sources. Their typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of internal files before deploying encryption. They then demand payment and set short deadlines, threatening full data publication if unpaid. The still95.it listing follows this exact pattern.
What to do
- Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by Warden specialists.
- Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
- Rotate any password you used at still95.it or related services, replace it with a unique passphrase, and secure every account with 2FA through an authenticator app instead of SMS.
- Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same address or email.
- Let remediation specialists manage takedown requests for any exposed personal records appearing on data broker sites or underground forums.
The still95.it breach shows how quickly corporate ransomware spills into private lives. A single listing can trigger identity chains that affect you and your family for years. Start your DoxxScan trial today and put continuous monitoring, identity-chain mapping, and hands-on remediation specialists between attackers and your household. DoxxScan is also effective for protecting gaming accounts because credential leaks like this one routinely cascade into account takeovers and doxxing chains.
What the free scan actually returns
Found on people-search siteswe remove these
These listings are live, public, and legal to remove — and removing them is what we do.
Found in breach recordsverifiedreported — unverified
Each record is labeled: confirmed breach data, or an attacker’s claim no one has verified.
Leaked data cannot be deleted from the internet — anyone claiming otherwise is lying. Broker listings can be removed. We do the second, and show you exactly what to fix from the first.
For security and vendor-risk teams: a staff address in a leak does not mean you were breached — it usually means a third party was. We monitor a domain against 13.1B+ leaked records and tell you when one of your people appears. See what we would check →
Report details & sourcing
Related breaches
RXPE Group Listed by coinbasecartel Ransomware Group
RXPE Group was listed on the coinbasecartel ransomware leak site. The group claims to have stolen in…
Everglades Boats Listed by termite Ransomware Group
Founded in 2001, Everglades Boats is a manufacturer of offshore fishing boats. The company is headqu…
avkvalves.com Listed by settra Ransomware Group
Investigation: Belgicast Internacional S.L. Executive Summary An analysis of more than 10,000 intern…