IBENA Textilwerke listed on nova ransomware leak site

• Ransomware group: nova
• Country: Germany
• Sector: Manufacturing
• Announcement date: June 2, 2026

The German-based textile manufacturer IBENA Textilwerke has been listed on a leak site associated with the ransomware group known as nova. The announcement, made on June 2, 2026, indicates a potential data breach involving the long-standing manufacturing firm.

The claims made by nova

The nova group claims to have leaked data belonging to IBENA Textilwerke on their dedicated leak site. In their announcement, the group stated that they would be willing to provide free decryption for two files if the company chooses to contact their support department. This tactic is often used by ransomware actors to demonstrate the viability of their decryption tools or to initiate contact for negotiations.

Furthermore, it is alleged that the group has already shared samples of the stolen data along with a file tree structure to prove the validity of their claims. While these actions are intended to pressure the victim, the specific contents of the shared screenshots or file structures could not be verified at the time of the report.

Data involved in the incident

Regarding the specific content of the leaked information, no specific information regarding the content of the leaked data is provided. While the group has allegedly shared samples and a file tree, the exact nature of the files remains unconfirmed.

Affected data types

• The listing names no specific data types.

About IBENA Textilwerke

IBENA Textilwerke is a long-standing family-owned company based in Bocholt, Germany. Founded in 1826, the organization has a significant historical presence in the manufacturing industry. The company specializes in the production of home textiles as well as technical textile solutions. These technical solutions serve a variety of sectors, including the automotive industry and various other industrial applications.

Impact and industry implications

This incident may negatively impact the company's operational continuity and commercial reputation. Because the company operates within Germany, any potential exposure of personal data could result in legal sanctions and notification obligations under the General Data Protection Regulation (GDPR). The regulatory landscape in Europe necessitates strict adherence to data protection standards to mitigate risks to individuals.

Given the company's established partnerships in the automotive and technical textile sectors, secondary risks regarding supply chain security may arise. When a manufacturer in a critical supply chain is compromised, it can create ripple effects for downstream partners who rely on the manufacturer's data and operational stability. Such risks highlight the interconnected nature of modern industrial supply chains.

Public information regarding the nova group remains limited. However, it is observed that ransomware actors typically employ double extortion tactics. In a double extortion scheme, attackers not only encrypt a victim's data to disrupt operations but also steal sensitive information to threaten the victim with public disclosure. This dual pressure is designed to increase the likelihood of a ransom payment by threatening both operational downtime and reputational damage.

For organizations in the manufacturing and technical textile sectors, maintaining robust cybersecurity postures is essential to defend against such threats. Common defensive steps include implementing strict access controls, maintaining offline backups, and ensuring continuous monitoring of network environments to detect unauthorized data exfiltration. As supply chain security becomes increasingly vital, manufacturers must consider the potential impact of their own security status on their broader network of industrial partners.