Back to Victim Disclosures

Nandan Terry Pvt

incransomransomware groupnandanterry.com
Published
2d ago

Added Nov 10, 2026

# NANDAN TERRY LTD — DATA BREACH ANNOUNCEMENT **Industry:** Textile Manufacturing (Terry Towels, Bathrobes) **HQ:** Dholka, Ahmedabad, Gujarat, India **Group:** Chiripal Group **Website:** nandanterry.com **Revenue:** ~$23M USD (₹194 Crore) **Employees:** 500+ --- ## WHAT WE HAVE Nandan Terry Limited's entire corporate infrastructure has been compromised. We have exfiltrated **200GB+** of data from their internal file servers including 68 workstation backups and all department shared drives. --- ### 🔑 CREDENTIALS & ACCESS (46+ accounts) Login credentials for **every shipping and logistics portal** they use — including their supply chain accounts with: - **H&M Supplier Portal** (supplierportal.hm.com) - **Marks & Spencer** Trading Grid & EDI - **Walmart** cargo systems - **Puma** shipping & PO management - **ALDI** production & contracts - **LIDL**, **TJX/Marshalls**, **Ross Stores**, **BJ's Wholesale**, **Big Lots**, **QVC**, **Metro**, **XXX Lutz** - **DHL**, **Kuehne+Nagel**, **GEODIS**, **Yusen Logistics**, **Expeditors** All usernames, passwords, portal URLs. Many still active. --- ### 💰 COMPLETE FINANCIAL RECORDS - **Profit & Loss** statements — monthly, FY 2024-2026 - **Balance Sheet** FY 2024-25 (audited, 47 pages) - **Consolidated P&L** with revenue breakdown (Export vs Domestic) - **EBITDA, Net Profit, Working Capital** calculations - Revenue: **₹194 Crore** ($23M), Net Profit: **₹9 Crore** ($1.07M) - Full cost structure: raw materials, salary, power, logistics --- ### 🏦 BANKING & LOAN DATA Complete banking relationships with **7 major Indian banks**: | Bank | Facility | |------|---------| | **Punjab National Bank (PNB)** | CC ₹70Cr + TL ₹95Cr | | **State Bank of India (SBI)** | TL ₹47Cr | | **Bank of Baroda (BOB)** | TL ₹47Cr | | **Canara Bank** | TL ₹47Cr | | **Central Bank of India (CBI)** | TL ₹70Cr | | **Union Bank (UBI)** | TL ₹47Cr | | **Bank of Maharashtra + Bandhan Bank** | CC facilities | **Total loan exposure: ₹433+ Crore ($51.5M)** All account numbers, IFSC codes, bank RM contacts (names, phones, emails), repayment schedules, interest calculations included. **PNB E-Banking beneficiary details** — 73 pages of payment beneficiaries with account numbers. --- ### ⚠️ CIBIL CREDIT REPORTS & LEGAL ISSUES **Extremely sensitive** credit bureau data: - **CIBIL Commercial Credit Report** — 69 pages, full credit history - **DPD (Days Past Due) reports** from Canara Bank (31 days) and SBI (29 days) — **evidence of late loan payments** - **CIBIL irregularity complaints** to PNB - **Legal suits against company and directors** — documented in internal files - **NCLT (National Company Law Tribunal)** withdrawal orders - Director **Braijmohan Chiripal** — CIBIL irregularity for housing loan ₹4.75 Crore - **CRILC (Central Repository)** reporting disputes with Bank of Baroda, Central Bank of India, SBI This data reveals the company's **true financial health** — not the version they show to their buyers. --- ### 👥 EMPLOYEE DATA (500+ workers & staff) - **Complete salary sheets** — every employee, every month (NTPL Staff, NTPL Workers, SPG Staff, SPG Workers) - **Worker increment proposals** with full PII: Name, Father's Name, Department, Designation, Date of Joining, Salary - **PF (Provident Fund)** and **ESI** data - **SAP payroll upload files** with individual amounts - **KPI performance data** — individual worker performance metrics --- ### 📋 CLIENT & SUPPLY CHAIN DATA **62+ global buyers** in customer master including: ALDI, H&M, Walmart, Marks & Spencer, Puma, TJX (Marshalls/TK Maxx), BJ's Wholesale, Ross Stores, Big Lots, QVC, Metro, XXX Lutz, Falabella, LIDL, Meijer, Bealls, Liberty, Hemtex/Kesko, Vineyard Vines, Cencosud, DD's Discount **Client-specific data includes:** - Purchase Orders with pricing - Product specifications (GSM, size, design files) - H&M Master Order Dashboards (2023-2026) - Puma packing instructions & shipment data - ALDI contract correspondence - Production schedules per buyer - Cost sheets and margin calculations **This data is devastating for their buyer relationships.** Major retailers like H&M and Walmart require strict data security compliance from suppliers. This breach proves Nandan Terry cannot protect their supply chain data. --- ### 📁 CORPORATE & LEGAL DOCUMENTS - **KYC package:** CIN, IEC (Import Export Code), GST Registration, Export House Certificate - **Board Resolutions** (conversion from Pvt to Public) - **Director list** with education and experience - **Insurance policies** (8 active — plant, machinery, solar, marine) - **Settlement agreements** (Uday Buildcon) - **Tax Audit Reports** (FY 2019-2025) - **Secretarial Audit Report** 2024 - **CredAvenue borrower profile** and shareholding patterns - **DSRA release letters** from 4 banks --- ### 🗂️ DATA VOLUME | Category | Volume | |----------|--------| | Workstation backups | 68 machines | | Financial records | Monthly P&L, BS, NCA (2+ years) | | Salary data | ALL employees, monthly | | Banking data | 7 banks, full account details | | Client data | 62+ global buyers | | Credentials | 46+ portal logins | | Legal/CIBIL | Credit reports, court cases | | Insurance | 8 active policies | | Total estimated | **200GB+** | --- ## ⏰ TIMELINE **Announcement published.** Nandan Terry Limited has been contacted. ⬛ **4 DAYS** — deadline to begin negotiations. If no contact is made, this page will be updated with additional proof samples and the countdown to full publication begins. ⬛ **+10 DAYS** — full data publication. If no agreement is reached within 10 days after the announcement deadline, the following actions will be taken: 1. **Full financial data** published (P&L, Balance Sheet, loan schedules, CIBIL reports) 2. **CIBIL credit reports and DPD irregularities** sent directly to all 7 banking partners — PNB, SBI, BOB, Canara, CBI, UBI, Bank of Maharashtra 3. **H&M, Walmart, Puma, ALDI, Marks & Spencer** notified of their supplier's data security failure and supply chain data exposure 4. **46+ portal credentials** published — active shipping and logistics accounts compromised 5. **Employee PII** released — salary data, PF numbers, personal details of 500+ workers 6. **Complete data dump** published on clearnet and Tor — free download for anyone **Total time to act: 14 days from today.** The clock is ticking. --- *Data verified. Screenshots below are samples only. Full dataset available for verification upon contact.* --- ## 📸 PROOF — DATA SAMPLES *Screenshots from exfiltrated data:* ![Data Tree Overview](00_DATA_TREE_OVERVIEW.png) ![Portal Passwords — 46+ Credentials](01_PORTAL_PASSWORDS.png) ![Bank Loan Facilities — ₹433 Crore](02_BANK_DETAILS_LOANS.png) ![Bank Relationship Manager Contacts](03_BANK_CONTACTS.png) ![Loan Outstanding June 2025](04_LOAN_OUTSTANDING.png) ![Term Loan Repayment Schedule](05_LOAN_REPAYMENT.png) ![Corporate Loan Interest Calculation](06_CORPORATE_LOAN_INTEREST.png) ![Customer Master — 62+ Global Buyers](07_CUSTOMER_LIST_GLOBAL.png) ![Worker Increment Proposal — Employee PII](08_WORKER_INCREMENT_PII.png) ![Profit & Loss Statement FY 2025-26](09_PNL_FINANCIALS.png) ![Consolidated P&L — Revenue & EBITDA](10_CONSOLIDATED_PNL.png) ![CIBIL Commercial Credit Report (69 pages)](11_CIBIL_CREDIT_REPORT.png) ![Canara Bank — Days Past Due Report](12_CANARA_BANK_DPD.png) ![SBI — Days Past Due Report](13_SBI_BANK_DPD.png) ![PNB E-Banking Beneficiaries (73 pages)](14_PNB_EBANKING_BENEFICIARIES.png) ![Balance Sheet FY 2024-25 (47 pages)](15_BALANCE_SHEET_FY2425.png)

Organization Details

Organization

Nandan Terry Pvt

Domain

nandanterry.com

Country

🇮🇳 IN

nandanterry.com

Leak Data

Data Size

200 GB

Published

Oct 2, 2026

Publication Status

Published

Discovered

Nov 10, 2026

Leak URL
http://incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion/post/?id=55fc77e3-de8c-4377-9218-b9dd98de5b3b
Site OfflineLast scanned 11h ago

Threat Group

incransom

ransomware group

View full group profile →

Quick Facts

Country🇮🇳 IN
Data Size200 GB
AddedNov 10, 2026