Cornwell Tools
bd_68e384f1b50b75e8 · schema v1 · pii pii-v1
Full breach record for Cornwell Tools →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Cactus on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
<p>Hand, Power & Lawn-care Tools.<br><br>“Headquartered in Wadsworth, Ohio, Cornwell Quality Tools is the oldest mobile tool company, with a market presence since 1919. A family and employee-owned company, Cornwell is committed to the pride that accompanies the sale of quality materials. With the use of high-grade alloy steel, combined with modern heat-treating methods, Cornwell has continued to produce the finest tools in the world, that have truly been "The Choice of Professionals®" for over 100 years.”<br><br>Website: <a href="https://www.cornwelltools.com/">https://www.cornwelltools.com/<\/a><br><br>Revenue : $218.7M<br><br>Address: 667 Seville Rd, Wadsworth, Ohio, 44281, United States<br><br>Phone Number: (330) 336-3506<br><br><mark class="marker-yellow"><strong>Download link #1:<\/strong><\/mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/CORNWELL/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/CORNWELL/PROOF/<\/a><br><br><mark class="marker-yellow"><strong>Mirror:<\/strong><\/mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/CORNWELL/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/CORNWELL/PROOF/<\/a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:<\/strong><\/mark> Personal Identifiable information (both employees and customers), customer confidential data, corporate documents\contracts\NDAs, TechCredit scans with customer personal information, corporate financial docs\payroll\taxes, corporate and personal correspondence, outlook exports, databases with Personal Identifiable Infomation and Credit Cards information, including SSN + DOB, credit card number and expiration date (over 1 million records) with decryption keys and much more.<\/p><p><img src="/uploads/8524393_6ccbb786f8.png" alt="8524393.png"><im
Source provenance
- Source URL
- https://cactusbloguuodvqjmnzlwetjlpj6aggc6iocwhuupb47laukux7ckid.onion/posts/CORNWELL
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 18, 2024
- Raw hash
- 869b07122f770ed73b0b59c1a30819f0333beb7ecb5f9638d363b533afb27150
Reporting entity
- Name
- cactus
Victim entity
- Name
- Cornwell Toolsnorm: cornwell tools
- Domain
- cornwelltools.com
- Industry
- Retail & Consumerllm
What this source establishes
- Source ceiling
- A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
- Attack vector
- Ransomware· cactus
- Threat actor
- CactusExternalFinancial
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.