Ransomware claim: Nandan Terry Pvt (inc ransom)

# NANDAN TERRY LTD — DATA BREACH ANNOUNCEMENT

**Industry:** Textile Manufacturing (Terry Towels, Bathrobes)
**HQ:** Dholka, Ahmedabad, Gujarat, India
**Group:** Chiripal Group
**Website:** nandanterry.com
**Revenue:** ~$23M USD (₹194 Crore)
**Employees:** 500+

—

## WHAT WE HAVE

Nandan Terry Limited’s entire corporate infrastructure has been compromised. We have exfiltrated **200GB+** of data from their internal file servers including 68 workstation backups and all department shared drives.

—

### 🔑 CREDENTIALS & ACCESS (46+ accounts)

Login credentials for **every shipping and logistics portal** they use — including their supply chain accounts with:

– **H&M Supplier Portal** (supplierportal.hm.com)
– **Marks & Spencer** Trading Grid & EDI
– **Walmart** cargo systems
– **Puma** shipping & PO management
– **ALDI** production & contracts
– **LIDL**, **TJX/Marshalls**, **Ross Stores**, **BJ’s Wholesale**, **Big Lots**, **QVC**, **Metro**, **XXX Lutz**
– **DHL**, **Kuehne+Nagel**, **GEODIS**, **Yusen Logistics**, **Expeditors**

All usernames, passwords, portal URLs. Many still active.

—

### 💰 COMPLETE FINANCIAL RECORDS

– **Profit & Loss** statements — monthly, FY 2024-2026
– **Balance Sheet** FY 2024-25 (audited, 47 pages)
– **Consolidated P&L** with revenue breakdown (Export vs Domestic)
– **EBITDA, Net Profit, Working Capital** calculations
– Revenue: **₹194 Crore** ($23M), Net Profit: **₹9 Crore** ($1.07M)
– Full cost structure: raw materials, salary, power, logistics

—

### 🏦 BANKING & LOAN DATA

Complete banking relationships with **7 major Indian banks**:

| Bank | Facility |
|——|———|
| **Punjab National Bank (PNB)** | CC ₹70Cr + TL ₹95Cr |
| **State Bank of India (SBI)** | TL ₹47Cr |
| **Bank of Baroda (BOB)** | TL ₹47Cr |
| **Canara Bank** | TL ₹47Cr |
| **Central Bank of India (CBI)** | TL ₹70Cr |
| **Union Bank (UBI)** | TL ₹47Cr |
| **Bank of Maharashtra + Bandhan Bank** | CC facilities |

**Total loan exposure: ₹433+ Crore ($51.5M)**

All account numbers, IFSC codes, bank RM contacts (names, phones, emails), repayment schedules, interest calculations included.

**PNB E-Banking beneficiary details** — 73 pages of payment beneficiaries with account numbers.

—

### ⚠️ CIBIL CREDIT REPORTS & LEGAL ISSUES

**Extremely sensitive** credit bureau data:

– **CIBIL Commercial Credit Report** — 69 pages, full credit history
– **DPD (Days Past Due) reports** from Canara Bank (31 days) and SBI (29 days) — **evidence of late loan payments**
– **CIBIL irregularity complaints** to PNB
– **Legal suits against company and directors** — documented in internal files
– **NCLT (National Company Law Tribunal)** withdrawal orders
– Director **Braijmohan Chiripal** — CIBIL irregularity for housing loan ₹4.75 Crore
– **CRILC (Central Repository)** reporting disputes with Bank of Baroda, Central Bank of India, SBI

This data reveals the company’s **true financial health** — not the version they show to their buyers.

—

### 👥 EMPLOYEE DATA (500+ workers & staff)

– **Complete salary sheets** — every employee, every month (NTPL Staff, NTPL Workers, SPG Staff, SPG Workers)
– **Worker increment proposals** with full PII: Name, Father’s Name, Department, Designation, Date of Joining, Salary
– **PF (Provident Fund)** and **ESI** data
– **SAP payroll upload files** with individual amounts
– **KPI performance data** — individual worker performance metrics

—

### 📋 CLIENT & SUPPLY CHAIN DATA

**62+ global buyers** in customer master including:

ALDI, H&M, Walmart, Marks & Spencer, Puma, TJX (Marshalls/TK Maxx), BJ’s Wholesale, Ross Stores, Big Lots, QVC, Metro, XXX Lutz, Falabella, LIDL, Meijer, Bealls, Liberty, Hemtex/Kesko, Vineyard Vines, Cencosud, DD’s Discount

**Client-specific data includes:**
– Purchase Orders with pricing
– Product specifications (GSM, size, design files)
– H&M Master Order Dashboards (2023-2026)
– Puma packing instructions & shipment data
– ALDI contract correspondence
– Production schedules per buyer
– Cost sheets and margin calculations

**This data is devastating for their buyer relationships.** Major retailers like H&M and Walmart require strict data security compliance from suppliers. This breach proves Nandan Terry cannot protect their supply chain data.

—

### 📁 CORPORATE & LEGAL DOCUMENTS

– **KYC package:** CIN, IEC (Import Export Code), GST Registration, Export House Certificate
– **Board Resolutions** (conversion from Pvt to Public)
– **Director list** with education and experience
– **Insurance policies** (8 active — plant, machinery, solar, marine)
– **Settlement agreements** (Uday Buildcon)
– **Tax Audit Reports** (FY 2019-2025)
– **Secretarial Audit Report** 2024
– **CredAvenue borrower profile** and shareholding patterns
– **DSRA release letters** from 4 banks

—

### 🗂️ DATA VOLUME

| Category | Volume |
|———-|——–|
| Workstation backups | 68 machines |
| Financial records | Monthly P&L, BS, NCA (2+ years) |
| Salary data | ALL employees, monthly |
| Banking data | 7 banks, full account details |
| Client data | 62+ global buyers |
| Credentials | 46+ portal logins |
| Legal/CIBIL | Credit reports, court cases |
| Insurance | 8 active policies |
| Total estimated | **200GB+** |

—

## ⏰ TIMELINE

**Announcement published.** Nandan Terry Limited has been contacted.

⬛ **4 DAYS** — deadline to begin negotiations. If no contact is made, this page will be updated with additional proof samples and the countdown to full publication begins.

⬛ **+10 DAYS** — full data publication. If no agreement is reached within 10 days after the announcement deadline, the following actions will be taken:

1. **Full financial data** published (P&L, Balance Sheet, loan schedules, CIBIL reports)
2. **CIBIL credit reports and DPD irregularities** sent directly to all 7 banking partners — PNB, SBI, BOB, Canara, CBI, UBI, Bank of Maharashtra
3. **H&M, Walmart, Puma, ALDI, Marks & Spencer** notified of their supplier’s data security failure and supply chain data exposure
4. **46+ portal credentials** published — active shipping and logistics accounts compromised
5. **Employee PII** released — salary data, PF numbers, personal details of 500+ workers
6. **Complete data dump** published on clearnet and Tor — free download for anyone

**Total time to act: 14 days from today.**

The clock is ticking.

—

*Data verified. Screenshots below are samples only. Full dataset available for verification upon contact.*

—

## 📸 PROOF — DATA SAMPLES

*Screenshots from exfiltrated data:*

![Data Tree Overview](00_DATA_TREE_OVERVIEW.png)

![Portal Passwords — 46+ Credentials](01_PORTAL_PASSWORDS.png)

![Bank Loan Facilities — ₹433 Crore](02_BANK_DETAILS_LOANS.png)

![Bank Relationship Manager Contacts](03_BANK_CONTACTS.png)

![Loan Outstanding June 2025](04_LOAN_OUTSTANDING.png)

![Term Loan Repayment Schedule](05_LOAN_REPAYMENT.png)

![Corporate Loan Interest Calculation](06_CORPORATE_LOAN_INTEREST.png)

![Customer Master — 62+ Global Buyers](07_CUSTOMER_LIST_GLOBAL.png)

![Worker Increment Proposal — Employee PII](08_WORKER_INCREMENT_PII.png)

![Profit & Loss Statement FY 2025-26](09_PNL_FINANCIALS.png)

![Consolidated P&L — Revenue & EBITDA](10_CONSOLIDATED_PNL.png)

![CIBIL Commercial Credit Report (69 pages)](11_CIBIL_CREDIT_REPORT.png)

![Canara Bank — Days Past Due Report](12_CANARA_BANK_DPD.png)

![SBI — Days Past Due Report](13_SBI_BANK_DPD.png)

![PNB E-Banking Beneficiaries (73 pages)](14_PNB_EBANKING_BENEFICIARIES.png)

![Balance Sheet FY 2024-25 (47 pages)](15_BALANCE_SHEET_FY2425.png)

  • Group: inc ransom
  • Discovered: 2026-11-10 22:33 UTC

This entry reflects a claim published by an extortion group and collected by a public tracker. It has not been independently verified.

Source: RansomLook — Recent Posts · 2026-11-10