Contact us Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo

Nature Path Foods

naturespath.com

Group: Royal

Discovered by ransomware.live: 2023-04-10

Estimated attack date: 2023-04-10

Country: CA

Description:

Nature's Path Foods was founded in 1985 in Richmond, Canada. It is a family-run, fiercely independent, sustainably-driven, and delightfully nutritious organic breakfast and snack food company. Among almost 40GB of accounting and financial data we've found interesting employees' docs such as work permissions, resumes with addresses, emails, phones ect. There are also lots of agreements, contracts, invoices and other documents that worth to see.Feel free checking the data.

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations@web.com
MX Records
  • naturespath-com.mail.protection.outlook.com.
TXT Records
  • v=spf1 ip4:50.54.245.38 include:spf.protection.outlook.com include:_spf.ultipro.com include:amazonses.com include:_spf.psm.knowbe4.com include:341595240.spf07.hubspotemail.net ~all
  • MS=ms12654949
  • google-site-verification=9Kj8o0rXXviWCwARLA2xsGzRdWJ9B0utGqJtwhZfEAg
  • apple-domain-verification=5A8Jb7NnC7NQANPP
  • docusign=22090f36-ccde-44b2-8049-265e597e9691
  • 1bnclqa21kc7drt2ml5r186abs
  • _reaul1mjninuoqes9mvopytyp7poxjq
  • _ogsamieolecusgzq1g8lkryppgsn1hf
  • k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76yojh54Xu3uSbQ3JP0A7k8o8GutRF8zbFUA8n0ZH2y0cIEjMliXY4W4LwPA7m4q0ObmvSjhd63O9d8z1XkUBwIDAQAB
  • facebook-domain-verification=d0gc8hiylal73q38oayfjyghe4fc6n
  • sophos-domain-verification=ed9e8bc1a905da4488d1b0840166971eb35d5ebb02ee21d29950567eb5db9d9a
  • 8+yNxZwOEmzQmNwLWamm4K5lJW8keQJiyu/4gESzoeTGJP/XTo07U1sLCB0F2wCBmQb73ZM+0RzuF0QzxZBrXg==
Cloud / SaaS Services Detected
Apple Amazon SES/WorkMail HubSpot Microsoft 365 KnowBe4 DocuSign Sophos

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.