Selartex listed on dragonforce ransomware leak site

• Ransomware group: dragonforce
• Country: France
• Sector: Professional Services
• Announcement date: August 23, 2025

Dragonforce claims data breach against Selartex

The ransomware group known as dragonforce has listed the French organization Selartex on its dedicated leak site. According to the announcement made on August 23, 2025, the threat actors claim to have successfully targeted the company and now possess sensitive information belonging to the organization. This type of announcement is a common tactic used in modern cyberattacks, particularly in double extortion schemes where attackers not only encrypt an organization's systems but also threaten to publish stolen data to pressure the victim into paying a ransom.

The group's claim suggests that the data is now accessible to them, effectively targeting the organization's privacy and operational integrity. While the specific method of entry remains unconfirmed, the listing serves as a public notification of the alleged compromise. Such incidents often follow a period of unauthorized access where attackers move laterally through a network to identify and exfiltrate valuable assets before the breach is detected by the victim's security teams.

Details of the alleged data theft

The announcement provided by dragonforce details the scale of the alleged theft, though it remains limited in terms of specific content descriptions. The group claims that the volume of data compromised is approximately 62.99 GB. This significant amount of data is said to be related to the company's operations within France.

Regarding the specific categories of information stolen, the leak announcement does not provide specific details regarding the nature of the data. The listing names no specific data types.

Implications for the organization

Selartex is a France-based home textile wholesaler with over 35 years of experience. The company offers a wide range of products to professional clients, including bed linen, decorative textiles, table linen, and bath linen.

Risk assessment and industry considerations

This alleged data leak may pose significant risks to the organization's operational continuity and commercial reputation. Because Selartex operates within France, the potential exposure of personal data could lead to legal sanctions and notification obligations under the General Data Protection Regulation (GDPR). Organizations operating in the European Union must adhere to strict protocols regarding data protection, and a breach of this magnitude often triggers mandatory reporting requirements to regulatory authorities.

The operational model of dragonforce is also a point of concern for security analysts. The group appears to operate by providing infrastructure to affiliates, a model that suggests attack vectors could diversify and secondary risks may increase. When ransomware groups act as service providers for various affiliates, it can lead to a wider variety of attack methodologies being deployed against different targets.

Furthermore, the breach introduces secondary risks for the company's ecosystem. There is a heightened possibility of identity theft or targeted phishing attacks directed at the company's customers and business partners. Such attacks often leverage the stolen information to gain further access or to conduct fraudulent activities under the guise of a trusted entity.

Given that dragonforce emerged in 2023, its activities should be monitored closely. For organizations in the professional services and wholesale sectors, maintaining robust defensive measures is critical. This includes implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training to mitigate the risk of phishing. As threat actors continue to evolve, staying vigilant against the shifting tactics of groups like dragonforce remains a primary defensive necessity.