The ransomware claim involves Borrowell.com, a Canadian financial consulting firm founded in 2014, which provides credit monitoring and coaching services. The threat actor behind the attack is coinbasecartel, and the incident impacted Canada. #Canada
Incident Details
- Victim: Borrowell.com
- Country: CA
- Actor: coinbasecartel
- Source: http://fjg4zi4opkxkvdz7mvwp7h6goe4tcby3hhkrz43pht4j3vakhy75znyd.onion/companies/borrowell
- Discovered: 2025-10-13 09:21:52.672722
- Published: 2025-10-13 09:21:40.663259
Information
- Borrowell.com is a financial consulting firm established in 2014.
- Offers free credit score and report monitoring services.
- Provides automated credit coaching tools.
- Was targeted by the ransomware actor coinbasecartel.

Disclaimer: This post is based on public claims made by the ransomware group "coinbasecartel". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.