www.mgrc.com Listed by Dispossessor Ransomware Group

On November 20, 2022, the ransomware group Dispossessor added www.mgrc.com to its public leak site, claiming that it had exfiltrated internal files from McGrath RentCorp during a ransomware attack. The listing includes contact details for several executives and managers, including Dave Whitney, Tara Wescott, Krissy VanTrease-Whitney, and John Skenesky. Anyone whose information appears in those stolen files, or whose employer uses McGrath RentCorp services, may now be at risk.

Reported Details from the Listing

The Dispossessor leak site states that internal files were exfiltrated from McGrath RentCorp. It does not disclose the total number of records affected, the exact file types stolen, or any ransom demand. The posting simply lists the company domain alongside contact information for four individuals in accounting, human resources, and division management roles. No samples of the stolen data are shown on the public page, and the disclosure does not specify when the intrusion occurred or how the attackers initially gained access.

November 20, 2022 marks the first public confirmation of the breach through the ransomware group’s own site. The leak-site listing does not quantify affected records, leaving both current and former employees, customers, and business partners without a clear picture of their personal exposure.

Why This Matters for You and Your Family

If your personal information was stored in any of the exfiltrated internal files, it could already be in the hands of criminals. HR records, payroll documents, vendor contracts, or customer agreements often contain names, addresses, Social Security numbers, dates of birth, and banking details. Even if you never directly interacted with McGrath RentCorp, your data may have been shared through employment, leasing agreements, or background checks.

Once this type of information leaves a corporate network, it rarely stays contained. It can surface on dark-web markets months or years later, exposing you and your family to identity theft, fraudulent loans, tax fraud, and phishing campaigns tailored with details only an insider file would contain.

Doxxing and Identity-Chain Risks

The inclusion of executive and managerial contact information accelerates doxxing. Attackers can link corporate emails, phone numbers, and names to personal accounts, family members, and home addresses. A single leaked work phone number can lead to SIM-swapping attempts, while an exposed email often unlocks password-reset paths across other services.

Credential leaks of this nature frequently cascade into gaming account takeovers. Children’s usernames, linked emails, or reused passwords from family devices become easy targets once an attacker maps one household member to another. The chain can move from a parent’s work file to a child’s Roblox, Fortnite, or Discord account within hours, resulting in harassment, virtual asset theft, and further personal details being exposed.

Dispossessor’s Known Track Record

Public reporting attributes Dispossessor with emerging in early 2022 as a ransomware and extortion operation. The group typically combines data theft with encryption, then posts victim company names on its leak site when negotiations stall. Notable prior targets have included organizations across manufacturing, technology, and professional services sectors. Their playbook relies on initial access through phishing or remote desktop vulnerabilities, followed by claimed exfiltration of sensitive files before deploying ransomware. Extortion pressure is applied both through public shaming and direct contact with listed executives, using the leaked phone numbers and emails to escalate urgency.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including any ties to McGrath RentCorp records.
• Rotate passwords used at any McGrath RentCorp-related services or any account sharing those same credentials, and switch to 2FA through an authenticator app instead of SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure tied to this incident is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that can chain back to the same leaked contact details.
• Let remediation specialists handle takedown requests for any exposed personal information appearing on data broker sites or extortion platforms.

The breach of McGrath RentCorp demonstrates how quickly corporate data theft becomes a personal threat to any individual whose records were stored inside those internal files. Acting promptly limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to close the gaps this incident has opened.