LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker

Recent Breaches › M&K Foam Koło Listed by nova Ransomware Group

HIGH severityUnverified claimHow we verify

M&K Foam Koło Listed by nova Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

RBRecent Breaches Breach Intelligence·April 5, 2026
M&K Foam Koło Listed by nova Ransomware Group

Reported April 5, 2026.

HIGH
Severity
April 5, 2026
Disclosed
ShareXLinkedInFacebookRedditWhatsAppTelegram

M&K Foam Koło was listed by the nova ransomware group on 5 April 2026, indicating that internal files have been exfiltrated. Anyone connected with the company should verify whether their information was exposed and take appropriate protective steps.

Severity & verification
HIGH severityUnverified claim
Data types not itemised.
Published on a ransomware group’s leak site — an unverified extortion claim until the named organization or credible reporting corroborates it.
Check your exposure
See every leak and listing tied to your email. We can’t confirm any single incident against the sources we search, so we won’t pretend to. 15-second check, no card, no account. Details go to your inbox.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

M&K Foam Koło, a Polish manufacturer of mattresses and beds operating from the website mkfoam.pl, was listed by the ransomware group nova on or around 5 April 2026. The listing states that internal files were exfiltrated during a ransomware attack, though the number of people affected and the precise contents of any data remain undisclosed.

What happened

The incident came to light when nova added M&K Foam Koło to its leak-site listing. The group claims to have carried out a ransomware operation that resulted in the exfiltration of internal files. No further technical details, such as the date of the intrusion, the volume of data taken, or the encryption status of systems, have been made public. The organisation has not issued a statement confirming or denying the claims.

Who is nova?

Nova is a ransomware group that maintains a public leak site where it lists organisations it claims to have targeted. Like other groups of this type, it typically combines file encryption with data exfiltration and uses the threat of publication to pressure victims. The group’s listings are presented by the actors themselves and are not independently verified at the time they appear.

M&K Foam Koło and its sector

M&K Foam Koło produces sleep products including mattresses and beds for the Polish and wider European market. Manufacturing firms in this sector routinely maintain records related to production, supply chains, customer orders, and employee administration. A successful intrusion at such a company can therefore expose both commercial information and personal data held about staff or clients.

What data was at risk

The only detail released so far is that internal files were allegedly exfiltrated. The exact categories of information contained in those files have not been disclosed. Organisations of this kind commonly store customer contact details, order histories, financial records, and employee documentation, but it is not confirmed whether any of these categories were among the material taken.

The real-world impact

Until the contents of the exfiltrated files are known, the specific risks to individuals cannot be quantified. If personal data is present, affected people could face increased chances of phishing, fraud, or identity misuse. For the company, the incident adds operational disruption and potential regulatory obligations under data-protection rules that apply to Polish manufacturers.

Were you affected?

Individuals who have had contact with M&K Foam Koło should monitor their accounts for unusual activity and consider changing passwords on any services that may share the same credentials. A practical first step is to run a free exposure scan of your email address against known breach data to see whether your information appears in publicly reported incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.

Editorial & sourcing policy
Recent Breaches is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data, and we do not hold the data claimed in leak-site listings. Incidents are compiled from publicly accessible sources and threat-intelligence platforms and are reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — write to support@galaxywarden.com or press@recentbreaches.com.
Check if you’re exposed →

How this breach connects

Company

Attributed to

Method

CompanyM&K Foam Koło security record
84/100
DoxxScan™ · Low doxx risk
B- 76Above-average record

1 reported incident on record.

See M&K Foam Koło’s full breach history →

More recent breaches

RADWAG Listed by nova Ransomware GroupMay 19, 2026Dosab Listed by nova Ransomware GroupJune 20, 2026IBENA Textilwerke Listed by nova Ransomware GroupJune 2, 2026Textile Testing Services of America Listed by nova Ransomware GroupMay 26, 2026

Latest breaches

Read GalaxyWarden’s full analysis of the M&K Foam Koło Listed by nova Ransomware Group →

Source: threat-actor leak-site listing

Publicly posted by nova — unverified claim, pending independent verification

Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

ShareXLinkedInFacebookRedditWhatsAppTelegram