Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

M.C.S. Steel Public Company Limited


Group Rhysida
Discovered 2026-11-09 17:27 UTC
Est. attack date 2026-11-09
Country TH
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

M.C.S. Steel Public Company Limited M.C.S. Steel Public Company Limited - largest structural-steel fabricatorin Thailand, SET-listed (ticker MCS).Total files: 2,314,625Total volume: 4.2 TB'Senior Advisor to Chairmen of the Board' paid 800,000 JPY/month viaTrust Engineering K.K. (Tokyo) to Keiyo Bank Chiba account 5376091,term Nov-2025..Oct-2027 - while Mr. Yokoyama Yukio also sits on MCSpayroll. Related-party flow outside SET disclosures.Chairman & CEO Dr. Naiyuan Chi carries a PAYROLL 'advisor' gross of12.92M THB/yr (2023-2026); lifetime net receipts ~79M THB (2015-2026).Advisor/consultant contracts to Haneishi, Iijima, Ogilvie, Yang -overlapping the company's Japanese payroll.Identity documents of staff incl. Chairman's daughter (Thai nationalIDs, passport, house registration), foreign managers' work permits.Myanmar workshop staff charged 500-800 THB per clinic visit (signedmemo, 2023) - labour-protection exposure.Prior Faust ransomware infection inside the network (victim idA2242861-3499) - security failures never remediated; SQL credentialsand Windows OEM keys stored in plaintext.Confidential pipeline of Japan's Big-5 contractors incl. site names. More


Leak Screenshot:

Leak Screenshot

Other recent victims