RansomHub ransomware group lists www.rowetactical.com on its leak site

• Ransomware group: RansomHub
• Country: Australia
• Sector: Manufacturing
• Announcement date: February 15, 2025

RansomHub claims data breach at Rowe Tactical

The ransomware group known as RansomHub has officially listed the Australian organization Rowe Tactical on its leak site. According to the announcement published on February 15, 2025, the threat actor group claims to have successfully exfiltrated a significant volume of data from the company's internal systems. This development marks a targeted strike against a specialized manufacturer within the defense-related supply chain.

The group's claim involves a massive amount of information, with the attackers asserting they have obtained approximately 59,122 files. While the specific details regarding the ransom demand and the exact size of the data breach in terms of total volume were not provided in the announcement, the sheer file count suggests a broad intrusion into the organization's digital infrastructure. The attack was reportedly carried out on February 15, 2025, the same day the listing appeared on the group's platform.

Details of the claimed data theft

The information released by RansomHub includes sensitive documentation that highlights the nature of the organization's operations. Based on screenshots provided by the attackers in their announcement, the stolen data appears to be highly relevant to the defense and aerospace sectors. The leaked content is not limited to general administrative files but extends into critical technical and legal documentation.

The specific types of data identified in the leak include:

• Technical drawings
• Non-disclosure agreements
• Vendor contact information
• Customer lists
• Engineering reports

The presence of such specialized documentation suggests that the breach may have targeted intellectual property and sensitive business relationships. The exposure of these files could provide malicious actors with insights into the company's technical processes and its network of professional contacts.

About Rowe Tactical

Rowe Tactical is an Australian-based company that operates within a highly specialized niche of the manufacturing sector. The organization specializes in the manufacturing and sale of precision parts, accessories, and custom equipment specifically designed for firearms. Due to the nature of their products and the precision required for their manufacturing processes, the company serves a sector where technical accuracy and specialized engineering are paramount.

Implications and security considerations

The exposure of technical details related to the defense industry carries significant weight. Such a breach may potentially harm the organization's competitive advantage by revealing proprietary designs and engineering methodologies. Furthermore, the disclosure of contracts and customer information could create secondary security risks for the organization's supply chain partners, as sensitive business relationships and contact details are now in the public domain.

As an Australian-based entity, the potential data breach may be subject to local privacy regulations, which often govern how organizations must handle and report the loss of sensitive information. The situation also highlights the risks associated with double-extortion tactics. RansomHub, which has been reported to have been associated with ALPHV, is known to employ these methods, where attackers not only encrypt data but also threaten to leak it to increase pressure on the victim.

The public availability of this data may lead to the exploitation of sensitive information involved in defense projects by malicious actors. For organizations operating in similar sectors, maintaining robust cybersecurity postures is essential. This typically involves implementing strict access controls, regular auditing of technical drawings and sensitive files, and ensuring that all vendor and customer communications are conducted through secure, encrypted channels. Protecting the integrity of the supply chain is a critical component of defense-related manufacturing security.