OFS targeted by Global Secret Group in alleged data breach

• Ransomware group: Global Secret Group
• Country: United States
• Sector: Manufacturing
• Announcement date: July 26, 2026

Global Secret Group claims to have exfiltrated data from OFS

The threat actor known as Global Secret Group has published an announcement on its leak site claiming to have exfiltrated 321 GB of data belonging to the organization OFS. This announcement, made on July 26, 2026, suggests a significant breach of the company's digital infrastructure.

Details of the alleged attack

According to the claims made by Global Secret Group, the cyberattack allegedly occurred on July 9, 2026. The threat actor asserts that they successfully breached the organization's systems, leading to the unauthorized acquisition of a large volume of information. The group has listed the stolen data on its dedicated leak site, a tactic commonly used in double extortion ransomware campaigns to exert pressure on the targeted organization.

In such schemes, threat actors typically aim to coerce organizations into paying a ransom by threatening to release sensitive information publicly. While the group has published an announcement, they have not provided specific details regarding the content of the leaked data, and the provided screenshots only show blurred file samples.

The scope of the claimed data theft

The threat actor has provided specific metrics regarding the volume of information they claim to have stolen during the incident. The data allegedly consists of the following:

• 321 GB of total data
• 322,742 files
• 18,081 folders

While the group has provided these quantities, they have not specified the exact nature or the types of files contained within this massive dataset. The lack of clarity regarding the specific contents of the files makes it difficult to determine the exact impact of the breach at this stage.

About OFS

OFS is a US-based company that designs and manufactures furniture for the office, education, healthcare, and hospitality sectors. Operating in Indiana, the firm provides commercial furniture solutions with a wide product range.

Potential impact and industry implications

This incident may pose risks to the organization's operational continuity and data privacy. As a US-based entity, a potential data breach could trigger state-level data protection laws and regulatory inquiries. Depending on the nature of the leaked data, employees or customers might be at risk of identity theft. Furthermore, the organization's supply chain partners could be exposed to targeted phishing attacks.

For organizations operating in the manufacturing sector, such incidents highlight the importance of robust cybersecurity postures. When a breach occurs, organizations often face complex challenges involving regulatory compliance and the protection of intellectual property. Common defensive steps for organizations include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training to mitigate the risk of initial access through phishing.

The group responsible for this claim, Global Secret Group, currently has limited information available regarding its specific tactics, techniques, and procedures. As the situation develops, the implications for the organization's supply chain and regulatory standing will remain a key area of concern.