AOSOM.COM Listed by clop Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

AOSOM.COM, an online retailer operating in multiple countries, was listed by the Clop ransomware group on November 21, 2025. The group claims to have exfiltrated internal files during a ransomware attack. The number of people affected remains unknown, and no further details on the scope or contents of the data have been made public. This listing occurs amid a broader pattern of ransomware operations that combine encryption with data theft and public pressure on victims. Such incidents continue to affect organizations that hold customer and operational records, even when the precise impact on individuals is not immediately clear.

What happened

The incident was reported on November 21, 2025, when the Clop group added AOSOM.COM to its leak site. The group states that internal files were taken during a ransomware intrusion. No information has been released on the date of the intrusion itself, the volume of data involved, or whether encryption was also deployed. The number of individuals whose information may be present in the files is not known.

Who is clop?

Clop is a ransomware group that has conducted operations since at least 2019. It typically uses a double-extortion approach, encrypting systems and threatening to publish stolen data if a ransom is not paid. The group maintains a public leak site where it lists organizations it claims to have targeted. Its activity has included campaigns against large enterprises and supply-chain compromises, though each listing on the site represents an assertion by the group rather than an independently verified event.

AOSOM.COM and its sector

AOSOM.COM is an online retailer that sells furniture, outdoor equipment, pet supplies, and sports goods. It serves customers primarily in the United States, United Kingdom, Canada, and Germany, with product ranges that include both standard and seasonal items. Retail platforms of this type routinely process customer orders, payment details, shipping addresses, and account information while also maintaining internal records related to inventory, suppliers, and operations.

What was likely exposed

The only detail provided is that internal files were allegedly exfiltrated. The exact categories of data within those files have not been disclosed. Organizations in online retail commonly store customer names, contact information, order histories, and payment records alongside employee or vendor data. Without confirmation from the company or a detailed forensic report, the presence of any specific data type remains unconfirmed.

What's at stake

Individuals whose information appears in the exfiltrated files could face risks of phishing, account takeover attempts, or misuse of personal details, depending on what the files contain. For the organization, exposure of internal documents can affect supplier relationships, competitive information, and regulatory obligations tied to customer data. The absence of Reported Details on scale or content means the practical consequences for any one person cannot yet be quantified.

Were you affected?

Begin by monitoring email accounts associated with AOSOM.COM for unusual messages and by reviewing statements from the company when they become available. Enable multi-factor authentication on any accounts that may share credentials or personal details with the retailer. Readers can also run a free exposure scan of their email address against known breach data to check for prior appearances in published incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.