Adriatic Glass & Mirrors targeted by weyhro ransomware group

• Ransomware group: weyhro
• Country: Canada
• Sector: Manufacturing
• Announcement date: May 31, 2025

Data allegedly belonging to Adriatic Glass & Mirrors listed on weyhro leak site

The manufacturing firm Adriatic Glass & Mirrors has reportedly been targeted by the ransomware group known as weyhro. According to an announcement made on the group's leak site, various sensitive documents belonging to the organization have been published. This development suggests a potential data breach involving a wide array of internal company records and personal information.

Details of the alleged cyberattack

The weyhro group has listed various financial and operational documents on their leak site that they claim belong to Adriatic Glass & Mirrors. The announcement alleges that internal correspondence and records dating up to May 2025 have been compromised. By publishing this data, the group may be attempting to exert pressure on the organization to meet specific demands.

Publicly available information regarding the weyhro group remains limited, making it difficult to ascertain their full scope of operations or specific motivations beyond the immediate pressure applied through data disclosure. The group appears to be utilizing tactics commonly associated with modern ransomware operations, where the threat of leaking sensitive information is used as a primary lever for extortion.

Data types allegedly compromised

The announcement indicates the presence of a significant variety of sensitive files. According to the group's claims, the following types of information have been exposed:

• Financial records
• Tax filings
• Employee payroll data
• Legal contracts
• Customer contact information
• Personal identification documents

The group has provided screenshots as evidence, which reportedly include samples of sensitive documents such as driver's licenses and personal tax forms. No information was provided regarding the total size of the data or the specific count of files involved in the breach.

About Adriatic Glass & Mirrors

Adriatic Glass & Mirrors is a manufacturing company based in Ontario, Canada. The firm specializes in the design, production, and installation of custom glass and mirror products. They provide various glass solutions for both residential and commercial projects, serving a diverse client base across different sectors.

Risk assessment and organizational implications

The alleged leak of personal identification documents and tax forms may increase the risk of identity theft for both employees and customers. Furthermore, the disclosure of the organization's financial data could pose significant risks regarding commercial competition and may trigger legal proceedings under Canadian data protection regulations. The publication of such data might also facilitate targeted phishing attacks against the organization's supply chain partners.

Given the group's apparent use of double-extortion tactics—a method where attackers not only encrypt data but also threaten to leak it—pressure on the organization's operational continuity may be observed. In such scenarios, organizations often face the dual challenge of restoring technical systems while managing the reputational and legal fallout of a data leak.

For organizations operating in the manufacturing sector, maintaining robust cybersecurity postures is essential to mitigate these risks. Common defensive steps include implementing strict access controls, maintaining regular offline backups, and conducting comprehensive employee training to recognize phishing attempts. Protecting the integrity of supply chain communications is also vital to prevent secondary attacks that leverage stolen contact information or operational details.