E-CON Packaging Private Limited targeted by blacknevas ransomware group

• Ransomware group: blacknevas
• Country: India
• Sector: Manufacturing
• Announcement date: April 30, 2026

The threat actor known as blacknevas has published data allegedly belonging to E-CON Packaging Private Limited on its leak site. The group claims to have compromised the organization, resulting in a significant volume of stolen information.

The details of the alleged attack

According to the announcement made on April 30, 2026, the blacknevas group listed E-CON Packaging Private Limited on its dedicated leak site. The group alleges that it has successfully compromised the company and obtained a substantial dataset. The group claims that this dataset consists of 312,367 files, which total approximately 300 GB in size. While the group has made these claims public, information regarding the specific identity and operations of the blacknevas group remains limited in the public domain.

The scope of the leaked data

The leaked information, as presented in screenshots, reportedly includes various types of sensitive documentation. While the full scope of the allegedly leaked data has not been specified by the threat actor, the available samples indicate that the following types of information may be involved:

• Company documents
• Identity information
• Spreadsheet data

The presence of identity card samples and various spreadsheet data suggests that the breach may extend beyond corporate files to include sensitive personal information of individuals associated with the company.

About E-CON Packaging Private Limited

E-CON Packaging Private Limited is an Indian company that has been established since 1997. Based in Mumbai, the organization specializes in the production of steel and HDPE drums. The company serves as a manufacturer of industrial packaging solutions for several critical sectors, including the chemical, pharmaceutical, and lubricant industries.

Impact assessment and industry implications

The alleged leak of this data may create negative impacts on the company's operational continuity and its commercial reputation. Because the shared samples include identity documents, there is an increased risk of identity theft or targeted phishing attacks for the individuals involved. Furthermore, the leaked data has the potential to affect the company's supply chain partners, potentially creating a ripple effect across its industrial network.

Given the data protection regulations in India, the organization may face various legal obligations following such an event. The methodology employed by the blacknevas group may point to double extortion scenarios. In such scenarios, threat actors not only encrypt an organization's data but also threaten to leak it to pressure the victim into paying a ransom. This tactic forces organizations to defend against both operational disruption and the public exposure of sensitive information.

For organizations operating in the manufacturing and industrial packaging sectors, such incidents highlight the necessity of maintaining high levels of vigilance. To defend against secondary attacks and the risks associated with double extortion, organizations often implement robust data protection strategies. These typically include regular offline backups, strict access controls to sensitive documentation, and comprehensive monitoring of network traffic to detect unauthorized data exfiltration. Maintaining a strong security posture is essential to mitigate the risks of identity theft and to protect the integrity of the supply chain.