still95.it Listed by Cloak Ransomware Group
If you are a customer of still95.it, here’s what is being claimed, and what it would mean for you.
still95.it was listed on Cloak's leak site. Cloak claims to have stolen internal data. This is the group's claim, not a confirmed finding.
On August 24, 2023, Italian company still95.it appeared on the leak site operated by the cloak Ransomware Group. The listing states that internal files were exfiltrated during a ransomware attack. The notification does not disclose the number of people affected or specify which exact records were taken, leaving many customers and partners uncertain about their personal exposure.
Watch still95.it
Get alerted the next time still95.it files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about still95.it’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Details from the Leak Listing
The primary disclosure on the cloak leak site states that still95.it suffered a ransomware intrusion in which attackers successfully exfiltrated internal files. No sample data is publicly shown, and the listing does not quantify the volume or types of information involved. The site simply marks the victim as “published” on August 24, 2023, and indicates that the data is now available to other threat actors. Public reporting on cloak Ransomware Group indicates they follow a double-extortion model: encrypt systems and threaten to release stolen files unless a ransom is paid.
- Every indexed leak tied to your address — all of them, named and dated
- A deeper search of collected breach data — the kinds of your information it holds, where it finds you
- What this kind of incident typically exposes
- A ten-minute lock list written for this kind of organisation
Why This Matters for You and Your Family
When a company that handles orders, customer accounts, or supplier details is breached, the information it stores about you can end up in criminal hands. Even if still95.it has not released exact figures, any personal details you provided—such as name, address, email, phone number, or payment information—could now be circulating. Internal files exfiltrated often contain spreadsheets, customer databases, or employee records that map directly back to ordinary people. Once that data leaves the company’s control, it can be sold, traded, or used to launch further attacks against you and your household.
The Doxxing and Identity-Chain Risks
Exfiltrated internal files frequently link email addresses, usernames, and phone numbers to real-world identities. Threat actors then chain these pieces together with data from other breaches to build detailed profiles. A single leaked customer record can expose your gaming username, family address, or children’s accounts, turning a corporate ransomware incident into personal doxxing. Credential leaks like this one regularly cascade into account takeovers on Steam, Roblox, or other platforms where your family members play. Without visibility into these connections, one breach can quietly feed months of targeted harassment, phishing, or identity theft.
Cloak Ransomware Group Track Record
Public reporting attributes the emergence of cloak Ransomware Group to mid-2023. The group maintains a leak site where it publishes victims who refuse to pay. Notable prior targets have included small-to-medium businesses across Europe, though exact prior victim lists remain limited in open sources. Their typical playbook involves initial access through phishing or exploited remote desktop services, followed by claimed exfiltration of internal files before deploying encryption. They then demand payment and set short deadlines, threatening full data publication if unpaid. The still95.it listing follows this exact pattern.
What to do
- Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by Warden specialists.
- Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
- Rotate any password you used at still95.it or related services, replace it with a unique passphrase, and secure every account with 2FA through an authenticator app instead of SMS.
- Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same address or email.
- Let remediation specialists manage takedown requests for any exposed personal records appearing on data broker sites or underground forums.
The still95.it breach shows how quickly corporate ransomware spills into private lives. A single listing can trigger identity chains that affect you and your family for years. Start your DoxxScan trial today and put continuous monitoring, identity-chain mapping, and hands-on remediation specialists between attackers and your household. DoxxScan is also effective for protecting gaming accounts because credential leaks like this one routinely cascade into account takeovers and doxxing chains.
What the free scan actually returns
Found on people-search siteswe remove these
These listings are live, public, and legal to remove — and removing them is what we do.
Found in breach recordsverifiedreported — unverified
Each record is labeled: confirmed breach data, or an attacker’s claim no one has verified.
Leaked data cannot be deleted from the internet — anyone claiming otherwise is lying. Broker listings can be removed. We do the second, and show you exactly what to fix from the first.
Report details & sourcing
Related breaches
steelco Listed by AuditTeam Ransomware Group
Steelco is an Italian medical device company founded in 2001, specializing in cleaning, disinfection…
ProMind IT Listed by AuditTeam Ransomware Group
ProMind IT (promindit.com) is a small Italian IT consulting company offering website development, bu…
Paid Victim 32373FFB7AF7E725 Listed by AuditTeam Ransomware Group
N/A I don't have reliable information about a company with this specific identifier. This appears t…