Ransomware: worldleaks claims BMJ Paperpack (ID) — Manufacturing

On 22 May 2026, a ransomware group known as Worldleaks published a claim of data exfiltration from BMJ Paperpack, a manufacturing firm identified by the breach identifier ID. The incident was reported on the ransomware tracking platform ransomware.live under the BREACH framework. This publication indicates that sensitive corporate or operational data may have been compromised and is now at risk of exposure or sale.

The primary affected organization is BMJ Paperpack, a manufacturing entity. However, the broader manufacturing sector should take note, as ransomware groups increasingly target industrial firms for their critical production data and potential supply chain leverage. Compliance teams in manufacturing, especially those handling intellectual property or personal data, should assess their exposure to similar threats.

Compliance teams should immediately verify whether their organization has any direct or indirect relationship with BMJ Paperpack, such as in supply chains or data sharing agreements. They should also review their own ransomware preparedness, including backup integrity, incident response plans, and notification obligations under GDPR or other relevant regulations. Finally, teams should monitor ransomware.live and similar sources for any further disclosures that may impact their own data security posture.