Share this article on:
Powered by MOMENTUMMEDIA
For breaking news and daily updates,
subscribe to our newsletter.
Ransomware group claims to have stolen more than 60 gigabytes of data, with HR and customer data allegedly impacted.
The INC Ransom ransomware operation has allegedly hacked the Australian-based textile wholesaler, Instyle.
The hackers listed the company, which is headquartered in Mascot, New South Wales, on December 3, claiming later on the same day to have stolen 62 gigabytes of data.
According to INC Ransom’s leak post, the data includes customer information, human resources data, and financial details. The cyber-criminals have not shared any evidence of the hack, however, a countdown suggests the allegedly stolen data will be published within days.
INC Ransom did not share any details of its ransom demand.
Instyle is INC Ransom’s second Australian victim in almost as many days. The group listed popular fashion retailer Oxford on December 1 and claimed to have stolen more than 100 gigabytes of data a day later. The nature of the data appears to be much the same as that allegedly stolen from Instyle.
The company is INC Ransom’s ninth Australian victim listed on its leak site in 2025.
The gang was first observed in August 2023 and has claimed 572 victims. The group is known for using spear phishing tactics, which it employs to gain initial access, and for using double-extortion techniques to pressure its victims, meaning INC Ransom exfiltrates data from a victim’s network, then encrypts it in place.
The victim must then pay a ransom not only to recover its internal data, but to ensure that it is not published to the darknet or sold to another threat actor.
Instyle describes itself as a “wholesale supplier of high-quality textiles, leathers, wallcoverings + acoustic solutions”. While it is an Australian company, it has offices in Europe, the United States, India, China, Vietnam, and Singapore.
Its projects include work on the offices of law firm Russell Kennedy in Melbourne, Italian restaurant Osteria Mucca in Sydney, and fashion brand Zimmerman’s Paris store.
Instyle has not responded to Cyber Daily’s request for comment.
David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.
Be the first to hear the latest developments in the cyber industry.