youX / Drive IQ Listed by fulcrumsec Ransomware Group

On February 9, 2026, Australian connected-vehicle data company youX, formerly Drive IQ, appeared on the leak site of the fulcrumsec ransomware group. Public reporting indicates the attackers exfiltrated internal files during a ransomware incident. While the exact number of people affected remains unknown, anyone whose driving behaviour, insurance records, or personal details passed through youX’s platform could have data now in criminal hands.

What's Publicly Reported from Reporting

youX specialises in telematics and mobility intelligence, collecting data that insurers and fleet operators use for usage-based insurance and risk profiling. The company operates mainly in Australia. Available reporting describes the incident as a ransomware attack in which internal files were taken. The data was later published on the fulcrumsec leak site, accessible via the onion address hosted on ransomware.live. No confirmed total of records or specific victim count has been released by the company or the attackers.

February 9, 2026 marks the date the listing appeared. The exposed material consists of internal files rather than a simple database dump, increasing the chance that spreadsheets, customer lists, contracts or raw telematics extracts may now be circulating in criminal forums.

Why This Matters for You and Your Family

If you or anyone in your household has ever been insured by a company that uses youX’s driving-behaviour analytics, your information may be among the stolen material. This can include names, addresses, policy numbers, vehicle registration details and the precise records of where and how you or your family members drive. Such data makes identity theft, insurance fraud and physical stalking easier.

Even if you never directly signed up with youX, the company’s clients — insurers, fleet operators, automotive partners — routinely share customer driving scores and location history. A single breach therefore ripples outward. Your family’s daily routines, home address, and financial relationships with insurers can suddenly sit inside folders controlled by ransomware operators.

The Doxxing and Identity-Chain Implications

Stolen internal files often contain more than raw data. They can link email addresses, phone numbers, account handles and policy IDs in ways that let attackers build complete identity chains. A gaming username belonging to your child, reused on a family insurance portal, can be traced back to your home address once these files circulate. Credential leaks of this nature frequently cascade into account takeovers across unrelated services.

DoxxScan by GalaxyWarden is designed for exactly these chains. Its continuous monitoring spans 13.1 billion+ breach records and more than 100 platforms, while AI-powered identity-chain mapping connects handles, emails, phones and real-world identities. The service also covers your entire household, including children’s gaming accounts that often become entry points for further doxxing once a breach like youX occurs.

Fulcrumsec Group Track Record

Public reporting attributes the attack to the fulcrumsec ransomware group. The group emerged in recent years and has targeted organisations across multiple sectors by deploying ransomware, exfiltrating sensitive files, and then publishing samples on dedicated leak sites when victims do not pay. Their typical playbook involves initial access through common vulnerabilities or phishing, followed by data theft and public extortion timed to pressure the victim company. Exact prior victims vary, but the group’s leak-site activity follows a consistent pattern of publishing corporate internal documents when ransom demands go unmet.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles and real identity, then use the cleanup to remove what you can.
• Rotate any password you ever used on youX or its partner insurer portals anywhere that same password appears, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring so the next breach exposing your family is caught and acted on within hours instead of months.
• Cover the household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same address and insurance records.
• Let remediation specialists handle repeated takedown requests across data brokers and leak forums so you do not have to chase them yourself.

The youX incident shows how data collected for insurance discounts or fleet efficiency can later surface in ransomware campaigns with direct consequences for ordinary families. Acting quickly on exposed credentials and hidden identity links limits the damage. Start your DoxxScan trial and let its continuous monitoring, identity-chain mapping and hands-on specialists work for your household before the next leak appears.