Ransomware Attacks Target SFA Engineering and Nippon Steel Corporations

• •SFA Engineering and Nippon Steel were listed as ransomware victims by MetaEncryptor.
• •No details on attack methods, ransom amounts, or data exfiltration were provided.
• •The claims remain unverified and should be treated as unconfirmed until further evidence is available.

On September 15, 2026, both SFA Engineering Corporation and Nippon Steel Corporation were listed as victims on a ransomware leak site operated by the MetaEncryptor group. SFA Engineering, a South Korean firm specializing in industrial automation, and Nippon Steel, a leading Japanese steel producer, were both named without specific details on the attack method or the extent of the damage. The listings did not provide information regarding system encryption, data theft, ransom amounts, or operational disruptions. No corroborating evidence or independent verification of the claims was provided, and the articles emphasize that the information should be treated as unconfirmed until further evidence is available. The lack of details raises questions about the actual impact of the incidents on the affected companies. Both articles highlight that RedPacket Security is not affiliated with the attackers and does not host any compromised data.