FYTISA Industrial Felts and FabricsSL Listed by noescape Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On August 13, 2023, the Spanish industrial manufacturer FYTISA Industrial Felts and FabricsSL was listed by the ransomware group noescape. Public detail remains limited: the group claims the company was successfully encrypted and compromised and that it holds 27GB of internal files taken in the attack. The number of people affected is unknown, and independent confirmation of the full scope has not been published.

For a firm that has produced nonwoven fabrics since 1964, any confirmed exfiltration of internal material raises practical questions for employees, partners and customers whose information may sit inside those files. What follows summarises only what has been reported and places it in context.

Inside the incident

According to the leak-site listing attributed to noescape, FYTISA Industrial Felts and FabricsSL was hit by a ransomware attack in which systems were encrypted and data was removed. The group states it possesses 27GB of material and begins to describe the contents with a partial reference to “Insuran…”, after which the public summary cuts off. No further breakdown of file types, no exact date of intrusion, and no figure for individuals affected have been released in the available record.

The incident was reported on August 13, 2023. Beyond the group’s own claims, technical details of the initial access method, dwell time, or negotiation status remain undisclosed. There is no public confirmation from the company in the supplied facts that would independently verify the volume or the precise nature of the taken data.

Inside noescape

noescape is a ransomware operation that emerged in the public threat landscape in mid-2023. Like other groups in this category, it typically follows a double-extortion model: encrypting victim systems while also exfiltrating data and threatening to publish it on a dedicated leak site if payment is not made. Listings on such sites are claims by the actors themselves; they are not independent audits.

The group has been observed targeting organisations across multiple sectors and geographies, often advertising stolen volumes in the tens of gigabytes and posting sample files to pressure victims. Public reporting has associated noescape with ransomware strains that share code and tactics with earlier families, though attribution of any single toolset to this specific incident is not established in the facts. In the present case, the only statements about FYTISA come from the group’s own listing and must be treated as unverified claims.

Who is FYTISA Industrial Felts and FabricsSL?

FYTISA Industrial Felts and FabricsSL is a long-established manufacturer of nonwoven fabrics, operating since 1964. Companies in this sector supply materials used in filtration, automotive, construction, hygiene and industrial applications. They routinely hold commercial contracts, production specifications, supplier and customer records, employee information, insurance and financial documentation, and internal operational files.

A breach at such an organisation is consequential because the data sets are mixed: they can contain both business-sensitive material and personal data belonging to staff, clients or partners. Even when the exact contents of a theft remain unconfirmed, the mere possibility that internal files have left the organisation’s control creates ongoing risk of secondary misuse, competitive harm or targeted follow-on fraud.

What was likely exposed

The facts state that internal files were exfiltrated in a ransomware attack and that the group claims to hold 27GB of data, with a truncated reference beginning “Insuran…”. No complete inventory of data types has been published, and the number of people affected is unknown.

Organisations of this kind typically maintain insurance policies and claims files, employee and payroll records, customer and supplier databases, technical drawings or process documentation, and financial or legal correspondence. Whether any or all of those categories were present in the 27GB claimed by noescape is unconfirmed. Readers should treat the exact contents as undisclosed until corroborated by the company or by independent analysis.

The real-world impact

For individuals whose details may appear in the taken files, the practical risks include phishing or social-engineering attempts that reference real internal information, identity fraud if personal identifiers were present, and long-term exposure if the data is later traded or re-leaked. Because the scale of personal data involved is unknown, the prudent assumption is that anyone who has worked with or for FYTISA, or who appears in its insurance or commercial records, could be affected.

For the organisation itself, consequences can include operational disruption from encryption, regulatory notification duties under applicable data-protection law, contractual obligations to customers and suppliers, and reputational damage. Recovery costs, potential legal exposure and the need to rebuild trust with partners are concrete business impacts even when dollar figures are not public. None of these outcomes require assuming negligence; they follow from the simple fact that internal material is claimed to have left the company’s control.

What to do if you're exposed

If you have a past or present relationship with FYTISA Industrial Felts and FabricsSL—as an employee, contractor, customer or supplier—consider the following steps:

• Treat unsolicited emails, calls or messages that reference the company or insurance matters with extra caution; verify through known official channels before responding or clicking links.
• Monitor financial and credit accounts for unusual activity and enable multi-factor authentication on important online services.
• If you receive notification from the company, follow the specific guidance it provides regarding credit monitoring or identity-protection offers.
• Change passwords on any accounts that may have shared credentials or recovery information tied to workplace email.
• Run a free exposure scan of your email address to check whether your information has already surfaced in known breach data sets.

Public detail on this incident remains limited. Continue to rely on official statements from the organisation and on established breach-notification channels rather than on unverified claims circulating online.

AICompiled with AI assistance from public sources and published under our editorial standards.