Stormous group claims data breach against Higuchi USA, Inc

• Ransomware group: stormous
• Country: United States
• Sector: Manufacturing
• Announcement date: June 28, 2026

The Stormous ransomware group has posted an announcement on its leak site claiming to have compromised data belonging to HIGUCHI USA, INC. According to the group's claim, the breach occurred on June 28, 2026, and involves sensitive information belonging to the US-based manufacturing firm.

Details of the alleged incident

The threat actor, identified as the Stormous group, has published a claim on its dedicated leak site asserting that they have successfully exfiltrated data from HIGUCHI USA, INC. The group asserts that the incident leading to this data exposure allegedly took place on June 28, 2026. In their announcement, the group states that the institution's financial and operational data has been exposed as a result of this activity.

Ransomware groups often utilize leak sites to pressure victims through a tactic known as double extortion. In such scenarios, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data, threatening to release it publicly if a ransom is not paid. This method aims to maximize leverage by threatening the victim's reputation and legal standing. While the group has made these claims, no screenshots were provided in the announcement to verify the authenticity of the stolen files.

Claimed data and affected information

The announcement made by the Stormous group specifies that the compromised information includes several types of sensitive corporate records. The group claims to possess database backups with the .ptb extension originating from Sage 50 software. Furthermore, the claim suggests that various financial and operational documents have been accessed.

The specific data types mentioned in the claim include:

• Financial statements
• Balance sheets
• Asset records
• Accounts receivable and payable
• Inventory tracking data

The group has not provided information regarding the total size of the data stolen or the specific number of files involved in the breach. Additionally, no ransom demand has been specified in the public announcement.

Organization profile

HIGUCHI USA, Inc. is a manufacturing company that produces metal parts and components for the automotive and industrial sectors. The company specializes in precision metal processing and assembly processes.

Risk assessment and industry implications

This leak claim carries significant risks for HIGUCHI USA, INC, as it may expose the institution's financial operations and trade secrets. The nature of the data described—including inventory tracking and balance sheets—could lead to negative impacts on the institution's supply chain and its relationships with business partners. If the claims are accurate, the exposure of such operational data could disrupt the trust required for complex manufacturing partnerships.

As a United States-based entity, a potential data breach of this nature may trigger legal processes under various state laws and federal regulations. Furthermore, because the Stormous group is claimed to be politically motivated, there is an increased risk of secondary attacks specifically targeting the institution's reputation. The exposure of internal data can also create a foundation for targeted phishing attacks aimed at employees and business partners, as attackers may use the stolen information to craft highly convincing social engineering messages.

In the manufacturing sector, organizations often face unique challenges regarding supply chain security. Protecting intellectual property and precision process details is vital for maintaining a competitive advantage. To mitigate these risks, companies typically implement robust defensive measures, such as multi-factor authentication, regular offline backups, and strict network segmentation. Monitoring for unauthorized data exfiltration and maintaining a comprehensive incident response plan are also standard practices for organizations looking to defend against sophisticated ransomware groups.