Pedigo Products, Inc. targeted by Interlock ransomware group

• Ransomware group: Interlock
• Country: United States
• Sector: Manufacturing
• Announcement date: October 12, 2026

Interlock claims data breach at Pedigo Products, Inc.

The threat group known as Interlock has listed a massive amount of data on its leak site, alleging that the information belongs to Pedigo Products, Inc., a manufacturing company based in the United States. The group claims to have exfiltrated approximately 1.3 TB of data from the organization. This incident follows a pattern often seen in modern ransomware attacks, where threat actors utilize double extortion tactics. In these scenarios, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive information to pressure the victim into paying a ransom by threatening to leak the data publicly.

The claim was made on October 12, 2026. According to the threat actor, the organization failed to implement adequate security measures to protect its digital assets. Furthermore, the group alleges that the company did not engage in negotiations regarding the incident, which led the attackers to proceed with the publication of the stolen data on their dedicated leak site. While the group has provided screenshots to support their claims, public information regarding the specific activities and history of the Interlock group remains limited.

Details of the alleged data exfiltration

The volume of data claimed by Interlock is significant, and the contents of the leak appear to span multiple critical business functions. Based on the information provided by the threat actor, the stolen files include a wide variety of sensitive documentation. The leaked data reportedly contains:

• Employee personal data
• Customer personal data
• Financial data
• Intellectual property
• Healthcare quality records
• Bank details

Beyond these broad categories, the specific contents of the alleged leak are highly detailed. The group claims to have accessed various folder structures, including those related to accounting, engineering, and employee emails. More granular details include carrier account numbers, customer-specific pricing, commission adjustments, and customs identifiers. Additionally, the data is said to include customer and employee contact information, contracts, price schedules, shipping instructions, and various financial documents such as tax returns, payroll records, and bank details. For a company in the manufacturing sector, the loss of technical data is particularly impactful, as the leak allegedly includes CAD files, trade secrets, and intellectual property. Furthermore, the group claims to have accessed FDA quality records, specifically mentioning DMR, DHR, DHF, CAPA, and MDR documents.

Impact and potential risks

The exposure of such a diverse range of data presents significant secondary risks to both the organization and the individuals involved. For employees and customers, the theft of personal contact information and financial details increases the risk of identity theft and targeted phishing attacks. These social engineering tactics often follow a data breach, as attackers use the stolen information to craft highly convincing messages to deceive victims.

For Pedigo Products, Inc., the implications of this alleged breach extend into the operational and regulatory domains. The exposure of FDA quality records and intellectual property, such as trade secrets and CAD files, could result in a significant loss of competitive advantage. Such a leak might also cause disruptions within the medical equipment supply chain. Because the organization is based in the United States, the incident may trigger legal sanctions and complex compliance processes under established regulations such as the California Consumer Privacy Act (CCPA) and the Health Insurance Portability and Accountability Act (HIPAA).

Furthermore, the exposure of payroll and financial records could damage the organization's operational reliability and lead to long-term financial losses. To defend against such threats, organizations in the manufacturing and medical sectors typically focus on implementing robust security frameworks, such as multi-factor authentication, strict access controls, and regular security audits. Maintaining comprehensive backups and developing a clear incident response plan are also essential steps in mitigating the impact of ransomware and data exfiltration events.