www.sonoshowmoveis.com.br Listed by alphalocker Ransomware Group

On September 29, 2025, the Brazilian furniture retailer www.sonoshowmoveis.com.br appeared on the leak site of the alphalocker ransomware group with 23 GB of internal files now publicly listed for download.

What's Publicly Reported from Reporting

Public reporting indicates the attackers exfiltrated client records, project documents, and financial documentation before encrypting systems and demanding payment. The leak site entry shows the full 23 GB archive available to anyone who visits the onion address. No exact victim count has been released, but the nature of the data suggests thousands of customer records may be exposed. Available reporting describes the incident as a classic ransomware double-extortion case: encrypt the victim’s network, threaten to publish the stolen data if ransom is not paid.

Why This Matters for You and Your Family

When a company that handles orders, payments, and delivery addresses for ordinary customers is breached, your personal information can end up in the hands of criminals. Names, home addresses, phone numbers, email accounts, and payment details tied to furniture purchases become raw material for identity theft, phishing, or physical scams. Financial documentation and client project files often contain enough detail to impersonate you to banks or government agencies. If you or anyone in your household has shopped with this retailer, your data could already be circulating on dark-web forums.

The Doxxing and Identity-Chain Risk

A single breach rarely stops at one company. Criminals use leaked emails, phone numbers, and addresses to link your gaming usernames, social-media handles, and family members’ accounts into a complete identity chain. Once mapped, these connections allow targeted doxxing, account takeovers, and harassment that can stretch from your email inbox to your children’s online gaming profiles. Credential leaks like this one frequently cascade into gaming account theft because the same password or recovery email is reused across services.

Alphalocker’s Publicly Known Track Record

Public reporting attributes alphalocker with emerging in early 2025 and quickly building a reputation for targeting mid-sized businesses across Latin America and Europe. Notable prior victims include logistics firms and regional retailers whose client databases were dumped after ransom deadlines passed. Their typical playbook begins with phishing or exploited remote-desktop credentials for initial access, followed by rapid exfiltration of documents and databases, then dual pressure through encryption and public shaming on their leak site. The group usually sets short payment deadlines measured in days, after which samples and eventually full archives are released.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what this claimed breach connects to.
• Rotate any password you used at sonoshowmoveis.com.br anywhere else it is reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you is caught within hours instead of months.
• Cover the household with DoxxScan family protection that includes dependents and children’s gaming accounts which often chain back to the same addresses and emails.
• Let remediation specialists handle takedown requests across data brokers and leak sites so you do not have to negotiate with threat actors yourself.

The speed with which ransomware groups publish stolen customer data continues to shrink, leaving ordinary families only a short window to act before their information is packaged and sold. Starting with a DoxxScan gives you both an immediate map of your exposure from the Sonoshowmoveis breach and ongoing protection that includes hands-on remediation by specialists. Its continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, and family coverage—including children’s gaming accounts—helps break the cycle before one leak becomes many.