Skip to content
Leak-site post naming Shanghai Tunnel Engineering Co Ltd, captured by ThreatCluster

Shanghai Tunnel Engineering Co Ltd

global

Ransomware leak-site victim intelligence

Data size
183.27 GB
Files
174
Views
272
Posted
Aug 28, 2026
Countdown
19 Days 09:11:30
Country
Singapore
Industry
Civil engineering and construction

Summary

Written by ThreatClusterfrom victim profile, leak post

The group claims 183.27 GB of data from STECS is in countdown to publication. The leak page describes STECS as a leading civil engineering and construction company in Singapore, specializing in rail transit and underground projects. The victim profile on the leak page lists STECS with domain www.stecs.com.sg and sector civil engineering and construction.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

STECS is a leading civil engineering and construction company in Singapore, specializing in rail transit and underground projects. It has completed over 30 major projects for key clients like the Land Transport Authority and Public Utilities Board. The company prioritizes safety, environmental responsibility, and improving urban infrastructure in Southeast Asia.

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

ESCROW
All target disclosures and research materials are held under sealed cryptographic escrow until verified publication. Unreleased materials remain inaccessible to third parties.
CUSTODY & ESCROW
All target disclosures and research materials are held under sealed cryptographic escrow until verified publication. Unreleased materials remain inaccessible to third parties.
EDGE RUNTIME & LOGGING
This public node operates on an ephemeral memory model with zero persistent logging. No user sessions, identity keys, or raw archive databases are retained on edge routing layers.
Anonymous Ticket System
🎫 Anonymous Ticket System (Zero-JS)
ENCRYPTED WHISTLEBLOWER BOX
ENCRYPTED WHISTLEBLOWER BOX
✨ Argon2id + AES-256-GCM Encrypted
✨ Argon2id + AES-256-GCM Encrypted

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture