A threat actor has claimed to have breached Go-Flare, a manufacturer of parakites, speedflying and paramotor equipment, alleging the theft of the company’s database and administration panel source code. The claims have not been independently verified.
Unlike many newly posted breach claims, the actor published what appears to be a directory listing of the purported stolen archive. BreachNews reviewed the attached tree file, which references a SQL database dump alongside what appears to be the source code for Go-Flare’s Shopware-based administration environment. While the directory structure appears internally consistent, BreachNews could not independently verify that the files originated from Go-Flare.
Archive allegedly contains database and Shopware project
According to the forum post, the alleged breach includes the company’s database together with the complete administration source code used by shop.go-flare.com.
The reviewed directory listing references a SQL database export named shop.go-flare.com.sql alongside a large Shopware project containing application configuration files, Docker deployment files, Symfony configuration, custom themes, plugins, and other development resources. The archive also references multiple custom components, including GoFlareTheme, PartnerCenter, DlDelivery, and additional Shopware extensions, suggesting the alleged compromise extends beyond publicly accessible website assets.
BreachNews is not publishing source code, database contents, or any potentially sensitive technical information contained in the alleged archive.
Potential impact if authentic
If authentic, the combination of application source code and an accompanying production database could present greater risk than a typical customer data leak. Access to proprietary application code may expose internal business logic and custom integrations, while a production database could potentially contain customer, operational, or transactional information depending on its contents.
Because the alleged archive has not been independently authenticated, the scope of any exposed information remains unknown.
Evidence remains limited
The forum account behind the claim has little established history, and the published directory listing alone does not confirm that Go-Flare was compromised. Although the file structure appears consistent with a Shopware deployment, it does not independently establish the authenticity or origin of the alleged data.
Go-Flare had not issued any public statement regarding the alleged breach at the time of publication. BreachNews will update this article if the company confirms an incident or additional evidence emerges supporting or refuting the claim.
