On November 13, 2025, Dubois Wood, a southern Indiana furniture manufacturer, appeared on the leak site of the incransom ransomware group. The company, which has produced American-made furniture since 1979 and employs roughly 200 people, is claimed to have had internal files exfiltrated during a ransomware attack.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch duboiswood.com
Get alerted the next time duboiswood.com files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about duboiswood.com’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates that incransom posted details of the incident on its dark-web blog, listing Dubois Wood among recent victims. The company generates approximately $21.6 million in annual revenue and operates in the retail-furniture sector. Available reporting describes the data taken as internal files; the exact volume and full list of contents remain unclear. No customer records or specific categories of personal information have been publicly detailed by the group at the time of posting.
Why This Matters for You and Your Family
When a company like Dubois Wood is hit, the information inside those internal files can include employee names, addresses, Social Security numbers, payroll details, or vendor contacts. If any of that data belongs to you or someone in your household, it can be sold or published later. Even if you never bought their furniture, you or your family members could have worked there, applied for a job, or had your information shared through a supplier or partner. Once stolen data leaves the company’s control, it circulates on underground forums where criminals look for opportunities to open accounts in your name, file fraudulent taxes, or demand payment to keep the information private.
The Doxxing and Identity-Chain Implications
Ransomware leaks rarely stop at one company. A single exposed email or phone number can be linked to your accounts on other services. Criminals then follow the chain: they test the credential at shopping sites, email providers, and social media. If you reuse passwords or security questions, one breach can unlock many others. Children’s gaming accounts are especially vulnerable because kids often use family email addresses or phone numbers. A stolen credential from a parent’s employer can lead directly to a child’s Roblox, Fortnite, or Discord account, resulting in doxxing, harassment, or further extortion. Credential leaks like this one cascade into account takeovers and doxxing chains.