galatachemicals.com
cactusThis record tracks a ransomware attack claimed by the cactus group against galatachemicals.com. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
<p>Chemicals & Related Products.<br><br>“We are a leading producer and supplier of PVC, CPVC, Engineering Thermoplastics, and Polyolefin Additives, serving many industries worldwide, including Building and Construction, Packaging, Medical, and Automotive from our manufacturing facilities spanning three continents.”<br><br>Website: <a href="https://www.galatachemicals.com/">https://www.galatachemicals.com/</a><br><br>Revenue : $100M<br><br>Address: 3 Harborside Plaza 10 Ste 307, Jersey City, New Jersey, 07302, United States<br><br>Phone Number: (609) 421-1040<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/GALATA/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/GALATA/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/GALATA/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/GALATA/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information (including top managers), personal and corporate confidential data, correspondence, customer documents, engineering data, projects, drawings, NDAs, financial data, IT dept information, legal and litigation docs, HR data, etc.</p><p><img src="/uploads/Internals_for_K005_19c5127cc1.png" alt="Internals for K005.png"><img src="/uploads/Passport_Jamal_Siddiqi_1206090e6d.png" alt="Passport (Jamal Siddiqi).png"><img src="/uploads/5_1_1_2_3_FILED_Plaintiff_s_Complaint_e90bda18be.png" alt="5.1.1.2.3_FILED Plaintiff's Complaint.png"><img src="/uploads/Passport_Bachmann_bff0a20f18.png" alt="Passport - Bachmann.png"><img src="/uploads/7_1_3_1_1_FINAL_Phase_I_ESA_and_LECR_Kemira_Aberdeen_MS_July_2023_update_9cea4a9cb0.png" alt="7.1.3.1.1_FINAL Phase I ESA and LECR_Kemira_Aberdeen MS_July 2023 update.png"></p>
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.