Van Ausdall & Farrar, inc Listed by Lorenz Ransomware Group

On July 13, 2022, Van Ausdall & Farrar, Inc. appeared on the Lorenz ransomware group’s public leak site. The listing states that the Iowa-based insurance and financial-services firm suffered a ransomware attack in which internal files were exfiltrated. The disclosure does not quantify how many customer or employee records were taken, nor does it list specific data fields.

Reported Details from the Leak Site

The Lorenz leak page explicitly names Van Ausdall & Farrar, Inc. and claims the company’s internal data was stolen during a ransomware intrusion. No sample files are shown in the public listing, and the exact volume or sensitivity of the stolen material is not detailed. The group typically posts a countdown timer once data is published; that timer had not yet expired when the listing first surfaced. Public reporting on Lorenz indicates the actors follow a double-extortion model: they encrypt victim systems and simultaneously threaten to release stolen documents unless a ransom is paid.

Why This Matters for You and Your Family

If you hold any insurance policies, retirement accounts, or financial products through Van Ausdall & Farrar, your personal information may sit inside the exfiltrated files. Internal files in an insurance firm routinely contain names, addresses, dates of birth, Social Security numbers, policy numbers, bank-account details, and medical or beneficiary information. Even without an exact record count, the exposure creates immediate risk of identity theft, tax fraud, or targeted phishing aimed at you or your household. Children listed as beneficiaries or dependents on family policies can also be pulled into downstream fraud attempts.

The Doxxing and Identity-Chain Risk

Ransomware leaks like this one rarely stay isolated. Once internal spreadsheets or customer databases appear on a dark-web forum, other criminals scrape the material and cross-reference it with earlier breaches. A single leaked email or phone number can link your gaming username, family social-media accounts, and children’s online profiles into a complete identity chain. That chain is then sold or used for account takeovers, SIM-swapping, or doxxing campaigns. Credential leaks of this type frequently cascade into gaming-account compromises because the same password or recovery email is reused across work, banking, and entertainment services.

Lorenz Ransomware Group Track Record

Public reporting attributes the first significant Lorenz activity to late 2020. The group has targeted mid-sized organizations across manufacturing, healthcare, education, and professional-services sectors. Notable prior victims include engineering firms and regional financial providers. Lorenz typically gains initial access through phishing or exploited remote-desktop services, exfiltrates documents before deploying encryption, and then posts victim names on its leak site with a ransom demand. The group’s playbook emphasizes public shaming: if payment is not received, stolen files are released in batches or offered for sale to third parties.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you ever used at Van Ausdall & Farrar anywhere it is reused, and switch to a hardware-backed authenticator app for 2FA instead of SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Cover the household — DoxxScan family coverage extends to dependents and children’s gaming accounts that often chain back to the same address or recovery details.
• Let remediation specialists handle ongoing takedown requests across data-broker sites and leak forums on your behalf.

The incident underscores that even regional service providers can become gateways to personal exposure long after the initial attack. Staying ahead requires more than reactive checks; it demands continuous visibility and expert intervention. DoxxScan by GalaxyWarden delivers that edge through continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Source: https://www.ransomware.live/id/VmFuIEF1c2RhbGwgJiBGYXJyYXIsIGluY0Bsb3Jlbno=