newhollandwood.com Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On February 17, 2025, the website newhollandwood.com, associated with New Holland Church Furniture, was listed by the ransomware group known as incransom. Public reporting indicates that internal files were exfiltrated during a ransomware attack. The number of people affected remains unknown, and further specifics about the incident have not been disclosed.

This listing places the company among those claimed as victims by the group. For an organization that has manufactured custom worship furniture for more than a century, the reported exfiltration of internal files raises practical questions about operational continuity and the potential exposure of business records, even though exact details of what was taken are limited in public sources.

Inside the incident

According to available reports, newhollandwood.com was listed by the incransom ransomware group on February 17, 2025. The group claims that internal files were exfiltrated as part of a ransomware attack. No public confirmation has detailed the precise method of intrusion, the timeline of the attack, the volume of data involved, or whether systems were encrypted in addition to the claimed exfiltration. The number of individuals potentially affected is listed as unknown. Public detail beyond the listing itself and the description of internal files remains limited.

The group behind it: incransom

Incransom is a ransomware operation that has appeared in public threat reporting as a group that uses double-extortion tactics. In such campaigns, operators typically encrypt systems while also copying data and threatening to publish it on a dedicated leak site if a ransom is not paid. The group has previously listed various organizations across different sectors, using the threat of public data release as leverage. Its leak-site postings are claims made by the operators themselves and are not independently verified unless confirmed by the victim or other authoritative sources. In this case, the listing of newhollandwood.com is presented as such a claim; no additional statements from the group specifically detailing this victim beyond the reported exfiltration of internal files appear in the available facts.

newhollandwood.com and its sector

New Holland Church Furniture, operating under newhollandwood.com, was established in 1919 and is based in Lancaster County in the heart of Central Pennsylvania Dutch Country. The company custom-manufactures a full line of worship furniture, including traditional church pews with standard or custom ends, and is described as a leading manufacturer of radius curved pews, with more than 800 installations since 1962. Its products also include pulpits, altars, clergy chairs, and baptismal fonts, with a focus on aesthetically pleasing designs for places of worship.

Organizations in the specialized manufacturing and church-furnishings sector typically maintain records related to customer orders, design specifications, supplier relationships, employee information, and financial or operational documents. A ransomware incident affecting such a firm can disrupt production schedules, client communications, and internal administration. Because the company serves religious institutions across a wide geographic area, any interruption or data exposure carries consequences for both the business and the congregations that rely on its products.

What data was at risk

The available facts state that internal files were exfiltrated in the ransomware attack. No further breakdown of specific data categories—such as customer lists, employee records, financial documents, or design files—has been publicly disclosed. Organizations of this type commonly hold business correspondence, order histories, employee payroll or contact information, vendor contracts, and proprietary design materials. Because the exact contents of the claimed exfiltration remain unconfirmed, it is not possible to state with certainty which of these categories, if any, were involved. Public reporting simply notes the removal of internal files without additional inventory.

What's at stake

For individuals whose information may have been among the internal files, risks include potential misuse of personal or contact details if such data were present, as well as the possibility of targeted phishing that references the company. For New Holland Church Furniture itself, the stakes involve operational disruption, potential reputational effects among clients, and the cost of recovery and investigation. Even without confirmed encryption of production systems, the claimed exfiltration of internal files can create ongoing uncertainty about what information is now outside the organization’s control. Because the scale of impact and the precise data types remain unknown, the full extent of these risks cannot yet be quantified from public sources.

Were you affected?

If you have done business with New Holland Church Furniture, worked for the company, or otherwise shared information with it, consider monitoring financial and email accounts for unusual activity and treating unsolicited messages that reference the firm with caution. Change passwords associated with any accounts that may have used the same credentials elsewhere, and enable multi-factor authentication where available. Readers can also run a free exposure scan of their email address to check whether their information has already appeared in known breach data sets. Official updates from the company, if issued, should be the primary source for further guidance.

AICompiled with AI assistance from public sources and published under our editorial standards.