Thai Electrical Transformer Manufacturer Charoenchai Hit by TENGU Ransomware with 60GB Data Stolen
🧩 Standalone API Access Now Available
Access high-volume threat-intelligence data, automated ingestion endpoints, ransomware feeds, IOC data, and more – independently from the above standard subscriptions.
View API AccessUnlock Exclusive Cyber Threat Intelligence
Powered by DarkWebInformer.com
Foundational access to breach intelligence. Track breaches, leaks, and threats in real time with high quality screenshots and concise expert summaries.
Continuously updated breach reports and threat summaries.
Daily breach, leak, and DDoS alerts.
Live tracking with JSON export.
Direct access to claims and posts.
Concise summaries of DDoS, defacements, and breaches.
Verified index of dark web sites and services.
Live status of 500+ sites.
Integrated checks inside breach posts.
Uncompressed, watermark free evidence.
Browser alerts for tracked terms.
Quick Facts
Incident Overview
The TENGU ransomware group claims to have successfully attacked Charoenchai Transformer Co., Ltd., a manufacturer and supplier of electrical transformers based in Thailand. The company manufactures and distributes various types of electrical power transformers both domestically and for export.
- Company: CHAROENCHAI TRANSFORMER CO., LTD.
- Business: Manufacturer and supplier of electrical transformers
- Location: Thailand
- Products: Various types of electrical power transformers for domestic and export markets
- Stolen Data: 60GB of organizational data
- Data Preview: 16 sample files shown including technical documents, spreadsheets, and facility photos
- Publication Deadline: 5-6 days from January 12, 2026 (unlocks at 2026-01-18 15:50:53)
- Views: 310 views on leak page
- Download URL: mega.nz (protected/encrypted)
Indicators of Compromise (IOCs)
No IOCs were disclosed by the threat actor in this claim.
Ransomware Leak URL
Image Preview
Unlock Exclusive Cyber Threat Intelligence
Powered by DarkWebInformer.com
Foundational access to breach intelligence. Track breaches, leaks, and threats in real time with high quality screenshots and concise expert summaries.
Continuously updated breach reports and threat summaries.
Daily breach, leak, and DDoS alerts.
Live tracking with JSON export.
Direct access to claims and posts.
Concise summaries of DDoS, defacements, and breaches.
Verified index of dark web sites and services.
Live status of 500+ sites.
Integrated checks inside breach posts.
Uncompressed, watermark free evidence.
Browser alerts for tracked terms.
Dark Web Informer © 2026 | Cyber Threat Intelligence
