On November 18, 2024, The Recycler Core appeared on the ElDorado ransomware group's leak site, claiming that the Virginia-based scrap-metal and catalytic-converter supplier had been hit by a ransomware operation. The company, which reported $20.4 million in revenue last year, supplies cores, used equipment, and scrap materials to multiple industries. The listing states that internal files were exfiltrated during the attack; the exact number of records exposed and the specific data types remain undisclosed by both the group and the victim.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch The Recycler Core
Get alerted the next time The Recycler Core files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about The Recycler Core’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Primary Disclosure Details
The ElDorado leak site entry, mirrored on ransomware.live, explicitly lists The Recycler Core and claims successful data exfiltration following a ransomware deployment. It does not quantify affected records, name the systems compromised, or reveal the ransom demand. The disclosure indicates that internal files were taken; no further technical details about the initial access vector or exfiltration method are provided in the primary listing. As of the publication date, The Recycler Core has not issued a public breach notification detailing the incident.
Why This Matters for You and Your Family
When a company like The Recycler Core that handles supplier contracts, customer invoices, and employee payroll data is breached, the information can quickly reach identity thieves, fraud rings, and extortionists. Even though the precise data set is unknown, internal files almost always include names, addresses, Social Security numbers, financial account details, or vendor records that can be used to file fraudulent tax returns, open accounts in your name, or pressure you with personalized threats. If you or your family have done business with scrap-metal recyclers, catalytic-converter suppliers, or any of The Recycler Core’s industrial customers, your information may be among the stolen material. The breach therefore creates direct exposure for ordinary people whose data travels through supply chains most never think about.
Doxxing and Identity-Chain Risks
Stolen internal files frequently contain email addresses, phone numbers, and employee or customer usernames that link disparate online handles to real-world identities. Once attackers correlate these fragments, they can hijack accounts across services, escalate privileges, and build detailed profiles for long-term fraud or extortion. Credential leaks of this kind routinely cascade into gaming-account takeovers; children’s usernames and shared family passwords become entry points for further doxxing. The identity chain that begins with one supplier breach can expose your home address, family relationships, and financial footprint faster than most people realize.