DisclosureLens
GLOBALMalwareManufacturingManufacturingRansomwareBlacknevasRansom DemandedActor NamedData Leak ThreatenedData PublishedHigh

E-CON PACKAGING PRIVATE LIMITED

bd_0aafaaad7ff6fa48 · schema v1 · pii pii-v1

Severity

High

Discovered

Filed

Mar 21, 2026

To disclose

Affected

Not disclosed

Confidence

50%
Full breach record for E-CON PACKAGING PRIVATE LIMITED

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group Blacknevas on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: ManufacturingDiscovered: 2026-04-30

Source: Ransomware.live

Post text · scraped from the leak site

312367 files300GBhttps://gofile.io/d/3nrP9GE-CON Packaging Private Limited,established in 1997 and based in Mumbai, is a leading manufacturer and supplier of industrial packaging solutions,specializing in Mild Steel (MS) drums/barrels, HDPE drums, and lacquered drums. The company serves various sectors,including chemicals, pharmaceuticals, and lubricants.Key details about the company:Location: Registered in Mumbai, Maharashtra, with operations in Silvassa, Dadra and Nagar Haveli.Products: They manufacture a variety of containers, including Open Head Drums, Tight Head Drums, Conical Drums, and Composite Drums.Key Personnel: The directors include Hitesh Ramesh Thacker, Neil Dhiren Thacker, and Dhiren Hariram Thacker.Status: It is an active, unlisted private company.About the Company:History: The company has origins dating back to 1969, though it was incorporated in 1997.Market Reach: They are prominent suppliers in India, targeting industries like petroleum, agrochemicals, and paints.Capacity: The company has a significant presence, with revenue reported in the range of ₹100 Cr - ₹500 Cr for the financial year ending March 2024.

Incident timeline — mostly unverified

? — ?

Breach window unknown

Mar 21, 2026

Claim posted

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Claim → filing

Compliance clock

Not assessable

Tracked as a single-filing incident — the only disclosure on record for this event so far.Unverified claimView incident

Evidence ladder

Leak-site claimThis record

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

No regulatory filing corroborates this yet — it is the attacker's own assertion. Watch this entity to be notified the moment a filing corroborates or contradicts it.

Source ceiling

  • actor name
  • victim claim
  • ransom/leak status
  • discovery date
  • materiality
  • notification
  • affected count
  • confirmed data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2023-04-24

blacknevas

According to ransomware.live, BlackNevas is a ransomware group first observed in November 2024, believed to be derived from the Trigona ransomware family, targeting telecommunications, manufacturing, medical, and legal industries primarily in Asia-Pacific, the UK, Italy, and Lithuania using double-extortion with a dual AES/RSA encryption scheme.

48 tracked hereFull profile →