M&M Industries Listed by blackbasta Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

M&M Industries, a U.S. plastic pail manufacturer, was listed by the blackbasta ransomware group on or around June 23, 2023. Public reporting states that internal files were exfiltrated in a ransomware attack. The number of people affected remains unknown, and many operational details of the incident have not been disclosed.

Listings of this kind matter because they signal a claimed compromise that may involve internal business records. Without fuller confirmation from the company or independent investigators, the precise scope stays limited; what is known so far is the group’s claim and the description of internal files taken during the attack.

What happened

According to available public information, M&M Industries appeared on a blackbasta leak site in a listing reported on June 23, 2023. The reported summary describes the company as the victim of a ransomware attack in which internal files were allegedly exfiltrated. No public figure has been given for the volume of data, the exact date the intrusion began, how long attackers retained access, or the specific technical method used to gain entry. The number of individuals whose information may be involved is listed as unknown. Beyond the group’s listing and the statement that internal files were taken, further incident specifics remain undisclosed.

Who is blackbasta?

Blackbasta is a ransomware operation that emerged in public reporting in 2022 and has been associated with double-extortion tactics: encrypting systems while also copying data and threatening to publish it if a ransom is not paid. The group has typically gained initial access through methods common to ransomware crews of that period, including compromised credentials, phishing, and exploitation of exposed remote services, then moved laterally before deploying encryption and preparing leak-site posts. Its leak site has been used to name alleged victims and, in some cases, to release sample files as pressure. Notable prior activity documented in open sources includes attacks on organizations across manufacturing, professional services, and other sectors in North America and Europe. In this instance, the appearance of M&M Industries on the group’s site should be treated as a claim by blackbasta rather than independently verified confirmation of every asserted detail.

About M&M Industries

M&M Industries, Inc. is a U.S.-based manufacturer of plastic pails. Public background supplied with the incident report states the company was established in 1986 by Glenn Morris, Sr., who earlier worked in packaging over-the-counter remedies and held numerous patents, including work on child-resistant caps. The firm is described as owned and operated by his son, Glenn Morris, with manufacturing plants in Chattanooga, Tennessee, as well as facilities in Phoenix, Arizona, and Lordstown, Ohio. It notes capabilities in dry-offset printing and in-mould labeling. Organizations in industrial packaging and manufacturing commonly maintain employee records, customer and supplier contacts, production and quality data, shipping and logistics information, and internal financial or operational documents. A claimed breach at such a firm is consequential because those categories of information, if exposed, can affect workers, business partners, and the continuity of supply relationships even when the company itself does not hold large volumes of consumer financial data.

The information in question

The facts name the exposed material as internal files exfiltrated in a ransomware attack. No further breakdown—such as whether the files included human-resources records, customer lists, contracts, engineering drawings, or other categories—has been publicly detailed in the material provided. Exact contents therefore remain unconfirmed. Manufacturers of this type typically hold employee personal and payroll data, vendor and customer contact details, order and shipment records, and proprietary process or product information. Until more specific inventories are released by the company or credible investigators, it is not possible to state which of those categories, if any, were among the files the attackers claim to have taken.

The real-world impact

For individuals, the practical risk depends on what the internal files actually contained. If employee or contractor data were included, possible outcomes include targeted phishing, identity-related fraud attempts, or unwanted contact using leaked details. If customer or supplier information was present, business partners could face similar social-engineering risk. For the organization, consequences can include operational disruption from encryption, costs of investigation and recovery, contractual notification duties, and reputational strain with customers who rely on steady packaging supply. Because the count of affected people is unknown and the precise file types are not fully described in public reporting, the scale of individual harm cannot be quantified from available facts alone. The listing itself may still prompt fraudsters to craft convincing messages that reference the company, so caution around unexpected requests for credentials or payments remains warranted.

If your data was in this claimed breach

If you have a past or present connection to M&M Industries as an employee, contractor, or business contact, treat unsolicited messages that cite the company or the incident with skepticism. Prefer official channels you already trust when checking for notices. Monitor financial and account statements for unusual activity, and consider placing fraud alerts or credit freezes if you believe sensitive personal identifiers may have been involved. Change passwords on work-related and personal accounts if there is any chance of reuse, and enable multi-factor authentication where available. Keep records of any company notifications you receive. You can also run a free exposure scan of your email address to check whether your information has already surfaced in known breach data sets, which can help you decide what to secure next.

AICompiled with AI assistance from public sources and published under our editorial standards.