2020 Whirlpool — Nefilim ransomware claim; partial dark-web publication vs. vendor containment narrative
Data compromised
Actor-published corporate file samples in press descriptions—no regulator-normalized consumer tally in contemporaneous coverage
Technical writeup
In late 2020 the Nefilim ransomware group marketed Whirlpool as a victim and published samples of allegedly stolen corporate documents while Whirlpool told reporters malware was discovered and contained without sustained operational outage, yielding a classic split between criminal marketing and corporate down-scope disclosures on consumer impact.
Root cause
External criminal ransomware intrusion with claimed data exfiltration