Inc Ransom claims data breach against OSI Systems, Inc.

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Technology
• Announcement date: December 30, 2025

The ransomware group known as Inc Ransom has published an announcement on its leak site claiming to possess a significant volume of data belonging to OSI Systems, Inc. According to the group's claims, the breach involves a substantial amount of information, potentially impacting the technology firm's operations and sensitive documentation.

The alleged incident

On December 30, 2025, the Inc Ransom ransomware group listed OSI Systems, Inc. on its dedicated leak site. The group claims to have successfully exfiltrated 250 GB of data from the organization. This announcement alleges that the compromised data includes a variety of sensitive materials, such as financial records, project documentation, and client information. Furthermore, the group's claims suggest that the stolen data contains sensitive contracts involving various government agencies as well as large-scale corporations.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms. This process frequently involves a tactic known as double extortion, where attackers not only encrypt an organization's systems but also steal sensitive data to threaten its public release. The Inc Ransom group, which emerged in mid-2023, is known to employ these types of tactics. In such scenarios, the threat of exposing private information serves as an additional layer of leverage against the target organization.

The claimed data contents

The information allegedly leaked by the group is extensive and covers multiple aspects of the organization's internal operations and external relationships. Based on the claims made by Inc Ransom, the stolen data set is said to include the following types of information:

• Financial data
• Project documentation
• Customer contracts
• Supplier information
• Technical drawings

Beyond these categories, the group alleges the data contains the company structure, income and expense reports, shareholder information, and Nasdaq data. The leaked material is also said to include non-disclosure agreements (NDA), customer and supplier contracts, project development and laboratory test drawings, and client lists. Accompanying the announcement, screenshots were provided which reportedly display various corporate forms, budget spreadsheets, and samples of technical drawings.

About OSI Systems, Inc.

OSI Systems, Inc. is a multinational technology company that designs and manufactures electronic systems and components for the security, healthcare, and defense sectors. The company specializes in areas such as inspection systems, optoelectronic devices, and patient monitoring solutions.

Potential impact and industry risks

This alleged breach may pose significant operational and reputational risks to OSI Systems, Inc. and its stakeholders. Because the organization operates in critical sectors, the exposure of data belonging to government agencies and clients could potentially lead to secondary risks regarding supply chain security. When a technology provider for defense or healthcare is compromised, the ripple effects can extend to the many entities that rely on their specialized systems and components.

As the organization is based in the United States, it may face regulatory scrutiny under relevant state laws and federal data privacy requirements following such a disclosure. The nature of the leaked information suggests it could potentially be utilized for identity theft or targeted phishing campaigns, especially given the double-extortion tactics used by the attackers. Such disclosures may have lasting impacts on the organization's trade secrets.

For organizations operating in high-stakes technology sectors, maintaining robust cybersecurity postures is essential. Common defensive steps include implementing strict access controls, maintaining offline backups, and conducting regular security audits to identify vulnerabilities. Protecting the integrity of technical drawings and sensitive contracts is particularly vital for companies involved in the defense and security industries to prevent long-term intellectual property loss.