EnCom Polymers Listed by losttrust Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target mid-sized manufacturers and suppliers, using data theft and public leak-site pressure as leverage even when operational disruption alone might not force payment. In this landscape, listings on criminal forums often surface before any formal confirmation from the affected company, leaving customers, partners and employees to weigh incomplete information.

On September 26, 2023, EnCom Polymers appeared on a leak site operated by the ransomware group losttrust. The listing asserts that internal files were exfiltrated during a ransomware attack. The number of people affected remains unknown, and public detail about the precise timing, entry method and full scope of the incident is limited.

Inside the incident

Public reporting states that EnCom Polymers was listed by the losttrust ransomware group on September 26, 2023. According to the available summary, the group claims internal files were taken as part of a ransomware attack. No confirmed figure for the volume of data, the duration of unauthorized access, or the specific systems involved has been released. The number of individuals whose information may have been exposed is listed as unknown. Beyond the leak-site claim itself, further technical particulars—such as the initial access vector or whether encryption was deployed alongside exfiltration—have not been disclosed in the material provided.

The group behind it: losttrust

losttrust is a ransomware operation that follows the now-common double-extortion model: data is stolen before systems are encrypted, and victims are threatened with public release if a ransom is not paid. Groups of this type typically maintain dedicated leak sites where they post victim names, sample files and countdown timers to increase pressure. losttrust has previously listed organizations across manufacturing, professional services and other sectors, relying on the reputational and regulatory costs of exposure rather than solely on operational downtime. In the present case, the appearance of EnCom Polymers on the group’s site constitutes a claim by the actors; independent verification of the volume or sensitivity of any stolen material has not been supplied in the public record referenced here.

EnCom Polymers and its sector

EnCom Polymers was established in October 1999 with the stated goal of servicing automotive companies in the Midwest and their Tier 1 and Tier 2 suppliers. Over time the company expanded to serve telecommunications, medical, electrical and electronic, material handling, and industrial customers, emphasizing customer service, product quality and new-product development. Organizations in this segment routinely handle proprietary formulations, customer specifications, supply-chain data, quality-control records and employee information. A breach at a materials supplier can therefore ripple outward: automotive and medical-device customers may face questions about the integrity of shared technical data, while the supplier itself must manage both operational recovery and partner notifications. Because many such firms sit in the middle of complex supply chains, even limited unauthorized access can raise concerns that extend well beyond the immediate victim.

What data was at risk

The only data category named in the available facts is “internal files exfiltrated in ransomware attack.” No further breakdown—customer lists, employee records, financial documents, intellectual property or otherwise—has been publicly itemized. Companies of EnCom Polymers’ type typically maintain engineering drawings, material-safety data, purchase orders, shipping records and human-resources files. Whether any of those categories were among the files claimed by losttrust remains unconfirmed. Until a detailed inventory is released by the company or by investigators, the exact contents of the exfiltrated material cannot be stated as fact.

The real-world impact

For individuals, the primary risks associated with internal corporate files are secondary misuse of any personal data that may have been included—such as names, contact details or identification numbers—and the possibility of targeted phishing that references genuine business relationships. For the organization, consequences can include contractual notification obligations to customers, potential regulatory scrutiny if personal data of employees or partners was involved, and the cost of forensic investigation and system hardening. Supply-chain partners may also reassess data-sharing practices. Because the scale of exposure is unknown, both the company and any affected parties must operate under uncertainty until more precise information becomes available. No dollar amounts, ransom demands or confirmed identity-theft cases have been reported in the facts at hand.

Were you affected?

If you have done business with EnCom Polymers, worked for the company, or otherwise shared personal or proprietary information with it, treat the listing as a prompt to increase vigilance rather than as proof of compromise. Monitor financial and credit accounts for unusual activity, be alert to unsolicited messages that reference the company or its products, and consider placing fraud alerts if you believe sensitive personal data may have been involved. You can also run a free exposure scan of your email address to check whether it has already appeared in known breach datasets. Official updates, if any, should come from EnCom Polymers itself or from law-enforcement notices; until then, the prudent course is cautious monitoring and standard cyber-hygiene measures.

AICompiled with AI assistance from public sources and published under our editorial standards.