Skip to content
Leak-site post naming DoAllTech, captured by ThreatCluster

DoAllTech

spacebears

Ransomware leak-site victim intelligence · EN

Views
23,027
Posted
Jul 21, 2026
Countdown
0 day 0 hour 0 minute
Country
KR
Industry
Construction IT

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Spacebears claims that personal information of employees and clients, financial documents, and other files were taken from DoAllTech (domain doalltech.com). The victim is described as a construction IT company operating at the domain doalltech.com. The leak post is published and shows a countdown of 0 days 0 hours 0 minutes.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
https://doalltech.com/en/

What was taken

The Company is leading the construction IT industry with the best technology and various experiences, and striving to grow with a various customers in pursuit of technology platform change and innovation through persistent research and development in introduction of Web Services, H/W Services, BIM Services, and new technologies.

Data categories
Personal information of employees and clientsFinancial documentsOther files

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "Doalltech" with the tagline "AEC Solution Provider" and a globe graphic.
onion leak page2.3 KB