HAFA
bd_9a909cd9045209a9 · schema v1 · pii pii-v1
Full breach record for HAFA →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Thegentlemen on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
hafa.fr zoominfo.com/c/hafa/458792496 Lubricants designed by experts to always go further. This is the HAFA Pioneering Spirit. Since 1953, HAFA has demonstrated its ability to renew itself and accompany you towards ever-greater performance. A single partner with a range of lubricants that meets all my needs. For me, it's HAFA. Hafa offers product ranges that cover all professional uses and simplifies the management of your lubricant needs.
Source provenance
- Source URL
- https://www.ransomware.live/id/SGFmYUB0aGVnZW50bGVtZW4=
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 6, 2026
- Raw hash
- e3307ce68e6eaa4be579669cc3583ebd06764273de29acf058f0d4c9d7da608d
Reporting entity
- Name
- thegentlemen
Victim entity
- Name
- HAFAnorm: hafa
- Domain
- hafa.fr
- Industry
- Manufacturingllm
What this source establishes
- Source ceiling
- A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
- Attack vector
- Ransomware· thegentlemen
- Threat actor
- ThegentlemenExternalFinancial
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.