Summary
Written by ThreatClusterfrom file listing, victim profile, leak post, screenshotEverest states TechCorr's data archive, totaling 136 GB across 49,506 files, has been taken. They describe the data as covering a broad internal environment including operational and field-inspection data, NDT and radiography data, QA/QC, engineering, client-delivery, training, certification, personnel qualification files, financial data (including Quicken data), software/runtime data, archival data, and medical/health-related files. The leak page shows a countdown publication status, with the group saying the files will be published after the timer counts down and TechCorr may still contact them. Victim is TechCorr (techcorr.com), described as operating in oil-and-gas and industrial infrastructure and field-inspection contexts.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Platforms
- DicomViewer Starrlight INDUSTREX / Carestream viewer packages MicroDicomDB
What was taken
The data archive represents a large internal corporate, operational, field-inspection, NDT, radiography, QA/QC, engineering, client-delivery, training, certification, personnel, software-runtime, financial and archival environment associated with TechCorr and its inspection, testing and field-service operations.
Ransom note
Published by the group on their leak site, reproduced verbatim.
The files will be published after the timer counts down. The company still has time to get in touch with us soon
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- context
- The archive has a clear oil-and-gas, industrial infrastructure and field-inspection context.
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.