Skip to content
Leak-site post naming Pump Engineering Company, captured by ThreatCluster

Pump Engineering Company

dark project

Ransomware leak-site victim intelligence · EN

Data size
115 GB Data Analyzed
Files
120,000
Views
9,916
Posted
Aug 25, 2026
Country
United States
Industry
Industrial pumps and fluid handling systems distributor

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

The leak post states approximately 1 TB of data and 116,438 files are claimed stolen from Ruhrpumpen. The data categories claimed are confidential personal information and financial information. Victim profile lists Ruhrpumpen's domain ruhrpumpen.com, in manufacturing, based in Mexico, with reported revenue of $350 million. The publication status is listed as published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Founded
1946
Domains
pumpengineering.net

What was taken

During the cyberattack, 120,000 files (115 GB) were stolen, including an extensive customer database, insurance documents, confidential financial documents, and a vast number of project drawings.

Data categories
customer databasesinsurance documentsconfidential financial documentsproject drawings

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX_ID
243AAD0D1875CA4D48034E799785F2C9EA225E4466C87FA9B9297F7BEADC694478C7DE0A7639

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Screenshot of a code editor displaying a script with programming code on the right and a file directory on the left.
onion leak page731 KB