selmi.com.br Listed by noname Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On September 12, 2023, the Brazilian food manufacturer selmi.com.br was listed by the ransomware group known as noname. Public reporting states that internal files were exfiltrated in a ransomware attack. The number of people affected remains unknown, and further operational details have not been disclosed.

The listing itself is a claim published by the group. What is confirmed in available records is limited to the organization’s identification, the reported date, and the description of internal files taken during the incident. For employees, partners, and others connected to the company, even partial confirmation of data theft raises practical questions about what may have left the network and how it could be misused.

Inside the incident

According to the available breach record, selmi.com.br appeared on noname’s listings on September 12, 2023. The record describes the event as a ransomware attack in which internal files were allegedly exfiltrated. No public figure has been given for the volume of data, the number of systems involved, or the precise timeline of intrusion, encryption, or any ransom demand.

Method of initial access, dwell time inside the network, and whether encryption was successfully deployed alongside theft are all undisclosed. The record does not confirm whether the company negotiated, paid, or restored operations from backups. In short, the publicly attested core is the group’s claim of a listing plus the characterization that internal files were taken; everything else about scale and technique remains unconfirmed in the material provided.

Who is noname?

Noname is a ransomware operation that has appeared in public threat reporting as a group using double-extortion tactics: encrypting victim systems while also copying data and threatening to publish it if payment is not made. Like many contemporary ransomware crews, it has relied on leak sites to name victims and, in some cases, to stage samples or larger dumps as pressure. Affiliations, exact tooling, and membership are often fluid in this ecosystem, and public tracking typically treats each listing as an unverified claim until independent confirmation emerges.

Nothing in the supplied facts attributes specific statements by noname about selmi.com.br beyond the act of listing the organization and the associated description of internal-file exfiltration. Readers should therefore treat the group’s assertion as a claim rather than as independently verified detail about this particular incident.

About selmi.com.br

Selmi.com.br is a long-established Brazilian manufacturer of flour-based foods. Public background associated with the breach record notes that the company was founded in 1966 and produces dry pasta, traditional pasta, cookies, crackers, cakes, and baking mixes. It employs more than 1,000 people, operates two production sites, maintains thirteen distribution centers across the country, and runs a fleet of 37 vehicles supplemented by carrier partnerships to support delivery.

Organizations of this type sit at the intersection of manufacturing, logistics, wholesale, and retail supply chains. They commonly hold employee records, supplier and distributor contracts, production and quality data, logistics schedules, and customer or partner contact information. A breach affecting such a firm can therefore touch internal workforce data, commercial relationships, and operational details that competitors or fraudsters might find useful, even when the exact contents of a theft remain unconfirmed.

What was likely exposed

The breach record names the exposed material only as “internal files exfiltrated in ransomware attack.” No inventory of file types, databases, or record counts has been published in the facts provided. The number of people affected is listed as unknown.

Companies in food manufacturing and national distribution typically maintain human-resources files, payroll and benefits data, vendor and carrier agreements, invoices, production formulas or process documentation, inventory and shipping records, and internal communications. Any of these categories could fall under a broad label of “internal files,” yet it would be inaccurate to state that any specific category was taken. Exact contents remain unconfirmed; affected individuals and partners should proceed on the cautious assumption that business and possibly personal information connected to the company could have been copied, while recognizing that confirmation is still lacking.

Why it matters

For people whose data may have been among the internal files, the practical risks include targeted phishing that references real company details, identity or employment-related fraud, and misuse of contact or financial information if such records were present. Even without confirmed personal identifiers, knowledge of suppliers, routes, or commercial terms can enable business-email compromise or social-engineering attacks against partners.

For the organization, exfiltration of internal files can disrupt operations, expose proprietary or contractual information, trigger regulatory notification duties under applicable Brazilian data-protection rules, and damage trust with employees, distributors, and customers. Because the scale and precise data types are undisclosed, the full scope of downstream harm cannot yet be measured; the absence of public numbers does not eliminate the need for vigilance.

What to do if you're exposed

If you work for, supply, or otherwise deal with selmi.com.br, treat unsolicited messages that reference the company or the incident with caution. Prefer official channels when verifying any request for credentials, payments, or personal updates. Monitor financial and account statements for unfamiliar activity, and consider placing fraud alerts with relevant credit or identity services if you believe personal data may have been involved. Change passwords on work-related and personal accounts that shared credentials or recovery information with company systems, and enable multi-factor authentication where available.

You can also run a free exposure scan of your email address to check whether your information has already surfaced in known breach data sets. That step does not confirm or rule out involvement in this specific incident, but it can help you prioritize further monitoring and password hygiene.

AICompiled with AI assistance from public sources and published under our editorial standards.