Skip to content
Ransomware

Park Manufacturing Corp. targeted by Global Secret Group in alleged data breach

Global Secret Group has published an announcement claiming to have leaked 195 GB of data belonging to Park Manufacturing Corp.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Global Secret Group
  • Country: United States
  • Sector: Manufacturing
  • Announcement date: July 27, 2026

The threat actor known as Global Secret Group has published an announcement on its leak site claiming to have compromised and leaked significant amounts of data belonging to Park Manufacturing Corp. The announcement, which appeared on July 27, 2026, alleges that the group successfully gained unauthorized access to the organization's network.

Details of the alleged attack

According to the claims made by Global Secret Group, the intrusion occurred on July 26, 2026. The group alleges that they were able to penetrate the network of Park Manufacturing Corp. and exfiltrate a substantial volume of information. To support their claims of a successful breach, the threat actors have provided various screenshots as evidence of their access.

In many modern cyberattacks, particularly those involving ransomware groups, a tactic known as double extortion is frequently employed. In these scenarios, attackers do not merely encrypt a victim's systems to disrupt operations; they also steal sensitive data to use as leverage. By threatening to release this data on a public leak site, the attackers aim to pressure the organization into paying a ransom to prevent the exposure of proprietary or sensitive information. While the specific details of the method used to gain access remain unknown, the presence of a listing on a leak site is a common indicator of such high-pressure extortion tactics.

Data involved in the claim

The Global Secret Group has provided specific metrics regarding the volume of information they claim to have stolen from the organization. The group asserts that the breach involves a significant amount of data, which could have serious implications for the victim. The claims include the following details:

  • Total data size: 195 GB
  • Total file count: 411,109 files

While the group has provided screenshots as evidence, the specific content and nature of the files have not been explicitly detailed in the announcement. The shared screenshots appear to show corporate file structures and various documents, suggesting that the stolen information is related to internal business operations. No specific information regarding a ransom demand has been provided by the group.

About Park Manufacturing Corp.

Park Manufacturing Corp. is a manufacturing company based in Minnesota, United States. The company specializes in the production of electrical appliances and electronic components. They provide a variety of manufacturing services designed for various industrial and commercial applications.

Impact and industry considerations

This incident suggests that sensitive corporate data belonging to Park Manufacturing Corp. may be at risk of exposure. The volume of data claimed by the threat actor could potentially impact the organization's operational continuity and its intellectual property. Because the organization is based in the United States, the incident may trigger state-level data breach notification laws and other potential legal obligations depending on the nature of the data involved.

Furthermore, the leaked data could potentially be utilized by malicious actors for identity theft or for launching supply chain attacks. In a supply chain attack, stolen information from one company is used to target its customers or partners, creating a ripple effect of insecurity across a network of businesses. For organizations operating in the manufacturing sector, protecting intellectual property and maintaining the integrity of production processes is vital.

To defend against such threats, organizations typically implement a multi-layered security approach. This includes robust network monitoring to detect unauthorized access, strict access controls to limit the movement of attackers within a network, and comprehensive data encryption to protect sensitive information even if it is exfiltrated. Additionally, regular security audits and employee training are essential components of a modern defensive posture designed to mitigate the risks posed by sophisticated threat actors like the Global Secret Group, about whom public information remains limited.

From the Essential plan

Infostealer Detection

See your firm's attack surface on one screen: how many findings, at which severity, on which domain.

Related stories