Inc Ransom ransomware group lists EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε on its leak site

• Ransomware group: Inc Ransom
• Country: Greece
• Sector: Retail & E-Commerce
• Announcement date: August 20, 2025

Inc Ransom claims attack on Eurofilm Mantzaris A.E

The Inc Ransom ransomware group has officially listed the Greek-based organization EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε on its dedicated leak site. According to an announcement made by the threat actors on August 20, 2025, the company has been added to their target list following a cyber incident. The group claims that the breach occurred on August 12, 2025.

In their public post, the Inc Ransom group provided contact information for the organization. Furthermore, the threat actors made a specific claim regarding the financial standing of the target, stating that the organization maintains an annual revenue of 5 million dollars. This type of targeting often focuses on companies with specific revenue brackets to maximize the potential for extortion.

Details regarding the alleged data breach

While the threat group has publicly claimed responsibility for the incident, specific details regarding the nature of the alleged leaked data remain unclear. The information provided in the group's post and the associated registration records does not contain specific details regarding the nature of the alleged leaked data.

The listing does not specify the following:

• The volume of the data involved
• The specific file count
• The exact types of data files exfiltrated
• The amount of the ransom demand

The absence of specific data descriptions is a common occurrence in the early stages of a ransomware leak site announcement, where groups may use the threat of exposure to pressure victims before providing granular details.

About Eurofilm Mantzaris A.E

EUROFILM ΜΑΝΤΖΑΡΗΣ Α.Ε is a company based in Greece that operates within the retail and e-commerce sectors. The organization serves as a supplier of packaging materials and film products. Specifically, the company provides various plastic film and packaging solutions designed for both industrial and commercial use.

Risk assessment and organizational implications

Considering the double-extortion tactics frequently employed by the Inc Ransom group, there is a significant risk that the organization's sensitive data may be published. Double extortion is a method where attackers not only encrypt a victim's systems but also steal sensitive information, threatening to leak it to pressure the organization into paying a ransom. This method increases the pressure on the victim, as paying the ransom does not guarantee that the stolen data will be deleted.

The potential leakage of sensitive information could lead to several secondary risks. For the organization's customers and employees, there is a heightened risk of identity theft or targeted phishing attacks. Such attacks often leverage stolen personal or corporate information to gain further access to systems or to defraud individuals.

Furthermore, because the organization operates in Greece, it may face data breach notification obligations under the European Union's General Data Protection Regulation (GDPR). Compliance with these regulations is critical for maintaining legal standing and avoiding significant regulatory penalties. Beyond legal and regulatory concerns, the organization may experience operational disruptions and reputational damage resulting from the incident.

The group's past activities suggest that the leakage of data may create secondary risks that persist long after the initial attack. Organizations in the retail and packaging sectors can mitigate these risks by implementing robust defensive measures, such as multi-factor authentication, regular offline backups, and comprehensive employee training to recognize phishing attempts. Maintaining a strong incident response plan is also vital for managing the operational and reputational fallout of a potential data breach.