Posts: 86
Threads: 0
Joined: Mar 2026
(02-07-26, 02:41 PM)thanks boy Wrote:
Hey guys! I'm back with multiple databases from Grupo ATC, a conglomerate made up of three different companies (TLE, TLEA, and PHES). After days of trying to negotiate a ransom, they clearly don't care about their partners' and employees' data (most of their files remain encrypted and are now leaked). So, today I'm dropping everything right here
As a reminder, this includes highly sensitive information on employees from other companies, which is perfect for spear-phishing, fraud, and gaining initial access for ransomware (again  ) or other type of campaigns
Anyway, here's a list of some of the most important companies included in this leak:
- Ford
- Toyota
- Tesla
- Honda
- Nissan
- Mazda
- Hyundai
- BMW
- General Motors
- Stellantis
- Penske
- John Deere
- Nestle
- Mabe
- L'Oréal
Here's a list showing some of the type of information you'll find inside: - OAuth2 bearer/refresh tokens
- JWT tokens
- Cleartext application passwords
- SFTP credentials
- API credentials
- Third-party API keys
- Password hashes (bcrypt $2a$11$, PBKDF2, custom salted)
- Email reset tokens
- GPS position data and GPS providers information
- Names, email addresses and phone numbers of employees working on the companies listed above
- Intercepted business email content between Grupo ATC and the companies listed above
- Employees PII (name, email address, RFC, bank account numbers, CLABES, etc...)
- Client company identities and commercial relationships
- Client facility addresses
- Plant/facility network intelligence
- EDI transaction data
- Vehicle identification numbers with routing
- Operational freight routes
- Corporate legal structure and RFCs
- Freight billing amounts
- Dealer network (North America)
- Internal API endpoints and hostnames
- Cloud storage account names
- SCAC codes
- SPLC codes
- Internal source code paths
The price for the full leak is $1,000.00 USD, remember, first come, first served! Enjoy the sample
Reply
Reply
Reply
Reply
Reply
Posts: 1
Threads: 0
Joined: Jun 2025
Based
Reply
Reply
Reply
Reply
Reply
Posts: 21
Threads: 0
Joined: Jun 2025
thanks
Reply
Reply
Reply
Reply
Reply
Posts: 33
Threads: 0
Joined: May 2026
very nice bro
Reply
Reply
Reply
Reply
Reply
Posts: 9
Threads: 1
Joined: Sep 2026
let meget thi
Reply
Reply
Reply
Reply
Reply
Posts: 28
Threads: 0
Joined: Mar 2026
thanks!
Reply
Reply
Reply
Reply
Reply
Posts: 81
Threads: 0
Joined: Jul 2026
(02-07-26, 02:41 PM)Straight2number1 Wrote:
Hey guys! I'm back with multiple databases from Grupo ATC, a conglomerate made up of three different companies (TLE, TLEA, and PHES). After days of trying to negotiate a ransom, they clearly don't care about their partners' and employees' data (most of their files remain encrypted and are now leaked). So, today I'm dropping everything right here
As a reminder, this includes highly sensitive information on employees from other companies, which is perfect for spear-phishing, fraud, and gaining initial access for ransomware (again  ) or other type of campaigns
Anyway, here's a list of some of the most important companies included in this leak:
- Ford
- Toyota
- Tesla
- Honda
- Nissan
- Mazda
- Hyundai
- BMW
- General Motors
- Stellantis
- Penske
- John Deere
- Nestle
- Mabe
- L'Oréal
Here's a list showing some of the type of information you'll find inside: - OAuth2 bearer/refresh tokens
- JWT tokens
- Cleartext application passwords
- SFTP credentials
- API credentials
- Third-party API keys
- Password hashes (bcrypt $2a$11$ and PBKDF2, custom salted)
- Email reset tokens
- GPS position data and GPS providers information
- Names, email addresses and phone numbers of employees working on the companies listed above
- Intercepted business email content between Grupo ATC and the companies listed above
- Employees PII (name, email address, RFC, bank account numbers, CLABES, etc...)
- Client company identities and commercial relationships
- Client facility addresses
- Plant/facility network intelligence
- EDI transaction data
- Vehicle identification numbers with routing
- Operational freight routes
- Corporate legal structure and RFCs
- Freight billing amounts
- Dealer network (North America)
- Internal API endpoints and hostnames
- Cloud storage account names
- SCAC codes
- SPLC codes
- Internal source code paths
The price for the full leak is $1,000.00 USD, remember, first come, first served! Enjoy the sample
Reply
Reply
Reply
Reply
Reply
Posts: 1
Threads: 0
Joined: Sep 2026
15-09-26, 08:41 PM
(This post was last modified: 15-09-26, 08:44 PM by pancak3.)
coolio
@ Straight2number1
can you provide new link?
Quote:{"success":false,"statusCode":410,"message":"Download link has expired or not valid. Please generate a new one."}
Reply
Reply
Reply
Reply
Reply
Posts: 81
Threads: 0
Joined: Sep 2026
111111111111111
Reply
Reply
Reply
Reply
Reply
|