WEBER listed on RansomHouse leak site

• Ransomware group: RansomHouse
• Country: Germany
• Sector: Manufacturing
• Announcement date: October 17, 2025

The RansomHouse ransomware group has officially listed the German organization WEBER GmbH on its dedicated leak site. Through this announcement, the threat actor claims to have successfully exfiltrated confidential data from the company, marking a new incident involving the manufacturing sector.

The claimed attack and extortion attempt

According to the announcement made on October 17, 2025, the threat actor known as RansomHouse claims to have compromised the confidential information of WEBER GmbH. The group has threatened to either leak this sensitive information publicly or sell it to third parties if their demands are not met. This tactic is a hallmark of modern ransomware operations, often referred to as double extortion. In such scenarios, attackers do not merely encrypt systems to disrupt operations but also focus on stealing data to use as leverage during negotiations.

The announcement suggests that the group has obtained files that serve as evidence of the breach. These files are reportedly related to the operational processes of the organization. While the group uses these files to validate their claims of intrusion, the specific details regarding the content of the leaked data have not been provided by the attackers. However, the presence of downloadable files under the heading 'Evidence packs' on the leak site indicates that the group intends to demonstrate the validity of their theft through these files.

Data and evidence details

Regarding the specific nature of the information involved in this incident, the listing does not provide specific details regarding the content of the leaked data. The announcement mentions the existence of files, but no specific data types or categories were explicitly identified in the claim.

• The listing names no specific data types.

The group's reliance on