Ransomware victim disclosure
← All victimswww.cswindustrials.com
Claimed by chaos · listed 16 days ago
Status timeline
- Listed
May 4, 2026
- Data leaked
At a glance
- Group
- chaos
- Status
- Data leaked
- Country
- US
- Sector
- Manufacturing
- Listed on leak site
- May 4, 2026
About the victim
AI dossier — public-source company profileCSW Industrials, Inc. is a publicly traded (NASDAQ: CSWI) diversified industrial growth company headquartered in Dallas, Texas. The company operates across three segments: contractor solutions, specialized reliability solutions, and engineered building solutions, serving HVAC, plumbing, electrical, and industrial markets. It sells products under multiple established brands to professional contractors and industrial customers primarily in North America.
- Industry
- Diversified Industrial Manufacturing & Distribution
- Address
- 5400 LBJ Freeway, Suite 1485, Dallas, TX 75240, United States
- Employees
- 201-500
- Founded
- 2015
Attack summary
Severity: high — The group claims exfiltration of 540 GB of internal files from a publicly traded industrial company, representing significant business data exposure. While the exact nature of the data is unconfirmed, the volume and the disclosed status of 'data_published' indicate substantial business data is at stake, potentially including financial, operational, and employee information.The Chaos ransomware group claims to have exfiltrated approximately 540 GB of internal company files and threatened to publish them if management did not make contact within 24 hours. The post indicates data exfiltration was performed; encryption status is not explicitly stated.
Data the group says was taken
AI dossier — extracted from the leak post- Internal company files (540 GB claimed)
- Potentially financial records
- Potentially operational/business data
- Potentially employee records
What the group claims
If the company's management does not contact us within 24 hours, we will publish 540 GB of the company's internal files. CSW Industrials, Inc. is a diversified industrial growth company that operates across contractor solutions, specialized reliability solutions, and engineered building solutions.…
Sources
Source
Indexed 16 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
