Ransomware Live reported on September 14, 2026, that the Chaos ransomware group listed Glasfloss, identified by the domain glasfloss.com, as a victim. The report described an alleged data leak involving approximately 402 GB of confidential corporate, financial, and employee records. The available material is a ransomware-group report and does not include an official statement from Glasfloss or a government regulator.
The reported records include accounting and finance materials, contracts, employee records, and ESOP records. The number of affected individuals, whether Social Security numbers or medical information were involved, and the states of affected individuals have not been publicly confirmed in the sources reviewed. No official consumer notification or regulatory breach filing was identified.