SELECT WINES Listed by bravox Ransomware Group

On June 18, 2026, SELECT WINES appeared on the leak site of the bravox ransomware group after the company’s internal files were allegedly exfiltrated during a ransomware attack. The Canadian wine importer and distributor supplies restaurants, hotels, and retail outlets and represents international brands; anyone whose name, address, order history, supplier contracts, or payment records appear in those files is now at risk of identity theft, fraud, or targeted scams.

What Public Reporting Shows

Public reporting indicates that bravox posted SELECT WINES data on its dark-web leak site on June 18, 2026. The files consist of internal documents exfiltrated during a ransomware incident. No confirmed victim count has been released, and the precise volume or sensitivity of every record remains unclear. The company has not issued a public statement detailing what specific customer or employee information was taken.

Why This Matters for You and Your Family

When a company that holds your name, delivery address, phone number, email, and payment details suffers a breach, that information can be sold or published within hours. For ordinary families this often leads to spam, phishing emails that look legitimate because they reference real orders, or fraudulent charges on cards used for wine club subscriptions. Children’s names linked to family accounts can also surface, increasing risks of doxxing or social-engineering attacks aimed at the household.

The Doxxing and Identity-Chain Implications

Stolen internal files frequently contain spreadsheets that link customer emails, phone numbers, shipping addresses, and sometimes driver’s license copies for age verification. Attackers combine these fragments with data from previous breaches to build complete identity chains. A single leaked wine-club record can expose your home address, connect it to your children’s names if they appear on family accounts, and lead to gaming usernames that reuse the same passwords. Once the chain is mapped, harassers or identity thieves can pivot from one platform to another with little effort.

Bravox Group’s Publicly Known Track Record

Public reporting attributes bravox with emerging in late 2024. The group has targeted mid-sized companies across retail, manufacturing, and professional services. Its typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files, encryption of systems, and publication of samples on its leak site when victims refuse to pay. Extortion demands usually include both ransom for decryption and a separate fee to prevent data release. bravox maintains an active onion site that updates within days of new compromises.

What to do

• Rotate any password you used at SELECT WINES or any wine-related site and enable 2FA through an authenticator app instead of text messages.
• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity, then use the no-subscription cleanup to remove what appears.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you is flagged within hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same address and email.
• Let remediation specialists handle takedown requests across data brokers and suspicious sites that surface your information after this incident.

The SELECT WINES breach shows how quickly business records can become personal threats. Acting promptly on exposed credentials and hidden data chains limits the damage before criminals stitch your information into larger attacks. DoxxScan by GalaxyWarden delivers that continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full family coverage including children’s gaming accounts. Start your DoxxScan trial today to close the gaps this breach created.