Skip to content
Leak-site post naming Hans & Jos. Kronenberg GmbH, captured by ThreatCluster

Hans & Jos. Kronenberg GmbH

payload

Ransomware leak-site victim intelligence · DE

Data size
54 GB
Posted
Aug 3, 2026
Country
Germany
Industry
elevator industry and mechanical engineering

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

The group payload claims 54 GB of data related to Hans & Jos. Kronenberg GmbH, a German elevator-industry and mechanical engineering company headquartered in Bergisch Gladbach. The leak post identifies the victim’s legal name and domain as Hans & Jos. Kronenberg GmbH (kronenberg-gmbh.de). Publication status is listed as countdown on the leak site.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Founded
1932

What was taken

Hans & Jos. Kronenberg GmbH is a German company founded in 1932 and based in Bergisch Gladbach. It specializes in the development and manufacturing of high-quality components for the elevator industry and mechanical engineering, including door locks, switches, control panels, and LED lighting.

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

leak
http://payload6eualw6kni6v2lqn7ovjcl76ojx25z5unsyvqo3lbqy3bo5qd.onion/
site
https://kronenberg-gmbh.de

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture