ALP-001 ransomware group lists pellenc.com on its leak site

• Ransomware group: ALP-001
• Country: France
• Sector: Manufacturing
• Announcement date: March 22, 2026

Pellenc listed on ALP-001 ransomware leak site

The French manufacturing company pellenc.com has been listed on the leak site of the ransomware group ALP-001. The threat actor has claimed to have compromised a significant amount of data belonging to the organization, marking a potential security incident for the company.

Details of the alleged attack

According to the announcement made by the threat actor known as ALP-001, the group has allegedly compromised 228 GB of data belonging to pellenc.com. This listing was discovered on the group's leak site on March 22, 2026. While the announcement was made in March, the threat actor indicates that the organization may have been subjected to the attack as early as January 31, 2026.

In line with common ransomware extortion tactics, the threat actor has set a deadline for the publication of the stolen data. The group has indicated that the data will be released if their demands are not met by April 1, 2026. Ransomware leak sites are frequently used by cybercriminals to exert pressure on victims through double extortion, a method where attackers not only encrypt a company's systems but also threaten to leak sensitive information to the public or its clients to force a ransom payment.

Data involved in the claim

Regarding the specific content of the allegedly leaked information, the threat actor has not provided detailed information. The listing only mentions the total data size, which is reported to be 228 GB. The listing names no specific data types.

About pellenc.com

Pellenc is a French company that manufactures battery-powered equipment and tools for agriculture, green spaces, and local communities.

Risk assessment and industry implications

This incident may pose a risk of exposing sensitive corporate data or employee information within pellenc.com. Given that the organization operates in the manufacturing sector, there is a risk that intellectual property or trade secrets may be at risk. Furthermore, the leaked data could potentially be utilized in secondary attacks, particularly targeted phishing or supply chain compromises.

As a France-based entity, a potential data breach could lead to legal repercussions under the European Union's General Data Protection Regulation (GDPR). Organizations operating within the European Union must adhere to strict data protection standards, and failures in security that lead to the exposure of personal data can result in significant regulatory scrutiny and penalties.

For organizations in the manufacturing sector, such incidents highlight the importance of robust cybersecurity postures. Common defensive steps for organizations include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security audits to identify vulnerabilities. Because public information regarding the ALP-001 group is limited, organizations should remain vigilant against evolving tactics used by such threat actors.