northernresponse.com
cactusThis record tracks a ransomware attack claimed by the cactus group against northernresponse.com. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Dark Eye.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
<p>Retail.<br><br>“Located in Toronto, Ontario, Canada, Northern Response has been a pioneer in the Canadian market since 1984, building brands and scaling distribution via omni-channel marketing platforms including Live Shopping, TV, Print, Mass + Travel Retail and Online (TikTok, Facebook, Instagram, Twitter, Amazon etc.). ”<br><br>Website: <a href="https://northernresponse.com/">https://northernresponse.com/</a><br><br>Revenue : $17.4M<br><br>Address: 50 Staples Ave, Richmond Hill, Ontario, L4B 0A7, Canada<br><br>Phone Number: (905) 737-6698<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/NRESPONSE/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/NRESPONSE/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/NRESPONSE/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/NRESPONSE/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information, database backups (including customers information), employees and executives personal folders, corporate OneDrive, financial data, legal docs, contracts\NDAs, corporate correspondence, etc.</p><p><img src="/uploads/RS_PASSPORT_5bdc6aba55.png" alt="RS PASSPORT.png"><img src="/uploads/LR_3_dd95e7a48e.png" alt="LR3.png"><img src="/uploads/Northern_Response_International_Ltd_20240331_95831d7424.png" alt="Northern Response (International) Ltd (20240331).png"><img src="/uploads/Personal_and_Confidential_NW_02_28_2023_A_1f8259f3d3.png" alt="Personal& Confidential - NW02.28.2023A.png"><img src="/uploads/KWONG_MING_KO_Driver_Licence_0999d6b004.png" alt="KWONG MING KO_Driver_Licence.png"></p>
Leak Screenshots
1 CAPTUREDCaptured directly from the operator's leak site by our collector. Verdict evidence: listed on the leak site; no evidence of publication yet
Capture history — 2 day(s) tracked. Content is locked.