Summary
Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot, ransom noteEverest claims to have exfiltrated 263.71 GB from Taekwang Network Information, comprising 54,581 files. The group states the data includes HR records, financial data, hospital project materials, university and school records, and emails. The leak page shows a countdown publication status. Victim profile per the leak page: Taekwang Network Information (태광네트웍정보), a South Korean network integration company, with platforms named including Ruckus, Cisco, Fortinet and AhnLab.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Platforms
- Ruckus Cisco Fortinet AhnLab
What was taken
The tknoffice materials relate to Taekwang Network Information (태광네트웍정보), a South Korean network integration company. Its areas of work include network integration (NI), KT Managed, KT Flexline, wireless networks using Wi-Fi access points (AP), switching, firewalls, authentication servers and access control. The documents cover successive project stages: site surveys, solution design, pricing, procurement, installation, configuration, testing and maintenance. Commercial workbooks link clients to equipment, services, terms and contacts; engineering materials record device placement, cable routes, configurations and fault histories. The main client sectors are hospitals, universities and schools, financial institutions, industrial companies and public infrastructure. Major document sets cover the four Paik hospitals, KDI, Korea International School, Seoul International School, SMBC trading-desk communications, Hanwha Total industrial networks and the Seoul Metro Wi-Fi proposal. The integrator's own working materials are stored alongside documentation from Ruckus, Cisco, Fortinet and AhnLab, as well as partners' proposals. The collection includes user-interface code, editable radio models and integration designs.
Ransom note
Published by the group on their leak site, reproduced verbatim.
The files will be published after the timer counts down. The company still has time to get in touch with us
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.