Thompson Davis & Co Listed by bianlian Ransomware Group

On August 14, 2024, Thompson Davis & Co., an independent private asset manager, appeared on the leak site of the BianLian ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The disclosure does not specify the number of people affected or list exact data types beyond claiming that internal files were taken.

Details from the Leak Site

The primary disclosure on the BianLian leak site indicates that Thompson Davis & Co. suffered a ransomware incident in which attackers exfiltrated internal files before encrypting systems. No victim count is provided, and the listing does not detail the volume or specific categories of information stolen. The site presents the company’s data as proof of compromise and typically sets a deadline for payment before full publication. Public reporting on BianLian shows this pattern is consistent: initial access, data theft, encryption, and then extortion through public shaming on their onion site.

Why This Matters for You and Your Family

When an asset manager like Thompson Davis & Co. loses control of internal files, the exposure can reach clients whose financial records, account numbers, tax documents, or personal identifiers sit inside those systems. Even if the exact contents remain unknown, the breach creates immediate risk for anyone who has worked with the firm. Your family’s investment history, contact details, and related financial data could now sit in an attacker’s archive, ready for sale or further extortion. Internal files exfiltrated in these incidents often contain spreadsheets, emails, and scanned documents that tie names, addresses, dates of birth, and Social Security numbers to financial activity.

Doxxing and Identity-Chain Risks

Stolen internal files rarely stay isolated. Attackers or buyers on underground forums combine them with other leaks to build complete identity profiles. An email address from this claimed breach can link to your brokerage login, which then chains to social-media handles, phone numbers, and children’s accounts. Once mapped, these connections enable account takeovers, targeted phishing, and doxxing campaigns that expose your home address or family relationships. Credential leaks like this one frequently cascade into gaming accounts belonging to you or your children, where stolen passwords grant entry and lead to further personal information harvesting.

BianLian’s Known Track Record

Public reporting attributes BianLian’s emergence to mid-2022. The group has targeted healthcare providers, financial services firms, and professional-services organizations across the United States and Europe. Their typical playbook begins with phishing or exploitation of remote-desktop services for initial access, followed by lateral movement to locate valuable data. After exfiltration they deploy ransomware to encrypt systems and then demand payment to prevent release of the stolen files. BianLian often lists victims on their dark-web site within weeks of the intrusion and escalates pressure by publishing sample documents if ransom is not paid.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you used at Thompson Davis & Co. wherever it appears elsewhere, and switch to 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same address or credentials.
• Let remediation specialists manage takedown requests for any exposed personal documents found on data-broker or extortion sites.

The incident underscores how quickly financial-service providers can become gateways to personal exposure. A single listing on a ransomware site can set off months of identity-related risk if left unmonitored. Start your DoxxScan trial today for continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts. This combination helps break the link between yesterday’s breach and tomorrow’s compromise.