Acme Manufacturing Co., a global supplier of precision automotive components, experienced a sophisticated double-extortion intrusion by the Gunra ransomware strain. The attack began with reconnaissance activities including running process enumeration, shadow copy removal, and detailed system data gathering. Threat actors then manipulated processes to evade detection, escalate privileges, and inject malicious code before deploying FindNextFileExW-based file encryption across network shares and critical servers. Production lines stalled as encrypted archives replaced original assets, triggering operational disruptions that halted assembly plants and delayed customer deliveries. In addition, attackers exfiltrated financial records, vendor agreements, and employee credentials, threatening to publish sensitive datasets within five days unless a significant ransom was paid. The incident exposed weaknesses in endpoint defenses, network segmentation, and administrative controls, resulting in extensive forensic investigations, regulatory reporting obligations, reputational damage, and projected losses of multiple millions of dollars. The forced encryption of CAD models, inventory databases, and payroll systems underscores the high stakes of modern ransomware with data extortion tactics. In response, the company enacted crisis communications, engaged specialized cyber negotiators, and accelerated investments in advanced threat detection, secure backups, and employee training programs to strengthen its resilience against future attacks.