Skip to content
Leak-site post naming Quikrete, captured by ThreatCluster

Quikrete

helix

Ransomware leak-site victim intelligence

Posted
Oct 18, 2026
Country
US
Industry
Manufacturing

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post

The group claims to have stolen a broad data set from Quikrete, including customer records, emails and contact details, logistics information, orders and order lines, quotes and quote lines, product data, and related activity such as calls, tasks, and appointments. The leak post is published and shows a countdown. It states Quikrete as the victim and lists GoFile and Gofile.io as hosting platforms.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
GoFile Gofile.io

What was taken

Quikrete. Yearly revenue ~$2.2 billion yearly. Downloads are live.

Data categories
Customer recordsEmailsPhonesAddressesLogisticsOrdersOrder linesQuotesQuote linesProductCallsTasksAppointments

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture