Thermofin
Data Breach on September 25, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | thermofin.de | ||
| Threat Actor | Sarcoma | ||
| Date Discovered | Sep 25, 2025 | ||
| Description | Thermofin GmbH is a manufacturer of heat exchangers and refrigeration & cooling systems, based in Germany, specializing in industrial refrigeration, commercial cooling, evaporators, condensers, air coolers, dry coolers, hydro-cooling systems and customized cooling solutions. It serves global markets via its plants and sales offices. | ||
| Leak Size | 2.9TB |
Credential Exposure for thermofin.de
We've indexed 17 @thermofin.de accounts from external breaches, plus 11 credentials for thermofin.de itself.
Last checked Aug 16, 2026
| @thermofin.de addresses from external breaches | |
|---|---|
| Third-party breaches | 14 accounts · across 22 breaches · 13 with a plaintext password · most recent Feb 26, 2024 |
| Combo lists | 6 accounts · most recent Aug 5, 2026 |
| Passwords for thermofin.de accounts | |
|---|---|
| Infostealer logs | 7 logins · 5 infected devices · most recent Jul 16, 2026 |
| Combo lists | 5 logins · most recent Jul 27, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Thermofin was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.