Mammut Sports Group listed on datacarry leak site

• Ransomware group: datacarry
• Country: Switzerland
• Sector: Retail & E-Commerce
• Announcement date: May 26, 2025

Mammut Sports Group listed on datacarry leak site

Mammut Sports Group has been listed on the leak site of the threat actor known as datacarry. The threat actor claims to have obtained data belonging to the organization, marking a potential significant security incident for the Swiss-based retail and e-commerce company.

The alleged incident

The datacarry group listed Mammut Sports Group on its leak platform on May 26, 2025. While the announcement was made recently, the threat actor specifies the date of the incident as September 27, 2024. This discrepancy between the claim of the attack and the public listing is a common occurrence in ransomware operations, where actors may hold stolen data for months before deciding to publicize the breach.

Ransomware leak sites serve as a platform for threat actors to exert pressure on victims. These sites are used to announce successful intrusions and to host stolen data to shame organizations into paying ransoms. In many modern cyberattacks, threat actors employ a method known as double extortion. In this scenario, the attackers do not just encrypt the victim's systems to disrupt operations; they also exfiltrate sensitive data. If the ransom is not paid, the stolen information is published on these public platforms to maximize the pressure on the target organization.

Data involved in the claim

Regarding the specific contents of the alleged breach, the leak announcement provides no details or screenshots regarding the nature of the data. There is no information provided concerning the volume of files or the specific types of data that have been targeted.

• No specific data types were named in the listing.

When an organization faces a potential data leak, the lack of immediate information can create significant uncertainty. Without specific details regarding whether the data involves customer information, employee records, or proprietary business files, organizations must often conduct extensive forensic investigations to determine the true scope of the exposure.

About Mammut Sports Group

Mammut Sports Group is a Swiss-based company that manufactures technical equipment, clothing, and footwear for mountaineering, climbing, and outdoor sports. Founded in 1862, the company is globally recognized for its high-performance mountaineering products.

Impact and organizational implications

Public information about the datacarry group is limited. The alleged data breach may lead to disruptions in the organization's operational processes and potential reputational damage. Because the organization is based in Switzerland, a potential data breach may trigger legal proceedings under the Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR).

If the alleged data is published in the future, it may lead to identity theft or targeted phishing attacks against customers. Furthermore, the organization may face secondary intrusion attempts or extortion demands through double extortion methods within its systems. These secondary attacks often occur when threat actors realize that the initial breach did not yield the desired financial outcome or when they seek to exploit vulnerabilities discovered during the first intrusion.

For organizations operating in the retail and e-commerce sectors, such incidents highlight the necessity of robust cybersecurity frameworks. Common defensive steps include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular employee training to recognize phishing attempts. Additionally, maintaining offline, immutable backups is a critical component of a resilient defense strategy to mitigate the impact of encryption-based ransomware attacks.