mgainnovation.com
cactusThis record tracks a ransomware attack claimed by the cactus group against mgainnovation.com. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
<p>Business Services.<br><br>“Packaging supply chains require absolute efficiency to handle the modern digital and storefront buying habits of todays consumer. MGA Innovation makes it easy for partners to meet ever evolving demands. How do we do it? Ingenuity and flexibility to help you shape quality, food safety and the complete customer experience.”<br><br>Website: <a href="https://www.mgainnovation.com/">https://www.mgainnovation.com/</a><br><br>Revenue : $30.9M<br><br>Address: 3818 Grandville Ave, Gurnee, Illinois, 60031, United States<br><br>Phone Number: (224) 656-6730<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/MGAPRINTING/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/MGAPRINTING/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror: </strong></mark><a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/MGAPRINTING/PROOF/"><mark class="marker-yellow"><strong>https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/MGAPRINTING/PROOF/</strong></mark></a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information. corporate confidential docs, employees\executives personal data, corporate correspondence, financial docs, production data, customer information, contracts\NDAs, etc.</p><p><img src="/uploads/Passport_Chris_Vela_1e6fa6381b.png" alt="Passport Chris Vela.png"><img src="/uploads/signed_2025_BL_contract_57bee589c1.png" alt="signed 2025 BL contract.png"><img src="/uploads/SKM_C36824020111570_958eef6fc9.png" alt="SKM_C36824020111570.png"><img src="/uploads/COI_24_25_666349573d.png" alt="COI 24-25.png"><img src="/uploads/CONFIDENTIAL_Kinter_Cat18_Mailing_List_08_10_2021_sent_to_MGA_a6ac8b6f70.png" alt="CONFIDENTIAL Kinter Cat18 Mailing List 08.10.2021 sent to MGA.png"></p>
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.