Harley-Davidson Alleged Breach – CL0P Ransomware Adds Motorcycle Maker to the List
CL0P ransomware group listed Harley-Davidson on its extortion leak site, claiming a compromise; the motorcycle maker has not confirmed any breach.
The CL0P ransomware operation added Harley-Davidson to its public extortion portal, a listing highlighted by the ransomNews monitoring account on September 10, 2026. Harley-Davidson has not confirmed any compromise, and the initial access method, affected business unit, timing, and volume of stolen data remain unknown, with no sample files or technical indicators published. The article stresses that leak-site listings alone do not confirm a breach and can serve as negotiation pressure in double-extortion schemes. If verified, stolen data could fuel downstream phishing, BEC, credential-stuffing, and invoice fraud targeting dealers, suppliers, and customers.
- CL0P listed Harley-Davidson as a victim on its leak portal on September 10, 2026.
- No confirmation, proof-of-breach files, or technical indicators have been released by either side.
- CL0P's typical playbook involves data theft followed by threats of public release.
- Customers and partners should verify communications and watch for invoice and password-reset lures.
- Vendors
- Harley-Davidson
- Threat actors
- CL0P
- Victims
- Harley-Davidson
- Organizations
- CL0PHarley-DavidsonransomNews
- Countries
- United States
From the original article
2 min read at cybersecuritynews.com
The CL0P ransomware operation has allegedly added iconic motorcycle manufacturer Harley-Davidson to its public leak site, claiming it compromised the company. Harley-Davidson has not confirmed the alleged cyberattack, and the specific scope, timing, and impact of the reported incident remain unknown. The claim was highlighted by threat-monitoring account ransomNews on September 10, 2026.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.