Bentley Industries listed on interlock ransomware leak site

• Ransomware group: interlock
• Country: United States
• Sector: Manufacturing
• Announcement date: May 5, 2025

The threat actor known as interlock has officially listed the United States-based manufacturing company Bentley Industries on its dedicated leak site. The announcement, which appeared on May 5, 2025, marks a potential escalation in the group's activities targeting industrial entities. While the listing has been made public on the group's platform, the specific details regarding the nature of the breach and the extent of the impact remain subject to the claims made by the threat actor.

Details of the alleged incident

According to the claims made by the interlock group, the cyber incident involving Bentley Industries is alleged to have occurred on April 28, 2025. The group published the notification on their leak site on May 5, 2025, creating a gap between the claimed date of the attack and the public announcement. This timeline is common in ransomware operations, where there is often a delay between the initial infiltration and the public naming of the victim.

Ransomware leak sites are platforms used by cybercriminal groups to exert pressure on organizations through a tactic known as double extortion. In these scenarios, attackers do not only encrypt an organization's systems to disrupt operations but also threaten to release sensitive data to the public if a ransom is not paid. This method aims to maximize leverage by threatening the victim's reputation and legal standing. However, in this specific instance, the visibility of the leaked data is currently limited by the state of the leak site itself.

Data availability and content

At this stage, there is no definitive information regarding the specific types of data that have been compromised. The listing on the interlock leak site does not provide any details regarding the volume of data stolen or the specific file count involved in the incident. Furthermore, there is no information available regarding a ransom demand or the specific files targeted by the attackers.

The current state of the leak site page presents significant challenges for verification. The provided screenshot of the announcement displays a 404 error, indicating that the page content is currently inaccessible. Consequently, the listing names no data types and provides no visual evidence or samples of the alleged stolen information.

About Bentley Industries

Bentley Industries is an American marine company that specializes in the manufacturing of various watercraft. The company is known for producing pontoon boats and aluminum fishing boats. With production facilities located in South Carolina and Missouri, the organization focuses on manufacturing affordable, family-oriented boats for the marine market.

Risk assessment and industry implications

Public information regarding the interlock group remains limited, making it difficult to establish a definitive pattern of their methods or motivations. However, the implications of such an incident for a company in the manufacturing sector are significant. For organizations operating in manufacturing, a data breach can pose substantial risks to proprietary trade secrets, production processes, and sensitive employee information.

Because Bentley Industries is a US-based entity, an actual data breach could trigger various legal obligations. These may include requirements under federal regulations and state-level data breach notification laws, which dictate how and when an organization must inform victims and authorities about a compromise. If the claims made by interlock are confirmed, the organization may also face secondary risks, such as targeted phishing attacks against employees or vulnerabilities within the broader supply chain.

To mitigate such risks, organizations in the manufacturing sector often implement defensive strategies such as network segmentation, robust access controls, and continuous monitoring of their digital environments. Maintaining a rigorous backup strategy and conducting regular security awareness training are also vital components of a modern cybersecurity posture. Further evidence is required to provide a definitive assessment of this specific threat actor and the validity of the claims made against Bentley Industries.