A M King targeted by Worldleaks in alleged data breach

• Ransomware group: Worldleaks
• Country: United States
• Sector: Manufacturing
• Announcement date: May 27, 2025

Worldleaks claims to have stolen data from A M King

The threat group known as Worldleaks has listed a significant amount of data allegedly belonging to A M King on its leak site. According to a post published by the group on May 27, 2025, the organization has been targeted in a cyberattack. The group claims to have successfully exfiltrated a massive dataset from the victim's network, which is now being used as leverage in their extortion efforts.

The group's announcement indicates that the alleged breach occurred much earlier than the public notification. Specifically, the group claims that the data was obtained from the organization's network on March 28, 2025. This delay between the initial intrusion and the public announcement is a common tactic used by modern threat actors to maximize the pressure placed on an organization during extortion negotiations.

Worldleaks is recognized in the cyber threat intelligence community for a specific operational style. Unlike traditional ransomware groups that focus on encrypting a victim's systems to cause operational downtime, this group is known to focus primarily on data exfiltration and extortion. By bypassing the encryption phase, the group avoids some of the technical hurdles of system disruption and instead focuses on the direct threat of leaking sensitive information to the public or selling it to third parties.

Details of the alleged data leak

While the group has provided specific metrics regarding the volume of the stolen information, they have been vague regarding the specific content of the files. The listing provides a quantitative overview of the breach, but it does not specify the nature of the documents or the sensitivity of the information contained within them.

Claimed data statistics

• Total data volume: 2.3 TB
• Total file count: 763,231 files

The screenshot provided by the group confirms these figures, showing a total data volume of 2.3 TB and a file count of 763,231. However, the listing names no specific data types or categories of information that have been compromised.

About A M King

A M King is a design-build engineering and construction firm based in the United States. The company specializes in the planning and construction of industrial facilities, with a specific focus on food processing, cold storage, and commercial facilities. Given their role in designing and building critical infrastructure for the food and industrial sectors, the organization plays a specialized role within the manufacturing and construction landscape.

Risk assessment and implications

The alleged data leak poses several significant risks to A M King. From an operational standpoint, the loss of sensitive project designs or client information could impact the organization's operational continuity and commercial reputation. Because the organization is based in the United States, a confirmed breach of this magnitude could trigger complex legal processes under various state-level data protection laws and sector-specific regulations.

Beyond the immediate legal and reputational concerns, there are substantial secondary risks. The leaked data could be utilized by malicious actors for identity theft or as the foundation for highly targeted phishing campaigns against the company's employees, partners, or clients. Such campaigns often use the specific context of the stolen data to gain trust and further penetrate a network.

The specific methodology used by Worldleaks—focusing on exfiltration rather than encryption—increases the pressure on the victim. Without the immediate crisis of a system lockout, the organization faces the long-term threat of its proprietary information being sold to competitors or third parties. To mitigate such risks, organizations in the manufacturing and engineering sectors typically focus on robust data loss prevention (DLP) strategies, strict access controls, and comprehensive monitoring of data movement to detect unauthorized exfiltration attempts before they reach a massive scale.