SELECT WINES Listed by bravox Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
SELECT WINES has been listed by the bravox ransomware group, with internal files reported exfiltrated in an attack disclosed on June 18, 2026. An undisclosed number of people may be affected; check any notifications from the organisation and change passwords or monitor accounts if you have been in contact with SELECT WINES.
The listing of SELECT WINES by the bravox ransomware group on June 18, 2026, adds one more entry to the growing record of ransomware incidents affecting mid-sized commercial operators. Public information remains limited to the group’s claim of having exfiltrated internal files; no confirmation of the volume of data, the number of individuals affected, or the precise nature of the files has been released by the company or by investigators.
Such listings have become a standard element of ransomware operations, where groups publish victim names to pressure organizations into negotiations. The incident is notable because SELECT WINES handles supply-chain relationships with restaurants, hotels, and retailers, sectors that routinely process commercial correspondence and transaction records.
Breaking down the breach
The only confirmed public detail is the June 18, 2026 listing itself. The group asserts that internal files were removed during a ransomware intrusion. No figure for the number of records, the duration of access, or the method of initial compromise has been disclosed. The scale of exposure therefore remains unknown.
Who is bravox?
Bravox is a ransomware group that maintains a public leak site and lists organizations it claims to have targeted. Like other groups in this category, it combines encryption of systems with the removal of data, then uses the threat of publication to encourage payment. Its listings appear without independent verification of the underlying claims.
Who is SELECT WINES?
SELECT WINES is a Canadian company whose business consists of importing and distributing premium wines to restaurants, hotels, and retail outlets while acting as the local representative for international wine brands. Organizations of this type maintain supplier contracts, pricing agreements, inventory records, and customer-order data as part of routine operations.
The information in question
The only description provided is that internal files were allegedly exfiltrated. No inventory of file types, no indication of whether personal data of customers or employees is included, and no statement on whether financial or authentication records are present has been made public. The exact contents therefore remain unconfirmed.
What's at stake
Exposed commercial files can reveal pricing structures, supplier terms, and distribution relationships that competitors or counterparties might use. If the files contain contact details or account information, individuals associated with those records could face follow-on phishing or impersonation attempts. The organization itself faces potential disruption to its supply arrangements and the cost of restoring systems and reviewing access logs.
Were you affected?
Individuals who have corresponded with SELECT WINES or placed orders through its channels have no public confirmation that their information was among the exfiltrated files. A practical first step is to monitor email accounts for unexpected messages and to review bank and credit-card statements for unrecognized activity. Running a free exposure scan of one’s email address against known breach repositories can indicate whether the address has appeared in previously published data sets, though it will not confirm presence in this specific incident.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
John O's Foods Listed by bravox Ransomware GroupSalvation Army Listed by bravox Ransomware GroupPB Fiduciaire SA Listed by bravox Ransomware GroupCCS GLOBAL TECH Listed by bravox Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the SELECT WINES Listed by bravox Ransomware Group →
Publicly posted by bravox — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.