Skip to content
Cornelius Data Breach Linked to Cl0p Ransomware Group

Cornelius Data Breach Linked to Cl0p Ransomware Group

First seen 14 Aug 2026, 10:46 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 15, 2026 at 10:35 UTC
  • •Cornelius may have suffered a data breach involving 3,684 gigabytes of data.
  • •The Cl0p ransomware group has claimed responsibility for the attack.
  • •Attorneys are investigating potential class action lawsuits for affected individuals.

Cornelius, a beverage dispenser manufacturer, may have experienced a significant data breach on August 12, 2026, attributed to the Cl0p ransomware group. Reports indicate that Cl0p claimed responsibility for accessing approximately 3,684 gigabytes of data. The breach affects current and former employees and distributors of Cornelius, raising concerns about the exposure of sensitive personal information. As of August 14, 2026, the investigation is ongoing, and attorneys are seeking individuals who believe their data may have been compromised to potentially initiate a class action lawsuit. Breach monitoring site Breachsense has indexed 336 accounts from cornelius.com, although it is unclear if these are directly related to the ransomware attack. The situation remains fluid, with no confirmed details on the nature of the breach or the data accessed.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 62d ago How this analysis works

Timeline

2026-08-12
Data breach allegedly occurs at Cornelius
Cl0p ransomware group claims to have accessed 3,684 gigabytes of data from Cornelius.
Classaction
2026-08-13
Class action lawsuit investigation begins
Attorneys start looking into a potential class action lawsuit for those affected by the breach.
Classaction
2026-08-14
Breach data indexed by Breachsense
Breachsense reports indexing 336 accounts from cornelius.com, though connection to the ransomware attack is unclear.
Breachsense

More articles in this cluster (3)

Following this threat?

Track Cl0p and Cornelius in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed