Inc Ransom ransomware group lists newhollandwood.com on its leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Manufacturing
• Announcement date: March 19, 2025

Inc Ransom claims data breach at newhollandwood.com

The threat actor known as Inc Ransom has officially listed newhollandwood.com on its dedicated leak site. According to the announcement made on March 19, 2025, the group claims to have successfully exfiltrated a significant amount of data from the organization's systems. This development follows an alleged intrusion that the group claims occurred on February 17, 2025.

Ransomware groups often utilize leak sites to host stolen data as a method of psychological and financial pressure. This tactic is frequently associated with double-extortion schemes, where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive information to threaten its public release. By publishing data on a public platform, the threat actors aim to coerce the victim into paying a ransom to prevent the exposure of proprietary or personal information.

Details of the alleged data theft

The Inc Ransom group has made specific claims regarding the volume and nature of the information they have allegedly obtained. The group asserts that they are in possession of 73.4 GB of data stolen from the organization. The announcement provided by the attackers includes visual evidence in the form of document samples and references to specific database structures, suggesting a deep level of access to the target's internal systems.

According to the group's claims, the compromised information includes various types of sensitive records. The specific data types mentioned in the leak site announcement include:

• Customer contact information
• Booking records
• Database tables

The group specifically identified several SQL database tables that were allegedly part of the breach, including dbo.CUSTOMER, dbo.CUSTOMER_CONTACT, dbo.V_CONTACT, and dbo.CUSTOMER_BOOKINGS. Furthermore, the group provided screenshots containing document samples that appear to be directly related to the business operations of the organization.

About New Holland Church Furniture

New Holland Church Furniture is a manufacturing company based in the United States. Established in 1919, the organization has a long history in the industry, specializing in the production of furniture specifically designed for worship environments. Their product line includes custom wooden furniture, such as traditional church pews, radius curved pews, pulpits, and altars.

Potential impact and industry implications

The alleged breach of New Holland Church Furniture could lead to several significant consequences for the organization. The exposure of customer contact information and booking records poses a direct risk to the individuals involved, potentially making them targets for secondary cyberattacks such as identity theft or highly targeted phishing campaigns. Such incidents often trigger legal and regulatory scrutiny, particularly under state-level data protection regulations in the United States, which govern how personal data must be protected and reported.

Beyond the immediate privacy concerns, the organization may face operational challenges and reputational damage. The loss of trust among business partners and customers is a common outcome when sensitive data is leaked. Given the history of the Inc Ransom group, which emerged in mid-2023 and utilizes double-extortion tactics, the publication of this data is likely a strategic move intended to increase pressure on the organization regarding ransom demands.

For organizations operating in the manufacturing sector, these types of incidents highlight the necessity of robust cybersecurity frameworks. Defensive measures typically include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular offline backups to ensure operational continuity. Furthermore, monitoring for unauthorized data exfiltration and implementing strict access controls can help mitigate the impact of such breaches. As threat actors continue to refine their methods, maintaining a proactive security posture remains a critical component of organizational resilience.