Dorrell Fabrics listed on Sinobi ransomware leak site

• Ransomware group: Sinobi
• Country: United Kingdom
• Sector: Manufacturing
• Announcement date: September 28, 2025

Sinobi claims data breach at Dorrell Fabrics

The ransomware group known as Sinobi has listed the United Kingdom-based organization Dorrell Fabrics on its dedicated leak site. According to the announcement made by the threat actors, the group claims to have successfully exfiltrated a significant amount of data from the company's systems. This claim was officially published on the group's leak portal on September 8, 2025, marking a new development in the ongoing threat landscape facing the manufacturing sector.

The incident, which the group alleges began around June 15, 2025, involves a massive volume of information. The threat actor claims that the total size of the stolen data set amounts to 141 GB. While the group has made these claims public, the specific details regarding the exact number of files involved have not been provided by the attackers.

Details of the alleged data exfiltration

The announcement made by Sinobi suggests a targeted operation aimed at acquiring sensitive corporate information. Based on the evidence provided by the group, such as screenshots, the leaked data is said to contain various types of critical documentation. The information allegedly stolen includes several categories of sensitive business intelligence that could impact the organization's operations and relationships.

The specific types of data mentioned in the leak include:

• Contracts
• Customer data
• Financial data

The presence of such diverse data types highlights the potential impact of the breach. In many modern ransomware attacks, particularly those employing double extortion tactics, attackers do not merely encrypt a company's systems to disrupt operations; they also steal sensitive information to use as leverage. By threatening to release this data publicly, the attackers aim to increase the pressure on the victim to meet their demands. In such scenarios, the risk to the organization extends beyond immediate operational downtime to long-term reputational and legal consequences.

About Dorrell Fabrics

Dorrell Fabrics is a textile company with a long-standing presence in the industry, boasting nearly 88 years of experience. The organization specializes in fabric sourcing and innovation, catering to a wide range of needs including residential, outdoor, and contract projects. They are known for providing high-quality textile solutions to various designers and manufacturers across their various service areas.

Potential implications and industry considerations

This alleged breach may pose a significant risk of exposure for Dorrell Fabrics' sensitive commercial and financial information. Because the organization is based in the United Kingdom, the confirmation of such an incident could trigger regulatory scrutiny under the UK GDPR. The exposure of customer and contract data may lead to a loss of trust among supply chain partners and could potentially facilitate secondary fraud attempts against the company or its clients.

For organizations operating within the manufacturing and textile sectors, such incidents underscore the necessity of robust cybersecurity frameworks. When dealing with large-scale data exfiltration, companies often face the challenge of managing both technical recovery and regulatory compliance. The use of double extortion tactics means that even if an organization can restore its systems from backups, the threat of public data exposure remains a critical business risk.

To mitigate these risks, organizations typically focus on several defensive pillars. These include implementing strict access controls to limit the movement of attackers within a network, maintaining comprehensive logging to detect unusual data transfers, and ensuring that sensitive data is encrypted both at rest and in transit. Furthermore, maintaining a rigorous patch management schedule and conducting regular security awareness training can help reduce the likelihood of an initial foothold being established by threat actors like Sinobi.

Summary of the incident

As of the current report, the claims made by Sinobi remain unconfirmed by the victim. However, the scale of the claimed 141 GB theft suggests a high-impact event if the allegations are proven accurate. The threat landscape continues to evolve, with groups like Sinobi utilizing data leaks as a primary tool for extortion in the manufacturing sector.