Inc Ransom claims Trulite Glass breach
Inc Ransom gang claims theft of over 8TB of data from architectural glass manufacturer Trulite Glass & Aluminum Solutions and threatens to leak it.
A ransomware group operating under the Inc Ransom brand has posted a claim on its extortion site stating it obtained full, unrestricted access to the internal infrastructure of Trulite Glass & Aluminum Solutions, a Truelink Capital-owned architectural glass and aluminum fabricator with 40+ facilities across the US and Canada. The actor claims to have exfiltrated more than 8 terabytes of data spanning ERP (Microsoft Dynamics AX) and CRM systems, financial records, M&A and private-equity documentation, board materials, HR/payroll data, customer and vendor contracts, IT infrastructure documentation including network architecture and credentials, and operational records across all facilities.
The post follows the typical double-extortion playbook: the group states Trulite's management was contacted directly with a negotiation deadline, and threatens full publication of the stolen dataset if no resolution is reached, with sample data to follow as proof of access. No technical details of the intrusion vector, malware used, or exploited vulnerabilities are provided in this posting, limiting independent verification of the claim's scope and authenticity beyond the actor's own statements.
Given Trulite's role as a mid-sized manufacturing/construction supplier with $800M-$1.2B in estimated revenue, a successful breach of this scale would expose sensitive financial, operational, and private-equity-related data, along with potential downstream risk to customers, vendors, and employees whose data may be included in the exfiltrated set.
Mentioned in this report
Source reporting: https://www.ransomware.live/id/VFJVTElURSBHTEFTUyAmIEFMVU1JTlVNIFNPTFVUSU9OU0BpbmNyYW5zb20=
This is the public brief
Subscribers see the full picture: extracted IOCs, ready-to-deploy detections (Sigma, Splunk, KQL, Elastic, YARA, Suricata), the entity graph, TAXII 2.1 feed and real-time alerts matched to your sectors.
Start free