> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Thai Electrical Transformer Manufacturer Charoenchai Hit by TENGU Ransomware with 60GB Data Stolen
- URL: https://darkwebinformer.com/thai-electrical-transformer-manufacturer-charoenchai-hit-by-tengu-ransomware-with-60gb-data-stolen/
- Published: 2026-01-12T18:38:08.000Z
- Updated: 2026-01-12T18:38:08.000Z
- Author: Dark Web Informer
- Tags: Ransomware

Dark Web Informer - Cyber Threat Intelligence

# Thai Electrical Transformer Manufacturer Charoenchai Hit by TENGU Ransomware with 60GB Data Stolen

January 12, 2026 - 1:21:09 PM UTC 

Thailand 

Manufacturing 

### 🧩 Standalone API Access Now Available

Access high-volume threat-intelligence data, automated ingestion endpoints, ransomware feeds, IOC data, and more – independently from the above standard subscriptions. 

[View API Access ](https://darkwebinformer.com/api-details/) 

## Unlock Exclusive Cyber Threat Intelligence

Powered by [DarkWebInformer.com](https://darkwebinformer.com/)

Foundational access to breach intelligence. Track breaches, leaks, and threats in real time with high quality screenshots and concise expert summaries. 

📚

**5,100+ Blog Posts (PRO/ELITE)**  
Continuously updated breach reports and threat summaries.

📢

**52,200+ Alerts (PRO/ELITE)**  
Daily breach, leak, and DDoS alerts.

📤

**Unredacted Threat Feed**  
Live tracking with JSON export.

🔍

**Leak and Breach Coverage**  
Direct access to claims and posts.

📡

**Snippets and Quick Facts**  
Concise summaries of DDoS, defacements, and breaches.

🌐

**500+ Onion and Clearnet Resources**  
Verified index of dark web sites and services.

📊

**Real Time Uptime Dashboard**  
Live status of 500+ sites.

🤖

**WhiteIntel.io API**  
Integrated checks inside breach posts.

🖼️

**High Resolution Images**  
Uncompressed, watermark free evidence.

🔑

**Keyword Notifications**  
Browser alerts for tracked terms.

[💳 Subscribe Now](https://darkwebinformer.com/#/portal/signup) [🪙 Pay with Crypto](https://darkwebinformer.com/crypto-payments) 

##  Quick Facts

Date and Time of Alert

2026-01-12 13:21:09 UTC

Threat Actor

TENGU

Victim Country

Thailand

Industry

Manufacturing

Victim Org.

charoenchai transformer co., ltd.

Victim Site

[charoenchai.com](https://charoenchai.com)

Category

Ransomware

Severity

High

Network

Tor

##  Incident Overview

The TENGU ransomware group claims to have successfully attacked Charoenchai Transformer Co., Ltd., a manufacturer and supplier of electrical transformers based in Thailand. The company manufactures and distributes various types of electrical power transformers both domestically and for export. 

- **Company:** CHAROENCHAI TRANSFORMER CO., LTD.
- **Business:** Manufacturer and supplier of electrical transformers
- **Location:** Thailand
- **Products:** Various types of electrical power transformers for domestic and export markets
- **Stolen Data:** 60GB of organizational data
- **Data Preview:** 16 sample files shown including technical documents, spreadsheets, and facility photos
- **Publication Deadline:** 5-6 days from January 12, 2026 (unlocks at 2026-01-18 15:50:53)
- **Views:** 310 views on leak page
- **Download URL:** mega.nz (protected/encrypted)

##  Indicators of Compromise (IOCs)

No IOCs were disclosed by the threat actor in this claim.

##  Ransomware Leak URL

For Subscribers Only 

If you are [a subscriber](https://darkwebinformer.com/tag/subscribers/), check the Threat Feed or Ransomware Feed in the subscribers area.

##  Image Preview

[ ![TENGU ransomware leak site showing Charoenchai Transformer attack with 60GB stolen data and 16 sample files](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/01/978923597826359876235987623598762397865.png) ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/01/978923597826359876235987623598762397865.png) 

## Unlock Exclusive Cyber Threat Intelligence

Powered by [DarkWebInformer.com](https://darkwebinformer.com/)

Foundational access to breach intelligence. Track breaches, leaks, and threats in real time with high quality screenshots and concise expert summaries. 

📚

**5,100+ Blog Posts (PRO/ELITE)**  
Continuously updated breach reports and threat summaries.

📢

**52,200+ Alerts (PRO/ELITE)**  
Daily breach, leak, and DDoS alerts.

📤

**Unredacted Threat Feed**  
Live tracking with JSON export.

🔍

**Leak and Breach Coverage**  
Direct access to claims and posts.

📡

**Snippets and Quick Facts**  
Concise summaries of DDoS, defacements, and breaches.

🌐

**500+ Onion and Clearnet Resources**  
Verified index of dark web sites and services.

📊

**Real Time Uptime Dashboard**  
Live status of 500+ sites.

🤖

**WhiteIntel.io API**  
Integrated checks inside breach posts.

🖼️

**High Resolution Images**  
Uncompressed, watermark free evidence.

🔑

**Keyword Notifications**  
Browser alerts for tracked terms.

[💳 Subscribe Now](https://darkwebinformer.com/#/portal/signup) [🪙 Pay with Crypto](https://darkwebinformer.com/crypto-payments) 

Dark Web Informer © 2026 | Cyber Threat Intelligence 

[DarkWebInformer.com](https://darkwebinformer.com/)