All ransomware incidents
Ransomware group thegentlemen hits Inovar Packaging Group
Inovar Packaging Group — a manufacturing target operating in AU has been listed by the thegentlemen ransomware group on 2026-10-14. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Inovar Packaging Group |
|---|---|
| Threat Group | thegentlemen |
| Summary | Inovar Packaging Group, a manufacturing organization in Australia, was listed by the thegentlemen ransomware group on its leak site on 2026-10-16. |
| Date of Breach | 2026-10-14 |
| Discovery Date | 2026-10-16 |
| Region | AU |
| Target Domain | inovarpackaging.com |
| Business Sector | Manufacturing |
| Severity | MEDIUM |
Claim by thegentlemen
inovarpackaging.com Inovar Packaging Group (Irving, TX) is a PE-backed buy-and-build platform producing pressure-sensitive labels, shrink sleeves, flexible packaging, and RFID — 14 US plants, 12+ acquisitions since 2016 (latest: Kiliper Corp, Feb 2026). Owned by Kelso & Company since May 2022 (previously AEA Investors); CEO/Chairman Jeff Brezek leads, with deal advisors Milbank and Mesirow confirming real M&A scale. Revenue is private and undisclosed — realistic estimates put it at $100–250M, with ~500–750 employees (Form 5500 filings show plan participants growing 121→743 in 2020–2024). Certifications are strong: ISO 9001/14001, first US printer with GMI Platinum (both digital + flexo; serves CVS, Target, Walgreens, Home Depot), FDA 21 CFR 11 / EU Annex 11, EcoVadis Gold; won the 2024 TLMI Eugene Singer Award. Clients: food & beverage, healthcare, ag-chem, supplements, personal care — with built-in redundancy across plants for continuity.
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.