Cumar Marble & Granite listed on Dark Project leak site

• Ransomware group: Dark Project
• Country: Türkiye
• Sector: Manufacturing
• Announcement date: September 15, 2026

Dark Project claims data breach at Cumar Marble & Granite

The threat actor known as Dark Project has listed Cumar Marble & Granite on its leak site, alleging a significant data breach. According to the claims made by the group, the incident occurred on September 11, 2026, and involves a massive amount of stolen information. The group asserts that they have successfully exfiltrated 489 GB of data, comprising approximately 200,000 files, from the organization's servers.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms. This tactic is frequently associated with a method known as double extortion, where attackers not only encrypt an organization's systems but also steal sensitive data. By threatening to publish this stolen information, the attackers aim to maximize their leverage. In this specific case, the group has already begun posting samples to demonstrate the validity of their claims, including images of sensitive documentation.

Details of the alleged exfiltration

The information shared by Dark Project includes various types of sensitive documentation. The group has provided screenshots that clearly display international wire transfer forms from East Boston Savings Bank. These samples include critical details such as bank information, address information, and records of commercial transactions. The presence of such documents suggests that the attackers have gained access to the company's financial workflows.

Beyond the banking documents, the group claims that the breach involves a wide range of sensitive materials. The data allegedly stolen includes:

• Personal information
• Financial documents
• Technical drawings
• Bank details

While the group has provided some samples, information regarding the specific identity and capabilities of the Dark Project group remains limited. The group's announcement was made public on September 15, 2026.

About Cumar Marble & Granite

Cumar Marble & Granite is a fabricator and supplier of marble, granite, and exotic stones based in New England. The company specializes in luxury kitchens, bathrooms, and custom projects. They provide custom stone products, such as countertops, sinks, and fireplaces, to a diverse clientele including architects, designers, and homeowners.

Potential impact and industry implications

The alleged exfiltration of this data carries significant risks for the organization and its stakeholders. The exposure of bank transfer forms and financial documents could facilitate highly targeted phishing attacks against the company's supply chain partners. Furthermore, the theft of technical drawings containing intellectual property could harm the company's competitive advantage and lead to long-term commercial losses. For the employees and customers of the organization, the leak of personal information increases the risk of identity theft and financial fraud.

Because Cumar Marble & Granite is a US-based entity, this incident may lead to investigations regarding state-level data protection laws and potential legal liabilities. The publication of such data through a double-extortion method can also have a devastating impact on the company's reputation.

In the manufacturing and fabrication sector, protecting intellectual property and financial data is critical. Organizations in this industry can take defensive steps to mitigate such risks, such as implementing strict access controls for technical drawings, employing multi-factor authentication for all financial transactions, and conducting regular audits of data exfiltration paths. Monitoring for unusual outbound traffic can also help identify potential breaches before large volumes of data are moved off-site.