Skip to content
Leak-site post naming Grupo DT, captured by ThreatCluster
Back to victims

Grupo DT

everest

Ransomware leak-site victim intelligence

Data size
204.28 GB
Files
31,157
Views
43,000
Posted
Aug 20, 2026
Countdown
The timer counts down
Country
ES
Industry
Vehicle Acquisition, Transfer and Valuation Data

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot, ransom note

Everest-listed group claims Grupo DT's data repository contains 31,157 files totaling 204.28 GB, with collections including Dpto. Valoraciones, Hierro-Tenecicla, and data on vehicle acquisition, ownership transfer and valuation, plus dealer, towing, scrapyard, waste-management and environmental/regulatory records. The leak page also identifies SEINTO backups totaling 162.95 GB (38 BAK files) and seven PST mailbox files totaling 23.36 GB. Publication status on the leak page is countdown.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
Power BI SQL Server One Drive
People named
Jonathan Noelia

What was taken

The Grupo DT data repository contains 31,157 files totaling 204.28 GB. The business data contains 31,119 files totaling 41.33 GB, including Dpto. Valoraciones (2,843 files, 24.00 GB) and Hierro-Tenecicla (28,276 files, 17.33 GB). The SEINTO SQL Server backups total 162.95 GB across 38 BAK files.

Data categories
Vehicle acquisition, ownership transfer and deregistrationVehicle technical documentation and circulation permitsVehicle valuation and appraiser reportingDealer, towing-company, municipal-depot and scrapyard activityWaste pickup, transport, treatment and certificationDCS and DI waste-control documentationSIGAUS used-oil recordsEnvironmental authorizations and chronological registersInvoices, paid invoices, unpaid invoices and corrective invoicesBanking mandates, payment forecasts and transfer receiptsContracts, offers, budgets and client documentationCustomer, supplier and counterparty recordsPower BI dashboards, Access data and structured Excel workbooksIdentity, residence, inheritance and representative documentationWorker, driver, medical-fitness, training and PPE documentationPST mailboxes, MSG project correspondence and EML recordsOperational photographs, vehicle media and selected film-project material
File types seen
eml × 2msg × 6pdf × 23,645pst × 7docx × 1,426pptx × 21xlsx × 4,672accdb × 1
Sample files (3)
D:\GDT\Dpto.+Valoraciones.zip > Dpto. Valoraciones\COMPRA-VENTA\1940DBF CAMION MERCEDES\1940DBF FICHA TECNICA.pdf
D:\GDT\Dpto.+Valoraciones.zip > Dpto. Valoraciones\COMPRA-VENTAS\CITROEN C3 926-GVK\PERMISO CIRCULACION A NOMBRE DEL TITULAR.pdf
D:\GDT\Dpto.+Valoraciones.zip > Dpto. Valoraciones\COMPRA-VENTAS...

Ransom note

Published by the group on their leak site, reproduced verbatim.

We are offering one more chance and expect the company to engage in a constructive dialogue; otherwise, all data will be published.
Contact us Qtox:
99D176DB79C7DB2A708F680C460CA48540230AA103F1EF69A26EBFE29661C933918DE7852521
The files will be published after the timer counts down. The company still has time to get in touch with us

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

latest post
Sep 1
SEINTO backups
The SEINTO SQL Server backup repository contains 38 BAK files totaling 162.95 GB.
PST mailbox data
Seven PST mailbox files total 23.36 GB.
Seinto data fields
The SEINTO models contain CIF/CIFNIF, vehicle registration, VIN/chassis, owner and representative identity fields, payment data and receivable information.
repository_summary
The Grupo DT data repository contains 31,157 files totaling 204.28 GB. The business data contains 31,119 files totaling 41.33 GB. Dpto. Valoraciones contains 2,843 files totaling 24.00 GB, and Hierro-Tenecicla contains 28,276 files totaling 17.33 GB. The SEINTO SQL Server backup repository contains 38 BAK files totaling 162.95 GB.
The data contains records through 2026 together with historical operational, con
The data contains records through 2026 together with historical operational, contractual, vehicle, accounting and correspondence material from prior years.

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page11 KB
Logo featuring a stylized letter "E" in red and a gray arrow pointing to the right.
onion leak page6.8 KB
Logo of Kingston Technology featuring a stylized red figure and the company name in black text.
onion leak page29 KB
Logo featuring the text "GRUPO DT" and "DESGUACES TENERIFE," accompanied by a stylized car outline in orange.
onion leak page19 KB
Logo of Capgemini featuring a blue stylized cloud shape above the name "Capgemini" with the tagline "Consulting. Technology. Outsourcing."
onion leak page27 KB
Logo of Atlas Air Worldwide featuring the company name in blue with a yellow globe design above it.
onion leak page6.7 KB
Logo featuring the text "rx networks" with a stylized design, including a wireless signal icon.
onion leak page7.3 KB
Logo of Ingersoll Rand featuring the letters "IR" in red with a circular design.
onion leak page11 KB
Logo of Keysight Technologies featuring a red waveform symbol and the company name in white text.
onion leak page128 KB
onion leak page11 KB

Negotiation

ongoing
Tox 99D176DB79C7DB2A708F680C460CA48540230AA103F1EF69A26EBFE29661C933918DE7852521