GLOBALMalwareRetail & ConsumerRetailRansomwareCactusRansom DemandedActor NamedMedium

Best Brands Incorporated

bd_4fca103863c12d52 · schema v1 · pii pii-v1

Full breach record for Best Brands Incorporated →

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group Cactus on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: Consumer ServicesDiscovered: 2025-02-18

View aggregator listing on ransomware.live

Source: Ransomware.live

Post text · scraped from the leak site

“We are a 60+year old company with operations in New York, Hong Kong and China. Our products are as diverse as the capabilities of our young and tenacious team of artists. We work with major brands and licenses in the industry including Cuisinart, Waring, Rachael Ray, Imusa,Daisy Fuentes, CFA, Safety First, Disney, Nick, Marvel and Hasbro. We also cater to major and specialty customers' private label needs in the US, Canada and South America.” Website: <a href="https://bestbrands.com/">https://bestbrands.com/<\/a> Revenue : $10.5M Address: 25 MERRICK AVE, Merrick, New York, 11566, United States Phone Number: 646-432-4373 Download link #1:<\/strong><\/mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/BESTBRANDS/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/BESTBRANDS/PROOF/<\/a> Mirror:<\/strong><\/mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/BESTBRANDS/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/BESTBRANDS/PROOF/<\/a> DATA DESCRIPTIONS:<\/strong><\/mark> Personal Identifiable information, database backups, corporate documents\agreements\contracts, financial data, payroll, HR dept docs, shipping\operations data, corporate OneDrive export, employees personal folders, corporate and personal correspondence, etc.<\/p><img src="/uploads/YOCASTA_C_PENA_PASSPORT_245ec781dc.png" alt="YOCASTA C PENA - PASSPORT.png"><img src="/uploads/Loan_documents_cb339f5c13.png" alt="Loan documents.png"><img src="/uploads/Walmart_Settlement_Agreement_8_20_24_de3e22682c.png" alt="Walmart Settlement Agreement 8-20-24.png"><img src="/uploads/Great_American_Financial_svcs_2022_2023_45d81ba094.p

Tracked as a single-filing incident — the only disclosure on record for this event so far.Unverified claimView incident

No regulatory filing corroborates this yet. If an SEC 8-K, state-AG notice, or victim statement lands, DisclosureLens will merge it into an incident and link it here.

Source provenance

Source URL: https://cactusbloguuodvqjmnzlwetjlpj6aggc6iocwhuupb47laukux7ckid.onion/posts/BESTBRANDS
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 3, 2025
Raw hash: 1bf198723b917a0a8fc365a26e53678beb5e0913fcace3777d41903cc66ac29c

Reporting entity

Name: cactus

Victim entity

Name: Best Brands Incorporated
norm: best brands
Domain: bestbrandsinc.com
Industry: Retail & Consumerllm

What this source establishes

Source ceiling: A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
Attack vector: Ransomware· cactus
Threat actor: CactusExternalFinancial

Compliance

Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.