Summary
Written by ThreatClusterfrom file listing, victim profile, leak postThe leak claims that 780 GB of data across 66 files were taken from Factory Five Racing Inc (domain factoryfive.com), a US kit-car manufacturer. The data categories described include correspondence, CRM contacts, ERP/pricing, engineering CAD, banking statements, insurance policies, tax documentation, legal contracts/NDAs, database backups, and materials related to ongoing lawsuits. The leak post is published and shows a 14-day countdown deadline.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Employees
- 90
- Platforms
- SolidWorks Rhino GoldMine
- People named
- David T. Smith
What was taken
Factory Five Racing Inc — kit-car manufacturer (Cobra replicas, GTM, Type 65 Coupe, 33 Hot Rod). 9 Tow Road, Wareham MA 02571-1086. ~90 employees, 158 endpoints. Revenue $5.5-6.5M/yr (credit card processing ~$4.3M, avg ticket $1245). Exfiltrated data categories (~130GB): correspondence (PST archives), CRM contacts (GoldMine), ERP/pricing, engineering CAD (SolidWorks/Rhino), banking statements, insurance policies, tax documentation, legal contracts/NDAs, database backups. Includes detailed materials on several ongoing lawsuits — parties, witnesses, testimonies, and related case files, alongside private correspondence. Risk zones: PCI DSS (card processing $4.3M/yr), MA 201 CMR 17.00 (Massachusetts personal data protection), GDPR (EU clients), CCPA (California clients), active IRS audit, active MA Sales Tax audit, FTC Safeguards Rule. Reputational: customer warranties, partner contracts (SEMA supplier), licenses, litigation exposure. CEO: David T. Smith.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- risk_zones
- PCI DSS (card processing $4.3M/yr), MA 201 CMR 17.00 (Massachusetts personal data protection), GDPR (EU clients), CCPA (California clients), active IRS audit, active MA Sales Tax audit, FTC Safeguards Rule.
Leak-site images (1)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.