A Richmond Hill, Ont.-based exercise equipment e-commerce site, a Montreal industrial packaging manufacturer and a Toronto cosmetics maker have something in common: Their names have appeared on ransomware groups’ websites claiming to have stolen and encrypted their data. If these businesses want their data back, they’ll have to pay a ransom. If they don’t, ransomware groups warn the data – some of which may include personal information on employees and customers – will be publicly released. IT World Canada isn’t identifying the companies because the attacks haven’t been confirmed. But the ransomware groups involved – Conti and Babuk – aren’t known for bluffing.