Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

The Branch Group

branchgroup.com

The Branch Group was listed on the Cactus leak site on Mar 1, 2025. Information as of Oct 19, 2026.

Country: United StatesIndustry: Unknown
Updated continuously · figures as of Oct 19, 2026
Claimed by
Cactus
First listed
Mar 1, 2025
Claims recorded
1

Leak-Site Claim.

CactusConfirmed claim
Posted on the leak site
Mar 1, 2025
Collected by Brandefense
Jul 11, 2025
Data claimed
253 GB
Leak-site post text, written by the group
commercial & residential construction. “founded in 1963, the branch group is a company that owns and operates different companies that specialize in civil construction, residential and commercial building construction, electrical and pipe installation, and more. the company is based in roanoke, virginia.” website: [removed] revenue: $333m address: 442 rutherford ave ne, roanoke, virginia, 24016, united states phone number: [removed] download link #1: [removed] mirror: [removed] data descriptions: personal identifiable information, corporate confidential data, customer information…

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
kyb.com
kyb.com
CactusUSUnited StatesTransportation and Logistics, ManufacturingNot stated
assaabloy.com
assaabloy.com
CactusUSUnited StatesManufacturing, ConstructionNot stated
baillie.com
baillie.com
CactusUSUnited StatesManufacturing, ConstructionNot stated
thermoid.com
thermoid.com
CactusUSUnited StatesUnknownNot stated
tempel.com
tempel.com
CactusUSUnited StatesManufacturing, MiningNot stated
rocketstores.com
rocketstores.com
CactusUSUnited StatesUnknownNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.