Stiga.com listed on IMNCrew leak site following alleged data breach

• Ransomware group: IMNCrew
• Country: Sweden
• Sector: Retail & E-Commerce
• Announcement date: May 20, 2025

IMNCrew claims to have compromised Stiga.com data

The threat group known as IMNCrew has listed the Swedish-based organization Stiga.com on their dedicated leak site. Through this announcement, the group alleges that they have successfully compromised the company's data. This development marks a potential significant security incident for the organization, as the group claims to have gained unauthorized access to the company's internal systems and obtained various data assets.

The announcement was made on May 20, 2025, with the group claiming the attack occurred on the same day. At this stage, information regarding the specific capabilities or the background of the IMNCrew group remains limited, making it difficult to ascertain the full scope of their operational methods. Ransomware groups often utilize leak sites to exert pressure on victims, a tactic frequently associated with double extortion strategies where data is both encrypted and exfiltrated to increase leverage during negotiations.

Details of the alleged breach

Regarding the specifics of the incident, the group has provided very little information to the public. While the listing confirms that a breach has allegedly occurred, there are no screenshots or detailed descriptions provided that outline the exact nature of the data that was purportedly taken. No specific file counts, data sizes, or ransom demands have been disclosed by the threat actor in this announcement.

The listing names no specific data types that have been compromised.

About Stiga.com

Stiga is a prominent brand based in Sweden that has been operating since 1934. The company is specialized in the design and manufacture of innovative gardening tools, machinery, and various types of equipment. Stiga maintains a global manufacturing footprint, producing its products in several facilities located across Sweden, Italy, Slovakia, and China.

Potential impacts and security considerations

The claim made by IMNCrew could lead to several negative consequences for the organization. Such an incident may impact the company's operational continuity and could potentially damage customer trust. Because the specific contents of the alleged breach have not been clarified, the risk regarding the potential disclosure of trade secrets or personal information cannot be overlooked.

As the organization is headquartered in Sweden, a confirmed data breach could trigger significant legal implications. This includes potential legal sanctions and mandatory notification requirements under the EU General Data Protection Regulation (GDPR). Furthermore, there is a risk that any compromised data could be utilized by malicious actors for targeted phishing attacks or identity theft.

For organizations operating within the retail and e-commerce sectors, maintaining robust defensive measures is essential. Common defensive strategies include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular network monitoring to detect unauthorized access early. Furthermore, organizations often focus on data encryption and comprehensive employee training to mitigate the risks of social engineering and unauthorized data exfiltration.