Skip to content
Leak-site post naming Cosmon, captured by ThreatCluster

Cosmon

beast

Ransomware leak-site victim intelligence · EN

Data size
2TB
Posted
Aug 19, 2026
Country
Germany
Industry
Software

Summary

Written by ThreatClusterfrom victim profile, leak post

Beast claims Cosmon’s data totaling 2TB has been leaked. The leak describes Cosmon as developing agentic artificial intelligence software for mechanical engineering workflows, centered on its Nexus product for CAD, CAE, simulation, and PLM tasks. The leak post lists the publication status as listed and identifies the victim as Cosmon (domain www.cosmon.com).

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
cosmon.com www.cosmon.com

What was taken

Cosmon develops agentic artificial intelligence software for mechanical engineering workflows, centered on its Nexus product for CAD, CAE, simulation, and PLM tasks. Its website presents the company as a software provider whose platform automates drawing creation, simulation setup, troubleshooting, design validation, and product lifecycle data tasks while integrating directly with major engineering tools. Although the offering is deeply technical and tailored to engineering environments, the core business shown is the development and delivery of proprietary engineering software rather than providing outsourced engineering services or general consulting.

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page5.4 KB
Grid of thumbnail images, primarily featuring icons or small graphics, with filenames visible but no specific content details discernible.
onion leak page55 KB
Grid of various 3D model thumbnails, primarily featuring abstract shapes and objects in different orientations and perspectives.
onion leak page70 KB
Directory listing of files with various names and timestamps, including folders like "cloudbuild" and "backup.sql."
onion leak page14 KB
Directory listing of files and folders with names including "cosmon-chat-assets-production," "post-scripts," and "run-sources-cosmon-us-central1."
onion leak page16 KB
Directory listing of files including .docx, .xlsx, and .zip extensions.
onion leak page36 KB
Directory listing of files with .ipynb extensions, including titles related to neural networks and machine learning.
onion leak page40 KB
Directory listing of files with names including "Mycode," "Cosmon," and "Visual Studio Code," along with timestamps.
onion leak page10 KB
Grid of thumbnail images featuring various 3D models or wireframe designs, likely representing different objects or components.
onion leak page47 KB
Directory listing of image files in PNG format, featuring various filenames and thumbnails of images with minimal visible content.
onion leak page65 KB