Skip to content
Leak-site post naming Roofinox, captured by ThreatCluster

Roofinox

payload

Ransomware leak-site victim intelligence

Data size
130 GB
Posted
Jul 10, 2026
Countdown
00d 00h 00m
Country
Austria
Industry
Manufacturing - stainless steel for roofing and facade systems

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot

The group claims to have exfiltrated 130 GB of data from Roofinox, an Austrian manufacturer of premium stainless steel for roofing and facade systems, and the leak is in countdown publication status. The leak page identifies the victim as Roofinox (domain roofinox.com, Austria). These statements are the group's claims; ThreatCluster has not independently verified them.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Roofinox is an Austrian manufacturer of premium stainless steel specifically engineered for long-lasting roofing and facade systems. The company offers innovative materials with unique matte and textured surfaces that blend beautifully with architecture without creating harsh glare. Thanks to its exceptional corrosion resistance and durability in harsh climates, Roofinox products are recognized as an eco-friendly, virtually timeless architectural solution.

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

note
Roofinox is an Austrian manufacturer of premium stainless steel specifically engineered for long-lasting roofing and facade systems.
onion_link
http://payload6eualw6kni6v2lqn7ovjcl76ojx25z5unsyvqo3lbqy3bo5qd.onion/

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture