UAM Listed by datacarry Ransomware Group

On November 21, 2025, aviation services firm Universal Asset Management appeared on the leak site of the datacarry ransomware group. The company, which manages the leasing, trading, and dismantling of commercial aircraft, is claimed to have had internal files exfiltrated during a ransomware attack. While the exact number of people whose information may have been exposed remains unknown, anyone whose personal or financial records passed through UAM’s systems could be affected.

Reported Details from Reporting

Public reporting indicates that UAM’s internal files were taken and later published on the datacarry leak site. The incident follows the typical ransomware pattern of encryption followed by data exfiltration and extortion. No confirmed total of records or specific victim count has been released. Available reporting describes the breach as involving documents that could contain employee, client, or vendor information, though the precise data types have not been independently verified.

Why This Matters for You and Your Family

When a company like Universal Asset Management suffers a breach, the information exposed often includes details that can be used to target you or your family members. Internal files frequently contain names, addresses, dates of birth, Social Security numbers, financial records, or contact information for customers and staff. Once that data leaves the company’s control, it can appear on dark-web markets within weeks. Criminals combine it with other leaks to build profiles that lead to identity theft, loan fraud, or phishing attacks aimed at your household. Even if you never flew on one of their aircraft, your data may have been collected during routine business dealings, vendor relationships, or employee benefits programs.

The Doxxing and Identity-Chain Risks

Stolen internal files rarely stay isolated. Attackers map connections between corporate emails, personal addresses, phone numbers, and online handles. A single leaked document can link your work email to your home address, your children’s names, or family gaming accounts. These chains allow criminals to move from one platform to another, turning a corporate breach into personal doxxing. Credential leaks of this kind frequently cascade into account takeovers on email, banking, and gaming services. Gaming accounts belonging to you or your children are especially vulnerable because they often reuse passwords or security questions drawn from the same personal data exposed in business breaches.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity, then use the cleanup to remove what you can.
• Rotate any password you used at Universal Asset Management or any related vendor account, and switch on two-factor authentication through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours instead of months.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same address or parent credentials.
• Let remediation specialists handle takedown requests across data brokers and leak sites while you focus on securing your own accounts.

The datacarry group’s public track record shows it emerged in 2024 and has targeted organizations across multiple industries with a consistent playbook: gain initial access, exfiltrate sensitive files, encrypt systems, then post samples on its leak site to pressure victims into payment. Public reporting attributes earlier victims in healthcare, manufacturing, and professional services to the same group, though exact attribution can shift as tactics evolve.

Incidents like the Universal Asset Management breach remind us that corporate leaks quickly become personal threats. Taking deliberate steps now limits how far attackers can travel down the identity chain that begins with someone else’s files. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Starting that process promptly gives you and your family a practical advantage against the next wave of exposure.