The INC Ransom group claims to have breached the network of NAFFCO (National Fire Fighting Manufacturing FZCO). Based in Dubai, United Arab Emirates, NAFFCO is a global powerhouse in the manufacturing and supply of firefighting equipment, fire protection systems, and safety engineering, reportedly generating $4.4 billion in revenue.
The threat actors posted the company to their dark web leak site on November 17, 2025. In a statement mocking the company’s “Passion to Protect” slogan, the group wrote, “We do not know for certain how well they protect their clients, but they could not protect themselves.” This incident marks another high-profile target for INC Ransom, which has been aggressively targeting the manufacturing and industrial sectors throughout 2025.
According to the actor, they have exfiltrated 1TB of sensitive organization data. The group has provided screenshots as proof of access, which appear to show a wide range of confidential documents. The allegedly compromised data includes:
-
Passport copies and employee identification documents
-
Fiscal and financial data
-
Internal emails
-
HR records and personnel files
-
Budgets and financial spreadsheets
-
Strategic development plans
