Inc Ransom ransomware group lists www.davisdavisco.com on its leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Manufacturing
• Announcement date: May 16, 2025

Inc Ransom claims data theft from Davis & Davis Company

The threat actor known as Inc Ransom has listed the Davis & Davis Company on its dedicated leak site. According to the announcement made on May 16, 2025, the group claims to have successfully exfiltrated a significant volume of data from the organization. This development follows the group's pattern of targeting various sectors to pressure victims into paying ransoms through the threat of public data exposure.

The claim of the attack coincides with the date of the announcement, May 16, 2025. While the group has posted the organization's name on their platform, the details provided focus on the volume of information they allege to have obtained during the breach.

Details of the alleged data breach

The announcement by Inc Ransom specifies that the group has obtained a total of 60 GB of data. The information provided by the threat actor suggests that the breach involves sensitive internal details rather than just generic corporate files. Specifically, the leaked content is said to include personal information belonging to the company's workforce.

The specific types of data mentioned in the listing include:

• Employee contact information

The inclusion of such personal details, such as names and phone numbers of employees, highlights the scope of the alleged exfiltration. No information was provided regarding the specific file count or the amount of ransom demanded by the group.

About Davis & Davis Company

Davis & Davis Company is a manufacturing firm based in the United States. Established in 1941, the company specializes in providing products and systems for the oil, natural gas, and liquid measurement industries. Their technical portfolio includes various measurement controls and instrumentation solutions, such as control valves and flow meters.

Potential impact and industry implications

The alleged leak of employee personal information, including names and phone numbers, carries significant risks for the individuals involved. Such exposure can increase the likelihood of identity theft and make employees targets for highly specific, or targeted, phishing attacks. Because the organization is based in the United States, the incident may trigger various state-level data protection regulations and potential notification requirements for the affected parties.

This incident appears to follow the double-extortion tactic often utilized by ransomware groups like Inc Ransom. In a double-extortion scenario, attackers do not merely encrypt a company's systems to disrupt operations; they also steal sensitive data to use as leverage. By threatening to publish this data on a public leak site, the group aims to maximize the pressure on the victim to fulfill ransom demands.

For a manufacturing organization, the potential exposure of operational and commercial data can lead to a loss of competitive advantage and significant reputational damage. When proprietary processes or commercial details are compromised, it can impact the company's standing in the market. To defend against such threats, organizations in the manufacturing sector often implement various security measures, such as robust data encryption, strict access controls, and continuous monitoring of network traffic to detect unauthorized data exfiltration.