Ransomware Group: WORLDLEAKS

VICTIM NAME: NPK

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the WORLDLEAKS Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak appears to involve a prominent international industrial manufacturer, identified as NPK, based in the United States. Founded in 1923, NPK specializes in manufacturing construction equipment, hydraulic attachments, and industrial compactors, serving over 155 countries worldwide. The leak was discovered on July 21, 2025, and the attack date was recorded as July 9, 2025. The attack potentially compromised internal data, and the leak page includes visual evidence such as a screenshot of internal information. Although specific details of the data stolen are not provided, there is indication of data exposure related to the company’s operations and products.

Despite the absence of explicit downloadable data links, the leak emphasizes the leak group’s intent to publicly expose the compromised information, possibly including sensitive corporate details or technical data. The webpage features a visual screenshot depicting internal documents or digital interfaces, which suggests that the attackers gained access to confidential information. The company’s primary industry involves manufacturing durable and innovative industrial equipment, which may be of interest to cybercriminal actors targeting industrial sectors. Overall, the incident underscores the importance of cybersecurity measures within globally operational manufacturing entities and highlights the ongoing threat posed by ransomware groups exploiting industrial vulnerabilities.