Inc Ransom ransomware group lists zadroinc.com on its leak site

• Ransomware group: Inc Ransom
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: November 18, 2025

Inc Ransom claims data exfiltration from Zadro Inc.

The threat actor known as Inc Ransom has listed the California-based company Zadro Inc. on its dedicated leak site. According to the announcement posted on November 18, 2025, the group claims to have successfully exfiltrated a significant amount of data belonging to the organization. This development follows the group's pattern of utilizing leak sites to publicize successful breaches and pressure victims.

The incident was officially announced on the group's platform on November 18, 2025, which coincides with the date the attack was allegedly carried out. This type of public listing is a hallmark of modern ransomware operations, where the threat actors use the threat of data exposure to increase their leverage over the target organization.

Details of the alleged breach

The Inc Ransom group claims to have obtained approximately 284 GB of data from Zadro Inc. While the volume of the stolen information is substantial, the specific types of data that were allegedly exfiltrated are not detailed in the record or the provided screenshots. The listing provides only the total data volume, leaving the exact nature of the files unknown.

The listing names no specific data types.

About Zadro Inc.

Zadro Inc. is a company based in California that specializes in the design of innovative beauty, health, and personal care products. Their product catalog includes items such as makeup mirrors, towel warmers, and massagers. With a history spanning over 37 years, the firm has established a significant presence in the industry and holds more than 40 patents. The company focuses on developing products intended to provide spa-like comfort within a home environment.

Potential implications and risks

This incident may pose a significant risk of exposure for the personal data of Zadro Inc.'s employees and customers. Because the organization is a US-based entity, a potential data breach could lead to complex legal proceedings involving both state laws and federal regulations. The scale of the claimed data exfiltration suggests that the impact could be widespread across various organizational functions.

Given the double-extortion tactics employed by the Inc Ransom group, there is a possibility that the exfiltrated data could be utilized in secondary attacks. These secondary threats often include targeted phishing campaigns or identity theft attempts aimed at the individuals whose information was compromised. Such tactics are designed to maximize the pressure on an organization by threatening its reputation and its relationship with its stakeholders.

The potential consequences for Zadro Inc. include negative impacts on operational continuity and the organization's brand reputation. When organizations face such threats, common defensive steps often involve strengthening network segmentation, implementing robust multi-factor authentication, and maintaining comprehensive offline backups. Furthermore, organizations in the retail and e-commerce sectors often focus on enhancing monitoring capabilities to detect unauthorized data movement early in the attack lifecycle.

Understanding double extortion

The tactics used in this claim highlight the evolution of ransomware from simple encryption to double extortion. In a double extortion scenario, attackers do not just lock the victim's systems; they also steal sensitive information. This allows them to demand a ransom not only for the decryption of files but also to prevent the public release of stolen data. This method increases the pressure on companies, as the threat of a data leak can cause irreparable damage to customer trust and result in significant regulatory fines.