E-Z Pack Holdings LLC listed on Inc Ransom leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Manufacturing
• Announcement date: September 10, 2024

The threat actor known as Inc Ransom has listed the manufacturing firm E-Z Pack Holdings LLC on its dedicated leak site. The group claims to have successfully exfiltrated data from the organization, marking a new instance of targeted cyber activity against the industrial sector.

The claimed attack and event details

According to the announcement made on September 10, 2024, the Inc Ransom group claims to have compromised the internal networks of E-Z Pack Holdings LLC. The threat actor asserts that they have gained unauthorized access to the organization's systems and subsequently obtained various documents during the intrusion.

As part of the group's public announcement, a series of document samples allegedly belonging to the company's operations have been shared. These samples serve as a method of proof for the group's claims regarding the breach. While the group has published these samples, they have not provided detailed information regarding the full scope or the specific nature of the data that has been targeted during this incident.

Data and information involved

The information released by the threat actor includes screenshots that display numerous document samples. Based on the available visual evidence, these documents may pertain to several different areas of the company's business operations. Specifically, the samples may relate to:

• Operational processes
• Employee information
• Administrative correspondence

It is important to note that the listing does not provide specific details regarding the total volume of data stolen or the exact file count. Furthermore, no specific ransom demand has been disclosed in the public announcement, and the total size of the exfiltrated data remains unknown.

Organization profile

E-Z Pack Holdings is a prominent manufacturer in the refuse truck industry, operating under the umbrella of Commercial Specialty Truck Holdings. The company maintains a focus on operational efficiency and product safety. Its production facilities, located in Kentucky, utilize lean manufacturing processes to maintain its industrial output.

Impact and industry implications

This incident may negatively impact the organization's operational continuity and its commercial reputation. If the allegedly exfiltrated data contains sensitive employee or customer information, it could lead to significant data privacy violations under US state laws and federal regulations.

The tactics employed by Inc Ransom involve double-extortion, a method where attackers not only encrypt data but also threaten to publish it to pressure the victim. Given this approach, the publication of the data may trigger secondary risks such as identity theft and targeted phishing attacks against the organization or its stakeholders. Additionally, the organization's supply chain partners may be indirectly affected by this breach, which could potentially necessitate mandatory security audit processes to ensure continued operational integrity.

In general, ransomware leak sites serve as a platform for extortion, where groups post victim names and data samples to increase pressure. Organizations in the manufacturing sector often face such risks due to their reliance on complex supply chains and digital operational processes. To defend against such threats, companies typically implement multi-factor authentication, conduct regular network segmentation, and maintain robust backup protocols to ensure business continuity in the event of a compromise.