USHA International Limited listed on vect leak site

• Ransomware group: vect
• Country: India
• Sector: Manufacturing
• Announcement date: March 1, 2026

USHA International Limited listed on vect leak site

The threat actor known as vect has listed USHA International Limited on a ransomware leak site. According to the announcement made on March 1, 2026, the group claims to have successfully targeted the Indian manufacturing firm, alleging that they have obtained sensitive information. The listing indicates that the organization is currently in a negotiation phase with the attackers. While the group has made this public claim, information regarding the specific identity and background of the vect group remains limited.

Details of the alleged breach

The threat actor vect claims to have obtained data belonging to USHA International Limited. This claim was officially posted on a leak site on March 1, 2026, following an alleged attack that took place on February 28, 2026. The listing suggests that the attackers are currently engaging in a negotiation process with the victim organization. Such tactics are frequently associated with double-extortion strategies, where attackers not only encrypt systems but also threaten to release stolen data to pressure the victim into paying a ransom.

While the group has announced the breach, they have not provided any screenshots to support their claims. Furthermore, the specific volume of data stolen and the total number of files involved have not been disclosed by the threat actor. The ransom demand has also not been made public in the current listing.

The alleged data stolen during this incident includes several critical categories of information that could impact the organization's internal and external operations. The specific data types mentioned in the claim are:

• Employee data
• CMS data
• CMR data
• SAP databases

About USHA International Limited

USHA International Limited is a leading Indian consumer electronics and home appliances manufacturer. The company maintains a significant presence in the market, offering a wide range of products. Their diverse product portfolio includes items such as fans, sewing machines, kitchen appliances, and water heaters.

Impact assessment and industry implications

This alleged breach may pose significant risks to the organization's operational continuity and its trade secrets. The exposure of critical systems such as SAP and CMR could negatively impact the organization's supply chain and its relationships with customers. Furthermore, the disclosure of employee data may lead to risks such as identity theft and targeted phishing attacks against the affected personnel.

From a regulatory perspective, the organization may face legal liabilities under the data protection regulations applicable in India. In the manufacturing sector, such breaches highlight the vulnerability of integrated enterprise resource planning and customer management systems. When critical databases like SAP are targeted, the potential for disruption to production and logistics is high.

In general, organizations facing such threats often look toward defensive measures to mitigate impact. This typically includes maintaining robust backup strategies, implementing strict access controls, and ensuring continuous monitoring of network traffic to detect unauthorized access. Because the group's mention of an ongoing negotiation process may be evaluated as part of a double-extortion strategy, organizations often face the difficult choice of managing both system recovery and data privacy concerns simultaneously.