Galutti Automotive Industria Metalurgica Ltda

Galutti Automotive Industria Metalurgica Ltda was compromised in a ransomware attack attributed to sinobi in January 2026. The organization, operating in the Manufacturing sector in Brazil, was added to the group's data leak site as part of an extortion campaign.

sinobi operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Galutti Automotive, established in 1988, specializes in the production of wire artifacts such as support rods, comfort screens, springs, tubes, welding, and stamping. With over 35 years in the market, it has become a leading manufacturer in South America, producing automotive components for both two and four-wheeled vehicles, as well as products for white and yellow line machinery. The company focuses on quality and sustainability, holding ISO 14001:2015 certification to ensure environmentally friendly practices. Galutti serves diverse sectors by offering a wide range of automotive parts including seat covers, headrests, and various metallic and spring components.