Skip to content
Ransomware

Avery Dennison listed on coinbasecartel leak site

Avery Dennison has been listed on a leak site by the threat actor known as coinbasecartel.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: coinbasecartel
  • Country: United States
  • Sector: Manufacturing
  • Announcement date: November 13, 2025

Avery Dennison has been listed on a leak site by the threat actor known as coinbasecartel. According to the announcement, the group claims to have successfully obtained data from the organization.

Details of the claim

The coinbasecartel group has listed Avery Dennison on its dedicated leak platform. This announcement was officially created on November 13, 2025. Through this listing, the group asserts that they have gained access to the organization's data. While the claim of a breach has been made public on the group's platform, the specific details surrounding the incident remain limited to the initial announcement.

Data involved in the incident

Regarding the specific content of the alleged breach, the provided information does not contain any specific information regarding the nature of the leaked data. The listing names no data types.

About Avery Dennison

Avery Dennison Corporation is a multinational materials science company that produces and sells pressure-sensitive materials, labels, and graphic solutions worldwide. The company develops innovative labeling and branding technologies for various industries, including packaging, apparel, and logistics.

Risk assessment and implications

This incident may pose risks to the organization's operational continuity and commercial reputation. As the nature of the alleged leaked data is currently unknown, potential impacts could include the loss of intellectual property or the exposure of employee records. Being a US-based entity, a potential data breach may trigger notification requirements under various state laws and federal regulations.

Information regarding this group is limited; therefore, no definitive assessment can be made regarding their motivations or attack methodologies. In the broader context of cybersecurity, ransomware leak sites are often used by threat actors as a tool for double extortion. In such scenarios, attackers do not only encrypt an organization's systems to disrupt operations but also steal sensitive data to threaten its public release if a ransom is not paid. This tactic increases the pressure on the victim by targeting their reputation and regulatory standing.

For organizations operating in the manufacturing and materials science sectors, maintaining robust defensive postures is critical. Common defensive steps for organizations include implementing strict access controls, maintaining offline backups, and conducting regular security awareness training for employees. Because the impact of such an event can extend to intellectual property and regulatory compliance, continuous monitoring and a well-defined incident response plan are essential components of a modern cybersecurity strategy.

From the Essential plan

Third-Party Risk

Monitor leaks on your suppliers’ domains and identify at-risk suppliers at an early stage.

Related stories