Nueva Pescanova Group Listed by direwolf Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On June 12, 2026, the Nueva Pescanova Group was listed by the direwolf ransomware group. Public information states that internal files were exfiltrated during a ransomware attack, though the number of people affected is unknown and no further details on the scale or timing of the incident have been confirmed. Ransomware operations that combine encryption with data theft remain a persistent feature of the current threat landscape, particularly against organisations that hold operational and supply-chain records.

Inside the incident

The only confirmed public detail is the listing itself on June 12, 2026. The group claims responsibility for exfiltrating internal files in a ransomware attack. No information has been released on the volume of data, the date of the intrusion, or the method used to gain access. The number of individuals potentially affected remains unknown.

Inside direwolf

Direwolf is a ransomware operator that publishes victim names on a leak site after claiming to have encrypted systems and removed data. The group follows the common pattern of double-extortion: demanding payment to restore access while threatening to release stolen files. Its listings are presented by the group as evidence of successful operations, though independent confirmation of each claim is not always available.

Who is Nueva Pescanova Group?

Nueva Pescanova Group operates in the food and beverage sector, with activities that include seafood processing and distribution. Companies of this type routinely maintain records related to suppliers, production processes, logistics, and commercial partners. A claimed breach in this sector can affect both business continuity and the handling of operational data that underpins supply chains.

The information in question

The listing states that internal files were exfiltrated. No further breakdown of file categories or data fields has been published. Organisations in the food and beverage sector commonly store procurement details, employee records, and partner information, but the precise contents of the claimed exfiltration have not been verified.

What's at stake

Exposure of internal operational files can create secondary risks for business partners and employees whose information appears in those records. For the organisation, the incident may lead to regulatory scrutiny and costs associated with investigation and recovery. Because the number of affected individuals is undisclosed, the full scope of personal impact cannot yet be assessed.

What to do if you're exposed

• Review bank and email accounts for unusual activity and enable multi-factor authentication where available.
• Request a copy of any personal data held by the organisation under applicable data-protection rules.
• Run a free exposure scan of your email address against known breach datasets to check for additional appearances.

AICompiled with AI assistance from public sources and published under our editorial standards.