Lohmann-tapes.com targeted by Inc Ransom group in alleged data breach

• Ransomware group: Inc Ransom
• Country: Germany
• Sector: Manufacturing
• Announcement date: February 12, 2026

Inc Ransom claims data breach at lohmann-tapes.com

The ransomware group known as Inc Ransom has listed the German manufacturing company lohmann-tapes.com on its leak site. According to the group's announcement, which was posted on February 12, 2026, the organization has allegedly suffered a significant data breach involving a massive volume of sensitive information.

The threat actor claims to have exfiltrated approximately 700 GB of data from the company's systems. This alleged theft involves a vast collection of files, with the group claiming to have obtained over 1.1 million individual documents. To support their claims, the group has provided several screenshots of documents as evidence, which purportedly demonstrate the breach of the company's operational processes and the exposure of employee information.

Details of the alleged data theft

The scope of the data claimed to be stolen by Inc Ransom is extensive, covering various aspects of the company's business operations and administrative functions. The group asserts that the stolen information spans from high-level financial records to granular manufacturing details. This variety of data suggests a deep penetration into the organization's digital infrastructure.

The specific types of information the group claims to have accessed include:

• Financial records
• Customer data
• Supply chain data
• Manufacturing operation data
• R&D documents
• Health and safety records
• Corporate archives

The breadth of this data suggests that the breach impacts multiple departments, from the factory floor to the administrative offices. The inclusion of R&D and engineering documents alongside financial and customer files indicates that the breach may have touched upon both the intellectual property and the commercial foundations of the business.

Potential impact and security implications

The alleged leak poses several significant risks to lohmann-tapes.com. The exposure of research and development (R&D) and manufacturing data could potentially harm the company's competitive advantage and create substantial risks regarding intellectual property rights. Furthermore, because the organization is based in Germany, this breach may lead to data protection violations under the General Data Protection Regulation (GDPR).

The group's use of the double extortion method is a notable concern. In double extortion, attackers not only encrypt a company's data to disrupt operations but also steal sensitive information to use as leverage. They threaten to leak the stolen data on public forums if the ransom is not paid. This tactic increases the pressure on organizations, as the threat of public exposure can lead to reputational damage, legal liabilities, and secondary attacks such as targeted phishing campaigns using the leaked information.

Additionally, the exposure of supply chain data may create indirect security risks for the company's business partners and customers. When manufacturing or logistics data is compromised, the interconnected nature of modern supply chains means that the breach can have a ripple effect, potentially exposing vulnerabilities or sensitive information within the networks of associated companies.

Defensive considerations for the manufacturing sector

For organizations operating in the manufacturing sector, such incidents highlight the importance of robust cybersecurity frameworks. Protecting intellectual property, such as R&D and engineering designs, is critical for maintaining a competitive edge in a global market. Organizations often implement strict access controls and network segmentation to ensure that sensitive manufacturing processes are isolated from general administrative networks.

To mitigate the risks of double extortion, companies frequently focus on comprehensive data loss prevention (DLP) strategies and rigorous monitoring of data exfiltration attempts. Regular audits of third-party access and supply chain security are also vital, as the compromise of one partner can serve as a gateway to others. Maintaining clear incident response plans and ensuring compliance with regional data protection laws, such as GDPR, remains a fundamental component of modern corporate risk management.