Geometrics listed on sinobi ransomware leak site

• Ransomware group: sinobi
• Country: United States
• Sector: Manufacturing
• Announcement date: December 22, 2025

Geometrics targeted by sinobi ransomware group

The threat actor known as sinobi has officially listed the organization Geometrics on its dedicated leak site. According to the announcement made on December 22, 2025, the group claims to have successfully encrypted the organization's systems. This development marks a significant escalation in the threat landscape for the targeted manufacturing entity.

Details of the alleged attack and ransom demand

The announcement by sinobi outlines a severe breach involving the encryption of Geometrics' systems. In support of their claims, the threat group has released screenshots that allegedly show the organization's internal file directories. While the group has provided these visual proofs to substantiate their access, public information regarding the specific capabilities and history of the sinobi group remains limited.

The group has issued a substantial ransom demand in connection with this incident. The amount requested by the threat actor is 23,400,000 USD. This high-value demand is a characteristic feature of modern ransomware operations, where attackers seek to maximize their financial gain through high-stakes negotiations.

Data and information involvement

Regarding the specific contents of the breach, there is no clear information available concerning the exact nature of the leaked or threatened data. However, the presence of screenshots depicting file directories suggests that the attackers may have obtained access to the organization's internal file structures.

The listing does not name any specific data types that have been compromised.

About Geometrics

Geometrics is a division of OYO Corporation that specializes in the design and manufacture of geophysical hardware, sensors, and software. Their technological expertise spans across land, marine, and airborne applications. The company is a specialized provider in the fields of seismic, magnetic, and electromagnetic technologies.

Impact assessment and industry implications

This claim against Geometrics carries the potential to cause significant disruptions to the organization's operational continuity. Because the group is alleging that data has been encrypted, there is a risk that the compromised information may contain sensitive commercial data or documents related to intellectual property rights. Such a breach could have far-reaching consequences for the company's competitive standing.

As a United States-based organization, a confirmed data breach could trigger various state-level data protection laws and mandatory notification requirements. Furthermore, the incident may present secondary risks to the organization's customers and business partners, potentially impacting overall supply chain security. The nature of the ransom demand suggests that the threat actor may be employing a double extortion tactic. In such scenarios, attackers not only encrypt data to halt operations but also threaten to leak sensitive information to exert maximum pressure on the victim.

In the manufacturing sector, organizations often face similar risks where the loss of intellectual property or operational downtime can be devastating. To mitigate these risks, companies typically focus on robust backup strategies, network segmentation, and continuous monitoring of their digital environments. Strengthening supply chain security is also a critical component for organizations that serve large-scale industrial or governmental clients, ensuring that a breach in one entity does not cascade through the network of partners.