Skip to content
Leak-site post naming shengyusteel.com, captured by ThreatCluster

shengyusteel.com

underground

Ransomware leak-site victim intelligence

Posted
Apr 16, 2025
Country
Taiwan
Industry
Manufacturing

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

The Underground group claims to have stolen a broad data set from Shengyu Steel Co., Ltd. (shengyusteel.com), including ownership structure documents, executive files, HR records, records of materials used in manufacturing, personal employee data, intellectual property, Yodoko International Limited documents, financial documents, and product development and compliance documentation. The leak page states the victim is Shengyu Steel Co., Ltd., a Taiwan-based manufacturing company with revenue of $431.6 million. The leak post is published on the group's site.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Shengyu Steel Co., Ltd., which operates in the steel manufacturing and distribution industry

Data categories
Company ownership structure documentsDocuments from the company president's computerHR reportsRecords of materials used in manufacturingClaimsPersonal data on employees (passports, employment contracts)Intellectual property of the companyYodoko International Limited (YIL) documentsFinancial documents of the companyProduct developmentDocuments marked confidentialProduct compliance documentation (test reports, compositions, and properties)

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture