emtco.com listed on m3rx ransomware leak site
Wichita-based Engineered Machine Tool, Inc. (emtco.com) has been listed on the leak site by the threat actor known as m3rx.
- Published
- 2 min read
- 2 min read
- Ransomware group: m3rx
- Country: United States
- Sector: Professional Services
- Announcement date: May 3, 2026
m3rx claims data exfiltration against emtco.com
The threat actor known as m3rx has listed the organization emtco.com on its dedicated leak site. This announcement, made on May 3, 2026, follows a claimed attack and discovery date of the same day. While the listing is a claim made by the threat actor, it indicates a significant potential breach involving the professional services firm.
The m3rx group has asserted that they have successfully exfiltrated a substantial amount of data from the target. According to the claims made by the group, the dataset associated with this incident is quite large. The threat actor alleges that the stolen information consists of 180 GB of data, which is comprised of a total of 698,000 files. Publicly available information regarding the specific operations and background of the m3rx group remains limited.
Details of the alleged data breach
Regarding the specific content of the files allegedly taken during the attack, no specific details have been provided by the threat actor. However, based on the volume of the data, it is assessed that the 180 GB of information may contain various corporate documents belonging to the organization.
- 180 GB of data
- 698,000 files
The listing does not specify the exact types of files or the specific nature of the corporate documents that may have been compromised. No ransom demand has been disclosed in the current announcement.
About Engineered Machine Tool, Inc.
Engineered Machine Tool, Inc. (emtco.com) is an engineering firm based in the United States. The company specializes in designing custom machinery and tooling, with a primary focus on enhancing production efficiency for its clients. Since its establishment in 1987, the firm has provided a variety of industrial automation solutions, including specialized systems for automated storage and palletizing.
Analysis and potential impact
The alleged leak poses several significant risks to the organization. Primarily, such an incident can threaten the organization's operational continuity and the security of its trade secrets. If the stolen data contains sensitive information belonging to employees or clients, the organization may face risks such as identity theft or the execution of targeted phishing attacks against its stakeholders.
Because the organization is based in the United States, this incident may trigger state-level data breach notification laws and other relevant regulatory requirements. The method used by the threat actor—publishing data on a leak site—is often a component of a double extortion strategy. In such scenarios, attackers not only encrypt systems but also steal sensitive data to pressure the organization into paying a ransom by threatening to release the information publicly.
For organizations operating in the professional services and industrial engineering sectors, maintaining robust cybersecurity postures is essential. This includes implementing strict access controls, monitoring for unauthorized data exfiltration, and ensuring that sensitive corporate and client information is encrypted both at rest and in transit. Regular audits and adherence to regulatory compliance frameworks are also vital defensive steps to mitigate the impact of such potential threats.