Skip to content
Ransomware

Orion ransomware group lists daubertchemical.com on its leak site

The threat actor known as Orion claims to have leaked data belonging to daubertchemical.com.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Orion
  • Country: United States
  • Sector: Manufacturing
  • Announcement date: August 5, 2026

The threat actor known as Orion has claimed to have leaked data belonging to daubertchemical.com. This announcement, made via a dedicated leak site, marks the latest activity in the group's ongoing ransomware operations.

The claimed attack and event details

According to the announcement posted on August 5, 2026, the Orion group has officially listed daubertchemical.com on their platform. The group alleges that unauthorized access to the organization's network occurred as early as October 28, 2025. This timeline suggests a significant gap between the initial alleged intrusion and the public announcement of the breach.

The Orion group continues to carry out its ransomware operations by publishing information related to the activities of their targets on their online platform. Such tactics are frequently used by ransomware actors to exert pressure on organizations. In these scenarios, the threat actors often employ a strategy known as double extortion, where they not only encrypt a victim's data but also threaten to release sensitive information publicly if a ransom is not paid. By listing a company on a leak site, the group aims to damage the target's reputation and force compliance.

Details regarding the alleged leaked data

Specific details regarding the nature of the allegedly leaked data have not been disclosed by the threat actor. While the group has published a listing, the provided information is limited to a screenshot containing general information about the organization's corporate profile and operations. The listing names no specific data types that have been compromised.

The lack of specific information regarding the volume or type of data is a common occurrence in the early stages of a leak site announcement. Organizations often face uncertainty when a group first claims a breach, as the full scope of the data exfiltration may not be immediately apparent to the public or the victim.

About Daubert Chemical Company

Daubert Chemical Company is an industrial manufacturing company specializing in corrosion preventive coatings, adhesives, and sealants. The organization provides essential chemical solutions for several critical sectors, including the automotive, aerospace, and general industrial industries.

Potential risks and organizational implications

This incident may pose significant risks to the organization's operational continuity and commercial reputation. Because Daubert Chemical Company is a US-based entity, potential data breaches may lead to legal consequences under state-level data protection laws and industry-specific regulations. The legal landscape for data protection is complex, and organizations must navigate various compliance requirements following a suspected breach.

Beyond legal and regulatory concerns, secondary risks may include the potential use of leaked data for identity theft or supply chain attacks. In the manufacturing sector, a breach can have ripple effects throughout the supply chain, potentially impacting partners and customers who rely on the organization's chemical solutions. Such attacks can disrupt the flow of goods and services, leading to broader economic consequences for the affected industries.

Information regarding the Orion group remains limited in the public domain, making it difficult to attribute the attack to a specific known entity with high certainty. For organizations facing similar threats, it is advisable to initiate internal audit processes to verify the claims made by threat actors and to fulfill necessary reporting requirements regarding potential data breaches. Defensive measures typically include maintaining robust backup systems, implementing strict access controls, and conducting regular security assessments to identify vulnerabilities before they can be exploited by ransomware groups.

From the Professional plan

Phishing & Brand Protection

Monitor domains, phishing pages, ads and listings that impersonate your brand, and open takedown requests from the panel.

Related stories