IFPC Worldwide targeted in data leak claim by interlock

• Ransomware group: interlock
• Country: United States
• Sector: Professional Services
• Announcement date: October 8, 2025

Interlock claims to have stolen data from IFPC Worldwide

The ransomware group known as interlock has issued a leak announcement targeting IFPC Worldwide. According to the group's claims, the organization's confidential data has been successfully obtained by the threat actors. This announcement, made on a leak site, indicates a potential data breach involving the professional services firm.

The incident was announced on October 8, 2025, with the group claiming the attack occurred on the same day. While the group has listed the organization on its leak site, specific details regarding the group itself remain limited. Information regarding the identity and operational history of interlock is currently scarce in public intelligence circles.

The group asserts that the unauthorized access to the organization's information was facilitated by poor security practices and employee performance. This claim highlights a common theme in modern ransomware campaigns, where attackers often exploit human error or technical vulnerabilities to gain a foothold within a network. Such tactics are frequently used in double extortion schemes, where attackers not only encrypt data but also threaten to publish it to increase pressure on the victim.

Details of the alleged data exposure

The group has provided evidence in the form of a screenshot to support their claims. This visual evidence shows several folders that allegedly contain the stolen information. The total size of the data claimed to be taken is approximately 119.5 GB. No specific file count was provided in the announcement, and no ransom demand has been disclosed by the group.

Based on the folder names visible in the provided screenshot, the leaked information may include several types of sensitive records. The folders identified include 'Admin', 'baca', 'Contracts', 'Laptop', and 'Payroll'. These labels suggest that the stolen data could consist of the following:

• Administrative records
• Contracts
• Payroll data

The presence of these specific directories suggests that the breach may have compromised sensitive internal business operations and personnel-related information.

About IFPC Worldwide

IFPC Worldwide is a professional services company. The organization operates in several critical areas, including ensuring public safety during hiring processes, providing customer verification services, and managing personal and confidential information. Given the nature of their business, the organization handles a significant amount of sensitive data related to identity and verification.

Potential impact and organizational risks

The alleged leak of such sensitive information poses significant secondary risks. For the organization's employees and customers, the exposure of data could lead to risks such as identity theft and fraud. Furthermore, the disclosure of sensitive business documents, such as contracts and payroll information, could cause significant damage to the organization's commercial reputation and potentially compromise supply chain security.

Because IFPC Worldwide is based in the United States, the incident may trigger investigations under various state-level data protection laws, depending on the specific nature and content of the exposed data. Such regulatory scrutiny is a common consequence for organizations facing large-scale data exposure incidents.

In the event that the data is published by the threat actors, there may be an increase in targeted phishing attacks against the organization or its stakeholders. Attackers often use stolen information to craft highly convincing social engineering campaigns. To mitigate these risks, organizations in the professional services sector often find it necessary to review their security measures and notify all affected parties to prevent further exploitation.

General defensive considerations

In response to such threats, organizations typically focus on strengthening their defensive posture. This includes implementing robust access controls, enhancing employee security awareness training to prevent human error, and maintaining rigorous monitoring of network activities to detect unauthorized access early. Protecting sensitive data through encryption and maintaining strict adherence to data protection regulations are also standard industry practices for mitigating the impact of potential breaches.