Florarte Listed by Medusa Ransomware Group

On August 17, 2025, Brazilian home décor company Florarte appeared on the leak site of the Medusa ransomware group, with attackers claiming to have exfiltrated internal files after a ransomware attack.

What Public Reporting Shows

Public reporting indicates that Medusa posted details of the Florarte incident on its dark-web leak portal. The company, founded in 1992 and headquartered in São Paulo, specializes in artificial plants, decorative items, household linens, and seasonal products. It maintains a catalog of more than 14,000 items and operates nationwide logistics. Available reporting describes the data involved as internal files; the exact volume and specific records exposed have not been independently verified. No confirmed customer or employee personal data types, such as names, emails, or payment information, have been detailed in initial postings.

Why This Matters for You and Your Family

When a company like Florarte suffers a breach, the information it holds about suppliers, partners, customers, and staff can surface in unexpected places. Internal files often contain contracts, invoices, contact lists, or employee details that, once leaked, allow identity thieves to build profiles on ordinary people. If you or your family have ordered from Florarte, worked with them, or appear in any business records they kept, your information could now be in circulation. Credential leaks from related systems frequently cascade into gaming accounts, where children’s usernames and shared family passwords become entry points for further compromise.

The Doxxing and Identity-Chain Risks

Stolen internal documents rarely stay isolated. Attackers link an email from one breach to a username in another, then to a phone number, home address, and finally to social-media profiles or children’s gaming accounts. This identity-chain process turns a single company breach into long-term exposure. Public reporting shows that ransomware leaks often feed underground markets where doxxers combine fragments until they can harass, impersonate, or extort victims. Gaming accounts are especially vulnerable because the same passwords or recovery emails used for online shopping frequently protect those platforms.

Medusa Group’s Public Track Record

Public reporting attributes Medusa’s emergence to late 2021. The group has targeted organizations across multiple countries with a double-extortion playbook: deploy ransomware to encrypt systems, exfiltrate data before encryption, then demand payment to prevent publication. Notable prior victims include healthcare providers, manufacturers, and retailers. Their typical approach involves initial access through compromised credentials or remote desktop vulnerabilities, followed by data theft and a countdown on their leak site if ransom is not paid. Exact success rates remain unconfirmed, but their consistent posting of new victims demonstrates an active operation.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what chains back to the Florarte breach.
• Rotate any password you used at Florarte or related vendor sites, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught in hours, not months.
• Cover the household with DoxxScan family protection that includes dependents and children’s gaming accounts where credential leaks commonly cascade into takeovers.
• Let remediation specialists handle takedown requests across data brokers and exposed records while you focus on securing day-to-day accounts.

The Florarte incident illustrates how quickly business records can affect personal privacy. Taking concrete steps now limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to regain control of your exposed information.