Structure-flex targeted in data leak claim by sarcoma group

• Ransomware group: sarcoma
• Country: United Kingdom
• Sector: Manufacturing
• Announcement date: March 22, 2025

A data leak claim against Structure-flex

The sarcoma ransomware group has published a claim regarding a data leak involving the manufacturing company Structure-flex. According to the announcement made on the group's leak site, the attackers claim to have successfully accessed the institution's data and are threatening to release the information publicly.

This type of announcement is a common tactic used by ransomware groups operating via leak sites. These groups often employ a strategy known as double extortion, where they not only encrypt an organization's systems to disrupt operations but also steal sensitive information. By threatening to leak this data, the attackers aim to increase pressure on the victim to meet ransom demands, using the threat of reputational damage or regulatory scrutiny as leverage.

Details of the claimed attack

The announcement was officially posted on the sarcoma group's leak site on March 22, 2025. While the group has claimed to have accessed the organization's data, the specific timing of the initial intrusion is cited as July 25, 2024. This indicates a potential period of unauthorized access or dwell time within the network prior to the public announcement.

The group has listed a significant volume of data as part of this claim. Specifically, the attackers assert that they have obtained a data archive totaling 139 GB. At this stage, the group has not provided any screenshots or specific details regarding the contents of the archive to verify their claims. Furthermore, there is no information available regarding a ransom demand or the specific file count contained within the archive.

Data involved in the claim

The listing names no specific data types or categories of information that have been compromised.

About Structure-flex

Structure-flex is a British company that specializes in manufacturing specialized solutions for the logistics sector, industrial equipment, and commercial vehicles. The firm utilizes PVC and high-frequency fabric welding technology to produce its goods. Having been in operation since the 1970s, the company is a specialist in technical textile products, including various items such as proof load test bags, tension lorry curtains, and other specialized solutions.

Risk assessment and industry implications

The situation involving Structure-flex presents several significant risks. The disclosure of such a large volume of data may result in the exposure of the company's operational data or trade secrets. Such a breach could potentially lead to legal sanctions for the institution under the United Kingdom's data protection legislation, specifically the UK GDPR. Until the exact contents of the 139 GB archive are clarified, it remains impossible to determine if the information includes sensitive customer or employee data.

Beyond the immediate regulatory risks, there are secondary dangers to consider. If the leaked data contains personal information, it could be utilized by malicious actors for targeted phishing attacks or identity theft. In the manufacturing and logistics sectors, the loss of technical specifications or operational workflows can also disrupt supply chain integrity and competitive advantages.

To mitigate these risks, organizations in the manufacturing sector typically focus on robust defensive measures. These include implementing strict access controls, maintaining regular offline backups, and conducting continuous monitoring of network traffic to detect unauthorized movement. Because information regarding the sarcoma group remains limited in the public domain, organizations are advised to remain vigilant against evolving tactics used by such threat actors.