# Storm group claims Southern Metals breach

Published: 2026-08-10 · Severity: elevated · Sectors: manufacturing
Canonical: https://vorant.io/reports/33e28239-afb6-5353-aa01-b4f12bcec099/storm-group-claims-southern-metals-breach

> Emerging ransomware group Storm claims a breach of Southern Metals Company, a Charlotte, NC metals recycler, with the claim yet unverified.

Ransomware.live tracked a claim by an emerging extortion group calling itself Storm, alleging compromise of Southern Metals Company, a metals recycling firm headquartered in Charlotte, North Carolina. The company, founded in 1938, employs 51-200 people and serves clients across the Carolinas. As Storm is a newly observed group, the claim should be treated with caution pending independent verification.

No malware samples, exploited vulnerabilities, or technical intrusion details were disclosed in the listing. DNS records for the victim's domain show use of a third-party mail hosting service (mycloudmailbox.com) but no other cloud/SaaS infrastructure was identified. Given the lack of corroborating technical detail and the unverified nature of the claim, this should be monitored for further developments rather than acted upon as confirmed fact.

## Mentioned in this report

- Threat actors: Storm

Source reporting: https://www.ransomware.live/id/U291dGhlcm4gTWV0YWxzQFN0b3Jt

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/33e28239-afb6-5353-aa01-b4f12bcec099/storm-group-claims-southern-metals-breach.
Full IOC sets, deployable detections, the entity graph, TAXII 2.1 feed and real-time alerts: https://vorant.io/signup