Findel
bd_fe0f1d63f707b0ac · schema v1 · pii pii-v1
Full breach record for Findel →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Cicada3301 on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Findel is an eCommerce educational resources supplier in the UK and international schools and nurseries marketplace. We own several general and specialist brands including Hope, GLS, Davies Sports, Philip Harris, Spa4Schools, A-Z and LDA. These brands give us full coverage in all product areas for primary, secondary and early years teaching, as well as specialist resources supply for school business managers, science teaching, PE and sports equipment. Findel’s origins can be traced right back to 1817. Today, our brands and websites offer more than 32,000 products to customers in the UK and overseas, with the business exporting to over 130 countries. Headquartered in Hyde, Cheshire, we have distribution centre and offices in Nottingham and employ around 300 people. Findel was acquired from Studio Retail PLC in April 2021 by Endless LLP, and most recently, in April 2024, Findel was acquired by the Manutan Group, a major European B2B player specialising in the distribution of equipment and supplies for businesses and local authorities. If companies do not contact us, the data will be published!
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Aug 21, 2024
Claim posted
—
No filing yet · watching
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
No regulatory filing corroborates this yet — it is the attacker's own assertion. Watch this entity to be notified the moment a filing corroborates or contradicts it.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
cicada3301
According to ransomware.live, Cicada3301 is a ransomware-as-a-service group (tracked as Repellent Scorpius by Palo Alto) that emerged in mid-2024 using Rust-based ransomware targeting Windows, Linux, and ESXi systems, suspected to be a successor of BlackCat/ALPHV and running an affiliate program with 20% commissions.