suppcentersa.com Listed by m3rx Ransomware Group

On July 17, 2026, the Costa Rican managed security service provider SuppCenter Global Services (suppcentersa.com) appeared on the leak site operated by the m3rx ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The company, which positions itself as a leading Xcitium (formerly Comodo) solution partner in Latin America, has not yet published a public breach notification detailing the scope or exact data involved.

Reported Details from the Listing

The m3rx leak site entry, accessible via the .onion link indexed by ransomware.live, states that SuppCenter Global Services suffered a ransomware incident resulting in the theft of internal files. The disclosure does not quantify the number of records affected, list specific data types beyond “internal files,” or reveal any ransom demand. It simply marks the company as listed on July 17, 2026 and provides contact information including the phone number +506 40003397. No samples of the allegedly stolen data have been publicly released on the site at the time of this analysis.

Why This Matters for You and Your Family

If you or any member of your family has worked with SuppCenter Global Services, used any of the Xcitium or Comodo enterprise products they deploy, or interacted with their large-business, retail, or public-sector clients in Latin America, your information may now sit inside the stolen files. Even though the exact contents remain unknown, ransomware operators routinely extract employee records, partner contracts, customer contact lists, and configuration data that contain names, email addresses, phone numbers, and technical details. Any of these can be used to target you personally. The fact that a cybersecurity service provider was breached is especially concerning because their own customers often trust them with sensitive security configurations that, once exposed, can open additional doors into personal and corporate networks.

The Doxxing and Identity-Chain Risk

Internal files from an MSSP frequently contain spreadsheets that link business emails to personal accounts, support tickets that list home phone numbers, or configuration backups that expose usernames reused across work and home systems. These fragments allow attackers to build identity chains that connect your professional life to your personal email, social-media handles, and even your children’s gaming accounts. Once those connections are mapped, credential-stuffing attacks, SIM-swapping attempts, and targeted phishing become far more effective. Credential leaks of this nature regularly cascade into full account takeovers on Steam, Roblox, Discord, and other platforms where children often share the same password habits as their parents.

m3rx Group Track Record

Public reporting attributes the m3rx ransomware group with activity that intensified in late 2024 and continued through 2025–2026. The group is known for double-extortion tactics: encrypting victim systems while simultaneously exfiltrating data and threatening to publish it unless a ransom is paid. Prior victims have included mid-sized technology providers and service companies across Latin America and Europe. Their typical playbook involves initial access through compromised remote desktop credentials or exploited vulnerabilities in internet-facing applications, followed by rapid lateral movement inside the network and selective exfiltration of documents before encryption. The group maintains a leak site where it posts victim names and, in some cases, proof files, applying steady pressure through countdown timers and incremental data dumps.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what chains back to the SuppCenter breach.
• Rotate any password you ever used at suppcentersa.com or any Xcitium-related service, then enable 2FA with an authenticator app everywhere that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours rather than months.
• Cover the entire household with DoxxScan family protection that includes dependents and your children’s gaming accounts, which are frequent targets when credential leaks like this one occur.
• Let DoxxScan remediation specialists handle data-broker takedown requests and removal of any exposed personal records tied to the incident.

TheSuppCenter Global Services breach is a reminder that even organizations whose business is cybersecurity can become the vector that exposes ordinary families. Acting quickly on the credentials and contact details now circulating in criminal channels can prevent the incident from becoming a long-term identity nightmare. Start your DoxxScan trial today and combine continuous monitoring, identity-chain mapping, and hands-on specialist remediation to protect yourself and your family—including gaming accounts that often sit at the end of these attack chains.