Former S.p.A. Listed by 8base Ransomware Group

On January 12, 2024, Italian furniture manufacturer Former S.p.A. appeared on the leak site of the 8base ransomware group. The company, which designs modular storage and division systems for living and sleeping areas, is claimed to have had internal files exfiltrated during a ransomware attack. The number of people whose information may be contained in those files remains unknown, as neither the leak-site listing nor any official notification from Former quantifies affected records.

Details from the 8base Listing

The 8base leak site states that Former S.p.A. suffered a ransomware attack in which internal files were successfully exfiltrated. The listing does not specify the volume or exact types of data taken, only that the files may now be published for anyone to download. It also sets an implicit deadline typical of these operations: if the company does not meet the group’s demands, the data will remain freely available or be used in further extortion attempts. The primary disclosure source is the 8base onion site, mirrored on ransomware.live at the address provided below. No separate breach notification from Former S.p.A. has been located to date.

Why This Matters for You and Your Family

When a company that supplies everyday household goods is breached, the risk often extends beyond corporate networks into personal data. Suppliers, distributors, retail partners, and customers frequently appear in internal spreadsheets, invoices, contracts, and correspondence. If your name, address, phone number, email, or payment details were shared with Former during a purchase or business relationship, that information is now potentially exposed. Internal files exfiltrated in ransomware incidents regularly contain exactly this kind of personally identifiable information, increasing the chance that identity thieves or stalkers can locate you or your family members.

Doxxing and Identity-Chain Risks

Exposed internal files frequently link real names to email addresses, phone numbers, physical addresses, and sometimes dates of birth or national identification numbers. Once these details surface on a ransomware leak site, other criminals scrape them within hours. The data then feeds into doxxing chains: a leaked email leads to a reused password on another site, which leads to account takeover, which reveals even more personal information. Gaming accounts belonging to you or your children are especially vulnerable because they often share the same passwords or recovery emails used for online shopping. A single breach like this can therefore cascade into harassment, identity theft, or targeted scams against your entire household.

8base’s Known Track Record

Public reporting attributes the first major activity by 8base to early 2022. The group has since listed hundreds of victims, focusing primarily on small-to-medium businesses across North America, Europe, and Latin America. Notable prior targets include manufacturing firms, logistics companies, and professional-services providers. Their typical playbook involves gaining initial access through compromised remote-desktop credentials or vulnerable web applications, followed by exfiltration of internal documents before deploying ransomware. They then double-extort victims by threatening both data encryption and public release of stolen files. The 8base leak site is designed for high visibility, which pressures victims to pay quickly to avoid prolonged exposure of their internal records.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your data appears it is caught in hours rather than months.
• Rotate any password you ever used on former.it or with any Former S.p.A. account, and switch on 2FA using an authenticator app instead of SMS.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts, which often chain back to the same addresses and recovery emails exposed in incidents like this.
• Let the remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing your own accounts.

The Former S.p.A. breach is a reminder that even suppliers of ordinary household products can become gateways to your personal information. Taking deliberate steps now limits how far criminals can travel down the identity chain created by this leak. DoxxScan by GalaxyWarden provides continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to regain control of what criminals already hold.