Rhea Vendors Group SpA listed on Payoutsking leak site

• Ransomware group: Payoutsking
• Country: Italy
• Sector: Manufacturing
• Announcement date: July 7, 2025

Payoutsking claims data breach against Rhea Vendors Group SpA

The threat group known as Payoutsking has listed the Italian manufacturing organization Rhea Vendors Group SpA on its leak site. According to the announcement made on July 7, 2025, the group claims to have successfully compromised the organization's systems and obtained a significant volume of data. This type of activity is characteristic of modern ransomware operations, where threat actors often employ double extortion tactics. In these scenarios, attackers not only encrypt an organization's systems to disrupt operations but also exfiltrate sensitive information to use as leverage for extortion, threatening to publish the stolen data on public leak sites if demands are not met.

The claim suggests that the breach occurred earlier than the public announcement, with the group asserting that the attack took place on April 24, 2025. While the listing serves as a public notification of the alleged theft, it is important to note that these claims are made by the threat actor and have not been independently verified. The group has provided download links and various proof files to support their claims regarding the breach.

Details of the alleged data theft

The announcement from Payoutsking provides specific details regarding the scale of the alleged exfiltration, though it remains vague regarding the specific nature of the files. The group claims that the total volume of the stolen data amounts to 1.7 TB. This represents a substantial amount of information that could potentially contain a wide array of corporate or sensitive files.

Despite the large volume of data mentioned, the listing does not provide specific details regarding the nature of the alleged leaked data. The announcement does not specify the types of files involved, such as whether they consist of financial records, intellectual property, or employee information. The listing names no specific data types beyond the total volume of 1.7 TB.

The target organization

The target of this alleged attack is Rhea Vendors Group SpA, an organization operating within the manufacturing sector. Based in Italy, the company is subject to the regulatory frameworks governing data protection within the European Union. Such a breach, if confirmed, would likely involve complex legal implications due to the geographic location of the organization and the potential exposure of sensitive information.

Impact and potential risks

The alleged leak of 1.7 TB of data poses several significant risks to Rhea Vendors Group SpA. From a regulatory standpoint, because the organization is based in Italy, a confirmed data breach could trigger legal processes and sanctions under the General Data Protection Regulation (GDPR). The scale of the data involved could have a profound impact on the organization's operational continuity and its commercial reputation in the manufacturing industry.

Furthermore, there is a risk that the leaked data could be utilized by malicious actors for identity theft or targeted phishing attacks against the organization or its stakeholders. When large datasets are leaked, they often become a resource for subsequent cyberattacks, where stolen credentials or corporate details are used to gain further access to networks or to conduct social engineering campaigns.

For organizations operating in the manufacturing sector, maintaining robust cybersecurity postures is essential to mitigate these risks. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting frequent security audits. Because information regarding the Payoutsking group is limited, organizations should remain vigilant against the tactics used by such actors. The significant volume of data claimed in this instance highlights the ongoing challenge of protecting large-scale corporate environments from sophisticated exfiltration techniques.