Falcon ransomware group claims 344 GB theft from DistributionNOW
Summary
Falcon allegedly claims to have exfiltrated 344 GB from DistributionNOW, including financial, employee, and industrial-control data. The post attributes the claim to the group’s leak site and says it is unverified.
Key points
- The post identifies DistributionNOW (DNOW Inc.) as the alleged victim and Falcon as the ransomware group making the claim.
- Falcon allegedly claims to have taken 344 GB of data, including bank and vendor-payment records, payroll and tax documents, and employee personal information.
- The claimed data reportedly includes SCADA gateway backups, PLC logic programs, industrial automation project files, and internal audit records.
- The post also lists alleged whistleblower reports, employee disciplinary records, passports, driving licenses, and medical drug-screen results.
- The author says the information is based on public claims by Falcon and cannot be confirmed; no official statement from DistributionNOW is included.
Article Details
- Victim
- DistributionNOW (DNOW Inc.)
- Claim Date
- 2026-08-30
- Exfiltration Status
- Falcon claims data was exfiltrated; the article says it cannot confirm the claim.
- Exfiltrated Data
- Falcon claims the data includes bank statements, vendor payment instructions, payroll and tax records, employee PII, SCADA gateway backups, PLC logic programs, industrial automation project files, audit logs, whistleblower reports, and other records. Authenticity is unverified.
- Exfiltrated Size
- 344 GB (claimed by Falcon)
- Leak Status
- A Falcon listing was reported as published on 2026-08-30; the claim and authenticity of the data are unverified.