Sub-drill Supply Listed by Vice Society Ransomware Group

On January 6, 2023, Sub-drill Supply appeared on the leak site operated by the Vice Society ransomware group. The company, incorporated in 1992 and a supplier of subsea tools and drilling equipment to the global energy industry, may have had its internal files exfiltrated during a ransomware attack. The listing does not specify the number of records affected or detail exactly which documents were taken.

Details from the Leak Site

The Vice Society leak page states that Sub-drill Supply suffered a ransomware incident and that attackers successfully exfiltrated internal files. No sample data is shown on the public page, and the disclosure does not quantify the volume or sensitivity of the stolen material. The listing follows the group’s standard format for companies that have not yet paid an extortion demand. Ransomware.live mirrored the entry on the same date, claiming the primary source without adding new claims.

Why This Matters for You and Your Family

When a supplier in the energy sector loses control of internal files, the consequences can reach ordinary families. Employees, contractors, vendors, and even customers may have personal information contained in those documents. If your employer works with Sub-drill Supply, or if you or a family member have done business with the company, your details could be sitting in an attacker’s archive. Internal files often include spreadsheets with names, addresses, dates of birth, tax identifiers, or banking information. Once that material surfaces, identity thieves and fraudsters treat it as raw material for targeted attacks that can affect your credit, taxes, and day-to-day finances.

The Doxxing and Identity-Chain Risk

Exfiltrated internal files frequently contain more than names and addresses. They can link email accounts, phone numbers, employee IDs, and vendor contacts. Attackers chain these fragments with data from previous breaches to build complete identity profiles. A single leaked work email can lead to personal accounts, social-media handles, and even children’s gaming usernames when family members share devices or passwords. These chains accelerate doxxing, account takeovers, and harassment campaigns. Credential leaks of this type routinely cascade into gaming platforms, where children’s accounts become entry points for further extortion or identity theft.

Vice Society’s Known Track Record

Public reporting attributes Vice Society’s first notable activity to mid-2021. The group has since targeted schools, municipalities, and manufacturing firms across North America and Europe. Their typical playbook begins with initial access gained through compromised credentials or vulnerable remote desktop services, followed by lateral movement inside the victim’s network and exfiltration of sensitive files before encryption. Rather than always deploying ransomware, Vice Society often relies on pure extortion, threatening to publish stolen data unless payment is made. The Sub-drill Supply listing fits this pattern: data is advertised for sale or release while the group waits for contact from the victim.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours rather than months.
• Rotate any password you used at Sub-drill Supply or related vendor portals anywhere it has been reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same address or parent credentials.
• Let remediation specialists manage takedown requests for any exposed personal documents or broker listings that surface from this incident.

The Sub-drill Supply breach is a reminder that even specialized industrial suppliers hold data that can harm ordinary families when it falls into the wrong hands. Acting quickly on credential hygiene and identity mapping limits how far attackers can travel down the chain. DoxxScan by GalaxyWarden delivers that continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to close the gaps this incident has opened.