Ransomware victim disclosure
← All victimsThe Sundher Group
Claimed by sinobi · listed 3 months ago
Status timeline
- Listed
Feb 10, 2026
- Data leaked
At a glance
About the victim
AI dossier — public-source company profileThe Sundher Group is a family-owned Canadian lumber manufacturer headquartered in Surrey, British Columbia, operating since 1996. The company specializes in sourcing, producing, processing, packaging, and exporting custom cut lumber products—including Coastal Canadian Douglas Fir, Western Red Cedar, and Western Hemlock—to 30 countries worldwide. They also maintain an office in India focused on importing and exporting Canadian wood products globally.
- Industry
- Lumber Manufacturing & Export
- Address
- Surrey, British Columbia, Canada
- Founded
- 1996
Attack summary
Severity: medium — Data has been published (disclosed status: data_published), indicating confirmed exfiltration rather than a mere listing; however, no specific sensitive regulated data categories (e.g., PII at scale, medical, financial) are described, and no file inventory or proof count is provided, limiting severity assessment.The sinobi ransomware group has disclosed data pertaining to The Sundher Group, with the post status indicating data has been published. No specific data size, ransom demand, or detailed inventory of exfiltrated files was stated in the leak post.
What the group claims
Sundher Group is a family-owned Canadian lumber manufacturer based in Surrey, British Columbia, operating since 1996. They specialize in sourcing, producing, processing, packaging, and exporting custom cut lumber products globally, including Coastal Canadian Douglas Fir, Western Red Cedar, and Western Hemlock. Committed to sustainability and responsible forestry practices, they export their products to 30 countries and have received multiple awards for business excellence and trade. Their office in India focuses on importing and exporting Canadian wood products worldwide.
Sources
Source
Indexed 3 months agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
