Independent Timber Merchants
Data Breach on July 10, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | itm.co.nz | ||
| Threat Actor | INC_RANSOM | ||
| Date Discovered | Jul 10, 2025 | ||
| Description | Independent Timber Merchants (ITM). is a NZ’s largest independent building‐supplies co‑op (95+ member stores); distributes timber, tools, hardware, kitchens & insulation. | ||
| Leak Size | Unknown |
Credential Exposure for itm.co.nz
We've indexed 17 @itm.co.nz accounts from external breaches, plus 4 credentials for itm.co.nz itself.
Last checked Aug 23, 2026
| @itm.co.nz addresses from external breaches | |
|---|---|
| Third-party breaches | 16 accounts · across 19 breaches · 16 with a plaintext password · most recent Feb 8, 2021 |
| Combo lists | 6 accounts · most recent May 8, 2026 |
| Passwords for itm.co.nz accounts | |
|---|---|
| Combo lists | 4 logins · most recent Aug 2, 2026 |
| Infostealer logs | 3 logins · 3 infected devices · most recent Jul 4, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Independent Timber Merchants was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.