Summary
Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot, our reportingThe Everest group claims that 66.45 GB across 14,672 files related to Tata Hitachi Construction Machinery were exfiltrated from GGSINC.com, spanning GGS operations in Dharward, Kharagpur and related publication work. They state the data include CAD geometry, engineering drawings, BOMs, manuals, service bulletins and related publication data. The leak identifies the victim as GGSINC.com (domain ggsinc.com), and the leak post is published.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
What was taken
The GGSINC.com data repository contains 14,672 content files with 66.45 GB of known listed content. The material is closely associated with Tata Hitachi Construction Machinery Company Private Limited and its product, parts, engineering, service and technical-publication workflows. GGS/GGSINC appears throughout the transfer and publication workflow, while the machine programmes and much of the underlying engineering content are Tata Hitachi product data. Coverage spans engineering and publication exchanges associated with Tata Hitachi operations in Dharward and Kharagpur, together with GGS publication work, Programming Team outputs and Shiva Service Bulletin material. Product families include EX, NX, PNX, Shinrai, TMX, ZAXIS, ZX, ZW and TL machine programmes. Core content consists of CAD geometry, assembly models, bills of materials, per-assembly parts tables, technical illustrations, operator and workshop manuals, troubleshooting and operational-principle documents, engine manuals, parts catalogues, ECN packages, SOP updates, correction packages, saleable-status material and bulk part-number mappings. Inspected engineering drawings include Tata Hitachi proprietary ownership and transmission restrictions; the repository also contains Hitachi Construction Machinery platform material and supplier-origin documentation.
Ransom note
Published by the group on their leak site, reproduced verbatim.
The files will be published after the timer counts down. The company still has time to get in touch with us
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- label
- Data repository size
- value
- Total content files: 14,672; Known listed content: 66.45 GB
- Overall sensitivity
- VERY HIGH
- This post unlocks when the timer ends.
- present
- The company still has time to get in touch with us
- present
- The files will be published after the timer counts down. The company still has t
- extortion_text
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.