duboiswood.com Listed by incransom Ransomware Group

On November 13, 2025, Dubois Wood, a southern Indiana furniture manufacturer, appeared on the leak site of the incransom ransomware group. The company, which has produced American-made furniture since 1979 and employs roughly 200 people, is claimed to have had internal files exfiltrated during a ransomware attack.

What's Publicly Reported from Reporting

Public reporting indicates that incransom posted details of the incident on its dark-web blog, listing Dubois Wood among recent victims. The company generates approximately $21.6 million in annual revenue and operates in the retail-furniture sector. Available reporting describes the data taken as internal files; the exact volume and full list of contents remain unclear. No customer records or specific categories of personal information have been publicly detailed by the group at the time of posting.

Why This Matters for You and Your Family

When a company like Dubois Wood is hit, the information inside those internal files can include employee names, addresses, Social Security numbers, payroll details, or vendor contacts. If any of that data belongs to you or someone in your household, it can be sold or published later. Even if you never bought their furniture, you or your family members could have worked there, applied for a job, or had your information shared through a supplier or partner. Once stolen data leaves the company’s control, it circulates on underground forums where criminals look for opportunities to open accounts in your name, file fraudulent taxes, or demand payment to keep the information private.

The Doxxing and Identity-Chain Implications

Ransomware leaks rarely stop at one company. A single exposed email or phone number can be linked to your accounts on other services. Criminals then follow the chain: they test the credential at shopping sites, email providers, and social media. If you reuse passwords or security questions, one breach can unlock many others. Children’s gaming accounts are especially vulnerable because kids often use family email addresses or phone numbers. A stolen credential from a parent’s employer can lead directly to a child’s Roblox, Fortnite, or Discord account, resulting in doxxing, harassment, or further extortion. Credential leaks like this one cascade into account takeovers and doxxing chains.

Incransom’s Publicly Known Track Record

Public reporting attributes incransom with emerging in recent years as a ransomware operation that combines encryption of victim systems with public shaming on its leak site. The group has listed manufacturing, retail, and professional-services companies. Its typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of internal documents, deployment of ransomware, and then dual extortion: demanding payment to decrypt files and a second fee to prevent publication of stolen data. Exact prior victim counts and success rates are difficult to verify, but the group maintains an active disclosure blog that it updates regularly.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours rather than months.
• Rotate any password you used at Dubois Wood or any related vendor account, then replace it with a unique passphrase and enable 2FA through an authenticator app everywhere that credential was reused.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing your own accounts.

The incident at Dubois Wood shows how quickly a single company breach can ripple outward and put ordinary families at risk. Taking concrete steps now limits how far attackers can travel along your personal identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to see exactly where your information sits and begin closing those doors.