Inc Ransom ransomware group lists instyle.com.au on its leak site

• Ransomware group: Inc Ransom
• Country: Australia
• Sector: Retail & E-Commerce
• Announcement date: December 3, 2025

The Australian-based textile supplier instyle.com.au has been listed on the leak site of the ransomware group known as Inc Ransom. The threat actor claims to have successfully targeted the organization, marking a new instance of data exposure involving a prominent player in the retail and e-commerce sector.

The claimed attack and event details

According to the announcement made on the Inc Ransom leak site on December 3, 2025, the group claims to have obtained a significant volume of information belonging to the organization. The threat actor asserts that the initial attack occurred on November 13, 2025. The group has claimed to have exfiltrated 62.3 GB of data from the company's systems.

The nature of the listing indicates that the group is employing a double-extortion strategy. In such cyberattacks, threat actors do not merely encrypt a victim's files to disrupt operations; they also steal sensitive information to use as leverage. By threatening the public release of stolen data, the attackers attempt to pressure the organization into meeting ransom demands to prevent the exposure of their proprietary and private information.

Data involved in the claim

While the specific contents of the allegedly leaked data have not been explicitly detailed by the threat actors, the icons present in the screenshots provided by the group suggest that certain categories of information may be at risk. These indicators suggest that corporate, financial, and personnel data may be among the files targeted during the breach.

• Corporate data
• Financial data
• Personnel data

About instyle

Instyle is an Australian company that supplies design-driven textile and vinyl products for various commercial spaces, including offices, hospitality, healthcare, and public buildings. Established in 1987, the firm is known for its high-technical-standard indoor and outdoor textile collections.

Analysis and organizational impact

The employment of a double-extortion strategy by Inc Ransom increases the potential risks to the organization, specifically regarding the exposure of trade secrets and sensitive employee data. Given that the group has been active since mid-2023, their involvement presents a serious challenge to the operational continuity and the professional reputation of the targeted entity.

Under Australian data protection regulations, the organization may face significant legal obligations and scrutiny in the event of a confirmed data breach. The potential exposure of such data carries secondary risks, as the stolen information could be utilized by third parties for malicious purposes, such as identity theft or highly targeted phishing attacks against the company or its stakeholders.

In the retail and e-commerce sectors, organizations often face high stakes when dealing with supply chain logistics and client data. To mitigate the risks associated with ransomware and data exfiltration, organizations typically focus on robust defensive measures. These include maintaining rigorous backup protocols, implementing multi-factor authentication across all access points, and conducting regular security awareness training to defend against phishing. Furthermore, maintaining a comprehensive incident response plan is essential for managing the legal and operational fallout that follows a public listing on a leak site.