Tlantic Listed by Mallox Ransomware Group

On June 24, 2023, Portuguese IT services firm Tlantic appeared on the leak site of the Mallox ransomware group. The listing states that internal files were exfiltrated during a ransomware attack and offers a 7-zip archive for download along with its password. The leak-site posting does not specify the number of records affected or list exact data types beyond “internal files.”

Primary Disclosure Details

The Mallox leak page states that Tlantic was hit by a ransomware operation and that attackers successfully removed data before encryption. It provides a direct download link hosted on anonfiles.com, the file name tlantic.7z, and the password 77UXD&CNqq@c+2rX$46~Y895rQX7Th7j. No victim count or detailed inventory of stolen information is published on the site. The disclosure indicates the data was taken in the course of a standard ransomware double-extortion sequence: encrypt systems, threaten to publish the stolen material unless ransom is paid.

Why This Matters for You and Your Family

When a company that handles payroll, HR records, or customer contracts for other businesses is breached, the ripple effects reach ordinary people. Your employment details, tax information, or client contracts may sit inside the “internal files” now circulating. Even though the exact contents remain unknown, the mere presence of corporate data on a ransomware leak site increases the chance that your personal information will surface in future fraud or identity-theft attempts. Any Tlantic client or employee should treat this incident as a personal exposure event.

Doxxing and Identity-Chain Risks

Ransomware groups rarely stop at one leak. Once internal files leave a company network they often travel through multiple underground forums, fueling long-term doxxing chains. An email address found in one document can be linked to your social-media handles, phone numbers, and children’s gaming accounts. That linkage turns a corporate breach into a household identity compromise. Credential leaks of this kind frequently cascade into account takeovers on Steam, Roblox, or Discord, exposing younger family members to harassment or further data theft.

Mallox Group Track Record

Public reporting attributes Mallox (also known as TargetCompany in earlier campaigns) with emerging in late 2021. The group has listed dozens of victims across manufacturing, healthcare, and technology sectors. Its typical playbook begins with phishing or exploitation of remote-desktop services for initial access, followed by claimed exfiltration of sensitive files and deployment of its custom ransomware. Mallox then waits a short period before publishing samples on its leak site if the target refuses to pay. The group’s extortion style is direct: publish proof-of-compromise screenshots and offer the full archive for anyone willing to download it, thereby increasing pressure on the victim organization.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you ever used at Tlantic or its client portals anywhere it has been reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure that touches you or your family is caught and acted on within hours.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle repeated takedown requests across data-broker sites and underground forums where Tlantic files may reappear.

The Tlantic listing is a reminder that corporate ransomware incidents quickly become personal identity risks. One set of stolen files can link your professional life to your family’s online presence for years. Starting with a DoxxScan gives you both immediate visibility into those connections and ongoing protection plus hands-on help from specialists who know how these chains operate. Its continuous monitoring, AI-powered identity-chain mapping, and household coverage—including children’s gaming accounts—make it a practical defense against the long tail of incidents like this.