Coinbasecartel has claimed to have ransomware-infected TBM Service Group, a full spectrum onsite managed services company providing maintenance and customer support services. The incident has potentially impacted operations in Canada.#Canada
Incident Details
- Victim: TBM Service Group
- Country: CA
- Actor: coinbasecartel
- Source: http://fjg4zi4opkxkvdz7mvwp7h6goe4tcby3hhkrz43pht4j3vakhy75znyd.onion/companies/tbm
- Discovered: 2025-10-29 18:44:39.901467
- Published: 2025-10-29 18:44:27.018329
Information
- TBM Service Group is a full spectrum onsite managed services company.
- The company offers a range of services, including nightly maintenance and customer support.
- It operates within the public transportation sector.
- The ransomware attack was carried out by the actor coinbasecartel.

Disclaimer: This post is based on public claims made by the ransomware group "coinbasecartel". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.