Triumph Group
Attack Intelligence
Triumph Group was compromised in a ransomware attack attributed to coinbasecartel in February 2026. The organization, operating in the Manufacturing sector in United States, was added to the group's data leak site as part of an extortion campaign.
coinbasecartel operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
[AI generated] Triumph Group is an international company specializing in manufacturing and repairing aerospace structures, systems, and components. Their work encompasses commercial, regional, business and military aircraft, as well as their components. Triumph Group has a robust supply chain providing services globally, significantly enhancing the performance of the aerospace industry.