Ingersoll Rand listed on Everest ransomware leak site

• Ransomware group: Everest
• Country: United States
• Sector: Manufacturing
• Announcement date: August 8, 2026

Everest ransomware group claims data breach against Ingersoll Rand

The Everest ransomware group has listed the multinational manufacturing company Ingersoll Rand on its dedicated leak site. According to the announcement made on August 8, 2026, the threat actor group claims to have successfully exfiltrated a significant volume of sensitive data belonging to the organization. This development follows a pattern of double extortion, a common ransomware tactic where attackers not only encrypt a victim's systems but also steal sensitive information to use as leverage for extortion. In such scenarios, the threat actors often use a countdown timer to pressure the target into meeting their demands to prevent the public release of the stolen data.

Details of the alleged incident

The Everest group alleges that the breach occurred on July 22, 2026. According to the group's claims, they have obtained a massive archive containing approximately 120 GB of data, which is comprised of 6,892 individual files. The group has utilized a countdown timer in their post, demanding that the company establish contact to prevent the full publication of the stolen information. While the group has provided these specific details regarding the volume and timing of the incident, no information has been provided regarding a specific ransom demand.

Scope of the claimed data theft

The data allegedly stolen by the Everest group appears to be highly technical and central to the company's industrial operations. Based on the information provided by the attackers, the leaked content includes a wide array of engineering and operational assets. The specific items identified in the claim include:

• Industrial software files
• Firmware
• Engineering and development materials
• Hardware drivers

The group further specified that the archive contains industrial testing software, embedded controller packages, Windows drivers, ISO and IMG deployment images, and industrial communication files. Additionally, the list includes Toolbox tools, driver packages, customized builds, manuals, support utilities, engineering files, and various development project materials.

About Ingersoll Rand

Ingersoll Rand is a multinational company specializing in the design and manufacturing of industrial equipment such as air compressors, vacuum pumps, blowers, and fluid management systems. It provides critical infrastructure solutions for various industrial, energy, and medical applications worldwide.

Potential impact and industry implications

The claims made by the Everest group pose significant risks to Ingersoll Rand, particularly regarding intellectual property rights and trade secrets. For a large-scale manufacturing company, the loss of technical documentation, such as firmware and engineering files, can be devastating. The technical nature of the claimed data could increase the risk of secondary attacks targeting the company's specific production processes and the security of its products. There is also a notable possibility that these leaked technical documents could be utilized by malicious actors to facilitate supply chain attacks.

Furthermore, because Ingersoll Rand is a US-based entity, a confirmed breach could trigger complex legal processes under state-level privacy laws and various sectoral regulations. Given that the Everest group has a history of data theft and extortion dating back to 2020, the situation may impact the company's operational continuity and overall reputation. Organizations in the manufacturing sector facing similar threats often prioritize securing their intellectual property, implementing strict access controls for engineering environments, and monitoring for unauthorized data exfiltration to mitigate the impact of such targeted attacks.