Fulgar, a supplier of yarn to world-renowned fashion giants, has been targeted by a serious cyberattack. The company, which is a customer of major brands such as H&M, Adidas, Wolford, and Calzedonia, officially confirmed that it had been hit by a ransomware attack. It was revealed that the notorious hacker group RansomHouse was behind the attack. This attack once again highlighted the critical nature of security vulnerabilities in global supply chains.
Supplier to fashion giants hacked: Shock attack on Fulgar, partner of H&M and Adidas!
The RansomHouse group listed Fulgar on its leak site on November 12th. The hackers claimed to have been keeping the company’s data encrypted since October 31st. Screenshots shared on the leak site revealed the severity of the situation. These images clearly showed the company’s confidential internal correspondence, various documents, spreadsheets, and financial information.
The leaked data included highly sensitive information such as bank account balances, invoices, and correspondence with external institutions. RansomHouse also issued a warning to Fulgar management. The message stated, “We are confident that you are not interested in having your confidential data leaked or sold to third parties. We strongly recommend that you begin addressing this situation.”
Fulgar has been a major player in the fiber market since the late 1970s. The company operates Europe’s largest yarn mill and distributes Lycra and Elaspan to numerous regions. The company, which produces synthetic yarns used in technical textiles, has operations in Italy, Sri Lanka, and Turkey. The targeting of such a large operation has raised concerns in the industry.
RansomHouse, which claimed responsibility for the attack, is a cybercrime group active since 2021. To date, they have listed more than a hundred victims on their leak sites. US cybersecurity officials have previously linked the group to organizations that collaborate with Iranian actors and receive encryption support in exchange for ransom payments. The Fulgar attack demonstrates that even large suppliers can be vulnerable if a single group gains access.
Experts warn that such stolen internal information can form the basis for more targeted and convincing phishing attacks. Attackers can use compromised documents to launch highly convincing campaigns targeting employees or business partners. This creates broader risks not only for Fulgar but for all companies in the manufacturing industry.
This breach highlights the vital importance of cybersecurity not only for major brands but also for their suppliers. What are your thoughts on the hacking and data leak of a supplier to a major fashion giant?
