LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker

Recent Breaches › psbsementi.it Listed by m3rx Ransomware Group

HIGH severityUnverified claimHow we verify

psbsementi.it Listed by m3rx Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

RBRecent Breaches Breach Intelligence·May 17, 2026
psbsementi.it Listed by m3rx Ransomware Group

Reported May 17, 2026.

HIGH
Severity
May 17, 2026
Disclosed
ShareXLinkedInFacebookRedditWhatsAppTelegram

psbsementi.it was listed by the m3rx ransomware group on May 17, 2026, with internal files reported as exfiltrated; the date of the actual intrusion remains unknown. Anyone who may have had data held by the organisation should review their accounts and monitor for signs of misuse.

Severity & verification
HIGH severityUnverified claim
Data types not itemised.
Published on a ransomware group’s leak site — an unverified extortion claim until the named organization or credible reporting corroborates it.
Check your exposure
See every leak and listing tied to your email. We can’t confirm any single incident against the sources we search, so we won’t pretend to. 15-second check, no card, no account. Details go to your inbox.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

On May 17, 2026, the ransomware group m3rx listed psbsementi.it on its site and claimed responsibility for a data theft from Società Produttori Sementi S.p.A. The listing states that 364 gigabytes of data across 280,000 files were taken. The number of people whose information may be involved is not reported. The practical stakes center on the exposure of internal records from an organization that has operated for more than a century in Italy’s seed research and distribution sector. Any confirmed release of those files could affect business partners, research collaborators, and supply-chain entities that rely on the company’s data.

Breaking down the breach

The incident was first noted publicly when m3rx added psbsementi.it to its leak-site listing on May 17, 2026. The group claims to have exfiltrated internal files during a ransomware operation. No independent confirmation of the theft or its timing has been made public. The reported volume stands at 364 gigabytes contained in 280,000 files. Details on the method of initial access, the duration of unauthorized activity, and whether encryption was also deployed remain undisclosed.

Who is m3rx?

m3rx is a ransomware operator that follows the common pattern of stealing data before encrypting systems and then listing victims on a public site to pressure payment. The group’s listings function as claims of possession rather than verified disclosures. Public reporting on m3rx has documented similar activity against organizations in multiple countries, with the same sequence of data exfiltration followed by a demand for ransom in exchange for withholding publication.

psbsementi.it and its sector

Società Produttori Sementi S.p.A., operating as psbsementi.it, is an established Italian agricultural company focused on seed research, genetic improvement, multiplication, and distribution. It maintains long-standing ties to the Mediterranean agricultural supply chain and works at the intersection of field research and industrial food production. Organizations of this type routinely hold records related to breeding programs, certification processes, customer contracts, and operational logistics.

The information in question

The listing describes the stolen material only as internal files. No further breakdown of file categories or data fields has been released. Companies in the certified-seed sector commonly maintain research datasets, supplier and customer contact details, financial records, and regulatory compliance documents. The precise contents of the 364 gigabytes remain unconfirmed beyond the group’s general description.

The real-world impact

Release of the files could expose proprietary research and business relationships, creating competitive or operational disadvantages for the organization and its partners. If personal data of employees, researchers, or customers is present, affected individuals could face risks of targeted fraud or unsolicited contact. The absence of a confirmed count of individuals involved leaves the personal scope of the incident unknown at this stage.

What to do if you're exposed

Individuals who have had contact with psbsementi.it or similar agricultural entities should monitor their financial and email accounts for unusual activity and consider placing fraud alerts with credit agencies. Changing passwords for any accounts linked to the organization and enabling multi-factor authentication where available are immediate steps that limit further misuse of credentials.

AICompiled with AI assistance from public sources and published under our editorial standards.

Editorial & sourcing policy
Recent Breaches is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data, and we do not hold the data claimed in leak-site listings. Incidents are compiled from publicly accessible sources and threat-intelligence platforms and are reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — write to support@galaxywarden.com or press@recentbreaches.com.
Check if you’re exposed →

How this breach connects

Company

Attributed to

Method

Companypsbsementi.it security record
84/100
DoxxScan™ · Low doxx risk
B- 76Above-average record

1 reported incident on record.

See psbsementi.it’s full breach history →

More recent breaches

ktwhs.com Listed by m3rx Ransomware GroupJune 11, 2026jichasa.com Listed by m3rx Ransomware GroupMay 27, 2026dosocho.es Listed by m3rx Ransomware GroupMay 17, 2026grupo55.com Listed by m3rx Ransomware GroupMay 17, 2026

Latest breaches

Read GalaxyWarden’s full analysis of the psbsementi.it Listed by m3rx Ransomware Group →

Source: threat-actor leak-site listing

Publicly posted by m3rx — unverified claim, pending independent verification

Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

ShareXLinkedInFacebookRedditWhatsAppTelegram