SOLAR INDUSTRIES INDIA WAS HACKED MORE THAN 2TB SECRET MILITARY DATA LEAKED Listed by alphv Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Solar Industries India Limited, an explosives manufacturer based in Nagpur, India, was listed by the alphv ransomware group in a claim reported on 26 January 2023. According to the listing, the company had been hit in a ransomware attack involving the exfiltration of internal files, with the group asserting that more than 2TB of data—including material it described as secret military data—had been taken. The number of people affected remains unknown, and public detail on the precise scope and contents is limited to the group’s own statements.

The listing matters because Solar Industries supplies industrial explosives and initiating systems, a sector that routinely handles sensitive operational, commercial and potentially defence-related information. Any confirmed exposure of internal files from such an organisation can create lasting risks for the company, its partners and individuals whose details may appear in those files.

What happened

On 26 January 2023, alphv listed Solar Industries India Limited on its leak site. The group stated that the company had not made contact by a specified deadline and announced that bidding for the sale of all company data would open within 24 hours. It provided a Tox address for interested parties. The listing characterised the incident as a ransomware attack in which internal files were allegedly exfiltrated and claimed the volume exceeded 2TB, including data it labelled secret military material.

No independent confirmation of the attack method, exact timing of intrusion, or full extent of the data taken has been supplied in the available record. The number of individuals affected is listed as unknown. Beyond the group’s public claims and the basic corporate description it included, further operational details remain undisclosed.

The group behind it: alphv

Alphv, also widely known as BlackCat, is a ransomware operation that emerged in late 2021 and has operated on a ransomware-as-a-service model. Affiliates typically gain access to victim networks, exfiltrate data, encrypt systems, and then threaten to publish or auction the stolen material if a ransom is not paid. The group has been associated with double-extortion tactics and has targeted organisations across multiple sectors and countries.

Its leak sites have historically been used both to pressure victims and to advertise stolen data to other buyers. In this case, the listing of Solar Industries India Limited and the accompanying claims about data volume and content should be treated as assertions by the group rather than independently Reported Facts. No additional statements from alphv specific to this victim beyond the leak-site notice are recorded in the available information.

Who is Solar Industries India Limited?

Solar Industries India Limited is an explosives manufacturing company headquartered at Solar House, 14 Kachimet, Amravati Road, Nagpur, Maharashtra, India. It manufactures, supplies and exports industrial explosives and initiating systems. Public figures associated with the firm at the time of the listing included reported revenue of approximately $504.6 million and a workforce on the order of 1,900 employees.

Companies in this sector commonly hold technical specifications, production records, customer and supplier contracts, logistics data, employee information and, in some cases, material linked to defence or infrastructure projects. A breach affecting such an organisation is consequential because the data can include commercially sensitive details and, if defence-related material is involved, information of interest to competitors or hostile actors. Even without confirmation of military content, the combination of industrial and potentially dual-use knowledge raises the stakes for both the company and any third parties named in its files.

The information in question

The available record states that internal files were exfiltrated in a ransomware attack. The alphv listing further claimed that more than 2TB of data, described by the group as including secret military material, had been taken and would be offered for sale. No itemised inventory of file types, databases or specific document categories has been independently published.

Organisations of this kind typically maintain employee records, customer and supplier details, technical and production documentation, financial information and internal communications. Whether any of those categories—or any defence-related material—were actually present in the exfiltrated set remains unconfirmed. Exact contents and the identities of any individuals whose personal data may be included are therefore unknown on the basis of public information.

The real-world impact

For the organisation, the primary risks include operational disruption, potential loss of proprietary technical or commercial information, reputational harm, and possible regulatory or contractual consequences if customer or partner data was involved. If bidding or further dissemination of the data occurred as threatened, competitors or other parties could gain insight into pricing, processes or relationships.

For individuals, the concrete risk depends on whether personal data—such as names, contact details, identification numbers or employment records—appeared in the internal files. Where such data is exposed, common outcomes include targeted phishing, identity misuse or unwanted contact. Because the number of people affected is unknown and the precise data types remain unverified, the scale of personal impact cannot be stated with certainty. The combination of industrial explosives manufacturing and the group’s claim of military-related material also raises the possibility of broader security sensitivities, though these too are unconfirmed.

What to do if you're exposed

If you have a past or present connection to Solar Industries India Limited—as an employee, contractor, customer or supplier—treat the possibility of exposure seriously until more is known. Monitor financial and email accounts for unusual activity, be cautious of unexpected messages that reference the company or request sensitive information, and consider placing fraud alerts with relevant credit or identity services if you are in a jurisdiction that offers them. Change passwords on any accounts that may have shared credentials with work systems, and enable multi-factor authentication where available.

You can also run a free exposure scan of your email address to check whether your information has already surfaced in known breach data sets. Stay alert for official statements from the company or regulators, as they may provide clearer guidance once the facts are better established.

AICompiled with AI assistance from public sources and published under our editorial standards.