m3rx Claims 50 GB Data Theft from Spanish Retailer dosocho.es

Summary
Ransomware group m3rx claims it stole 50 GB across 28,000 files from Spanish automotive-parts retailer dosocho[.]es. The monitoring post says the claim is unconfirmed.
Key points
- The named victim is dosocho.es, a Spanish automotive parts retailer and e-commerce platform.
- The claim is attributed to ransomware actor m3rx and an identified leak-site listing, with ransomware.live monitoring attribution.
- The actor claims 50 GB of data across 28,000 files was stolen.
- The post states that the claim has not been independently confirmed.
Article Details
- Victim
- dosocho.es
- Victim Domain
- dosocho.es
- Claim Date
- 2026-05-17
- Encryption Status
- Not disclosed
- Encrypted Size
- Not disclosed
- Exfiltration Status
- Claimed by m3rx; unverified by the publisher.
- Exfiltrated Data
- m3rx alleges that 28,000 files were stolen.
- Exfiltrated Size
- 50 GB (claimed)
- Ransom Demand
- Not disclosed
- Leak Status
- No data publication is reported; the ransomware listing is an unverified group claim.
Threat Actors
Countries
Industries
AutomotiveThe ransomware claim targets dosocho.es, a Madrid-based Spanish automotive parts retailer and e-commerce platform belonging to Recambios Generales del Autom Dosocho S.L., operated under sites such as dosochoauto.es.Retailis a Madrid-based Spanish company specializing in the retail and e-commerce distribution of brand-new automotive spare parts and accessories.
