Reilly Foam Corp Listed by sinobi Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On February 5, 2026, the ransomware group sinobi listed Reilly Foam Corp on its leak site. Public information about the incident remains limited to that listing and a brief description stating that internal files were exfiltrated during a ransomware attack. The number of individuals affected has not been disclosed. Ransomware activity continues to focus on manufacturing and industrial targets, where operational data can create leverage for extortion. This listing follows the pattern of groups using public claims to pressure victims, though independent confirmation of the data theft or its scope has not been reported.

What happened

The incident came to light when sinobi added Reilly Foam Corp to its leak site on February 5, 2026. The group claims that internal files were taken during a ransomware operation. No further details on the timing of the intrusion, the volume of data, or the method of access have been made public. The number of people affected is listed as unknown.

Inside sinobi

Sinobi is a ransomware group that follows the double-extortion model common among current threat actors. Such groups typically encrypt systems to disrupt operations and separately exfiltrate data to threaten public release if a ransom demand is not met. They maintain dedicated leak sites where victim names are posted, often accompanied by sample files or descriptions of stolen material. The listing of Reilly Foam Corp constitutes the group’s claim of involvement; no independent verification of the data or the attack has been provided in available reporting.

About Reilly Foam Corp

Reilly Foam Corp produces fabricated foam components used across multiple industries and applications. Companies in this sector routinely maintain records related to production processes, supplier relationships, customer specifications, and internal operations. A breach involving such an organization can expose both business information and any personal data collected in the course of ordinary commercial activity.

What was likely exposed

The only detail released states that internal files were exfiltrated. The precise categories of data contained in those files have not been disclosed. Organizations of this type commonly store records that include customer and supplier contact information, order details, and operational documents, but the exact contents remain unconfirmed.

• Internal files were the only data type referenced in the listing.
• No employee, customer, or financial record categories have been specified.
• The total volume or sensitivity of the material is not publicly known.

Why it matters

Even without Reported Details on the data, the exposure of internal files from a manufacturing firm can create downstream risks for business partners and individuals whose information appears in those records. Organizations may face follow-on fraud attempts or targeted phishing if contact details are among the material. For the company itself, the incident adds to the operational and reputational pressures already associated with ransomware events in the industrial sector.

If your data was in this claimed breach

Individuals who have done business with Reilly Foam Corp or similar manufacturers should monitor their accounts for unusual activity and consider placing fraud alerts with credit reporting agencies. Changing passwords for any associated accounts and enabling multi-factor authentication provide basic additional protection. Readers can run a free exposure scan of their email address against known breach data to check for appearances in previously published lists.

AICompiled with AI assistance from public sources and published under our editorial standards.