B****A Listed by Flocker Ransomware Group

On October 24, 2024, cryptocurrency exchange Coinmama appeared on the leak site operated by the Flocker ransomware group. The listing states that the attackers gained access to B****A.ca and exfiltrated sensitive internal files containing user information. The disclosure indicates that the company was given a short window to negotiate before data would be published.

Details from the Leak-Site Listing

The Flocker leak page directly addresses Coinmama’s management and claims successful intrusion into their systems. It states that internal files were exfiltrated during a ransomware incident but does not specify the exact number of affected records or list the precise data fields involved. The posting follows the group’s standard format: an initial access claim, a sample of allegedly stolen material, and a countdown for extortion. Public mirrors of the onion site, tracked by ransomware.live, captured the listing on the stated date. The notification does not detail how initial access was obtained or whether encryption was deployed alongside data theft.

Why This Matters for You and Your Family

When a cryptocurrency platform suffers a breach, the exposure often reaches ordinary customers who used the service to buy, sell, or transfer digital assets. If your email, phone number, wallet addresses, transaction history, or identity documents were stored in the compromised systems, that information may now be in the hands of criminals. Coinmama users and anyone whose data was shared with the exchange may face heightened risks of targeted phishing, SIM-swapping attempts, or fraudulent account openings. Families that reuse credentials across financial apps, email, and everyday services are especially vulnerable because one leak can cascade into multiple compromises.

Doxxing and Identity-Chain Risks

Exposed user information from cryptocurrency exchanges frequently becomes the starting point for doxxing chains. Attackers link an email or phone number found in the leak to usernames on social media, gaming platforms, and other accounts. Once those connections are mapped, criminals can impersonate victims, pressure family members, or sell the compiled dossiers on dark-web marketplaces. Credential leaks of this type also threaten gaming accounts belonging to you or your children, where the same email and password combinations are commonly reused. A single breach can therefore expand into full identity exposure, including home addresses, family relationships, and financial habits.

Flocker Ransomware Group Track Record

Public reporting attributes the emergence of Flocker to mid-2024. The group has targeted organizations across North America and Europe, focusing on mid-sized companies in technology, finance, and professional services. Their typical playbook combines initial access through phishing or exploited remote desktop services, followed by data exfiltration and dual extortion: demanding payment both to prevent file encryption and to stop publication of stolen documents. Prior victims listed on their leak site include healthcare providers and manufacturing firms, though exact ransom figures are rarely disclosed. The group’s rapid appearance on multiple ransomware trackers suggests an aggressive operational tempo and willingness to publish data when negotiations fail.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real-world identity, with cleanup handled by the service.
• Rotate the password you used at Coinmama anywhere it is reused and immediately enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same credentials and address.
• Let remediation specialists manage takedown requests for any exposed personal documents or broker listings that surface from this incident.

The Coinmama listing is a reminder that even established cryptocurrency services can be compromised with little warning, and the data stolen today may fuel identity crimes for years. Start your DoxxScan trial for continuous monitoring, AI-powered identity-chain mapping, and hands-on assistance from specialists who can protect both your accounts and those of your family, including gaming profiles vulnerable to credential-based takeovers. Acting quickly limits how far attackers can travel down the chain of exposed information.