Ultralife Corporation Listed by Avoslocker Ransomware Group

On February 11, 2023, Ultralife Corporation (NASDAQ: ULBI) appeared on the leak site operated by the AvosLocker ransomware group. The listing states that the publicly traded battery manufacturer suffered a ransomware attack in which internal files were exfiltrated. The company, headquartered at 2000 Technology Pkwy, Newark, NY 14513, has not publicly quantified how many individuals may be affected, nor has it released a detailed breach notification at the time of the listing.

Details in the Leak-Site Listing

The AvosLocker portal, tracked via ransomware.live, explicitly names Ultralife Corporation and claims that client information, design documents, manufacturing records, financial data, accounting files, and HR materials were taken. The disclosure indicates the data was stolen during a ransomware incident but does not specify the exact volume of records or the precise date of initial compromise. No sample files appear to have been published on the site at the time the listing went live, and the group set an implicit deadline for payment before any further release—an approach consistent with their standard extortion model.

Internal files exfiltrated is the only category confirmed by the primary source. Whether the stolen material includes personally identifiable information such as employee Social Security numbers, customer addresses, or vendor contracts remains unstated in the listing itself.

Why This Matters for You and Your Family

When a company like Ultralife is hit, the people whose data ends up in the files—employees, former employees, clients, and business partners—face direct exposure. Even though the exact number of affected individuals is unknown, any HR or client records that were taken could contain names, addresses, dates of birth, contact details, and financial account information. Once that material leaves the company’s control, it can be traded, sold, or used to target you or members of your household with identity theft, phishing, or impersonation scams.

Ordinary families are routinely caught in these corporate incidents because employers and vendors collect far more personal data than most people realize. If your employer, your doctor’s billing office, or a supplier you use does business with Ultralife, your information could be among the records now held by criminals.

The Doxxing and Identity-Chain Risk

Stolen internal files frequently serve as the first link in a doxxing chain. Threat actors combine HR spreadsheets with later breaches that expose passwords, phone numbers, or email addresses. The result is a detailed profile that can be used to hijack accounts, file fraudulent tax returns, or open new lines of credit in your name. Children’s records are not immune; a parent’s employment file can list dependents, school information, or even gaming usernames that attackers then target for credential-stuffing attacks.

Credential leaks like this one cascade into account takeovers across gaming platforms, social media, and email. A single exposed work email paired with a reused password can give attackers the foothold they need to map an entire household’s digital footprint.

AvosLocker’s Known Track Record

Public reporting attributes the first activity by AvosLocker to mid-2021. The group has targeted organizations across North America, Europe, and Asia, with prior victims including manufacturing firms, healthcare providers, and professional-services companies. Their typical playbook begins with initial access gained through phishing, remote-desktop protocol brute-force, or exploited vulnerabilities, followed by claimed exfiltration of sensitive folders before encryption. They then demand payment in Bitcoin and threaten to publish the data on their leak site if the ransom is not paid. AvosLocker has shown willingness to negotiate but also follows through with partial or full data dumps when victims refuse or miss deadlines.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what this incident may have exposed about you and your family.
• Rotate any password you used at Ultralife or any of its partner systems, then enable two-factor authentication everywhere with an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become the next link in doxxing chains after a parent’s employer is breached.
• Let remediation specialists handle data-broker takedown requests and opt-out processes on your behalf while you focus on securing your own accounts.

The Ultralife listing is a reminder that ransomware groups continue to treat stolen corporate data as a marketable asset long after the initial attack. Protecting yourself means assuming your information will surface eventually and taking concrete steps now rather than waiting for the next notification. Start your DoxxScan trial today; its continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage give you and your family a practical defense against the expanding ripple effects of incidents like this one.