July 28, 2026

A man's publicly registered identity as a company co-founder was enough

A man's publicly registered identity as a company co-founder was enough information for a criminal operation to find his home, abduct him and his wife, and mutilate his hand while demanding ransom from a business partner.

The attackers did not breach his company's systems. They did not compromise any account or network. They assembled a targeting profile from publicly available records attached to his name as a registered company co-founder. Corporate formation documents, regulatory filings, industry publications, and financial reporting had all confirmed his identity and his company affiliation over an extended period. None of that was secret. All of it was intended to be public.

What his public professional identity also produced, for anyone motivated to work it backward, was his residential location. The same records that established his role in a known commercial entity connected to a home address that had been filed with government agencies, indexed by data platforms, and available through standard commercial lookup channels.

For a small business owner who registers a company under their own name, the architecture is identical. Formation documents list a registered agent and a principal address. In a substantial share of small business formations, that address is the operator's home. Once filed, the record is permanent. It is scraped, normalized, and sold to commercial data platforms that aggregate it with professional directories, news mentions, and voter records. The chain from a business name to a residential address is not difficult to reconstruct.

The attackers needed his professional identity to exist publicly and his home address to be derivable from that identity. Both conditions were already satisfied before they made any decision to act.

For a small business owner whose name appears on a formation document, a license, a professional directory, or a business listing, those same two conditions are already satisfied right now.

Most Small Business Owners don't realize how much information their business filings reveal. They simply followed the instructions they were given. The RuleDraft Small Business Isolation Manual helps you identify those unnecessary exposures and shows you how to reduce them.