Leak-site post naming Capgemini Engineering, captured by ThreatCluster

Capgemini Engineering

everest

Ransomware leak-site victim intelligence

Data size
13.08 GB
Files
722,470
Views
9,400
Posted
Aug 20, 2026
Countdown
The files will be published after the timer counts down.
Country
FR
Industry
Professional Services

Summary

Written by ThreatCluster from site fields, file listing, victim profile, leak post, screenshot, ransom note

Everest’s leak page claims Capgemini Engineering was the victim, with 13.08 GB of data across 722,470 files. The data categories claimed include HR and recruitment records, consultant profiles, internal documentation, source code and development files, and client materials. The leak page says the data comes from the Altran internal data repository integrated into Capgemini Engineering and is organized around enterprise content management, Documentum technology and xCP. Publication status on the leak page is listed as published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
Documentum xCP DCTMFX Java Power BI ASP.NET C#

What was taken

Capgemini Engineering victim page describing the Altran data repository now integrated into Capgemini Engineering; capgemini.com 13 GB DataBase; dataset details.

Data categories
candidate CVsrecruitment dossiersconsultant profilese-archiveintranet and digital-workplace project documentationquality manuals, policies, procedures and audit questionnairestraining materials (videos, webcasts, course literature)sales presentations, account material, proposals and client referencestechnical specifications, system requirements and inventory listssource code and development filesPower BI dashboards and data sourcespublic-sector requirements and test protocols

Ransom note

Published by the group on their leak site, reproduced verbatim.

The files will be published after the timer counts down. The company still has time to get in touch with us

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

The Altran internal data repository contains 722,470 files totaling 13.08 GB.
true
The dataset is organized around enterprise content management, Documentum techno
The dataset is organized around enterprise content management, Documentum technology and xCP material.

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page 11 KB
Logo featuring a stylized letter "E" in red and a gray arrow pointing to the right.
onion leak page 6.8 KB
Logo of Kingston Technology featuring a stylized red figure and the brand name in black text.
onion leak page 29 KB
Logo featuring the text "GRUPO DT" and "DESGUACES TENERIFE," accompanied by a stylized car outline in orange.
onion leak page 19 KB
Logo of Capgemini, featuring a blue stylized cloud shape above the name "Capgemini" with the tagline "Consulting. Technology. Outsourcing."
onion leak page 27 KB
Logo of Atlas Air Worldwide featuring the company name in blue with a yellow globe design above it.
onion leak page 6.7 KB
Logo featuring the text "rx networks" with a stylized "rx" and a wireless signal icon.
onion leak page 7.3 KB
Logo of Ingersoll Rand featuring the letters "IR" in red with a circular design.
onion leak page 11 KB
Logo of Keysight Technologies featuring a red waveform graphic and the company name in white text.
onion leak page 128 KB
onion leak page 11 KB