🕸️ Ransomware Detected: kramer-nsc.at targeted by krybit
kramer-nsc.at is targeted by krybit.Victim Description: Kramer Nutzfahrzeug Service Center GmbH specializes in the service and repair of commercial vehicles, including brands l...Victim’s Country: ATDiscovered: 04 Apr 2026, 04:31 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Seoyon E-Hwa Summit targeted by netrunner
Seoyon E-Hwa Summit is targeted by netrunner.Victim Description: Seoyon E‑Hwa Summit is a subsidiary of Seoyon E‑Hwa that manufactures automotive components, operating as part of Seoyon E‑Hwa’s international production network.Victim’s Country: INDiscovered: 04 Apr 2026, 04:19 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Woodland Trade targeted by akira
Woodland Trade is targeted by akira.Victim Description: Woodland Trade Company is a full-service tool design and manufact
uring firm based in Tacoma, Washington, specializing in tool desi
gn and fabrication using composites, metals, and 3D printed hardw
are. The company serves a diverse range of industries including a
erospace, automotive, marine, medical, and space, and is recogniz
ed for its engineering design, CNC machining, and additive manufa
cturing capabilities.
We will upload 13gb of corporate data soon. Detailed employee inf
ormation (passport, DLs, SSNs, addresses, phones, emails and so o
n), financials, payment details, credit card information, project
s, drawings and specification contracts with government facilitie
s and big names like BOEING and so on.Victim’s Country: USDiscovered: 04 Apr 2026, 00:03 SGT
Known TTPs associated with Akira
T1021.001 Remote Desktop ProtocolT1027.001 Binary PaddingT1036.005 Match Legitimate Resource Name or LocationT1059.001 PowerShellT1560.001 Archive via Utility
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: acmealliance.com targeted by dragonforce
acmealliance.com is targeted by dragonforce.Victim Description: It is a global manufacturer specializing in the custom production of die-cast components for various industries, including the automotive, marine, and agricultural sectors.Victim’s Country: USDiscovered: 02 Apr 2026, 22:05 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Katcon Global targeted by crypto24
Katcon Global is targeted by crypto24.Victim Description: [AI generated] "Katcon Global" is a prominent automotive supplier, specialized in the field of developing, designing, and manufacturing advanced vehicle exhaust systems. Established in 1993 in Mexico, the company has now expanded worldwide at multiple locations, including Europe, Asia, Australia, and America. Besides exhaust systems, Katcon also provides solutions in energy recovery and sustainability sectors.Victim’s Country: MXDiscovered: 02 Apr 2026, 21:58 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Nissan targeted by everest
Nissan is targeted by everest.Victim Description: [AI generated] Nissan Motor Co., Ltd. is a leading Japanese multinational automotive manufacturer headquartered in Yokohama, Japan. It was established in 1933 and is known for producing a wide range of vehicles, such as SUVs, sedans, electric/ hybrid cars and commercial vehicles. It is part of the Renault–Nissan–Mitsubishi Alliance, which is one of the world's largest automotive partnerships.Victim’s Country: JPDiscovered: 01 Apr 2026, 08:08 SGT
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Groupe Courtois Automobiles targeted by dragonforce
Groupe Courtois Automobiles is targeted by dragonforce.Victim Description: Groupe Courtois is an automotive dealership specializing in Honda vehicles, with over 40 years of experience in the automotive industry. They operate in Chambourcy and Saint-Ouen-l'Aumône,Victim’s Country: FRDiscovered: 27 Mar 2026, 16:14 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Kiswire targeted by incransom
Kiswire is targeted by incransom.Victim Description: Kiswire Ltd.
37 Gurak-ro 141beon-gil
Suyeong-gu
Busan, 48212
South Korea
www.kiswire.com
is a prominent player in the specialty steel wire industry, headquartered in Busan, South Korea. Founded in 1945, the company has established itself as a global leader, manufacturing a wide range of steel wire products for various sectors, including automotive, construction, energy, and electronics. Kiswire exports its products to over 80 countries and maintains a significant production capacity of approximately 1.2 million tons annually.
Leaked data: 128 GB (137,688,514,560 bytes)
118,019 Files, 22,024 Folders
Special data: technologies, information about manufactured products, control of technological processes and tests, product assembly schemes, material specifications, drawings, product tests, logistics, financial indicators, complete information about employees including complete personal data, photographs, gender and skin color, etc., corporate information and more.
Status of data: confidentalVictim’s Country: KRDiscovered: 24 Mar 2026, 07:00 SGT
Known TTPs associated with INC Ransom
T1021.001 Remote Desktop ProtocolT1078 Valid AccountsT1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for ImpactT1566 Phishing
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Rioja Motor targeted by akira
Rioja Motor is targeted by akira.Victim Description: Riojamotor specializes in the sale of new and used vehicles, incl
uding brands such as Volkswagen, Audi, Seat, Skoda, and Cupra. Th
ey offer financing options and vehicle appraisal services, cateri
ng to clients looking for both personal and commercial vehicles.
We will upload 17gb of corporate data soon. Employee personal inf
ormation (passports, IDs, address, emails and so on), medical inf
ormation, client personal docs, financials, lots of projects, cor
respondence, etc.Victim’s Country: ESDiscovered: 24 Mar 2026, 00:40 SGT
Known TTPs associated with Akira
T1021.001 Remote Desktop ProtocolT1027.001 Binary PaddingT1036.005 Match Legitimate Resource Name or LocationT1059.001 PowerShellT1560.001 Archive via Utility
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Micro Leasing targeted by thegentlemen
Micro Leasing is targeted by thegentlemen.Victim Description: microleasingplc.com zoominfo.com/c/micro-leasing/482150678 Micro Leasing Public Company Limited specializes in providing financing services for second-hand trucks, including truck purchase loans and refinancing options. The company targets clients in need of commercial vehicles, positioning itself as a leader in the second-hand truck financing sector in Thailand. In addition to truck financing, they also offer motorcycle loans and insurance brokerage services. Micro Leasing aims to support business expansion and improve liquidity for its clients while providing excellent consulting servicesVictim’s Country: THDiscovered: 21 Mar 2026, 20:07 SGT
Known TTPs associated with The Gentlemen
T1021.002 SMB/Windows Admin SharesT1047 Windows Management InstrumentationT1053.005 Scheduled TaskT1486 Data Encrypted for ImpactT1685 Disable or Modify Tools
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: odayequipment.com targeted by dragonforce
odayequipment.com is targeted by dragonforce.Victim Description: Founded in 1935, ODay Equipment specializes in supplying and maintaining equipment for the oil and gas industry, serving customers in the U.S. Midwest.The company offers fuel storage tanks, retail fueling systems, EV charging solutions,installation, and a variety of repair services.Victim’s Country: USDiscovered: 20 Mar 2026, 23:33 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: bdtronic targeted by akira
bdtronic is targeted by akira.Victim Description: bdtronic provides innovative solutions for dispensing, impregnati
on, hot riveting, and plasma applications, serving various indust
ries including automotive, electronics, telecommunications, and r
enewable energy.
We will upload 40gb of corporate data soon. Employee personal inf
ormation (passports, DLs, and so on), lots of HR files, financial
s, SpaceX project files, other partners files, contracts and agre
ements, and so on.Victim’s Country: DEDiscovered: 20 Mar 2026, 20:31 SGT
Known TTPs associated with Akira
T1021.001 Remote Desktop ProtocolT1027.001 Binary PaddingT1036.005 Match Legitimate Resource Name or LocationT1059.001 PowerShellT1560.001 Archive via Utility
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Pearce Services targeted by worldleaks
Pearce Services is targeted by worldleaks.Victim Description: [AI generated] Pearce Services is a provider of mission-critical services maintaining and repairing infrastructure for telecommunications, renewable energy, and electric vehicle (EV) charging networks. It offers specialized services including design, installation, maintenance, repair, and replacement solutions. The firm caters to blue-chip companies across the US, rendering services to help prolong the lifecycle of their infrastructure, promote network efficiency and reliability.Victim’s Country: USDiscovered: 20 Mar 2026, 18:35 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Tecnocad Group targeted by coinbasecartel
Tecnocad Group is targeted by coinbasecartel.Victim Description: [AI generated] Tecnocad Group is an Italian company that specializes in providing advanced engineering services. The company offers expertise in the fields of automotive design and development, including interior and exterior styling, chassis and body development, and industrial design. They work closely with manufacturing industries and are known for their commitment to use of innovative technologies and quality assurance in project delivery.Victim’s Country: ITDiscovered: 20 Mar 2026, 01:55 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: indrub.com targeted by lynx
indrub.com is targeted by lynx.Victim Description: Industrial Rubber Supply is a leading manufacturer and supplier of custom-molded, die cut, and industrial specialty items, serving industries such as industrial, agricultural, automotive, recreational, and transportation manufacturing. Established in 1974, the company operates from a 104,000 square-foot facility in Winnipeg, employing 85 people in the design, engineering, fabrication, and manufacturing of various products including cellular, industrial, and acoustical items. They also provide a range of services including custom die cutting, water jet cutting, and engineering and design, utilizing state-of-the-art equipment and the latest technologies. With extensive experience and a commitment to quality service, Industrial Rubber Supply has established itself as an industry leaderVictim’s Country: INDiscovered: 15 Mar 2026, 00:12 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Teknopres_TR targeted by incransom
Teknopres_TR is targeted by incransom.Victim Description: Our company Teknopres, which was founded in 1978, serves injection casting, mould design and mould construction for the internal and the external markets. Teknopres has the principles of Qualificated Customer Focusing Production.
Teknopres has the developing and constantly renewed technology in all departments. The company mainly works for the automotive, construction and electronics sectors.Victim’s Country: TRDiscovered: 10 Mar 2026, 20:33 SGT
Known TTPs associated with INC Ransom
T1021.001 Remote Desktop ProtocolT1078 Valid AccountsT1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for ImpactT1566 Phishing
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: First Priority Group targeted by everest
First Priority Group is targeted by everest.Victim Description: [AI generated] First Priority Group is a diversified manufacturer, dealer, up-fitter, and service provider of emergency and specialty vehicles. The company provides ambulance remounts, emergency vehicle parts, and services. It also designs and manufactures vehicle command centers for the law enforcement and public safety sectors. Based in New Jersey, it has been serving customers across the USA since 1998.Victim’s Country: USDiscovered: 10 Mar 2026, 10:48 SGT
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Estra Automotive targeted by incransom
Estra Automotive is targeted by incransom.Victim Description: Estra Automotive is an international automotive supplier that develops and manufactures thermal management components and systems for vehicles. The company focuses on products such as HVAC systems, heat exchangers, and engine cooling solutions used by global automotive manufacturers to maintain optimal vehicle temperature, improve efficiency, and support modern vehicle technologiesVictim’s Country: PLDiscovered: 10 Mar 2026, 09:23 SGT
Known TTPs associated with INC Ransom
T1021.001 Remote Desktop ProtocolT1078 Valid AccountsT1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for ImpactT1566 Phishing
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Applied Products targeted by akira
Applied Products is targeted by akira.Victim Description: Applied Products, Inc. is a leading supplier of high-performance,
pressure-sensitive adhesives for various OEM industries such as
HVAC, construction, automotive, and appliance manufacturing.
We will upload corporate data soon. Employee passports, DLs, proj
ects, confidential agreements, clients docs, NDAs, etc.Victim’s Country: USDiscovered: 06 Mar 2026, 00:19 SGT
Known TTPs associated with Akira
T1021.001 Remote Desktop ProtocolT1027.001 Binary PaddingT1036.005 Match Legitimate Resource Name or LocationT1059.001 PowerShellT1560.001 Archive via Utility
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: BK Group targeted by akira
BK Group is targeted by akira.Victim Description: bk Group is the leading general contractor in Europe for interior
construction and technical facility management. They specialize
in planning, building, and maintaining various types of projects,
including retail stores, fitness centers, and automotive buildin
gs.
We will upload 89gb of corporate data soon. Employee personal fil
es (passports, DLs, German IDs and so on), NDAs, contracts and ag
reements, financials, international projects, confidential files,
and so on.Victim’s Country: NLDiscovered: 04 Mar 2026, 20:32 SGT
Known TTPs associated with Akira
T1021.001 Remote Desktop ProtocolT1027.001 Binary PaddingT1036.005 Match Legitimate Resource Name or LocationT1059.001 PowerShellT1560.001 Archive via Utility
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Audexia group targeted by dragonforce
Audexia group is targeted by dragonforce.Victim Description: Audexia Bourges - Volkswagen is a dealership known for its strong customer service and expertise in the automotive field. Located in Saint-Doulchard, France, it has garnered positive reviews for its friendly staff and professional guidance throughout the car buying process. Customers appreciate the attentive service they receive, making their experiences memorable and satisfying.Victim’s Country: FRDiscovered: 27 Feb 2026, 17:25 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Boltech targeted by everest
Boltech is targeted by everest.Victim Description: [AI generated] Boltech is a company that provides services for industrial automation and electrical installations. In addition, Boltech offers a range of electrical and energy solutions to various sectors including aviation, automotive, and logistics. The company prides itself on providing innovative solutions by using the latest technology to ensure efficient and sustainable results for their clients.Victim’s Country: PLDiscovered: 25 Feb 2026, 03:34 SGT
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Sungwoo Co., Ltd targeted by beast
Sungwoo Co., Ltd is targeted by beast.Victim Description: Overview: Sungwoo Co., Ltd. is a South Korean manufacturer primarily engaged in the production and sale of secondary battery components (rechargeable batteries). Key Products: The company specializes in safety components for lithium-ion batteries, such as Top Cap Assemblies, which prevent explosions by venting gas and cutting off current during overcharging. They also produce precision electrical parts for mobile devices (like wireless earphones) and electric vehicles (EVs). Market Position: Founded in 1992 and headquartered in Gumi, the company serves as a key supplier in the EV and consumer electronics supply chain. It was recently listed on the KOSDAQ exchange (Ticker: 458650)Victim’s Country: KRDiscovered: 25 Feb 2026, 02:06 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: SAIC Motor Corporation targeted by beast
SAIC Motor Corporation is targeted by beast.Victim Description: SAIC Motor Corporation Limited is the largest state-owned automobile manufacturer in China and one of the "Big Four" in the country's automotive industry. Headquartered in Shanghai, the company's business covers the development, manufacture, and sale of passenger and commercial vehicles, as well as auto parts and financial services Market Capitalization (USD): approx. $23.83 � $23.9 Billion.Victim’s Country: CNDiscovered: 25 Feb 2026, 02:06 SGT
Global Automotive Cyber Incidents/Eventsmedium
🕸️ Ransomware Detected: Altalingua targeted by lynx
Altalingua is targeted by lynx.Victim Description: Altalingua specializes in multilingual technical documentation, primarily serving the automotive and mechanical engineering sectors. The company is recognized as a leader in the language service provider (LSP) industry, ranking number 1 in revenue from manufacturing. Their services are designed to enhance sales communication and brand loyalty for clients in these sectors. With a commitment to high-quality, efficient, and cost-effective translation services, altalingua is dedicated to meeting the specific needs of its clients.altalingua specializes in multilingual technical documentation, primarily serving the automotive and mechanical engineering sectors. The company is recognized as a leader in the language service provider (LSP) industry, ranking number 1 in revenue from manufacturing. Their services are designed to enhance sales communication and brand loyalty for clients in these sectors. With a commitment to high-quality, efficient, and cost-effective translation services, altalingua is dedicated to meeting the specific needs of its clients.Victim’s Country: ESDiscovered: 21 Feb 2026, 02:39 SGT