Skip to content
Ransomware

PernelMedia listed on Direwolf leak site

The threat actor group known as Direwolf has listed PernelMedia, a France-based company, on its leak site, claiming to possess 500 GB of data.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Direwolf
  • Country: France
  • Sector: Retail & E-Commerce
  • Announcement date: January 4, 2026

The threat actor group known as Direwolf has listed PernelMedia, a France-based company, on its leak site, claiming to possess 500 GB of data. This announcement, made on January 4, 2026, marks a new potential data breach incident involving the French media production firm.

Details of the claim

On January 4, 2026, the Direwolf group published a listing on their leak site, alleging that they have compromised PernelMedia. The group claims to hold 500 GB of data purportedly obtained from the company's systems. While the group has made this public claim, information regarding this specific threat actor group remains limited in the public domain.

Ransomware groups often utilize leak sites as a tool for double extortion. In such scenarios, attackers do not only encrypt a victim's systems to disrupt operations but also steal sensitive information to threaten its public release. This pressure is intended to coerce the organization into paying a ransom to prevent the exposure of their data. The use of a dedicated leak site allows these groups to maintain a presence and build a reputation for following through on their threats.

Data involved in the alleged breach

Regarding the specifics of the information allegedly stolen, the group has provided limited details. The listing names no specific data types or file counts. The only information provided by the threat actor concerns the volume of the data, which is stated to be 500 GB.

Potential risks of data exposure

The publication of stolen data can lead to various secondary risks. Depending on the nature of the leaked data, secondary risks such as identity theft or targeted phishing attacks against customers and employees may be observed. When sensitive information is released, attackers often use it to craft highly convincing social engineering campaigns, leveraging the stolen context to deceive individuals.

About PernelMedia

Pernel Media is a French media production company that produces television programs, documentaries, and digital content. Operating within the media and production sector, the company manages various digital assets and intellectual property related to its various media productions.

Impact and organizational considerations

This claim against PernelMedia may pose a risk to the company's operational continuity. Furthermore, the publication of the data could create negative impacts on the company's commercial reputation and may weaken its competitive position in the sector. Because the company is based in France, the incident may trigger data breach notification obligations under GDPR.

For organizations operating in the media and digital content sectors, maintaining robust cybersecurity postures is essential to protect intellectual property and sensitive production data. Common defensive steps for organizations include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for employees to recognize phishing attempts. Additionally, adhering to strict data protection regulations and ensuring comprehensive logging and monitoring can help in the early detection of unauthorized access, potentially mitigating the impact of a breach before data is exfiltrated.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories