Metales Panamericanos listed on Inc Ransom leak site

• Ransomware group: Inc Ransom
• Country: Panama
• Sector: Manufacturing
• Announcement date: September 2, 2026

Metales Panamericanos targeted by Inc Ransom

The Panama-based construction and steel supplier Metales Panamericanos has been listed on the leak site of the ransomware group Inc Ransom. The threat actor claims to have gained unauthorized access to the organization's systems and subsequently acquired information belonging to the company.

Details of the claim

According to the announcement, which appeared on the group's platform on September 2, 2026, the Inc Ransom group alleges that they have successfully breached the company's digital infrastructure. The threat actor claims to possess data belonging to the organization and has provided discovery data alongside the announcement. The claim suggests that the breach occurred around September 1, 2026, according to the information provided by the group.

Ransomware groups often use leak sites to host information stolen during a breach. These platforms serve as a tool for extortion, where attackers threaten to release sensitive data if a ransom is not paid. This tactic is a core component of modern cyberattacks, moving beyond simple encryption to include the threat of public exposure.

Information regarding the leaked data

At this time, there is no detailed information regarding the specific content of the leaked data. While the group has posted screenshots as part of the announcement, the sample files shown in these images are blurred. Consequently, it is currently impossible to determine the specific nature or the exact types of content contained within the alleged leak.

• No specific data types were named in the listing.

About Metales Panamericanos

Metales Panamericanos (METALPAN) is a prominent company based in Panama. Established in 1991, the organization specializes in the supply of construction and steel materials. Their diverse range of services and products includes steel materials, electrical solutions, metal structures, gypsum, and various other construction systems.

Analysis and potential risks

This incident indicates that corporate and commercial data within Metales Panamericanos may be at risk of exposure. By employing a double-extortion strategy, the Inc Ransom group may be attempting to exert pressure on the organization using the leaked data. In a double-extortion scenario, attackers not only encrypt files to disrupt operations but also steal sensitive information to use as leverage during negotiations.

The group has been known to be active since mid-2023. Such leaks can lead to significant disruptions in an organization's commercial reputation and its operational processes. Furthermore, within the framework of Panama's data protection regulations, secondary risks could emerge from this incident. These risks include the potential for identity theft or targeted phishing attacks directed at the company's customers and employees.

For organizations operating in the manufacturing and construction sectors, maintaining robust cybersecurity posture is essential to mitigate these risks. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for employees to recognize phishing attempts. Protecting the integrity of commercial and corporate data is vital for maintaining trust with clients and ensuring business continuity in the face of evolving threats.