rashtiandrashti.com Listed by cactus Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On January 24, 2025, the website rashtiandrashti.com was listed by the cactus ransomware group as a victim of a ransomware attack involving the exfiltration of internal files. The number of people affected remains unknown, and public details about the incident are limited to the group's claim and the basic description of the organization as an apparel and accessories retailer specializing in baby products.

This listing matters because it signals a potential compromise of a family-owned manufacturer's internal systems, which could affect employees, partners, or customers whose information might reside in those files. Without confirmation of the full scope, the situation underscores the ongoing risks posed by ransomware groups that publicly name targets to pressure them.

Inside the incident

According to available reports, rashtiandrashti.com was listed by the cactus ransomware group on January 24, 2025. The group claims that internal files were exfiltrated as part of a ransomware attack. No further details on the timing of the intrusion, the scale of the data taken, the specific method of access, or any ransom demands have been publicly disclosed. The number of individuals potentially affected is listed as unknown. Public information does not confirm whether systems were encrypted, whether negotiations occurred, or whether any data has been released beyond the listing itself. The incident is presented solely as a claim by the group on its leak site.

Inside cactus

Cactus is a ransomware group that has operated in the cybercrime ecosystem since at least 2023. It is known for employing double-extortion tactics: encrypting victim systems while also exfiltrating data and threatening to publish it if demands are not met. The group typically targets mid-sized organizations across various sectors, using custom ransomware tools and techniques that include initial access via vulnerabilities or compromised credentials, followed by lateral movement and data theft. Cactus has been documented in public cybersecurity reporting for listing victims on dedicated leak sites to amplify pressure. In this case, the listing of rashtiandrashti.com is treated as an unverified claim by the group; no independent confirmation of the attack's success or the exact contents of any stolen data has been provided in the available facts.

About rashtiandrashti.com

Rashtiandrashti.com belongs to Rashti & Rashti, described as a leading manufacturer of baby products produced around the world. It is a third-generation family-owned and operated business based at 875 Avenue of the Americas in New York City, New York, with reported revenue of $19.1 million. The company operates in the apparel and accessories retail sector, focusing on items made with individual care for babies and their families. Organizations of this type typically maintain systems for product design, manufacturing coordination, supply-chain management, customer orders, and employee records. A breach involving such a firm is consequential because it can disrupt operations for a specialized manufacturer and potentially expose data tied to families, retailers, or business partners who rely on the company's products and services.

What was likely exposed

The facts state that internal files were exfiltrated in the ransomware attack. No specific data types beyond this general description have been named, and the exact contents remain unconfirmed. Organizations like Rashti & Rashti, as manufacturers and retailers of baby products, typically hold internal files that may include business documents, operational records, supplier information, employee details, and customer-related data such as order histories or contact information. Because the precise files taken have not been disclosed, it is not possible to state with certainty what was exposed. Any assessment of the data must remain limited to the reported claim of internal file exfiltration.

What's at stake

For individuals whose information may have been among the internal files, the primary risks include potential misuse of personal or contact details if those files contained such records, leading to phishing attempts or identity-related issues over time. Employees or partners could face exposure of work-related data. For the organization itself, the stakes involve operational disruption from any encryption or system compromise, reputational effects from the public listing, and the need to investigate and secure systems. Because the number of people affected is unknown and the full contents of the files are unconfirmed, the concrete impact cannot be quantified from available information. The situation highlights the broader challenge of ransomware claims that leave victims and the public with incomplete visibility.

Were you affected?

If you have done business with Rashti & Rashti, worked for the company, or otherwise shared information with it, consider monitoring your accounts for unusual activity and reviewing any communications that appear related to the firm. Change passwords on related services if you reuse them, and enable multi-factor authentication where available. Readers can run a free exposure scan of their email address to check whether their information has surfaced in known breach data sets. Public details on this incident remain limited, so staying alert to official updates from the company is advisable.

AICompiled with AI assistance from public sources and published under our editorial standards.