Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshotThe group dark project claims a sophisticated cyberattack on Ruhrpumpen resulted in a data breach with about 1 TB of data leaked, including confidential personal and financial information. The victim is Ruhrpumpen, ruhrpumpen.com, a manufacturing company based in Mexico with revenue of about $350 million. The leak post claims 116,438 files were involved, covering data categories such as confidential personal information and financial information. The leak post is published.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
What was taken
A cyberattack has resulted in the exfiltration of nearly 300 gigabytes of highly sensitive data, exposing a vast trove of internal records. The compromised material includes personal employee documents, confidential company financial records, invoices, taxpayer statements, and extensive client information. More than 10,000 PDF files have been leaked, containing unredacted Social Security numbers, driver’s licenses, payroll records, and other protected identifiers, raising the specter of widespread identity theft and regulatory scrutiny.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- TOX_ID
- 243AAD0D1875CA4D48034E799785F2C9EA225E4466C87FA9B9297F7BEADC694478C7DE0A7639
- Data Leak URL
- http://xxeb7jwmrarymyoy3fsck3bwrdlmh7k4fyam63ywyi3injbt6idz6rid.onion
Leak-site images (2)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.