Inc Ransom ransomware group lists https://bellowsmfg.com/company/ on its leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Manufacturing
• Announcement date: January 13, 2026

Inc Ransom claims a massive data leak against Bellows Manufacturing and Supply

The ransomware group known as Inc Ransom has announced on its leak site that it has targeted Bellows Manufacturing and Supply. According to the group's announcement, they claim to have successfully exfiltrated a significant amount of data from the organization's internal systems. This claim was made on January 13, 2026, following an alleged attack that took place on January 5, 2026.

The threat actor has asserted that the volume of stolen information totals approximately 1.3 TB. To support their claims, the group has shared several images of documents on their platform. These images are alleged to contain sensitive internal correspondence and various operational records belonging to the company.

Details of the alleged data exfiltration

The information released by the threat actor includes various document samples that appear to be linked to the organization's internal business activities. The screenshots provided on the leak site suggest that the stolen material is related to the company's core operational processes and administrative functions. The group's claim indicates that the breach involves highly sensitive business information, including:

• Corporate operational documents
• Administrative correspondence
• Contracts

While the group has provided these visual samples to demonstrate the scope of their access, no specific information was provided regarding the total file count or the specific amount of a ransom demand. The announcement type is classified as a data leak, focusing on the exposure of information rather than a direct ransom negotiation at this stage of the public announcement.

About Bellows Manufacturing and Supply

Bellows Manufacturing and Supply is an American company that specializes in the design and manufacturing of metal bellows, expansion joints, and custom metal components. These products are designed for various industrial applications. The company provides critical engineering solutions to several high-stakes sectors, including the aerospace, defense, and energy industries.

Potential risks and industry implications

The Inc Ransom group has been active since mid-2023 and is known for employing double-extortion tactics. In such scenarios, threat actors not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage, threatening to leak it if a ransom is not paid. The leakage of data from an organization like Bellows Manufacturing and Supply may pose significant risks to trade secrets and intellectual property rights, particularly given their involvement in the aerospace and defense sectors.

Because the organization is based in the United States, such a breach may trigger complex legal processes under various state-level privacy laws and specific sectoral regulations. Furthermore, the publication of such data can lead to secondary risks, such as identity theft or highly targeted phishing attacks directed at the company's employees and business partners. The release of this information could potentially damage the organization's reputation and negatively impact its ability to maintain operational continuity.

For organizations operating within the manufacturing and engineering sectors, these types of incidents highlight the importance of robust cybersecurity frameworks. Common defensive steps often include implementing strict access controls, maintaining offline backups, and conducting regular security audits to protect intellectual property. As threat actors continue to target industrial sectors, maintaining visibility into network traffic and ensuring rapid incident response capabilities remain essential components of a modern security posture.