Breaches and incidents
Omax Autos (India): ransomware on IT infrastructure, restored in a week
The auto-components maker suspected an incident on 26 Mar and confirmed ransomware on 27 Mar 2026, with core systems and operations unaffected.
- Disclosed
- Verification
- Checked against a primary source
What happened
- The auto-components maker suspected an incident on 26 Mar and confirmed ransomware on 27 Mar 2026, with core systems and operations unaffected; on 3 Apr it said all critical systems were restored and no sensitive operational or financial data had been compromised per assessment to date.
- Root cause: not disclosed.
- Attacker: not named by the company; the ransomware.live tracker shows omaxauto.com listed by several groups during 2026 (LockBit 5.0 on 1 Mar, LeakBazaar on 10 May, Wallstreet on 26 Jun, DragonForce on 14 Jul), all claims only.
- Response: containment, external experts, controls strengthened.