On October 30, 2025, French metalworking company C.M.G appeared on the leak site of the sinobi ransomware group, with internal files reportedly exfiltrated during a ransomware attack. The company, based in Saint Calais and operating across the Genevois region including Saint-Julien-en-Genevois, Annecy, and Geneva, specializes in custom industrial metal frameworks, locksmithing, and metal construction projects. While the exact number of individuals whose data may have been exposed remains unknown, any customer, supplier, or employee whose personal or financial details were stored in those internal files could now face heightened risks of identity theft and fraud.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch CMG Métallerie
Get alerted the next time CMG Métallerie files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about CMG Métallerie’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details from Reports
Public reporting indicates that sinobi claims to have stolen internal files from C.M.G during a ransomware incident. The company has more than 20 years of experience providing tailored metal furniture, access security systems, and 3D project planning to clients in eastern France and western Switzerland. Available reporting describes the data as internal files, though the precise volume and specific types of information have not been independently verified beyond the attacker’s claims. No public confirmation has yet emerged from C.M.G itself regarding the accuracy of the leak posting.
Why This Matters for You and Your Family
When a local business like a locksmith or metal fabricator suffers a breach, the impact often reaches ordinary customers who shared addresses, phone numbers, payment details, or project specifications. Internal files frequently contain exactly this kind of practical information that identity thieves can weaponize. For your family, that can mean sudden spikes in phishing calls, fraudulent loan applications in your name, or strangers showing up at your doorstep because your home security project details have leaked. Even if you are not a direct victim today, these incidents show how quickly everyday service providers can become gateways to your personal data.
The Doxxing and Identity-Chain Risks
Stolen internal files rarely stay isolated. Attackers or subsequent buyers often cross-reference exposed emails, phone numbers, and addresses against other breaches, creating long identity chains that link your professional dealings to your home life, children’s activities, and online accounts. A single leaked locksmith service record can expose your physical address, which then gets paired with gaming usernames or family email addresses found elsewhere. This chaining turns one breach into persistent harassment, doxxing, or targeted scams against you or your children. Credential leaks like this one frequently cascade into account takeovers precisely because the same passwords or recovery details appear across work, personal, and gaming logins.