Skip to content
Leak-site post naming SFA Engineering Corporation, captured by ThreatCluster

SFA Engineering Corporation

metaencryptor

Ransomware leak-site victim intelligence

Data size
70 GB
Posted
Sep 15, 2026
Countdown
17d Deadline
Country
KR
Industry
industrial automation, robotics, and manufacturing equipment

Summary

Written by ThreatClusterfrom victim profile, leak post, our reporting

MetaEncryptor claims to have leaked 70 GB of data from SFA Engineering Corporation on its ransomware leak site. The leak page lists SFA Engineering Corporation as the victim, with domain sfa.co.kr and country South Korea. The material states that on 2026-09-15 SFA Engineering and Nippon Steel were listed as victims, with no details on attack method or data types provided.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Employees
0

What was taken

SFA Engineering Corporation is a South Korean high-tech engineering company specializing in industrial automation, robotics, and manufacturing equipment. The company provides advanced solutions for the semiconductor, OLED display, battery, and smart factory industries, serving major global manufacturers.

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

Negotiation

Negotiating