DOVERN Import listed by the Space Bears ransomware group

Overview

The Space Bears ransomware group has listed DOVERN Import, a Moroccan importer of rare wines and champagnes, on its leak site. Since 2001 the company has selected and imported wines primarily from French regions. The listing appeared on 21 October 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated corporate data from the importer. The archive is expected to include client records, supplier agreements and financial documents.

Risks for affected individuals

• Clients' data may be exposed.
• Supplier and financial records could be misused.
• Employees' information may be included.

What remains unknown

• The volume of data exfiltrated.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Business partners should verify communications through official channels. DOVERN Import should notify partners and staff, review its systems, and report the incident to Moroccan authorities.