Richmond Plywood Corporation Limited Listed by secpo Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

The data of more than 2,500 individuals and 4,000 organizations may have been copied from Richmond Plywood Corporation Limited during a ransomware incident. The incident was first reported on 14 April 2026, when the secpo group listed the company on its leak site. Because the number of people whose information appears in the files remains unknown, anyone who has done business with or worked for the company has reason to consider whether their details are among those referenced.

Breaking down the breach

The only confirmed information is that internal files were removed from Richmond Plywood Corporation Limited. The group states the total volume of data taken is approximately 1.09 TB across 522,925 files, with a filtered subset of 230 GB containing 161,200 files. No date of the intrusion, method of entry, or confirmation that the data was later published has been made public. The number of individuals whose records are present in the material is also undisclosed beyond the group’s reference to more than 2,500 unique people and 4,000 organizations.

Who is secpo?

Secpo is a ransomware group that has appeared on data-leak sites in recent years. Like similar actors, it typically claims to have encrypted systems and exfiltrated files, then lists victim names to pressure organizations into paying a ransom. The group’s listing of Richmond Plywood Corporation Limited is presented by secpo as evidence of a successful operation; no independent verification of the claim has been reported.

About Richmond Plywood Corporation Limited

Richmond Plywood Corporation Limited operates in the wood-products manufacturing sector. Companies of this type routinely maintain records on employees, suppliers, customers, and regulatory compliance. A breach at such a firm can therefore involve both personal identifiers and commercial information that is not normally intended for public release.

What was likely exposed

The published facts state only that internal files were taken. The exact categories of data remain unconfirmed. Organizations in this sector commonly store the following types of records:

• Employee names, contact details and payroll information
• Customer and supplier contracts and correspondence
• Financial and operational documents
• Regulatory or safety records

Whether any of these specific categories are present in the exfiltrated material has not been verified.

The real-world impact

Individuals referenced in the files face the ordinary risks that follow the exposure of personal or employment-related data: possible misuse for fraud, phishing, or identity theft. The organization itself may experience operational disruption, regulatory scrutiny, and costs associated with investigation and remediation. Because the scale of affected individuals is still unknown, the full extent of these consequences cannot yet be measured.

What to do if you're exposed

Anyone who has been employed by or conducted business with Richmond Plywood Corporation Limited should treat the possibility of exposure seriously. Practical first steps include monitoring bank and credit accounts for unusual activity, enabling multi-factor authentication on important services, and remaining alert to unsolicited messages that reference personal details. Readers can also run a free exposure scan of their email address to check whether their information has appeared in known breach data sets.

AICompiled with AI assistance from public sources and published under our editorial standards.