The cactus ransomware group listed northernresponse.com on its data leak site on 2025-02-06. Country: CA Sector: Retail & E-Commerce Domains named: northernresponse.com, 6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion, cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion, passport.png Claim as published on the leak site: Retail.“Located in Toronto, Ontario, Canada, Northern Response has been a pioneer in the Canadian market since 1984, building brands and scaling distribution via omni-channel marketing platforms including Live Shopping, TV, Print, Mass + Travel Retail and Online (TikTok, Facebook, Instagram, Twitter, Amazon etc.). ”Website: https://northernresponse.com/Revenue : $17.4MAddress: 50 Staples Ave, Richmond Hill, Ontario, L4B 0A7, CanadaPhone Number: (905) 737-6698Download link #1: https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/NRESPONSE/PROOF/Mirror: https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/NRESPONSE/PROOF/DATA DESCRIPTIONS: Personal identifiable information, database backups (including customers information), employees and executives personal folders, corporate OneDrive, financial data, legal docs, contracts\NDAs, corporate correspondence, etc.