Ransom! Coilplus

The ransomware claim alleges that the threat actor worldleaks targeted Coilplus, a US-based metal processing company, in a cyberattack aiming to disrupt their operations and compromise sensitive data. The attack highlights the vulnerability of manufacturing firms to cyber threats, impacting their global facilities in Mexico, Spain, and China, but primarily affecting the US. #UnitedStates

Incident Details

  • Victim: Coilplus
  • Country: US
  • Actor: worldleaks
  • Source: https://worldleaksartrjm3c6vasllvgacbi5u3mgzkluehrzhk2jz4taufuid.onion/companies/6670409303
  • Discovered: 2025-10-16 13:02:35.350840
  • Published: 2025-10-16 11:24:09.000000

Information

  • The company primarily operates within the metal processing industry, offering specialized solutions for metal coil processing.
  • Services include slitting, roll forming, and cut-to-length lines tailored to customer needs.
  • Founded in 1985 in Illinois, USA, with subsequent global expansion.
  • Maintains facilities in Mexico, Spain, and China to serve an international market.
  • Focuses on quality control, employing a team of experts to uphold high industry standards.

Disclaimer: This post is based on public claims made by the ransomware group "worldleaks". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live