www.convention.qc.ca Listed by RansomHub Ransomware Group

On March 5, 2025, the Quebec City Convention Centre’s internal files appeared on the RansomHub ransomware group’s leak site after the organization suffered a ransomware attack. The breach affects anyone whose personal information was stored in the centre’s systems, including past attendees, event registrants, vendors, and employees whose data may now be publicly exposed.

What Public Reporting Shows

Public reporting indicates that internal files were exfiltrated from the convention centre’s network. The Quebec City Convention Centre, one of Canada’s largest venues, hosts up to 200 events each year and collects attendee details, vendor contracts, employee records, and operational data. No exact victim count has been released, and the precise volume or sensitivity of the stolen files remains unclear from available reporting. The data was posted to the RansomHub leak portal, a common tactic used to pressure victims who refuse to pay.

Why This Matters for You and Your Family

When a large public venue like the Quebec City Convention Centre is breached, ordinary people are often the ones exposed. If you or your family have attended conferences, trade shows, weddings, or corporate events there in recent years, your contact information, payment details, or even passport copies provided for registration could be in the leaked files. Once such data leaves a trusted organization, it can be sold, traded, or used to target you with identity theft, phishing, or harassment. Children’s information tied to family registrations is especially concerning because it can anchor long-term tracking.

The Doxxing and Identity-Chain Implications

Credential leaks and internal documents from venues like this frequently contain email addresses, phone numbers, and usernames that link multiple online accounts. Attackers chain these fragments together: an email from the convention centre list can be tested against gaming platforms, social media, and shopping sites. A single exposed record can therefore lead to account takeovers that reveal home addresses, children’s names, and photos. Gaming accounts belonging to you or your kids are particularly vulnerable because the same passwords or recovery emails are often reused across both professional and personal services.

RansomHub’s Publicly Known Track Record

Public reporting attributes the attack to the RansomHub ransomware group. The group emerged in early 2024 and has since targeted organizations across North America and Europe. Notable prior victims include healthcare providers, municipalities, and retail chains. Their typical playbook involves gaining initial access through phishing or exploited remote desktop credentials, exfiltrating sensitive files before encrypting systems, and then publishing samples on their dark-web leak site when the victim does not pay the demanded ransom. They frequently set short deadlines to increase pressure.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what this leak connects to.
• Rotate any password you used when registering for events at the Quebec City Convention Centre and enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught within hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same addresses and recovery details leaked in incidents like this.
• Let remediation specialists handle takedown requests for any personal data already appearing on broker sites or forums connected to the breach.

The incident is a reminder that data collected for one event can haunt families for years if it falls into the wrong hands. Starting with a clear picture of your exposure and putting continuous safeguards in place is the most practical way to limit damage. DoxxScan by GalaxyWarden delivers exactly that: continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects scattered handles to real identities, hands-on remediation by specialists who manage takedowns, and full household coverage that includes children’s gaming accounts vulnerable to credential-stuffing attacks.