uniamarmores Listed by funksec Ransomware Group

On December 07, 2024, Brazilian natural-stone company Uniamarmores appeared on the leak site operated by the funksec ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The exact number of records exposed remains unknown, and the leak-site page does not detail which specific documents or data types were taken.

Reported Details from the Listing

The funksec leak site, accessible via the onion address hosted on ransomware.live, publicly named Uniamarmores and asserted that the company’s internal files had been stolen. No sample data appears to have been published at the time of the initial listing, and the disclosure does not specify the volume of information involved or name the precise systems that were compromised. The entry simply confirms a successful ransomware deployment followed by data exfiltration. Public reporting on funksec indicates the group follows a double-extortion model: encrypting victim systems while simultaneously threatening to release stolen files unless a ransom is paid.

Why This Matters for You and Your Family

Even when a breach targets a business, ordinary customers, suppliers, and employees can be affected. If you have purchased marble or stone products from Uniamarmores, worked with the company, or had your contact details stored in its files, your personal information may now sit in an attacker-controlled archive. Internal files frequently contain invoices, contracts, shipping addresses, phone numbers, email accounts, and sometimes copies of identification documents. Once that material leaves the company’s control, it can be traded, sold, or used to launch further attacks against you and your household.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stop at one company. A single exposed email or phone number can be correlated with gaming usernames, social-media handles, and family addresses to build a complete identity chain. Attackers then target linked accounts — including children’s gaming profiles — to escalate pressure or commit identity theft. Credential leaks of this kind frequently cascade into account takeovers across unrelated services. Continuous monitoring that maps these connections is essential because the data rarely surfaces in public breach lists immediately.

Funksec’s Known Track Record

Public reporting attributes funksec’s first notable activity to mid-2024. The group has since listed dozens of victims, many of them small-to-medium businesses in manufacturing, logistics, and professional services. Typical playbook begins with initial access gained through compromised remote-desktop credentials or phishing, followed by rapid lateral movement, data exfiltration, and deployment of ransomware. Funksec’s extortion style relies on short deadlines and direct publication on its leak site when payments are not received. The group does not appear to be affiliated with larger ransomware families, operating instead as an independent operator that reuses commodity tools.

What to do

• Run a DoxxScan to map every link between your email addresses, phone numbers, handles, and real-world identity so you can see exactly what this leak may have exposed.
• Rotate any password you used at Uniamarmores or related vendor portals and enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information appears it is caught within hours rather than months.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become the next link in doxxing chains after credential leaks like this one.
• Let remediation specialists handle data-broker takedown requests and follow-up notifications on your behalf while you focus on securing your own accounts.

The incident underscores that ransomware groups continue to treat stolen corporate files as public bargaining chips. Protecting yourself means assuming your information will surface eventually and maintaining constant visibility across the platforms where it travels. Start your DoxxScan trial today; its identity-chain mapping, continuous monitoring, and hands-on specialist support give you and your family the practical defense needed when breaches like the Uniamarmores listing occur.