Ransomware Group: CACTUS

VICTIM NAME: cornwelltools[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the CACTUS Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page for Cornwell Quality Tools reveals a significant data breach affecting the company, which specializes in hand, power, and lawn-care tools. Founded in 1919 and headquartered in Wadsworth, Ohio, Cornwell has established itself as a leading provider of quality mobile tools. The leaked information indicates a volume of approximately 4.6TB of data purportedly compromised, with potentially less than 1% disclosed on the ransom site. The company boasts a revenue of $218.7 million, underscoring its substantial market presence. However, the exposure of sensitive data poses a severe threat to both the company and its stakeholders.

The leaked data includes various types of sensitive information, such as personal identifiable information (PII) of both employees and customers. It encompasses confidential customer data, corporate documents, contracts, non-disclosure agreements (NDAs), and financial records, which include payroll and tax information. The breach also reportedly contains customer credit card information and Social Security Numbers (SSNs), with over 1 million records involved. This highlights the critical need for organizations to enhance their cybersecurity measures to protect sensitive data. Although specific download links to the information were presented, they are not included in this report in adherence to privacy standards.