assaabloy.com
cactusThis record tracks a ransomware attack claimed by the cactus group against assaabloy.com. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
<p>Business Services<br><br>“The Assa Abloy AB is the global leader in access solutions. The Group has leading positions in areas such as efficient door openings, trusted identities and entrance automation. ASSA ABLOY's innovations enable safe, secure and convenient access to physical and digital places.”<br><br>Website: <a href="https://www.assaabloy.com/">https://www.assaabloy.com/</a><br><br>Revenue : $14.4B<br><br>Address: 90 Klarabergsviadukten, Stockholm, Stockholm, 111 64, Sweden<br><br>Phone Number: +46 850648500<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/ASSAABLOY/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/ASSAABLOY/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/ASSAABLOY/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/ASSAABLOY/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> <span style="background-color:rgb(16,19,23);color:rgb(235,238,242);font-family:Inter, Twemoji, "Apple Color Emoji", "Segoe UI Emoji", Arial, Helvetica, sans-serif, "Noto Color Emoji";">Confidential information on corporate business strategies and processes, agreements and contracts, personal identifiable information (passports, DL, contacts, home addresses, etc. of executive management and others), various internal confidential documents, audit documents, legal data, financials and payroll, corporate and personal sensitive correspondence, exports from databases, etc.</span></p><p><img src="/uploads/Erik_Pieder_new_passport_FULL_legalized_2384077b3a.png" alt="Erik Pieder new passport FULL, legalized.png"><img src="/uploads/CONFIDENTIAL_MFP_10_July_2024_Submissions_DRAFT_ff68ae4052.png" alt="CONFIDENTIAL MFP10 July 2024- Submissions DRAFT.png"><img src="/uploads/Project_Colossus_SPA_tollgate_240325_462bbafedf.png" alt="Project Colossus_SPA tollgate_240325.png"><img src="/uploads/K089000_H_e0b5e1cfe3.png" alt="K089000H.png"><img src="/uploads/Project_Norrland_Legal_Due_Diligence_Report_Final_Version_20_February_2024_as_updated_20_March_20_d3350aaebf.png" alt="Project Norrland - Legal Due Diligence Report [Final Version 20 February 2024 as updated 20 March 20.png"><img src="/uploads/Info_Nico_Delvaux_Jan2018_PP_28b695620d.png" alt="Info_Nico_Delvaux_Jan2018_PP.png"></p>
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.