IBENA Textilwerke Listed by nova Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
IBENA Textilwerke was listed by the nova ransomware group on June 02, 2026, after internal files were exfiltrated in a ransomware attack affecting an undisclosed number of people. Individuals are advised to check whether their information was exposed and to take appropriate protective steps.
What happened
The listing indicates that nova conducted a ransomware operation against IBENA Textilwerke, a company based in Bocholt, Germany. The group states that internal files were taken and offers samples as proof of access. No further details on the method of entry, duration of the intrusion, or whether encryption was applied to operational systems have been released by either the company or the group.
The scale of the incident, including the total number of files or records involved, is not publicly confirmed. The reported date marks only the appearance of the victim on the group’s site rather than the date of the underlying events.
The group behind it: nova
Nova is a ransomware operator that follows the common pattern of double-extortion activity: encrypting systems where possible and exfiltrating data to pressure victims. Such groups typically maintain leak sites where they publish victim names and limited samples to demonstrate claims when ransom negotiations stall or fail.
The listing of IBENA Textilwerke constitutes the group’s assertion of responsibility. No independent confirmation of the data’s authenticity or completeness has been made public at this stage.
IBENA Textilwerke and its sector
IBENA Textilwerke is a family-owned manufacturer established in 1826 that produces home textiles such as blankets and bed linen as well as technical fabrics used in automotive interiors, fire protection, and digital printing applications. The company supplies both consumer markets and industrial clients, including automotive brands, and maintains quality and sustainability standards typical of long-established European textile firms.
Manufacturers in this sector routinely store customer specifications, supplier contracts, production formulations, and employee records. A compromise therefore touches both commercial relationships and operational data that can be sensitive to the wider supply chain.
What data was at risk
The only detail released is that internal files were allegedly exfiltrated. The exact categories of information contained in those files have not been disclosed.
Organisations of this type commonly hold records relating to employees, customers, suppliers, product designs, and compliance documentation. Without a confirmed inventory, it is not possible to state which of these categories, if any, were taken.
What's at stake
Exposed internal files can reveal proprietary processes, pricing arrangements, or personal data of staff and business partners. Individuals whose information appears in such records may face risks of targeted phishing or identity misuse, while the company may encounter operational disruption and reputational effects within its industry.
Because the full contents remain unverified, the concrete consequences for any specific person or entity cannot yet be assessed from public sources.
If your data was in this claimed breach
Monitor accounts associated with the company for unusual activity and consider changing passwords for any services linked to IBENA Textilwerke. Enable multi-factor authentication where available and review privacy settings on accounts that may contain similar personal details.
Readers can run a free exposure scan of their email address against known breach data to determine whether their information has appeared in previously published incidents.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Dosab Listed by nova Ransomware GroupTextile Testing Services of America Listed by nova Ransomware GroupRADWAG Listed by nova Ransomware GroupBAUM Games Listed by nova Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the IBENA Textilwerke Listed by nova Ransomware Group →
Publicly posted by nova — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.