LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker

Recent Breaches › Dorrell Fabrics Listed by sinobi Ransomware Group

HIGH severityUnverified claimHow we verify

Dorrell Fabrics Listed by sinobi Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

RBRecent Breaches Breach Intelligence·June 15, 2025
Dorrell Fabrics Listed by sinobi Ransomware Group

Reported June 15, 2025.

HIGH
Severity
June 15, 2025
Disclosed
ShareXLinkedInFacebookRedditWhatsAppTelegram

Dorrell Fabrics was listed by the sinobi ransomware group on June 15, 2025, after internal files were exfiltrated in a ransomware attack affecting an undisclosed number of individuals. If you have any association with the company, review the details and take appropriate protective steps.

Severity & verification
HIGH severityUnverified claim
Data types not itemised.
Published on a ransomware group’s leak site — an unverified extortion claim until the named organization or credible reporting corroborates it.
Check your exposure
See every leak and listing tied to your email. We can’t confirm any single incident against the sources we search, so we won’t pretend to. 15-second check, no card, no account. Details go to your inbox.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

On 15 June 2025, the ransomware group known as sinobi listed Dorrell Fabrics on its leak site, claiming that internal files had been exfiltrated in a ransomware attack. Public reporting does not confirm the number of people affected, the precise method of intrusion, or the full scope of material taken. In an environment where ransomware groups routinely publish victim names to pressure payment, such listings have become a common early signal that an organisation may have suffered a data-security incident.

For employees, suppliers, designers and clients who work with textile firms, any confirmed or claimed exposure of internal files raises practical questions about what information may now be circulating and what steps can reduce personal or commercial risk. The details that follow rest only on the limited public record of this listing and on established patterns of the actor and sector involved.

Breaking down the breach

According to the available record, Dorrell Fabrics was listed by the sinobi ransomware group on 15 June 2025. The group claims that internal files were exfiltrated during a ransomware attack. No public figure has been given for the number of individuals affected, and the exact volume or categories of files beyond the general description “internal files” remain undisclosed. Timing of the initial intrusion, the encryption status of systems, and any ransom demand or negotiation have not been confirmed in the material provided. The listing itself constitutes an unverified claim by the group rather than an independent confirmation of compromise.

Who is sinobi?

Sinobi is a ransomware operation that has appeared in public threat reporting as a group employing double-extortion tactics: encrypting systems while also stealing data and threatening to publish it if payment is not made. Like many contemporary ransomware crews, it maintains a leak site on which it posts victim names and, in some cases, sample files to demonstrate access. Public analyses of prior sinobi activity describe the use of standard ransomware tooling, affiliate-style recruitment, and pressure campaigns that combine technical disruption with reputational threat. Nothing in the present record establishes that sinobi made additional specific claims about Dorrell Fabrics beyond the listing and the assertion that internal files were taken. Attribution therefore rests on the group’s own public statement, which remains unverified by independent sources in the facts at hand.

Dorrell Fabrics and its sector

Dorrell Fabrics specialises in fabric sourcing and innovation, supplying residential, performance, contract, outdoor and specialty textiles. The company works with designers, manufacturers and suppliers and draws on nearly 88 years of experience in trend forecasting and operational support for clients across multiple sectors. Textile and fabric-sourcing firms typically maintain records of customer specifications, supplier contracts, pricing, design collaborations, shipping details and internal operational documents. A breach affecting such an organisation can therefore touch both commercial relationships and the personal or business data of the people who interact with it. Because the sector often involves long-standing partnerships and specialised product knowledge, the integrity of internal files carries direct consequences for ongoing projects and trust between parties.

What was likely exposed

The public record states only that internal files were exfiltrated in a ransomware attack. Exact file names, volumes, or data categories beyond that description have not been disclosed. Organisations of this type commonly hold business correspondence, purchase orders, design briefs, supplier agreements, employee or contractor contact information, and operational planning documents. Whether any of those specific classes of material were among the files claimed by sinobi is unconfirmed. Readers should treat the precise contents as unknown until further verified information appears.

Why it matters

When internal files leave an organisation’s control, the practical risks include unauthorised use of commercial terms, exposure of contact details that can enable phishing or social-engineering attempts, and potential disruption of supply-chain relationships if sensitive specifications become public. For individuals whose names or contact information appear in those files, the immediate concerns are identity-related fraud and targeted scams that reference the company or recent transactions. For Dorrell Fabrics itself, the listing creates operational and reputational pressure even before any independent confirmation of the full extent of the incident. Because the number of people affected remains unknown, the circle of potentially impacted parties cannot yet be defined with precision; caution is therefore warranted for anyone who has shared personal or business data with the firm.

If your data was in this claimed breach

If you have reason to believe your information may have been among the internal files claimed by sinobi, a measured response is more useful than alarm. Consider the following concrete steps:

Public detail on this particular listing remains limited. Further official statements from Dorrell Fabrics or independent verification would be required before the full scale and content of any exposure can be established. Until then, the practical measures above offer a proportionate way to reduce residual risk.

AICompiled with AI assistance from public sources and published under our editorial standards.

Editorial & sourcing policy
Recent Breaches is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data, and we do not hold the data claimed in leak-site listings. Incidents are compiled from publicly accessible sources and threat-intelligence platforms and are reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — write to support@galaxywarden.com or press@recentbreaches.com.
Check if you’re exposed →

How this breach connects

Company

Attributed to

Method

CompanyDorrell Fabrics security record
87/100
DoxxScan™ · Low doxx risk
B 80Good record

1 reported incident on record.

See Dorrell Fabrics’s full breach history →

More recent breaches

Industrial Chemicals Listed by sinobi Ransomware GroupOctober 8, 2025Dyson Corp. Listed by sinobi Ransomware GroupJuly 15, 2025Geometrics Listed by sinobi Ransomware GroupDecember 22, 2025Turnamics Listed by sinobi Ransomware GroupDecember 19, 2025

Latest breaches

Read GalaxyWarden’s full analysis of the Dorrell Fabrics Listed by sinobi Ransomware Group →

Source: threat-actor leak-site listing

Publicly posted by sinobi — unverified claim, pending independent verification

Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

ShareXLinkedInFacebookRedditWhatsAppTelegram