The BravoX ransomware group claims to have breached multiple organizations, listing six new targets on their data leak site. The victims span France, Canada, and the United States, affecting sectors ranging from legal services and food processing to marketing and healthcare.
The latest list of alleged victims posted by the group includes:
-
VATIER (🇫🇷): An international law firm providing legal services to corporate and private clients.
-
John O’s Foods (🇨🇦): A major fish processing and supply company based in Canada.
-
FUSION HILL (🇺🇸): A marketing and advertising agency specializing in the healthcare and financial sectors.
-
SPEC (🇺🇸): A manufacturer of industrial radiography equipment and gamma radiation sources.
-
WVPCA (🇺🇸): The West Virginia Primary Care Association, a network supporting community health centers.
-
Hood River Dental (🇺🇸): A dental clinic offering general and advanced oral health services.According to the actor, the compromised data is extensive. While the group threatens all victims, they have provided specific details regarding the data allegedly stolen from Fusion Hill. The compromised data reportedly includes:
-
Third-Party Client Assets: Design systems, research, and documents related to Optum (UnitedHealth), U.S. Bank, SiriusXM, Pfizer, and Wells Fargo.
-
Personal Identifiable Information (PII): Employee resumes, direct deposit details, life insurance beneficiary forms, and payroll audits.
-
Medical & Research Data: HIPAA-protected data, veteran health studies, and confidential interviews.
-
Corporate Secrets: Financial forecasts (2019-2025), proprietary “playbooks,” and methodologies.
-
Legal Documents: Client contracts, NDAs, and case files (affecting Vatier and others).
