CL0P Claims Harley-Davidson Compromise Without Supporting Evidence
Threat Actor Intelligence · 2 sources · Updated 2mo ago · First seen Sep 11, 2026

The CL0P ransomware operation has added motorcycle manufacturer Harley-Davidson to its public extortion leak site, claiming it compromised the company. The listing was highlighted by the ransomNews threat-monitoring account, but Harley-Davidson and its parent organization have not publicly confirmed an intrusion or data theft.
CL0P provided no sample files, screenshots, ransom note, stolen-data archive, or technical indicators to substantiate the claim. The purported initial-access vector, affected business unit, scope and type of data allegedly stolen, and whether ransomware encryption occurred remain unknown; the incident should be treated as unconfirmed pending independent validation or an official disclosure.


