Dotcom Distribution Listed by Royal Ransomware Group

On May 23, 2023, logistics company Dotcom Distribution appeared on the leak site of the Royal Ransomware group. The listing states that internal files were exfiltrated during a ransomware attack and that roughly 40 GB of data has been downloaded by visitors to the site. The company provides fulfillment and logistics services to both emerging and established e-commerce brands; anyone whose personal or order information passed through those systems may now be exposed.

Details from the Leak Site

The Royal Ransomware leak page for Dotcom Distribution states that attackers gained access to the company’s network, encrypted systems, and exfiltrated internal files before posting proof on their onion site. The disclosure does not specify the exact types of records taken or the total number of individuals affected. It simply lists the victim, shows a sample of the stolen data, and notes that 40 GB has already been downloaded. No ransom demand figure or payment deadline is displayed in the current listing.

Why This Matters for You and Your Family

When a logistics provider that handles customer orders, shipping addresses, payment details, and contact information is breached, the ripple effects reach ordinary consumers. Your name, home address, phone number, email, and possibly partial payment data may have been stored in the very files now circulating among criminals. Even if you never shopped directly with a brand that uses Dotcom Distribution, shared vendor networks mean your information can still surface. Internal files exfiltrated in attacks like this often contain spreadsheets that link customers across multiple brands, turning one breach into dozens of future risks.

The Doxxing and Identity-Chain Implications

Stolen logistics records create long identity chains. An address tied to an order can be correlated with an email address, which is then matched to usernames on gaming platforms, social media, or forums. Attackers automate this linkage, building full profiles that lead to account takeovers, SIM-swapping attempts, or targeted phishing. Because children’s accounts are frequently registered with a parent’s email or home address, a single logistics breach can expose an entire household. Credential leaks of this nature routinely cascade into gaming account compromises where thieves steal in-game purchases or use the accounts to spread malware.