Skip to content
Leak-site post naming Powerweave, captured by ThreatCluster

Powerweave

everest

Ransomware leak-site victim intelligence

Data size
1.65 TiB
Files
3,900,856
Views
63,000
Posted
Aug 5, 2026
Countdown
The files will be published after the timer counts down. The company still has time to get in touch with us
Country
IN
Industry
Digital transformation, e-commerce, procurement, ERP, and business services

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

Everest states that Powerweave Group’s data was exfiltrated, totaling 1.6 TB across 3,900,856 files. Data categories claimed include Design and Production Intellectual Property, Orders, Sales and Financial Operations, Development and Infrastructure, Geospatial and Technical Data, and Personal and Communications Data. The leak page identifies the victim as Powerweave Group (powerweave.com) with over 1,600 employees and shows a countdown for publication of the files, stating the company still has time to contact the actors. It also states the largest area comprises 561.93 GiB of Tree-Free Greetings production materials.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Employees
0
Platforms
Classic ASP ASP.NET C# PHP JavaScript HTML/CSS WordPress APIs DLL EXE MSI PowerShell
People named
Deepak Punjabi

What was taken

Powerweave: Company profile and dataset overview; dataset contains 1.65 TiB across DA/Tech/IT, including design and production intellectual property, ERP and CRM data, orders, GIS data, and backups. The page lists Tree-Free Greetings, Hindalco Belagavi, ImprintID and other clients with archived materials.

Data categories
Design and Production Intellectual PropertyOrders, Sales, and Financial OperationsGeospatial and Technical DataPersonal and Communications Data
File types seen
ai × 1dbf × 1eml × 1eps × 1jpg × 1msg × 1pdf × 2prj × 1psd × 1shp × 1shx × 1xml × 1indd × 1tiff × 1

Ransom note

Published by the group on their leak site, reproduced verbatim.

The files will be published after the timer counts down. The company still has time to get in touch with us

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

latest_post
Jul 23
largest_area
The largest business area is DA/treefree-art: 561.93 GiB of production PDF, PSD, TIFF, JPG, and template files associated with Tree-Free Greetings.
largest_business_area
The largest business area is DA/treefree-art: 561.93 GiB of production PDF, PSD, TIFF, JPG, and template files associated with Tree-Free Greetings.

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page11 KB
Logo of Keysight Technologies featuring a red waveform graphic and the company name in white text.
onion leak page128 KB
onion leak page11 KB
Logo featuring the text "mansfield" in a stylized font, with "FAMILY DENTISTRY" below it.
onion leak page1.4 KB
Logo featuring a stylized letter "P" in orange with a black play button shape integrated into the design.
onion leak page7.5 KB
onion leak page5.8 KB
Logo of Al-Futtaim Automotive featuring a blue geometric design and the company name in blue text.
onion leak page5.6 KB
Logo featuring stylized figures in orange and blue, with the text "ALZONE" in blue below the figures.
onion leak page7.0 KB
Logo of Emirates Flight Catering, featuring stylized text in gold and red.
onion leak page6.8 KB
Logo of Dharma Group featuring a stylized design with blue and green colors, accompanied by the text "DHARMA GROUP" below it.
onion leak page7.7 KB