Jansenfurniture.com listed on IMNCrew leak site

• Ransomware group: IMNCrew
• Country: Canada
• Sector: Retail & E-Commerce
• Announcement date: September 16, 2025

Luxury furniture manufacturer Jansenfurniture.com has been listed on a leak site by the threat actor group IMNCrew. The listing, which appeared on September 16, 2025, involves a claim of a data breach against the Canadian-based organization.

The alleged attack and group involvement

The IMNCrew group officially listed Jansenfurniture.com on their leak site on September 16, 2025. Through this announcement, the threat actor group is alleging that a data breach has occurred within the organization's systems. The threat actor has indicated that they may proceed to publish the institution's data on their platform.

Information regarding the IMNCrew group remains limited in the public domain, making it difficult to establish a comprehensive profile of their typical tactics, techniques, or procedures. In many modern ransomware scenarios, threat actors utilize leak sites to exert pressure on victims through a method known as double extortion. In such cases, attackers do not just encrypt data to disrupt operations but also steal sensitive information to threaten its public disclosure if a ransom is not paid. This tactic aims to maximize leverage by threatening the victim's reputation and regulatory standing.

Details regarding the claimed data

At this stage of the incident, there is no information provided regarding the nature of the alleged leaked data, and no screenshot has been provided to substantiate the claims. The listing names no specific data types that have been targeted or exfiltrated.

Organization profile

Jansen Furniture is a family-owned company founded in 1982 by Peter Andries Jansen. The company produces luxury furniture and decorative accessories, offering handcrafted items in classic, contemporary, and modern styles. Their business model operates through a worldwide network of dealers on a B2B basis.

Risk assessment and industry implications

The potential leak of the institution's data may create secondary risks such as identity theft or targeted phishing attacks for customers and business partners. Because the organization operates on a B2B model, the disclosure of trade secrets or information regarding dealer networks may impact their competitive advantage.

As a Canada-based institution, a potential data breach may be subject to PIPEDA regulations and could lead to legal consequences. Organizations operating in the retail and e-commerce sectors often face significant pressure to maintain data integrity to protect their supply chains and client relationships.

The fact that the threat actor has not shared ransom demands or data samples may indicate that the process is in its early stages. When an organization is listed without immediate evidence of stolen files or a specific financial demand, it often signifies the beginning of the extortion cycle. To defend against such threats, organizations typically focus on robust backup strategies, multi-factor authentication, and continuous monitoring of their network environments to detect unauthorized access before data exfiltration can occur.