Beast Ransomware Claims Xiamen Tungsten Breach, Offers Data for 20 Bitcoin

Summary
Beast ransomware claims it breached Xiamen Tungsten and is offering an alleged infrastructure dump for 20 Bitcoin. The actor says it contains over 150GB of SQL backups with personal, business, and manufacturing data.
Key points
- The Beast ransomware group claims it breached Xiamen Tungsten Co., Ltd. and is offering the alleged infrastructure dump for 20 Bitcoin.
- The actor claims the dataset exceeds 150GB and consists of SQL backups covering corporate and manufacturing systems.
- Allegedly exposed information includes personal and payroll data, SSO credentials, and network access tokens.
- The claimed data also includes ERP materials, chemical formulas, alloy recipes, governance records, commercial bids, and manufacturing information.
- The article attributes these claims to the ransomware actor; it provides no independent confirmation of a breach or data theft.
Article Details
- Victim
- Xiamen Tungsten Co., Ltd. (XTC)
- Encryption Status
- Unknown
- Exfiltration Status
- Beast ransomware claims exfiltration; unverified.
- Exfiltrated Data
- The group claims the data includes PII, payroll, SSO credentials, network tokens, ERP blueprints, lab chemical formulas, alloy recipes, governance records, manufacturing data, and commercial bids.
- Exfiltrated Size
- More than 150GB, according to the group's claim.
- Ransom Demand
- None reported; the group reportedly offered the data for sale for 20 Bitcoin.
- Leak Status
- The group reportedly offered the data for sale; publication or a confirmed leak is not established.
