Dooney.com listed on Clop ransomware leak site

• Ransomware group: Clop
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: November 21, 2025

The American luxury fashion brand Dooney.com has been listed on the leak site of the Clop ransomware group. The announcement, which appeared on November 21, 2025, marks a new potential cybersecurity incident involving the prominent retail and e-commerce entity. While the listing confirms that the threat actor has targeted the organization, the specific details regarding the scope of the incident remain limited at this stage.

The claims made by Clop

The threat actor known as Clop has officially listed DOONEY.COM on its dedicated leak portal. In the announcement, the group has included a warning message directed specifically at the company. According to the claims made by the group, the company has neglected the security of its customers, suggesting a failure in maintaining adequate protections for sensitive information.

Ransomware groups often utilize these leak sites as a form of psychological pressure in what is known as double extortion. In a double extortion scheme, attackers not only encrypt an organization's data to disrupt operations but also threaten to release stolen information publicly to coerce the victim into paying a ransom. By listing a company on a public portal, the group aims to damage the organization's reputation and pressure them into compliance through the threat of public exposure.

Information regarding the leaked data

At this time, the announcement does not provide specific details regarding data samples or ransom demands. There is no specific information provided in the announcement regarding the content of the leaked data. The listing names no specific data types that have been compromised.

In many ransomware incidents, the lack of immediate data samples can be due to various factors, such as the attackers still in the process of exfiltrating data or the group choosing to withhold samples to increase leverage during negotiations. However, without confirmed data samples, the exact nature of the breach remains unverified by the public announcement.

About Dooney.com

Dooney & Bourke is an American fashion brand that designs and manufactures luxury handbags, luggage, and leather accessories. The company is known for its high-quality leather craftsmanship and classic designs. As a significant player in the retail and e-commerce sector, the organization maintains a high-profile presence in the luxury goods market.

Assessment and industry implications

Given the past activities of the Clop group, it may be assessed that this situation could indicate a potential data breach within the company's networks. Clop is a threat actor known to typically exploit vulnerabilities in file transfer software, and it is possible that the company may have been exposed to a similar attack vector. Organizations in the retail and e-commerce sector are frequent targets for such groups due to the high value of the customer data they manage.

Because the company is based in the United States, a potential data breach could trigger investigations under state-level data protection laws and regulatory bodies. If customer data has been compromised, secondary risks such as identity theft and phishing attacks may arise, as stolen credentials or personal details are often sold on illicit forums or used to target individuals directly.

For organizations operating in the retail sector, maintaining robust security postures is critical. This includes implementing strict patch management to close vulnerabilities in file transfer protocols, enforcing multi-factor authentication across all systems, and maintaining comprehensive monitoring to detect unauthorized data exfiltration. As ransomware groups continue to evolve their tactics, staying vigilant against common attack vectors remains a primary defensive necessity for global brands.