comcom-sgc Listed by Nokoyawa Ransomware Group

On April 9, 2023, the ComCom-SGC — the former Community of Communes of Grand Couronné in France’s Meurthe-et-Moselle department — appeared on the leak site of the nokoyawa ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The exact number of records exposed remains unknown, and the leak-site listing does not detail the specific documents or personal data taken.

Reported Details from the Listing

The primary disclosure on the nokoyawa leak site states that ComCom-SGC suffered a ransomware intrusion in which attackers successfully exfiltrated internal files. No victim count, no list of exposed data types beyond “internal files,” and no ransom demand figure are published on the page. The entry was first observed on April 9, 2023, and remains listed at the time of writing. Public mirrors of the onion site, such as ransomware.live, preserve the original posting without adding unverified claims.

Why This Matters for You and Your Family

When a local government body like a community of communes is breached, the files taken often contain information about residents, employees, contractors, and local businesses. Even without an exact count, any leaked payroll records, tax documents, housing assistance files, or vendor contracts can expose names, addresses, dates of birth, national identification numbers, and banking details. For ordinary families in the Grand Est region, this means your personal information may now sit in an attacker’s archive, ready to be used or sold. The disclosure indicates the data was taken; what happens to it next is outside the victim’s control.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stop at one dataset. A single address, phone number, or email address taken from a municipal file can be combined with information from other breaches to build a complete identity profile. Attackers chain these fragments together: an old utility bill from ComCom-SGC, a reused password from an earlier breach, and a child’s gaming username can quickly lead to account takeovers, targeted phishing, or full doxxing. Credential leaks like this one cascade into gaming account takeovers that expose children’s real names, photos, and home addresses when the same password or recovery email is reused. Once the chain begins, stopping it requires visibility across dozens of platforms and rapid remediation.