Skip to content
Leak-site post naming Shanghai Tunnel Engineering Co Ltd, captured by ThreatCluster

Shanghai Tunnel Engineering Co Ltd

global

Ransomware leak-site victim intelligence

Data size
183.27 GB
Files
1,615
Views
2,070
Posted
Aug 28, 2026
Country
Singapore
Industry
Civil engineering and construction

Summary

Written by ThreatClusterfrom victim profile, leak post

The group claims 183.27 GB of data from STECS is in countdown to publication. The leak page describes STECS as a leading civil engineering and construction company in Singapore, specializing in rail transit and underground projects. The victim profile on the leak page lists STECS with domain www.stecs.com.sg and sector civil engineering and construction.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
Tor v3 Zero-JS

What was taken

Shanghai Tunnel Engineering Co Ltd Site: https://www.stecs.com.sg Address: 1099 South Wanping Rd. Xuhui District, Shanghai 200232 Archive size: 183.27 GB STECS is a leading civil engineering and construction company in Singapore, specializing in rail transit and underground projects. It has completed over 30 major projects for key clients like the Land Transport Authority and Public Utilities Board. The company prioritizes safety, environmental responsibility, and improving urban infrastructure in Southeast Asia.

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

ESCROW
All target disclosures and research materials are held under sealed cryptographic escrow until verified publication. Unreleased materials remain inaccessible to third parties.
Address
1099 South Wanping Rd. Xuhui District, Shanghai 200232
address
1099 South Wanping Rd. Xuhui District, Shanghai 200232
Archive size
183.27 GB
CUSTODY & ESCROW
All target disclosures and research materials are held under sealed cryptographic escrow until verified publication. Unreleased materials remain inaccessible to third parties.
EDGE RUNTIME & LOGGING
This public node operates on an ephemeral memory model with zero persistent logging. No user sessions, identity keys, or raw archive databases are retained on edge routing layers.
Anonymous Ticket System
🎫 Anonymous Ticket System (Zero-JS)
ENCRYPTED WHISTLEBLOWER BOX
ENCRYPTED WHISTLEBLOWER BOX
✨ Argon2id + AES-256-GCM Encrypted
✨ Argon2id + AES-256-GCM Encrypted
All target disclosures and research materials are held under sealed cryptographi
All target disclosures and research materials are held under sealed cryptographic escrow until verified publication. Unreleased materials remain inaccessible to third parties.

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

Negotiation

SEALED // AUTHENTICATED DISCLOSURE