www.pomerandboccia.com Listed by Kraken Ransomware Group

On July 15, 2025, the Canadian debt-recovery firm Pomer & Boccia appeared on the leak site of the kraken Ransomware Group. The listing states that internal files were exfiltrated during a ransomware attack on the company, which has operated a debt recovery division from Woodbridge, Ontario, since 1989. Anyone whose personal or financial records passed through the firm in the past 36 years may now have data circulating in criminal channels.

What Public Reporting Shows

Public reporting on the kraken leak site indicates that Pomer & Boccia’s internal documents were stolen and are now published or available for download by other threat actors. The exact number of people affected remains unknown, but debt-recovery operations routinely hold names, addresses, dates of birth, Social Insurance Numbers, bank details, employment records, and family contact information. No evidence has surfaced that the company paid the ransom, and the files remain listed as of the publication date.

Why This Matters for You and Your Family

If you or anyone in your household has ever been contacted by a debt collector working for Pomer & Boccia, your information may now sit in the hands of criminals who buy, sell, and weaponize such records. Debt-recovery files are especially dangerous because they link your identity to financial pressure points—outstanding balances, payment history, employer contacts, and often the names and ages of family members. Once exposed, this data fuels identity theft, loan fraud, and targeted phishing that can reach every member of your home, including children whose details sometimes appear on family accounts.

The Doxxing and Identity-Chain Risk

A single breach like this rarely stays isolated. Criminals combine the newly leaked files with information from earlier breaches to build detailed profiles. An old email from one breach, a phone number from another, and the family address now listed in Pomer & Boccia’s records can quickly map back to your social-media handles, children’s gaming accounts, and even school records. These identity chains let attackers move from simple credential theft to full doxxing—publishing your home address, children’s names, and daily routines—within days or weeks.

Kraken Ransomware Group’s Known Activity

Public reporting attributes the kraken Ransomware Group with emerging in late 2023. The group has claimed responsibility for attacks on healthcare providers, municipal governments, and small-to-medium businesses across North America and Europe. Its typical playbook involves initial access through phishing or exploited remote-desktop services, followed by claimed exfiltration of sensitive files before encryption. The group then demands payment and, if unmet, publishes samples or full datasets on its leak site to pressure victims and invite secondary extortion by other criminals.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, addresses, and online handles that may now connect to the Pomer & Boccia files.
• Rotate any password you ever used on pomerandboccia.com or related portals anywhere it is reused, and switch to 2FA through an authenticator app instead of text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you is flagged within hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become entry points when credential leaks cascade into takeovers and doxxing chains.
• Let remediation specialists handle takedown requests for any exposed personal records appearing on data-broker and underground sites.

The incident shows how quickly a regional debt collector’s breach can ripple into long-term risk for ordinary families. Acting promptly on the exposed data chain gives you the best chance of limiting damage before criminals stitch your records into larger profiles. DoxxScan by GalaxyWarden delivers that protection through continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to map and lock down the connections criminals are already trying to exploit.