Thorite Group listed by Hunters ransomware group

• Ransomware group: Hunters
• Country: United Kingdom
• Sector: Manufacturing
• Announcement date: January 24, 2024

Hunters ransomware group claims breach of Thorite Group

The Hunters ransomware group has listed the United Kingdom-based Thorite Group on its leak site, alleging a significant data breach. According to the announcement made on January 24, 2024, the threat actor group claims that the company's data has been both exfiltrated and encrypted. This type of announcement is a common tactic used in double extortion ransomware attacks, where attackers not only lock a victim's systems but also threaten to release sensitive information to pressure the organization into paying a ransom.

The group's listing serves as a public threat, stating that the compromised data may be published if their demands are not met. While the group has made these claims, the incident remains an allegation by the threat actor until independently verified. Such public listings are designed to maximize reputational damage and create urgency for the targeted entity.

Details of the alleged attack and data exfiltration

The attack, which the group claims occurred on January 24, 2024, targets an organization operating within the manufacturing sector. The Hunters group has provided specific metrics regarding the scale of the alleged compromise, though they have not provided a specific ransom demand. The scale of the data involved is substantial, according to the group's claims.

Based on the information provided by the attackers, the following data metrics have been cited:

• Total data size: 307.2 GB
• Total file count: 209,969 files

Despite the large volume of files and the significant size of the dataset, the listing does not provide detailed information regarding the specific types of data that have been compromised. No specific categories of files, such as financial records, employee details, or intellectual property, were identified in the announcement.

About Thorite Group

Thorite Group is an engineering and distribution company based in the United Kingdom. The organization specializes in the supply, installation, and servicing of compressed air and fluid power equipment. Their technical service offerings include the provision of industrial compressors, pneumatic systems, and various related technical services to their client base.

Analysis and potential impact

The claims made by the Hunters group suggest that the company's operational continuity may have been disrupted. For an engineering and distribution firm, such disruptions can impact supply chains and service delivery. Furthermore, as a United Kingdom-based entity, a confirmed breach could trigger legal obligations under the UK GDPR, requiring the organization to follow specific protocols regarding data protection and notification.

The potential exposure of data may lead to significant reputational damage and create secondary attack risks through the disclosure of employee or commercial information. Specifically, the publication of company data may increase the risk of targeted phishing attacks against customers and business partners, as attackers often use stolen information to craft highly convincing social engineering campaigns.

The Hunters group, also known as Hunters International, is a threat actor that emerged in 2023. The group is assessed to be derived from the Hive ransomware code. It has been reported that the group ceased its encryption activities in 2025. In general, organizations facing such threats should focus on robust backup strategies, multi-factor authentication, and continuous monitoring to mitigate the risks of both encryption and data exfiltration.