Skip to content
Ransomware

Mold Tech listed on coinbasecartel leak site

Spain-based manufacturing company Mold Tech has been listed on the leak site of the threat actor known as coinbasecartel.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: coinbasecartel
  • Country: Spain
  • Sector: Manufacturing
  • Announcement date: February 16, 2026

Mold Tech listed on coinbasecartel leak site

The manufacturing company Mold Tech has been listed on the leak site of the threat actor known as coinbasecartel. This announcement, which appeared on February 16, 2026, indicates that the group claims to have obtained data belonging to the organization. This listing suggests that a cybersecurity incident may have occurred affecting the company's operations.

The claim by coinbasecartel

On February 16, 2026, the coinbasecartel group published an announcement on their dedicated leak site. In this posting, they identified Mold Tech as a target and claimed to have successfully exfiltrated data from the organization. While the group has made this public claim, it is important to note that the listing serves as an allegation by the threat actor regarding the security of the company's infrastructure.

Ransomware groups often utilize leak sites as a component of a double extortion strategy. In such scenarios, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive information to pressure the victim into paying a ransom. The threat of releasing stolen data on a public platform is used to increase the pressure on the target organization, potentially causing reputational damage or legal complications.

Information regarding the alleged leak

At this time, there is no information provided regarding the nature of the leaked or compromised data. The available screenshots indicate that no information has been disclosed by the group yet. Consequently, the specific types of files, the volume of data, or the specific content of the alleged breach remain unknown.

  • No specific data types have been named in the listing.

Because the group has not yet released any samples or specific details, the full scope and content of the alleged leak cannot be determined. The situation remains fluid as the group's next steps are currently unclear.

Organization profile

Mold Tech is an organization operating within the manufacturing sector. The company is based in Spain, which subjects it to specific regulatory frameworks regarding data privacy and protection.

Risk assessment and defensive considerations

This incident may pose a risk of sensitive corporate or personal data exposure for Mold Tech. As the company operates in Spain, any potential data breach could lead to legal consequences under GDPR. Furthermore, secondary risks such as identity theft or targeted phishing attacks against customers and employees may be observed following such an event.

For organizations operating in the manufacturing sector, maintaining robust cybersecurity postures is essential to mitigate these risks. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for employees to recognize phishing attempts. Additionally, maintaining a comprehensive incident response plan is vital for managing the legal and operational fallout of a potential breach.

Public information about the coinbasecartel group is limited, and their motivations and methods remain unclear. As the situation evolves and more information becomes available regarding the scope and content of the alleged leak, the risk assessment should be updated to reflect the actual impact on the organization.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories