West Nova Fuels & Superline Fuels Listed by Global Secret Group Ransomware Group

On July 26, 2026, Canadian fuel retailer West Nova Fuels & Superline Fuels was formally listed on the leak site of the Global Secret Group ransomware operation. The company, which operates gas stations, convenience stores, and liquor outlets across Nova Scotia, had 45.8 GB of internal files exfiltrated. The disclosure indicates that 114,200 files and 2,672 folders were taken during a ransomware attack. The exact number of people whose personal information is contained in those files remains unknown.

Details from the Leak Site Listing

The primary disclosure on the Global Secret Group leak site states that the attackers successfully exfiltrated internal files from West Nova Fuels & Superline Fuels prior to encryption. The listing includes screenshots and a file tree summary showing 45.8 GB of data across 114,200 files and 2,672 folders. No specific categories of stolen data, such as customer records, employee payroll, or supplier contracts, are detailed in the public listing. The notification does not quantify how many individuals are affected, nor does it specify whether payment card data, driver’s licence numbers, or insurance information were taken.

The company’s website, westnovasuperline.ca, describes a network of fuel and retail locations serving communities throughout the province. With an estimated annual revenue of $18.9 million and 51–200 employees, the breach is likely to contain a mix of employee, customer, supplier, and operational records typical of mid-sized regional fuel retailers.

Why This Matters for You and Your Family

If you live in Nova Scotia and have purchased fuel, groceries, or liquor at any of the company’s locations in recent years, your personal information may now be in the hands of extortionists. Even when exact record counts are not published, ransomware groups routinely harvest names, addresses, phone numbers, email addresses, dates of birth, and payment details during these intrusions. Any one of those pieces can be used to commit identity theft, file fraudulent tax returns, or open accounts in your name.

July 26, 2026 marks the date the data was made public on the leak site. Families who have done business with West Nova Fuels or Superline Fuels should treat this incident as a confirmed exposure of their information until proven otherwise.

Doxxing and Identity-Chain Risks

Internal files from fuel retailers frequently contain spreadsheets that link customer loyalty accounts, delivery addresses, phone numbers, and email addresses. Once published on a ransomware leak site, this information becomes searchable on multiple underground forums. Attackers can chain these details with other breaches to build complete identity profiles. A single leaked email or phone number from this incident can unlock additional accounts, including online banking, government services, and retail logins.

Credential leaks of this nature also cascade into gaming platforms. Children’s accounts tied to a parent’s email or phone number become easy targets for takeover, leading to further doxxing, harassment, and social engineering. The real risk is not a single breach but the compounding effect across dozens of exposures over time.

Global Secret Group’s Known Track Record

Public reporting attributes the Global Secret Group’s first notable campaigns to late 2024. The group has since targeted mid-sized organizations across North America and Europe, with a focus on retail, manufacturing, and logistics companies. Their typical playbook involves initial access through compromised remote desktop protocol credentials or phishing, followed by deployment of ransomware and exfiltration of sensitive files. After encryption, they wait a short period before publishing samples on their leak site to pressure victims into payment. The group’s extortion style combines data publication threats with direct contact to company executives and, in some cases, affected individuals.

What to do

• Run a DoxxScan to map every link between your email addresses, phone numbers, usernames, and real identity, then use the no-subscription cleanup to remove what you can.
• Enable continuous DoxxScan monitoring across 15.4B+ breach records and 100+ platforms so the next time your information appears it is caught and acted on within hours.
• Rotate any password you have reused at westnovasuperline.ca or related fuel loyalty programs, and secure those accounts with a 2FA authenticator app instead of SMS.
• Cover your entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same addresses and phone numbers exposed in breaches like this.
• Let remediation specialists handle ongoing takedown requests for any personal documents or contact details that surface on data broker sites or forums.

The exposure of 45.8 GB of internal files from a regional Canadian fuel company demonstrates how quickly everyday consumer data can move from a corporate server to public extortion sites. Staying ahead of these cascading risks requires more than reactive checks. DoxxScan’s continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage—including children’s gaming accounts—gives families a practical way to reduce their exposure over the long term.