Exel Composites targeted by Worldleaks ransomware group
The threat actor known as Worldleaks claims to have exfiltrated data from the Finland-based manufacturing company Exel Composites.
- Published
- 2 min read
- 2 min read
- Ransomware group: Worldleaks
- Country: Finland
- Sector: Manufacturing
- Announcement date: August 25, 2025
Worldleaks claims data exfiltration from Exel Composites
The threat actor known as Worldleaks has announced on its leak site that it has targeted the Finland-based manufacturing company Exel Composites. According to the group's announcement, the organization's data has been exfiltrated, marking a new instance of data-focused extortion targeting the industrial sector.
Ransomware groups often utilize leak sites to pressure victims into paying ransoms. This tactic is a hallmark of double extortion, where attackers not only encrypt a company's systems but also steal sensitive information to threaten its public release. By hosting these claims on dedicated platforms, cybercriminals aim to maximize the reputational damage and psychological pressure exerted on the victim organization.
Details of the alleged attack
The listing provided by the Worldleaks group indicates that the institution was allegedly compromised on June 27, 2025. The announcement was officially posted on the group's leak site on August 25, 2025. The group is currently continuing its extortion activities by threatening to publish the institution's data if their demands are not met.
Regarding the specific contents of the breach, no details regarding the nature of the allegedly leaked data have been provided. The listing names no specific data types or file categories that were purportedly stolen during the incident.
About Exel Composites
Exel Composites is a Finland-based technology company that specializes in the design and manufacture of composite profiles and tubes. The company utilizes pultrusion and continuous lamination technologies to create its products. These high-performance composite solutions are supplied to various sectors, including industrial applications, construction, energy, and transportation.
Risk assessment and industry implications
The data-focused extortion method employed by the Worldleaks group may pose a significant risk of exposing the institution's trade secrets or employee information. Because the organization is based in Finland, potential data breaches could lead to legal sanctions under the EU General Data Protection Regulation (GDPR).
Given that the company operates in the manufacturing sector, this incident may bring secondary risks such as the infringement of intellectual property rights and vulnerabilities in supply chain security. In industrial environments, the theft of proprietary designs or manufacturing processes can compromise a company's competitive advantage and disrupt the security of the broader supply chain.
Considering the group's past activities, it is possible that the stolen data could be utilized for targeted phishing attacks in the future. Organizations in the manufacturing sector can mitigate such risks by implementing robust data loss prevention measures, ensuring strict access controls, and maintaining rigorous security protocols for intellectual property. Furthermore, proactive monitoring and comprehensive incident response plans are essential for managing the legal and operational consequences of potential data exposure.