Dorrell Fabrics Listed by Sinobi Ransomware Group

On June 15, 2025, Dorrell Fabrics appeared on the leak site of the sinobi ransomware group. The company, which supplies residential, performance, contract, outdoor and specialty fabrics to designers and manufacturers, is claimed to have had internal files exfiltrated during a ransomware attack. Public reporting indicates that the number of people directly affected remains unknown.

Reported Details of the Breach

Available reporting describes the incident as a classic ransomware operation in which the attackers first gained access, encrypted systems, and then exfiltrated internal documents before publishing a sample on their leak portal. The data consists of internal files rather than a structured database of customer records. No confirmed list of exposed data types such as names, addresses, payment details or Social Security numbers has been published. The leak site entry carries the identifier 689736bd88b6823fa2ab6266 and was posted on the onion address operated by sinobi.

Why This Matters for You and Your Family

Even when a breach does not publish your personal information immediately, the fact that internal company files have left the building creates downstream risk. Dorrell Fabrics works with suppliers, designers and clients; those relationships often include contracts, invoices, emails and contact lists that can be mined for names, phone numbers and addresses. If your information appears in any of those files, it can surface later in phishing campaigns, identity-theft attempts or doxxing packages sold on underground forums. For families, this means a single supplier breach can quietly add your details to lists that criminals combine with other leaks to build a more complete picture of your household.

The Doxxing and Identity-Chain Risks

Ransomware groups rarely stop at one leak. Once internal files are obtained, attackers or buyers search for any exposed email addresses, employee names or vendor contacts. These pieces are then cross-referenced against credential-stuffing databases and social-media handles. The result is an identity chain that links your work email to personal accounts, children’s gaming usernames, and home address. Gaming accounts are especially vulnerable because kids often reuse passwords or email addresses tied to family domains; a compromise there can lead to harassment, account theft and further exposure of family photos, locations and schedules.

Sinobi Ransomware Group’s Track Record

Public reporting attributes the sinobi ransomware group with operations that emerged in late 2024. The group has targeted mid-sized manufacturing, logistics and professional-services firms. Its typical playbook involves initial access through phishing or exploited remote-desktop services, followed by data exfiltration and encryption. After deploying ransomware, sinobi posts samples on its leak site and demands payment within a short window, threatening full publication or sale of the data. Notable prior victims include other supply-chain and specialty-service companies, though exact details remain limited in open sources.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers and real identity, then use the cleanup to remove what you can.
• Rotate any password you used at Dorrell Fabrics or any supplier portal where it has been reused, and switch on 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information appears it is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same addresses and emails.
• Let remediation specialists handle takedown requests across data brokers and exposed profiles while you focus on securing your own accounts.

The incident shows that supply-chain vendors you never think about can still expose information that matters to your family. Taking concrete steps now limits how far any single breach can travel. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects handles to real identities, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to close the gaps this claimed breach and future ones can exploit.