Casale Del Giglio Listed by orca Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Casale Del Giglio was listed by the orca ransomware group on April 27, 2026, after internal files were exfiltrated in a ransomware attack affecting an undisclosed number of people. If your information was held by Casale Del Giglio, review your accounts and consider protective steps.
Inside the incident
Public reporting on the event is limited to the group’s leak-site listing dated April 27, 2026. No independent confirmation of the volume of data, the method of initial access, or whether any ransom demand was issued has been made available. The organization has not issued a public statement detailing its own findings.
Who is orca?
Orca is a ransomware operation that maintains a public leak site where it lists organizations it claims to have targeted. Such groups commonly encrypt systems, copy files beforehand, and threaten publication if payment is not received. Their listings constitute claims by the group rather than verified incidents until corroborated by the victim or independent investigators.
About Casale Del Giglio
Casale Del Giglio was founded in 1967 by Dr. Berardino Santarelli. Organizations in the wine-production sector routinely maintain records that include supplier contracts, employee information, customer orders, and financial documentation. A breach involving internal files from such an entity can therefore touch both business operations and individuals connected to those records.
What data was at risk
The only detail released is that internal files were allegedly exfiltrated. The exact categories of information contained in those files remain undisclosed. Companies of this type typically hold contact details, transaction records, and employment data, but it is not confirmed whether any of those categories were present in the exfiltrated material.
Why it matters
Exfiltrated internal files can contain information that enables targeted phishing, identity misuse, or further attempts to compromise related systems. For the organization, the incident adds operational disruption and the need to review access controls and incident response procedures. For individuals, the risk depends on whether personal identifiers were among the files, a point that has not been clarified.
Were you affected?
Begin by monitoring accounts associated with any prior business dealings with Casale Del Giglio for unusual activity. Review bank and credit statements regularly and consider placing fraud alerts if personal details may have been involved. A free exposure scan of your email address against known breach data sets can indicate whether your information has appeared in previously published collections, though it will not confirm presence in this specific incident.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
NATURGHIACCIO Listed by thegentlemen Ransomware Grouppieralisi.com Listed by dragonforce Ransomware Groupsoavegel.it Listed by safepay Ransomware GroupLa Kaffa International Listed by thegentlemen Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the Casale Del Giglio Listed by orca Ransomware Group →
Publicly posted by orca — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.