flynncompanies.com
flynncompanies.com
Group
Blackbasta
Discovered
2024-03-22 11:51 UTC
Est. attack date
2024-03-05
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professional Services
Retail & E-Commerce
Technology
Transportation
Description:
Flynn was founded in 1978 in Winnipeg, Canada. In our early years, Flynn’s focus was on commercial roofing contracting. We established a reputation across Canada as a top-notch commercial roofing contractor. As architectural products became increasingly complex over the years, we recognized that the best way to serve our clients was by providing them with products and services for the entire building envelope. We branched out to provide a range of architectural products and roofing services, including metal paneling, contract glazing and curtain wall. Today, Flynn employs over 6000 people and serves a diverse portfolio of clients across North America, for the entire building envelope.SITE: www.flynncompanies.com Address : 6435 Northwest Dr Mississauga, ON L4V 1K2 CanadaALL DATA SIZE: ~4.0tb 1. Private (Personal users confidential folders and documents) 2. Company data & etc…
Infostealer activity detected by HudsonRock
Compromised Employees: 2
Compromised Users: 3
Third Party Employee Credentials: 4
External Attack Surface: 10
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- registrar-abusecloudflare.com
MX Records
- us-smtp-inbound-1.mimecast.com. Mimecast
- us-smtp-inbound-2.mimecast.com. Mimecast
TXT Records
- ib5okbe34u3d0763a0fkeci5lv
- globalsign-domain-verification=21a683153365594aeaf5d1c47923c2a4
- ds2dls12gs9b1sia04pfhoetft
- h9ovm9g6l1e4rsdc3dclch6luq
- 0ed1fe018a17ecc02df5714652821a54e828424a9a
- t8iu3qjmi2hga673rognkbvrhv
- to9b12anqml8k95in8o8otdkrq
- openai-domain-verification=dv-IXwu2exjIT5y90qaW7Vvhos4
- apple-domain-verification=e61cBZgYyQ4rHbYT
- new-relic-domain-verification=7b71774afd8c486c805619b0f7c7d4f1
- _globalsign-domain-verification=FYBAMrf6QFTsFRlMvqyGA_0__2Amo38UR50uApLItb
- adobe-idp-site-verification=c2bea7211f4957156b3a75f767dd29df3667d0e98e245eff078f10b003b365a7
- jamf-site-verification=WakdoewXbfLsp7XiHKXl9w
- figma-domain-verification=17ab01ff3ca3873a8d74e0dc0f3b43654279ceb2e84eae612aaa7e09a9a97bcf-1753734020
- vdzOErzF555gH+DfPt+EwN22YUFot9EMyg2CG/xFjDp25SzUr550pEXfBIEJ5pCetV9xqcM49ALzM4ce/VZraA==
- teamviewer-sso-verification=709ce6cc5cad4f7aa4298d55f605f719
- MS=ms85747391
- docusign=78ad1dd7-a26a-4b3a-9253-5be753229d7d
- bluebeam-verification=a3qf66gq9vys9pykfch681yi68dq9e
- f04f57147d24h9nbc6gektbamb
- u98fl05qc23gh48nnr5pvgu7ga
- v=spf1 include:us._netblocks.mimecast.com ip4:191.237.4.149 ip4:72.138.154.78 ip4:72.138.154.79 ip4:192.235.102.127 include:mail.zendesk.com include:_spf.atlassian.net include:servers.mcsv.net include:spf.mandrillapp.com include:spf.protection.outlook.com" " include:_spf-dc17.sapsf.com include:spf-ca.wfs.cloud include:docebosaas.com ~all
- successfactors-site-verification=OTY3NWFlYmM4ZjRkMzhjMmQyODljMjQ5OTdiMzc2MDAyMThkYjViMDc2YzQxOGRmNjk1ZTdjNGIzZTg1N2NhZQ==
- BA8F5A7A84
- anthropic-domain-verification-x7t4yt=aDuc3jPHRInOzdAvLXHsZoDeT
- hRfq9BvfKtUDsczF2NVPs/yxkbgwgdfcVDebfmsbaz7HJ9WT/g2cKcQHBIisVYyXNE1EpuMUgjwO8iuPF2bzKg==
- autodesk-domain-verification=7SrWjyRWSTUg5UTKqK3E
- atlassian-sending-domain-verification=f9cbbe17-bb81-4e22-ba30-fbdb54f72288
- gitkraken-domain-verification=7cfbf6c1055a9bbf3b7f360c070edc763dac565fb9faca9ea3a7620dfe50ed4d
- dropbox-domain-verification=ogfdq5jokwka
- atlassian-domain-verification=uQvKueuEJ/d26LvLBo3dU2YRT/gLvmj3Cg/fxQ191FzvD9ahyfWyJWTTh1M3FxvE
- globalsign-domain-verification=d86e0c584823058421f598f42dd11a30
- MS=ms39649063
- canva-site-verification=jZPEG2fs8uSmWkpEhxRuAA
- d6orb4eqsmpq480vqs0g21ehd4
Cloud / SaaS Services Detected
Adobe
Anthropic
Apple
Atlassian
Autodesk
Box
DocuSign
Dropbox
Global Sign
JamF
Mailchimp
Mandrill
Microsoft 365
Mimecast
OpenIA
SAP Success Factor
Teamviewer
Zendesk
Leak Screenshot:
Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.