Inc Ransom ransomware group lists eakas.com on its leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Manufacturing
• Announcement date: November 14, 2025

The automotive manufacturing supplier Eakas Corp. has been listed on the leak site of the Inc Ransom ransomware group. The threat actor group has published an announcement claiming to have compromised data belonging to the organization, signaling a potential data breach involving a significant volume of information.

The details of the claim

According to the announcement posted on the Inc Ransom leak site, the group claims to have successfully executed an attack against Eakas Corp. The listing, which appeared on the group's platform on November 10, 2025, indicates that the attackers have access to a substantial amount of data. Specifically, the group claims that 183.45 GB of data is currently available for release.

While the group has made this claim, the specific timing of the initial compromise is cited as October 13, 2025. It is important to note that the ransom demand has not been disclosed by the group, and no information was provided regarding the specific number of files involved in the alleged theft. The announcement serves as a public notification of the group's intent to leak the information if their demands are not met.

Potential data types involved

The exact nature of the leaked data has not been explicitly specified by the threat actors. However, based on the visual evidence provided in screenshots accompanying the leak announcement, certain categories of information appear to be at risk. The icons visible in these images suggest that the compromised data may include various sensitive types of documentation.

The types of data that may have been compromised include:

• Financial documents
• Personal data
• Corporate documents

The presence of such data types in a breach can lead to various complications for the targeted entity, ranging from operational disruptions to identity theft risks for individuals whose information may be contained within the files.

About Eakas Corp.

Eakas Corp. is a Tier 1 supplier operating within the automotive industry. The company specializes in the production of both functional and decorative components required for modern vehicles. Their service offerings are diverse, including processes such as injection molding, painting, chrome plating, and assembly.

The organization's manufacturing capabilities allow them to produce a wide variety of automotive parts, including essential components such as bumper fascias and door handles. As a supplier in the automotive supply chain, the company plays a critical role in the production of various vehicle assemblies.

Risk assessment and industry implications

The alleged breach of Eakas Corp. may pose significant risks to the organization's operational processes and the security of its customer data. Because the organization is based in the United States, the incident may trigger regulatory scrutiny under various state-level data protection laws. Depending on the nature of the data, the company may face specific notification requirements to inform regulators and affected parties about the incident.

The tactics employed by the Inc Ransom group appear to follow the pattern of double extortion. In a double extortion scenario, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to use as leverage. The threat of publishing stolen information online is a primary tool used to pressure victims into paying a ransom. If the data is indeed published, the organization could face significant reputational damage.

Beyond the immediate impact on the company, secondary risks include the potential for targeted phishing attacks directed at employees and customers using the stolen information. Furthermore, such breaches can introduce vulnerabilities into the broader supply chain security, as a compromise at a Tier 1 supplier can have ripple effects throughout the manufacturing network.

To defend against such threats, organizations in the manufacturing sector often implement defensive measures such as robust backup strategies, network segmentation, and continuous monitoring of their digital environments. Maintaining strict access controls and conducting regular security awareness training are also common practices used to mitigate the risk of unauthorized data access and subsequent extortion attempts.