Enviro-Hub Holdings listed on Insomnia ransomware leak site

• Ransomware group: insomnia
• Country: Singapore
• Sector: Manufacturing
• Announcement date: February 7, 2026

Insomnia claims responsibility for Enviro-Hub Holdings data breach

The threat actor known as Insomnia has officially listed the Singapore-based organization Enviro-Hub Holdings on its dedicated leak site. According to the announcement, the group claims to have successfully compromised the company's networks and acquired sensitive information belonging to the firm.

This development follows a pattern observed in modern cybercrime where ransomware groups utilize leak sites to host stolen data. These platforms serve as a public gallery for the group's activities, often used to exert pressure on victims. While the specific details regarding the volume of data or the exact ransom demand remain unknown, the listing confirms that the group is actively promoting the breach to the public.

Details of the claimed attack and timeline

Based on the information provided by the threat actor, the intrusion into the company's network is not a recent occurrence. The Insomnia group claims to have gained unauthorized access to the organization's networks as early as January 19, 2026. The public announcement regarding the breach was subsequently made on the group's leak site on February 7, 2026.

The timeline suggests that the attackers may have had a period of presence within the network before making their intentions public. This period of undetected access is a common challenge for organizations, as it allows attackers to conduct reconnaissance and identify high-value data assets before initiating the final stages of an attack, such as data exfiltration or encryption.

Data types and content involved in the leak

The Insomnia group has shared various documents through its leak site that appear to be related to the company's business operations. The leaked content is not limited to corporate files but also includes highly sensitive personal information. The available evidence, including screenshots, indicates that the stolen data includes several critical categories of information:

• Passport data
• Commercial agreements
• Corporate correspondence

The presence of passport copies and commercial agreements indicates a significant breach of both personal and professional privacy. Such data can be used for various malicious purposes, ranging from identity theft to corporate espionage.

About Enviro-Hub Holdings

Enviro-Hub Holdings is a holding company headquartered in Singapore. The organization maintains a diverse portfolio of business interests, primarily focusing on sustainable waste management and environmental solutions. Its core operations include the fields of e-waste and metal recycling, the supply of healthcare products, and various property investments.

Risk assessment and organizational implications

The exposure of this data presents several significant risks to the organization and its stakeholders. The release of passport data poses a direct threat to the employees and business partners of Enviro-Hub Holdings, as they may face increased risks of identity theft. Furthermore, the publication of commercial agreements introduces secondary risks that could impact the company's supply chain processes and its strategic business partnerships.

Because the organization is based in Singapore, this incident may trigger legal consequences under the Singapore Personal Data Protection Act (PDPA). Organizations operating in highly regulated environments must be prepared for the legal and compliance challenges that follow a data breach. The tactics used by the Insomnia group, specifically the publication of stolen data, suggest a double-extortion strategy. In this scenario, attackers not only encrypt data to disrupt operations but also threaten to release it to maximize their leverage over the victim.

For organizations in the manufacturing and recycling sectors, this incident highlights the necessity of robust data security processes. To mitigate such risks, companies often need to review their security frameworks, enhance their monitoring capabilities, and ensure they have clear protocols for notifying affected parties in the event of a breach. Maintaining strong defensive postures is essential to protect against the evolving tactics of ransomware groups.