Cator, Ruma & Associates falls victim to RHYSIDA Ransomware

⚠ Disclaimer
This report includes actual screenshots and/or text that may include unredacted personally identifiable information (PII) gathered from publicly available sources. The sensitive information presented within this report is intended solely for cybersecurity awareness and threat intelligence purposes. Dark Web Informer explicitly condemns unauthorized access, distribution, or misuse of the personal data displayed or referenced here. Users must treat exposed data responsibly and ethically.

📌 Overview
The ransomware group RHYSIDA has listed Cator, Ruma & Associates, a U.S.-based mechanical and industrial engineering firm, as their latest victim. Founded in 1959 and based in Denver, Colorado, the company serves architects and clients across the western and central United States. RHYSIDA claims to have exfiltrated sensitive internal documentation and personal identification records.

A public listing on the group’s Tor-based blog advertises the stolen data at 15 BTC, with a strict “one buyer only” policy and no option for reselling. The group has set a countdown of approximately 7 days before the data is published.

Key Details