TORMAX Listed by losttrust Ransomware Group

On September 26, 2023, Swiss automatic-door manufacturer TORMAX appeared on the leak site of the losttrust ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The company, a division of the privately held LANDERT Group, has not published a public breach notification, and the leak-site entry does not disclose the number of records affected or the precise data categories involved.

Reported Details from the Listing

The losttrust leak site entry, first indexed on September 26, 2023, claims successful data exfiltration from TORMAX following a ransomware deployment. It identifies the victim as a leading global supplier of automatic door systems with installations in airports, hotels, shopping malls, and apartment buildings across dozens of countries. No sample files have been published at the time of writing, and the listing does not quantify the volume or specific types of internal documents taken. The disclosure indicates that negotiations have either failed or been ignored, a common precursor to full data publication on these platforms.

Why This Matters for You and Your Family

When a manufacturer like TORMAX suffers a breach, the exposed internal files can contain supplier contracts, employee records, customer installation details, and partner information. If your workplace, apartment building, or children’s school uses TORMAX doors, your name, address, or contact data may sit inside those files. Even without exact record counts, the exposure creates a persistent risk: once internal documents leave the corporate network they can surface on dark-web markets for years. Any email, phone number, or physical address contained in the stolen material becomes raw material for phishing, identity theft, or targeted scams against you and your household.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stop at one company. A single leaked spreadsheet can link an employee’s work email to personal accounts, revealing family member names, home addresses, and even children’s dates of birth. These fragments feed automated doxxing chains that correlate handles across gaming platforms, social media, and data-broker profiles. The result is a detailed dossier that stalkers, fraudsters, or extortionists can exploit. Credential leaks of this nature frequently cascade into account takeovers on personal and family devices, especially gaming accounts that often reuse corporate passwords.

Losttrust’s Publicly Known Track Record

Public reporting attributes the emergence of losttrust to mid-2023. The group has targeted mid-sized manufacturing, logistics, and technology firms, typically gaining initial access through phishing or exploited remote-desktop services. After exfiltration they deploy ransomware, then list victims on their leak site with countdown timers. Their playbook combines data theft for double extortion with selective publication of internal documents to pressure payment. While the group is still relatively new, its rapid addition of victims across Europe and North America shows an opportunistic rather than highly specialized operation.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real-world identity, then use the cleanup to remove what you can.
• Rotate any password you ever used at TORMAX or LANDERT Group wherever it appears, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts vulnerable to the same credential chains.
• Let remediation specialists handle ongoing takedown requests for any personal information that appears on data-broker or extortion sites.

The TORMAX incident underscores that even manufacturers of physical infrastructure now generate digital dossiers rich enough to fuel long-term identity abuse. Staying ahead requires more than changing a password; it demands visibility into how your information travels once it leaves corporate systems. DoxxScan by GalaxyWarden delivers that visibility through continuous monitoring across 13.1 billion+ breach records and over 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. One short forward-looking step today can prevent months of fallout tomorrow.