chfindustries.com
cactusThis record tracks a ransomware attack claimed by the cactus group against chfindustries.com. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
<p>Household Goods.<br><br>“Family-run since 2002, CHF is, at its heart, a community of people with a shared passion for enhancing home life. The company weaves that perspective into every aspect of business, from encouraging work-life balance for employees to creating workplace initiatives and charitable giving programs to help foster responsible working conditions, fair compensation, respect for human rights, and environmental stewardship.”<br><br>Website: <a href="https://www.chfindustries.com/">https://www.chfindustries.com/</a><br><br>Revenue : $253.8M<br><br>Address: 1 Park Ave Fl 9, New York City, New York, 10016, United States<br><br>Phone Number: (212) 951-7800<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/CHFINDUSTRIES/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/CHFINDUSTRIES/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/CHFINDUSTRIES/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/CHFINDUSTRIES/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information, corporate confidential documents, contracts\agreements, production docs\drawings\designs, shipping data, employees personal documents, financial data, customer docs, corporate correspondence, etc.</p><p><img src="/uploads/passport_scan_89bc13afc8.png" alt="passport_scan.png"><img src="/uploads/Docs_DI_61000_Nishat_9756836dd9.png" alt="Docs_DI61000_Nishat.png"><img src="/uploads/CONFIDENTIAL_Ci_CLO_Certified_Manufacturing_Partners_08_2024_eff52d31fe.png" alt="CONFIDENTIAL CiCLO Certified Manufacturing Partners 08_2024.png"><img src="/uploads/CHF_Confidentiality_Agreement_f9bbdf919a.png" alt="CHF Confidentiality Agreement.png"><img src="/uploads/2025_Docusign_CHF_Industries_x_CRUSH_1_8_25_7ed81d48e8.png" alt="2025 Docusign_CHF_Industries_x_CRUSH 1.8.25.png"></p>
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.