VULNpocalypse
LowBreach / campaignMonitoring

Booba Team ransomware group claims DROUIN SAS on its leak site

The Booba Team ransomware group claims DROUIN SAS on its leak site, per RansomLook. It is unconfirmed, so partners should watch for official notices.

Published
Exploitation
No, not confirmed: the only evidence is a ransomware leak-site listing tracked by RansomLook

What happened

According to RansomLook, the Booba Team ransomware group listed DROUIN SAS on its leak site in a post dated 2026-11-03. RansomLook tracks ransomware leak sites. The listing describes DROUIN SAS as a “Wood Product Manufacturing” company with the website www.drouin.fr. It also claims “Stolen data: 20 GB.”

This is a claim made by the group. It is not established fact:

  • DROUIN SAS has not confirmed an incident in any source provided.
  • No independent outlet has verified the claim.
  • The entry point, the type of data and whether any systems were encrypted are not confirmed.
  • The 20 GB figure comes only from the group’s own listing.

Am I affected?

The claim does not involve a software product or a vulnerability. Customers, suppliers and employees of DROUIN SAS may be affected if the claim proves true. Which data or people are involved is not confirmed.

What to do now

  1. If you have a relationship with DROUIN SAS, watch for an official statement or notification from the company.
  2. Be careful with unexpected emails, invoices or payment-change requests that appear to come from DROUIN SAS or that refer to this claim.
  3. Do not download or share any files the group may publish.

Sources