Print-O-Tape listed on Interlock ransomware leak site

• Ransomware group: Interlock
• Country: United States
• Sector: Manufacturing
• Announcement date: December 15, 2025

Interlock claims data breach at Print-O-Tape

The ransomware group known as Interlock has officially listed the United States-based manufacturing company Print-O-Tape on its leak site. According to the announcement made on December 15, 2025, the group claims to have successfully executed a cyberattack against the organization, resulting in a significant data breach. This type of activity is a hallmark of modern ransomware operations, where threat actors move beyond simple encryption to a method known as double extortion. In these scenarios, attackers not only lock a company's systems but also exfiltrate sensitive information to use as leverage, threatening to publish the stolen data on public leak sites if their demands are not met.

The claim of a breach was accompanied by evidence provided by the attackers. The group released a screenshot intended to demonstrate their unauthorized access to the company's internal environment. This visual evidence displayed a specific directory structure, suggesting that the attackers were able to navigate through the organization's network infrastructure. Such access often indicates that the threat actors have bypassed security perimeters to reach internal file servers or administrative directories.

Details of the alleged data theft

The Interlock group has specified the volume of the data they claim to have stolen, citing a total of approximately 152.21 GB. While the group has not specified the exact nature of the content or provided a ransom demand, the screenshot provided by the attackers offers a glimpse into the structure of the allegedly compromised data. The directory structure shown in the leak site announcement points toward specific categories of information that have been targeted during the incident.

Based on the information provided by the group, the stolen data is organized into two primary categories:

• User data
• Group configuration data

Specifically, the group claims that the 'Groups' folder contains 123.7 GB of data, while the 'Users' folder contains 28.5 GB. Although the exact contents of these folders remain unverified, the naming conventions suggest that the stolen information may include user profiles and administrative group configurations. The sheer volume of data involved suggests that a substantial portion of the corporate network may have been affected by this intrusion.

About Print-O-Tape

Print-O-Tape is a manufacturing company based in the United States that specializes in the production of self-adhesive labeling solutions. Their product line is diverse, including custom labels, stock labels, RFID labels, and various roll materials. Because their solutions are essential for identification and tracking, the company serves a wide array of critical industries, including transportation, warehousing, food and beverage, and consumer goods.

Potential implications and defensive considerations

This incident highlights the significant risk that manufacturing entities face regarding the exposure of operational data and sensitive user information. For a company like Print-O-Tape, a breach of this magnitude could lead to various complications. As a United States-based entity, the company may face specific legal obligations under state-level data privacy laws and various sectoral regulations, depending on the actual nature and sensitivity of the data that was leaked.

When a breach involves user and group configuration data, there is a heightened risk of secondary attacks. For example, stolen configuration details can be used to facilitate more sophisticated lateral movement within a network or to craft highly convincing phishing attacks. Consequently, employees and business partners of the affected organization may need to remain extremely vigilant against potential identity theft or targeted phishing attempts that leverage the leaked information.

In general, organizations operating in the manufacturing sector can take several defensive steps to mitigate the impact of such threats. Implementing robust multi-factor authentication (MFA) across all access points can prevent unauthorized entry. Regular auditing of user permissions and group configurations can help detect anomalous activity early. Furthermore, maintaining segmented network architectures ensures that if one part of the network is compromised, the attacker's ability to traverse the entire infrastructure is limited. Finally, comprehensive data loss prevention (DLP) strategies and regular offline backups remain essential components of a modern cybersecurity posture.