Ransomware victim disclosure
← All victimsCosaen Grup SA
listed as Cash and carry - COSAEN GRUP · Claimed by blacknevas · listed 10 months ago
Status timeline
- Listed
Aug 6, 2025
- Data leaked
At a glance
- Group
- blacknevas
- Status
- Data leaked
- Country
- Spain
- Sector
- Consumer Services
- Listed on leak site
- Aug 6, 2025
- Data size
- 243 GB
- Records
- 983158 file
About the victim
AI dossier — public-source company profileCosaen Grup SA is a Spanish food and beverage wholesaler operating cash-and-carry warehouses serving professionals in the food, drinks, and hospitality sectors. They offer over 5,000 product references including fresh goods, dry products, beverages, and groceries across multiple distribution centers.
- Industry
- Food & Beverage Wholesale & Retail
Attack summary
Severity: high — Confirmed exfiltration and publication of 243 GB of business data from a wholesale distributor with customer and supplier information at scale; operational data exposure affecting B2B relationships and potentially customer PII.The blacknevas group claims to have exfiltrated 243 GB of data comprising approximately 983,158 files from Cosaen Grup SA. The group has published the data and is offering it for sale, also soliciting partnerships with interested parties.
Data the group says was taken
AI dossier — extracted from the leak post- Business files and documents
- Customer records
- Supplier information
- Financial/transactional data
- Operational records
What the group claims
Cash and carry - COSAEN GRUPProfessionals in the food sectorюCosaen Grup SA has wholesale and retail warehouses offering a wide range of food and beverage products, as well as fresh and dry goods.https://www.zoominfo.com/c/cosaen-grup-sa/459229657In stock: 983158 filedata size: 243GBList of files, to confirm that we have all the files, you can request several files from the list and we will provide them to you.https://gofile.io/d/9w9WwWe ask all our partners, friends and clients to contact us to discuss the acquisition of this data. You know the contacts. For new members, please wait in the Contacts tab.Advertising:We are always ready to cooperate in any form, do you need specific data? We will try to provide it to you as soon as possible, we will receive and download your competitors' data, provide a list of what you are interested in. We are also ready to cooperate with law firms and data leak victims. We will provide all the information you need about the company that was negligent and provided access to data to its clients.
Sources
Source
Indexed 10 months agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
