Skip to content
Leak-site post naming kc.co.kr, captured by ThreatCluster

kc.co.kr

underground

Ransomware leak-site victim intelligence

Posted
May 3, 2024
Country
South Korea
Industry
Manufacturing, I...

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post

Underground claims to have stolen a broad trove from kc.co.kr, a South Korean manufacturing company, including financial documents and employees’ personal data. It also lists proprietary and confidential documents, NDAs, stock and employment documents, board and shareholder agreements, personnel tests data, internal incident reports, confidential presentations, restricted/secret documents, parts development documents and external confidential information. The leak post is published. The page identifies kc.co.kr as the victim, notes its South Korea location and revenue of $650 million, and mentions a named individual, Kyung Chang.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

People named
Kyung Chang

What was taken

kc.co.kr | Underground store

Data categories
Strictly Private and Confidential documentsfinancial documentspersonal information of employeesdrawings marked PROPRIETARY AND CONFIDENTIALsecret designsproprietary documents of companyjoint written consent of board of directorsNDAsConfidential Agreementstock agreementsretention bonus agreementsoffer lettersagreements (shareholder etc)personal tests data of each individualinternal incidentsconfidential presentations of each part대외비 (협력사 유출 절대 금지)parts developmentdocuments marked as "secret"documents marked as "RESTRICTED"
Sample files (20)
Strictly Private and Confidential documents
financial documents
personal information of employees
drawings marked PROPRIETARY AND CONFIDENTIAL
secret designs
proprietary documents of company
joint written consent of board of directors
NDAs
Confidential Agreement
stock agreements
retention bonus agreements
offer letters
agreements (shareholder etc)
personal tests data of each individual
internal incidents
confidential presentations of each part
대외비 (협력사 유출 절대 금지)
parts development
documents marked as "secret"
documents marked as "RESTRICTED"

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Kyung Chang
heading on page
Date on page
09/23/2026 08:26
Show files link
/packages/fb60ff1e-fd24-4931-8a61-ff6b7f885ee9/file_manager
Download file listing link
/packages/fb60ff1e-fd24-4931-8a61-ff6b7f885ee9?dir
대외비 (협력사 유출 절대 금지)
present in data categories

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture