LATCOM Listed by Blacknevas Ransomware Group

On October 19, 2025, the ransomware group Blacknevas added LATCOM to its leak site and published a 1 TB file listing containing 145,146 internal files stolen from the out-of-home advertising company.

What Public Reporting Shows

Public reporting indicates that Blacknevas exfiltrated the data during a ransomware attack on LATCOM, a firm that specializes in media strategy, planning, and execution of out-of-home advertising campaigns. The group posted a direct link to a GoFile folder and offered to provide any file from the list as proof of access. LATCOM describes itself as maintaining one of the industry’s largest databases for processing consumer and location data used in targeted advertising. The exact number of individuals whose information appears in the files remains unknown, but the volume and nature of the stolen material suggest it includes sensitive business records that could contain personal details.

Internal files and 1 TB of data were taken. No ransom demand deadline has been publicly confirmed in available reporting.

Why This Matters for You and Your Family

When a company that holds large advertising databases suffers a breach, the information inside can include names, addresses, location history, shopping patterns, and other details that advertisers use to target households. If your family has ever been reached by digital billboards, transit ads, or location-based marketing, fragments of your daily movements and preferences may sit inside files now controlled by attackers. Once that data leaves the company’s control, it can be sold, combined with other leaks, or used to build profiles that make identity theft and fraud easier. Ordinary families, not just large corporations, bear the downstream costs when such databases are exposed.

The Doxxing and Identity-Chain Implications

Stolen advertising and location files often contain email addresses, phone numbers, home addresses, and account identifiers that link together. Attackers can use these to map how your work email connects to a personal account, a child’s gaming username, or a family member’s phone number. This creates an identity chain that turns one breach into repeated targeting. Credential leaks like this one frequently cascade into account takeovers on gaming platforms, social media, and email, allowing doxxing that exposes your family’s real-world locations and routines. Children’s gaming accounts are especially vulnerable because parents often reuse passwords or security details across work, home, and family entertainment services.

Blacknevas Track Record

Public reporting attributes the Blacknevas ransomware group with emerging in recent years and following a double-extortion playbook: they encrypt victim systems, exfiltrate data, then threaten to publish it unless a ransom is paid. The group has listed multiple companies on its leak site, typically giving victims a short window to negotiate before releasing samples or full datasets. Their prior victims include organizations whose internal files contained customer records, employee information, and proprietary databases. Available reporting describes their approach as opportunistic, focusing on companies with large volumes of consumer or operational data that can be monetized after initial access is gained through common vulnerabilities or stolen credentials.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what chains back to this incident.
• Rotate any password you used at LATCOM or related advertising services anywhere it has been reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts vulnerable to credential-stuffing attacks from leaks like this one.
• Let DoxxScan remediation specialists handle takedown requests across data brokers and exposed records while you focus on securing your own accounts.

The incident shows that even specialized advertising databases can quickly become public fuel for identity thieves and doxxers. Taking concrete steps now limits how far this claimed breach can reach your family. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to regain control of your exposed information.