Nourison | Home targeted by Global Secret Group in alleged data breach

• Ransomware group: Global Secret Group
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: July 26, 2026

Global Secret Group claims data exfiltration from Nourison | Home

The threat actor known as Global Secret Group has listed the organization Nourison | Home on its leak site, claiming to have successfully exfiltrated a significant amount of data from the company's network. This announcement, made on July 26, 2026, follows a claimed attack date of July 20, 2026. The threat actor appears to be utilizing a common tactic in modern cyberattacks known as double extortion, where stolen data is used as leverage to pressure an organization into meeting specific demands.

In such scenarios, ransomware groups typically target sensitive information to increase their bargaining power. By threatening to publish proprietary or personal information on a public leak site, these actors attempt to cause maximum reputational and operational damage to the victim. While the specific motives behind this particular post remain unclear, the publication of stolen files is a hallmark of groups seeking to exert pressure on their targets.

Details of the alleged data theft

According to the announcement posted by Global Secret Group, the breach involves a substantial volume of information taken from the organization's internal systems. The group claims that the exfiltrated data consists of the following:

• 799 GB of total data
• 93,941 files
• 13,733 folders

The screenshots provided by the threat actor in their announcement display various file lists and directory structures that appear to belong to the organization's internal operations. However, it is important to note that there is no detailed breakdown regarding the specific nature of the leaked data provided in the post. Information regarding the specific types of files or the exact contents of the directories remains unconfirmed by the group's public announcement.

About Nourison | Home

Nourison is a family-owned company specializing in the design, manufacture, and distribution of rugs, carpets, and home decor products. Based in New Jersey, the firm offers a wide range of products through both retail and wholesale channels.

Potential impact and risks

This alleged data breach may pose a risk of exposure for the personal data of Nourison | Home employees and customers. As a US-based organization, the potential breach may fall under the scope of state-level data protection laws and regulations. The publication of the company's trade secrets and operational data could harm its competitive position and create opportunities for secondary attacks.

Furthermore, any sensitive information found within the leaked data could be exploited for identity theft or targeted phishing campaigns. When organizations face such threats, they may be required to fulfill legal notification obligations following the breach and inform the affected parties. In the retail and e-commerce sector, maintaining the integrity of customer data is paramount to maintaining consumer trust and meeting regulatory requirements.

To mitigate such risks, organizations in the retail sector often implement defensive measures such as robust encryption for data at rest and in transit, multi-factor authentication (MFA) across all access points, and continuous monitoring of network traffic to detect unauthorized exfiltration. Additionally, regular security awareness training for employees can help prevent initial access through common vectors like phishing.