Inc Ransom claims data breach against duboiswood.com

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Manufacturing
• Announcement date: November 13, 2025

Inc Ransom lists duboiswood.com on leak site

The threat actor known as Inc Ransom has listed the furniture manufacturer duboiswood.com on its dedicated leak site. The group has issued a claim regarding a data breach involving the organization, signaling a potential security incident for the US-based company.

Details of the alleged incident

According to the announcement made on November 13, 2025, the Inc Ransom group claims to have exfiltrated a significant amount of data from the target. The group asserts that the volume of the stolen data is approximately 288 GB. This claim was posted on the same day the attack was allegedly carried out, which is November 13, 2025.

By publishing this listing on their leak portal, the threat actors appear to be employing double-extortion tactics. In such scenarios, ransomware groups do not merely encrypt a victim's systems to disrupt operations; they also steal sensitive information beforehand. The threat of leaking this stolen data on a public platform is used as a primary method to exert psychological and financial pressure on the organization to meet ransom demands.

Potential impact on data and information

While the specific contents of the alleged leaked data have not been explicitly detailed by the group, certain indicators have been identified. Analysis of the icons present in the screenshots provided by the threat actor suggests that several categories of sensitive information may have been compromised. The potential types of affected data include:

• Financial records
• Corporate documents
• Employee information

The exact nature and completeness of the data breach remain unconfirmed, and the specific volume of files involved was not specified in the announcement.

Organization profile

Dubois Wood is a manufacturing company based in Indiana. The company has been producing high-quality, American-made furniture since 1979. They provide furniture products to various markets at competitive prices.

Analysis and broader implications

Inc Ransom is a threat actor that has been active since mid-2023. The group is recognized for its use of double-extortion tactics to maximize leverage over its victims. This specific incident against duboiswood.com may result in secondary risks for both the organization's employees and its customers, such as the potential for identity theft or the execution of targeted phishing attacks using the stolen information.

Because the organization is based in the United States, the incident may trigger the application of state-level data breach notification laws, which govern how companies must report unauthorized access to sensitive data. Furthermore, given the substantial volume of data claimed by the group, the organization may face negative impacts regarding its operational continuity and its commercial reputation in the market.

The history of this group suggests that they may continue to exert pressure on the organization through the ongoing publication or the potential sale of the data on dark web forums. For organizations in the manufacturing sector, such incidents highlight the importance of robust data protection strategies. Common defensive measures often include implementing strict access controls, maintaining offline backups, and conducting regular security awareness training to mitigate the risk of initial access through phishing or other common vectors.