LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker

Recent Breaches › EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε Listed by incransom Ransomware Group

HIGH severityUnverified claimHow we verify

EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

RBRecent Breaches Breach Intelligence·August 12, 2025
EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε Listed by incransom Ransomware Group

Reported August 12, 2025.

HIGH
Severity
August 12, 2025
Disclosed
ShareXLinkedInFacebookRedditWhatsAppTelegram

EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε was listed by the incransom ransomware group on August 12, 2025, indicating that internal files were exfiltrated from the company. Individuals who may have had data held by EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε should verify whether their information was exposed and take appropriate protective measures.

Severity & verification
HIGH severityUnverified claim
Data types not itemised.
Published on a ransomware group’s leak site — an unverified extortion claim until the named organization or credible reporting corroborates it.
Check your exposure
See every leak and listing tied to your email. We can’t confirm any single incident against the sources we search, so we won’t pretend to. 15-second check, no card, no account. Details go to your inbox.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

People connected to EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε. face the practical possibility that internal company files have been taken and may circulate beyond the organisation’s control. When a ransomware group lists a business, the immediate concern for employees, partners and anyone whose details sit inside those files is whether personal or operational information could be misused for fraud, phishing or further intrusion.

Public reporting on 12 August 2025 states that the Greek firm has been named by the incransom ransomware group, which claims to have exfiltrated internal files. The number of people affected remains unknown and the precise contents of the files have not been independently confirmed.

Breaking down the breach

According to available records, EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε. was listed by the incransom ransomware group on or around 12 August 2025. The group asserts that internal files were exfiltrated during a ransomware attack. No public confirmation of the attack method, the volume of data taken, the exact date of intrusion, or any ransom demand has been released. The number of individuals potentially affected is listed as unknown. Contact details associated with the organisation in the reporting include info@mantzaris-film.com, (+30) 27410 54900, info.ath@mantzaris-film.com and (+30) 212 000 0001; these appear to be ordinary business contact points rather than confirmed exposed personal data.

Because the listing originates from the threat actor’s own claims, independent verification of the full scope remains limited. No further technical indicators or forensic findings have been disclosed in the material available for this account.

Who is incransom?

incransom is a ransomware operation that follows a well-documented double-extortion model: encrypting systems while also copying data and threatening to publish it if payment is not made. Groups of this type typically maintain leak sites where they name victims and, in some cases, release samples or full archives. Public tracking of such actors shows they often target mid-sized commercial organisations across multiple sectors, using common initial-access methods such as compromised credentials or unpatched remote services, then moving laterally to locate valuable files.

In this instance the group claims EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε. as a victim and states that internal files were exfiltrated. No additional statements attributed specifically to this listing—such as file counts, screenshots or deadlines—appear in the reported facts. Readers should treat the listing as an unverified claim until corroborated by the organisation or independent investigators.

EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε and its sector

EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε. operates in the film and media sector in Greece, consistent with its trading name and the domain mantzaris-film.com. Companies of this type typically manage production schedules, contracts with freelancers and suppliers, financial records, customer or distributor lists, and internal correspondence. They may also hold personal data of employees, cast, crew and business partners.

A breach in this sector is consequential because media firms often store commercially sensitive material—unreleased content, licensing agreements, payment details—and personal information required for payroll, tax and collaboration. Exposure of such material can disrupt operations, damage commercial relationships and create lasting privacy risks for individuals whose data is held.

The information in question

The only data type named in the available facts is “internal files exfiltrated in ransomware attack.” No inventory of specific document categories, personal identifiers or financial records has been published. Organisations in the film sector commonly retain employee records, contractor invoices, client contact lists, project files and correspondence. Whether any of those categories were among the files claimed by incransom is unconfirmed.

Because the precise contents remain undisclosed, it is not possible to state as fact which individuals or which data fields are involved. The absence of a confirmed count of affected people further limits assessment of scale.

The real-world impact

For people whose information may sit inside the claimed files, the concrete risks include targeted phishing that references real projects or colleagues, identity-related fraud if personal identifiers were present, and unsolicited contact using leaked email or telephone numbers. For the organisation itself, potential consequences include operational disruption, loss of commercial confidentiality, regulatory notification duties under applicable data-protection rules, and the cost of investigation and remediation.

None of these outcomes is guaranteed; they depend on what was actually taken and whether the data is later released or sold. At present the public record supplies only the group’s claim of exfiltration of internal files and the listing date of 12 August 2025.

What to do if you're exposed

If you have a past or present relationship with EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε.—as staff, contractor, supplier or client—treat the situation as a possible exposure until more detail emerges. Practical first steps include:

Further official statements from the company or Greek authorities, if issued, will provide the most reliable next guidance. Until then, measured vigilance is the proportionate response.

AICompiled with AI assistance from public sources and published under our editorial standards.

Editorial & sourcing policy
Recent Breaches is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data, and we do not hold the data claimed in leak-site listings. Incidents are compiled from publicly accessible sources and threat-intelligence platforms and are reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — write to support@galaxywarden.com or press@recentbreaches.com.
Check if you’re exposed →

How this breach connects

Company

Attributed to

Method

CompanyEUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε security record
87/100
DoxxScan™ · Low doxx risk
B 80Good record

1 reported incident on record.

See EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε’s full breach history →

More recent breaches

glasserstv.com Listed by incransom Ransomware GroupDecember 18, 2025oxfordshop.com.au Listed by incransom Ransomware GroupDecember 1, 2025American Pools & Spas Listed by incransom Ransomware GroupDecember 1, 2025Schmidt's Listed by incransom Ransomware GroupNovember 25, 2025

Latest breaches

Read GalaxyWarden’s full analysis of the EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε Listed by incransom Ransomware Group →

Source: threat-actor leak-site listing

Publicly posted by incransom — unverified claim, pending independent verification

Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

ShareXLinkedInFacebookRedditWhatsAppTelegram