Dacotah Paper Listed by BlackByte Ransomware Group

On April 25, 2023, Dacotah Paper Co., operating as Range Paper Bemidji Paper & Janitorial Supply, appeared on the leak site of the BlackByte ransomware group. The wholesale distributor of foodservice disposables, janitorial supplies, office products, and electrical goods may have had its internal files exfiltrated during a ransomware attack. The leak-site listing does not specify the volume of data taken or name any individual records, leaving affected customers, suppliers, and employees uncertain about their precise exposure.

Details from the Leak Site

The primary disclosure on the BlackByte leak portal states that Dacotah Paper suffered a ransomware incident in which attackers exfiltrated internal files before encrypting systems. No exact record count is provided, and the listing does not detail which categories of documents were taken. The company’s public notification states it was the victim of a ransomware attack but stops short of quantifying affected individuals or listing specific data types beyond “internal files.” This absence of granular information is common in early-stage extortion listings and leaves the full scope unknown.

April 25, 2023 marks the date the sample data and extortion demand first appeared publicly on the BlackByte site. The disclosure indicates the threat actors followed their standard pattern of stealing data prior to deployment of ransomware.

Why This Matters for You and Your Family

When a regional supplier like Dacotah Paper is hit, the people whose information ends up in the stolen files are often ordinary customers, employees, and vendors. If your name, address, phone number, email, or payment details were stored in the company’s systems, those records may now sit on a criminal server. Even without a precise victim count, the exposure creates immediate risk of identity theft, phishing campaigns, and unwanted solicitations. Families who have done business with the company or whose employers use its services could see their information surface in follow-on fraud attempts months or years later.