Group:
Frag
Discovered by ransomware.live: 2025-03-24
Estimated attack date:
2024-10-21
Country:
Description:
Business Consulting and Services
CMI is an Oregon Corporation headquartered in Portland, Oregon. Kaye Youngren, its C.E.O. and Owner founded the company in 1972 under the name of Condominium Management, Inc. The name of the company was changed in 1993 to Community Management, Inc., to more accurately reflect the broad base of clients CMI serves.
Our team was successful in extracting the following documents:
Contact details of customers and employees
Financial statements of the company
Internal company correspondence
Employee insurance documents
HR documents
The icing on the cake:
Driver licenses
Infostealer activity detected by HudsonRock
Compromised Employees: 0
Compromised Users: 1
Third Party Employee Credentials: 0
External Attack Surface:
1
DNS Records:
The following DNS records were found for the victim's domain.
- d190133a.ess.barracudanetworks.com.
- d190133b.ess.barracudanetworks.com.
- v=DMARC1; p=none; fo=1; rua=mailto:rua+communitymgt.com@dmarc.barracudanetworks.com; ruf=mailto:ruf+communitymgt.com@dmarc.barracudanetworks.com
- v=spf1 mx a:mail.communitymgt.com include:spf.ess.barracudanetworks.com include:spf.protection.outlook.com -all
- v=verifydomain MS=1200799
- 920c26bd908f31910f1cf5eb1959bbf6
- MS=20520D1A973E28E16817576027CD1398D3B52FF9
- bxYLMxEln7QFzqaAWThperHToGN+VP26DQlHgbim81FQQO9gC1q+zDwksxFlt7dMjcdED5zHkZL5YxN5bIJDDg==
- google-site-verification=R_QEDACnecT5qH-2Hp-W7HASpdY_DWDbSLJgMd3phSM
- in76bqd1tlro3r6uh44bul600k
- kddnpmkt5nbe7nia265gteujvg
- lnkck3a6f13m84udgvjse7vvun
Cloud / SaaS Services Detected
Microsoft 365
Legal Disclaimer:
Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
This platform indexes only publicly visible information posted by ransomware operators and
open web sources without accessing or obtaining the underlying stolen content.
The service is provided to support public awareness, legitimate research, and cyber-resilience.
No stolen personal or confidential data is collected or distributed via this site.