Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Placer AI

placer.ai

Discovered 2026-10-12 04:40 UTC
Est. attack date 2026-10-10
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

placer.ai Revenue $136.5 Million private US company valued at $1.5 billion that sells foot traffic analytics for physical locations, estimating visits to stores, malls and offices from anonymized data on tens of millions of mobile phones with 92%+ claimed accuracy. It hit $100 million annual recurring revenue in 2024 after growing 80% in a year and serves 4,000+ customers including Sony, Wegmans, BJ's Wholesale, SeaWorld and Bloomberg, which puts Placer data into its Terminal so investors can track company performance before earnings. Money comes from SaaS subscriptions starting around $12,000 a year, API data feeds and add-on datasets, and it has raised $268 million in total funding. Around 630 employees work at Placer.ai after 150 layoffs in January 2025 aimed at reaching profitability, and it owns no factories or stores because its product is pure software and data.

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 64

Third Party Employee Credentials: 7


External Attack Surface: 4


Infostealer Distribution

Exposure Report
by ParanoidLab
204
Passwords
9 critical
145
Cookies
0 critical
Last queried 2026-10-12 04:40 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • eu-smtp-inbound-1.mimecast.com. Mimecast
  • eu-smtp-inbound-2.mimecast.com. Mimecast
TXT Records
  • atlassian-domain-verification=mY2m4tBKZQnhKUM2ycwk0KpDzTQmcU/O2sSMENvOSurKyJHrjqU8P98vPNUXFBln
  • anthropic-domain-verification-n0pbqq=CMGp13ByTylqJElFynrqiM50l
  • google-site-verification=HZZ8VZh04fjpWltfRGU1sQ1jVGmdqjX65eXmx9EZNYU
  • gitkraken-domain-verification=ac191033b3504d0122e1348d4063eb7ac7b2f186c2f2a9c21ff6912bf88fcf75
  • paloaltonetworks-site-verification=60b864c3bb29beadca47e70b2de2edece92e95899df1f107fc1cef9ef49c4b74
  • rippling-domain-verification=5e4ff5b041bc7df6
  • zapier-domain-verification-challenge=5fb146a8-d8c5-4b14-b507-144ece98683e
  • atlassian-sending-domain-verification=460fd0e6-baed-4292-896f-615dcada73a2
  • jetbrains-domain-verification=c7uxkqh0697in4o5z9f8nej83
  • slack-domain-verification=2x8a4AV3sFkMxSrhwoNtFfaMdLK3NkN0dH84nRSC
  • stripe-verification=0b14039d637c7626872eff6179e706c89f7a38d2de60e6fadbf7b55d7c30ad93
  • docusign=d1e0b372-95f9-4788-8b62-5279d4b74e63
  • carta-domain-verification-9dk780=tk4KRAfrYmrDqdnnndiCfHkuS
  • v=spf1 include:spf.mailjet.com include:_spf.google.com include:_spf.salesforce.com include:emsd1.com include:eu._netblocks.mimecast.com include:spf.mtasv.net -all
  • zywave-domain-verification=M4vA3BA6/3eP4G6/jKwTFaTEG5Xsm2PkqcmOwxe7mO8=
  • openai-domain-verification=dv-mM2MSrmjwoP24JNFdOGZ9xFo
  • mixpanel-domain-verify=dc0ec7ab-02cf-4cfe-bfd4-88690a9e5923
  • cursor-domain-verification-rpttem=XalS2PozmnGKfgbGMvjfkuaZf
Cloud / SaaS Services Detected
Anthropic Atlassian DocuSign Mailjet Mimecast OpenIA Rippling Salesforce Slack Stripe Zapier