Skip to content
Leak-site post naming Kissei Shoji, captured by ThreatCluster

Kissei Shoji

everest

Ransomware leak-site victim intelligence

Data size
323 GB
Files
278,326
Views
4,400
Posted
Oct 17, 2026
Countdown
0 6 d : 1 0 h : 4 4 m : 2 9 s
Country
JP
Industry
Manufacturing

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot, ransom note

Everest claims to have exfiltrated 323.58 GB across 278,326 files from Kissei Shoji (domain kissei-shoji.co.jp), distributed across folder “1” and 25 employee folders. The data categories claimed include product development and formulations, software-related materials, production, testing, quality and safety, finance, contracts and pricing, procurement, inventory, customer documents, personal data, and access-related information. The leak page shows a countdown to publication and identifies Kissei Shoji as the victim, stating the files will be published after the timer ends.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

People named
Kissei Shoji

What was taken

kissei-shoji.co.jp 323 GB DataBase. FILE VOLUMES AND LOCATIONS. 278,326 files totaling 323.58 GB across folder "1" and 25 employee folders. Contents include product development and formulations, software-related materials, production, testing, quality and safety, finance, contracts and pricing, procurement, inventory, customer documents, personal data, and access-related information.

Data categories
product development and formulationssoftware-related materialsproductiontestingquality and safetyfinancecontracts and pricingprocurementinventorycustomer documentspersonal dataaccess-related information

Ransom note

Published by the group on their leak site, reproduced verbatim.

The files will be published after the timer counts down. The company still has time to get in touch with us This post unlocks when the timer ends.

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

data_claims
kissei-shoji.co.jp 323 GB DataBase
folders_info
Folder "1" - E:\kissei\1: approximately 108.42 GB; 70,421 files. E:\kissei contains 25 separate employee folders totaling 215.16 GB and 207,905 files. Total: 278,326 323.58 GB
recall_status
The 2026 recall remained open as of the meeting on 23 July 2026. As of 23 July, the return rate was estimated at approximately 40%, and the records referred to monitoring through the incorrectly stated date in August 2027.
timer_display
The files will be published after the timer counts down. The company still has time to get in touch with us

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page11 KB
Logo of the Brenner Base Tunnel (BBT) project, featuring the acronym "BBT" and the full name in Italian.
onion leak page28 KB
Logo featuring the text "태광네트워크정보" with the English subtitle "Total Network Solutions Provider."
onion leak page2.3 KB
The image contains a logo featuring the word "bend" in lowercase letters, accompanied by a circular symbol above the text.
onion leak page2.3 KB
Logo featuring the word "KISSEI" in blue, with a circular emblem containing stylized waves.
onion leak page145 KB
Logo of Topcon Healthcare featuring the name "Topcon" in black and "Healthcare" in purple.
onion leak page14 KB
Logo featuring two figures performing CPR, with the text "Laerdal" and the slogan "helping save lives."
onion leak page21 KB
Logo of flydubai, featuring the name in lowercase letters with an orange and blue color scheme.
onion leak page5.6 KB
Logo featuring the text "MORCON" in bold silver letters, with "DEVELOPMENTS" in smaller text below, and a stylized blue and silver "M" above.
onion leak page44 KB
Logo featuring two stylized figures in blue, with an upward arrow in gray, symbolizing growth or progress.
onion leak page1.8 KB