Payoutsking claims to have exfiltrated data from Powell Electronics

• Ransomware group: Payoutsking
• Country: United States
• Sector: Manufacturing
• Announcement date: April 30, 2026

Payoutsking claims a major breach at Powell Electronics

The threat group known as Payoutsking has listed Powell Electronics on its leak site, claiming to have successfully exfiltrated 128 GB of data from the organization. This announcement, which appeared on the group's platform on April 30, 2026, suggests a significant compromise of the company's digital infrastructure. While the group has made these claims, the details regarding the specific nature of the attack and the subsequent response from the victim remain unconfirmed through official channels.

Ransomware attacks often follow a pattern of double extortion, where attackers not only encrypt a victim's systems to disrupt operations but also steal sensitive information to use as leverage. By threatening to leak stolen data on public platforms, these groups aim to pressure organizations into paying ransoms to prevent the exposure of proprietary or personal information. This tactic significantly increases the pressure on companies to comply with extortion demands.

Details of the alleged attack

According to the claims made by Payoutsking, the group targeted Powell Electronics and successfully compromised its corporate networks. The group asserts that the breach occurred around February 26, 2026. The attackers claim that not only was the data exfiltrated, but it was also encrypted during the course of the incident. The volume of data cited in the leak site announcement is 128 GB.

The timeline provided by the attackers indicates that the breach may have been active within the corporate environment for a significant period before the public announcement was made on the leak site. Such delays between the initial compromise and the public listing are common in ransomware operations, allowing attackers time to identify, collect, and exfiltrate high-value assets from the victim's network.

Alleged data types involved in the leak

The information allegedly stolen by Payoutsking is described as being highly sensitive, spanning various categories of corporate and personal information. The group claims to have obtained a wide array of files that could impact both the company's operations and the privacy of its personnel. The categories of data mentioned in the claim include:

• Employee personally identifiable information (PII)
• Financial records
• Corporate correspondence
• Engineering data
• Contracts and NDAs

The exposure of such diverse data types—ranging from technical engineering specifications to legal contracts and personal employee details—represents a multifaceted risk to the organization's integrity and its relationships with third parties.

About Powell Electronics

Powell Electronics is a distributor of electronic components and connectors. The company serves critical markets, including the aerospace, defense, and industrial sectors. Headquartered in Plainview, New York, the organization plays a role in supply chains that are often subject to high security standards due to the nature of their clients' industries.

Potential impact and organizational risks

This breach may pose secondary risks such as identity theft and targeted phishing attacks for Powell Electronics employees and business partners. The exposure of financial and engineering data could potentially harm the company's competitive advantage and compromise trade secrets. Given that the company is based in the US, state-level data protection laws and potential regulatory scrutiny may be triggered. Information about this group is limited.

The exfiltration of data could negatively impact the organization's operational continuity and reputation. For companies operating in the manufacturing and defense-adjacent sectors, the loss of engineering data and contracts is particularly damaging as it can undermine intellectual property protections. To mitigate such risks, organizations typically focus on robust network segmentation, continuous monitoring for unauthorized data movement, and comprehensive employee training to prevent initial access via phishing.