Nafae Sanitaire listed by the Tengu ransomware group

Overview

The Tengu ransomware group has listed Nafae Sanitaire S.a.r.l, a Tangier-based company specialising in plumbing and sanitary ware, on its leak site. The listing appeared on 17 January 2026. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated corporate data from the company. The archive is expected to include client records, order documentation and financial documents.

Risks for affected individuals

• Clients' data may be exposed.
• Financial records could enable fraud.
• Employees' information may be included.

What remains unknown

• The volume of data exfiltrated.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Business partners should verify communications through official channels. Nafae Sanitaire should notify partners and staff, review its systems, and report the incident to Moroccan authorities.