Leak-site post naming TechCorr, captured by ThreatCluster

TechCorr

everest

Ransomware leak-site victim intelligence · EN

Data size
136 GB
Files
49,506
Views
34,000
Posted
Jul 9, 2024
Countdown
The files will be published after the timer counts down. The company still has time to get in touch with us soon
Industry
oil-and-gas, industrial infrastructure and field-inspection context

Summary

Written by ThreatCluster from file listing, victim profile, leak post, screenshot

Everest states TechCorr's data archive, totaling 136 GB across 49,506 files, has been taken. They describe the data as covering a broad internal environment including operational and field-inspection data, NDT and radiography data, QA/QC, engineering, client-delivery, training, certification, personnel qualification files, financial data (including Quicken data), software/runtime data, archival data, and medical/health-related files. The leak page shows a countdown publication status, with the group saying the files will be published after the timer counts down and TechCorr may still contact them. Victim is TechCorr (techcorr.com), described as operating in oil-and-gas and industrial infrastructure and field-inspection contexts.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
DicomViewer Starrlight INDUSTREX / Carestream viewer MicroDicomDB

What was taken

The data archive represents a large internal corporate, operational, field-inspection, NDT, radiography, QA/QC, engineering, client-delivery, training, certification, personnel, software-runtime, financial and archival environment associated with TechCorr and its inspection, testing and field-service operations.

Data categories
operational recordsfield-inspection dataNDT dataradiography dataQA/QC dataengineering dataclient-delivery datatraining materialscertification recordspersonnel qualification filesfinancial dataQuicken datasoftware/runtime dataarchival datamedical/health-related filesDICOM/DICONDE image datafield ticketstimesheetsinspection templatesquality manualsemployee recordsVeriforce recordstraining/certification materials
Leak site tags
industryoil & gasNDTradiographyQA/QCfield-inspectionclient-delivery
File types seen
dcm × 29,100pdf × 5,954tif × 8,891

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page 11 KB
Logo of Keysight Technologies featuring a red waveform graphic and the company name in white text.
onion leak page 128 KB
onion leak page 11 KB
Logo featuring the text "mansfield" in a stylized font, with "FAMILY DENTISTRY" below it.
onion leak page 1.4 KB
Logo featuring a stylized letter "P" in orange with a black play button icon integrated into the design.
onion leak page 7.5 KB
onion leak page 5.8 KB
Logo featuring the text "Al-Futtaim" in blue, with "automotive" in a smaller font below it, accompanied by a geometric symbol.
onion leak page 5.6 KB
Logo featuring stylized figures in orange and blue, representing connection or community, with the text "ALZONE" below.
onion leak page 7.0 KB
Logo of Emirates Flight Catering, featuring stylized text and a decorative emblem.
onion leak page 6.8 KB
Logo of Dharma Group featuring a stylized design with blue and green colors, accompanied by the text "DHARMA GROUP" below it.
onion leak page 7.7 KB