www.imgenterprises.com Listed by ransomhub Ransomware Group

On February 7, 2025, the ransomware group RansomHub added www.imgenterprises.com to its leak site, claiming that it had exfiltrated internal files from the Florida-based horticulture and logistics company.

What Public Reporting Shows

Public reporting indicates that IMG Enterprises, which operates Cherrylake, Cherryridge, and Reliable Trucking divisions, suffered a ransomware attack in which attackers copied internal documents before encrypting systems. The exact number of people whose information was taken remains unknown. Available reporting describes the exposed material as internal files rather than a specific list of customer records, employee payroll data, or other structured datasets. No ransom demand amount or negotiation details have been publicly disclosed.

The listing appeared on the RansomHub leak portal, a dark-web site used by the group to pressure victims. As of the publication date, the data has not been broadly distributed beyond the leak page itself.

Why This Matters for You and Your Family

When a company that handles plant sales, transportation contracts, or nursery operations is breached, the information it holds often includes names, addresses, phone numbers, and sometimes payment details of everyday customers and suppliers. If you or your family have done business with IMG Enterprises, Cherrylake, Cherryridge, or Reliable Trucking, your contact information may now sit in a ransomware leak folder.

That exposure rarely stays isolated. One leaked address or phone number can be combined with data from earlier breaches to build a profile that criminals use for identity theft, phishing, or harassment. For families, the risk extends to shared email accounts, joint credit cards, or children’s accounts that reuse the same passwords or contact details.

The Doxxing and Identity-Chain Implications

Ransomware leaks like this one frequently become the starting point for doxxing chains. Attackers or opportunistic criminals scrape the files for email addresses, usernames, or phone numbers, then search underground forums for matches. A single credential from an IMG Enterprises supplier portal can lead to an employee’s personal email, a linked social-media handle, and eventually a home address.

Credential leaks cascade into account takeovers, especially for gaming platforms where children often use family email addresses or phone numbers. Once an attacker controls one account, they can reset others, harvest more personal data, and sell or publish the full chain. This is why continuous monitoring that traces these connections matters.

RansomHub’s Publicly Known Track Record

Public reporting attributes RansomHub’s emergence to mid-2024. The group has since listed hundreds of victims across sectors including healthcare, manufacturing, and local government. Notable prior targets include companies whose employee and customer data later appeared on multiple leak sites. Their typical playbook involves initial access through compromised credentials or vulnerable remote-desktop services, followed by exfiltration of internal files, deployment of ransomware, and then dual extortion: demanding payment to decrypt systems and a second fee to prevent publication of stolen data. When victims do not pay, RansomHub posts samples or full archives on its leak site, as occurred with IMG Enterprises.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what this claimed breach connects to.
• Rotate any password you used at IMG Enterprises, Cherrylake, Cherryridge, or Reliable Trucking and enable 2FA with an authenticator app everywhere that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information appears it is caught within hours rather than months.
• Cover the household with DoxxScan family protection that includes dependents and children’s gaming accounts, which often chain back to the same addresses and emails exposed in breaches like this one.
• Let remediation specialists handle takedown requests for any personal information already circulating on data-broker or leak sites.

The IMG Enterprises breach is a reminder that data stolen from businesses you deal with can quickly become a personal problem. Taking concrete steps now limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to understand and close the gaps this incident created for you and your family.