Kennametal listed on Everest ransomware leak site

• Ransomware group: Everest
• Country: United States
• Sector: Manufacturing
• Announcement date: October 6, 2026

Everest claims data exfiltration from Kennametal

The ransomware group known as Everest has listed the US-based manufacturing company Kennametal on its dedicated leak site. According to the announcement made on October 6, 2026, the threat actor group claims to have successfully compromised the organization's data and exfiltrated a significant volume of information. The group has stated that the stolen data will be released publicly if the organization fails to establish contact with them.

This type of threat follows the common pattern of double extortion, a tactic frequently employed by modern ransomware groups. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive information to use as leverage. By threatening to publish confidential files on a public leak site, the attackers aim to pressure the victim into paying a ransom to prevent the disclosure of proprietary or sensitive data.

Details of the claimed data breach

The Everest group claims to have stolen a dataset totaling 285 GB. According to the group's announcement, this massive collection of information includes various types of sensitive data related to the company's internal operations and business processes. The group alleges that the stolen information encompasses material development, manufacturing processes, and quality control documentation.

Furthermore, the group claims the breach involves commercial operations and personnel records, as well as information regarding the company's information systems. The specific categories of data allegedly contained in the leak include:

• Personnel records
• Engineering data
• Customer correspondence
• Accounting data
• Operational logs

The group further alleges that the leaked material contains engineering blueprints, customer correspondence, accounting databases, and operational logs.

About Kennametal

Kennametal is a global industrial company that manufactures cutting tools, wear-resistant parts, and advanced material solutions for industrial production processes. The organization serves a wide range of various sectors, including aerospace, automotive, energy, and general engineering.

Potential impact and industry implications

The exposure of such a significant amount of data carries heavy implications for a company operating in the manufacturing sector. Because Kennametal handles specialized engineering and operational data, the disclosure of these files could potentially lead to the loss of trade secrets. Such a leak poses a risk to the organization's market reputation and could potentially impact its supply chain security.

From a regulatory perspective, since the organization is based in the United States, this incident may trigger scrutiny under various state-level data protection laws. Beyond the immediate corporate impact, secondary risks may emerge, such as the potential for identity theft or targeted phishing attacks directed at the company's employees and customers.

For organizations operating in the manufacturing and industrial sectors, such incidents highlight the importance of robust cybersecurity frameworks. Defensive strategies often include implementing strict access controls, maintaining comprehensive backups, and conducting regular security audits to identify vulnerabilities. Protecting intellectual property and engineering blueprints is particularly critical for industrial firms to maintain their competitive advantage and ensure the integrity of their supply chain.