Leak-site post naming Mercedes-Benz Turk, captured by ThreatCluster

Mercedes-Benz Turk

doommageddon

Ransomware leak-site victim intelligence · EN

Data size
30.24 GB
Files
64,547
Views
64,547
Posted
Jul 6, 2026
Countdown
Deadline May 20, 2026
Country
Turkey
Industry
Manufacturing

Summary

Written by ThreatCluster from victim profile, leak post, screenshot

Doommageddon claims to have exfiltrated 30.24 GB of data from Mercedes-Benz Turk A.S., comprising 64,547 files, with a countdown deadline of May 20, 2026. The group states the data includes HR and recruitment records, internal documentation and source code. The leak page identifies Mercedes-Benz Turk A.S. as the victim, noting the company employs over 6,300 people. The post is published with a countdown indicated by the leak page.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Headquarters
Hoşdere Manufacturing Plant (Istanbul) and Aksaray Manufacturing Plant (Aksaray)
Istanbul, Turkey
Employees
0

What was taken

Incident overview: With its investment volume over €1,3 billion, Mercedes-Benz Turk A.S. is one of the greatest foreign capital investments in Turkey and employs over 6,300 employees. Engaged in manufacturing operations for inner city and intercity buses in Istanbul Hoşdere Manufacturing Plant and for heavy duty trucks and tractor units in Aksaray Manufacturing Plant in order to carry out sales in the domestic market and export to international markets, Mercedes-Benz Turk A.S. plays a major role in manufacturing and R&D network of its parent company, Daimler Truck AG.

Data categories
PIIContractsDatabasesEmails
File types seen
zip × 1
Sample files (1)
mercedes.zip

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture