Update: Yesterday, the ransomware collective Direwolf, publicly claimed responsibility for an alleged attack on Wine Works Australia. According to their statement, they obtained 22GB of data, including financial records, sales information, and customer data. These claims remain unverified, with no response from Wine Works at this time. Cyber News Centre will provide further updates as more information becomes available. The allegations also form part of a wider pattern in which Direwolf has named multiple victims across several countries since May 2025. The group is known for its double-extortion model and use of sophisticated anti-forensic techniques, often aiming to pressure victims through public exposure before any official disclosure is made.
Why it Matters: If substantiated, the exposure of 22GB of corporate and client data could have serious implications for Wine Works and the wider export supply chain. Sensitive commercial information, including contracts, client details, and financial data, may be at risk of misuse, reputational damage, and financial loss.
The situation highlights the vulnerability of Australia’s export industries to ransomware campaigns, especially those run by groups with advanced capabilities and high ransom demands. With Australian regulators, including APRA, warning of an increasingly hostile cyber environment amid global geopolitical tensions, the Direwolf claims serve as a timely reminder of the urgent need for strong cybersecurity measures, robust backup strategies, and proactive risk management.