02-07-26, 02:41 PM
(This post was last modified: 07-07-26, 11:52 AM by Straight2number1.)
![[Image: atc.jpg]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fi.postimg.cc%2FSQdNmmKZ%2Fatc.jpg)
Hey guys! I'm back with multiple databases from Grupo ATC, a conglomerate made up of three different companies (TLE, TLEA, and PHES). After days of trying to negotiate a ransom, they clearly don't care about their partners' and employees' data (most of their files remain encrypted and are now leaked). So, today I'm dropping everything right here
As a reminder, this includes highly sensitive information on employees from other companies, which is perfect for spear-phishing, fraud, and gaining initial access for ransomware (again
) or other type of campaigns
) or other type of campaignsAnyway, here's a list of some of the most important companies included in this leak:
- Ford
- Toyota
- Tesla
- Honda
- Nissan
- Mazda
- Hyundai
- BMW
- General Motors
- Stellantis
- Penske
- John Deere
- Nestle
- Mabe
- L'Oréal
Here's a list showing some of the type of information you'll find inside:
- OAuth2 bearer/refresh tokens
- JWT tokens
- Cleartext application passwords
- SFTP credentials
- API credentials
- Third-party API keys
- Password hashes (bcrypt $2a$11$ and PBKDF2, custom salted)
- Email reset tokens
- GPS position data and GPS providers information
- Names, email addresses and phone numbers of employees working on the companies listed above
- Intercepted business email content between Grupo ATC and the companies listed above
- Employees PII (name, email address, RFC, bank account numbers, CLABES, etc...)
- Client company identities and commercial relationships
- Client facility addresses
- Plant/facility network intelligence
- EDI transaction data
- Vehicle identification numbers with routing
- Operational freight routes
- Corporate legal structure and RFCs
- Freight billing amounts
- Dealer network (North America)
- Internal API endpoints and hostnames
- Cloud storage account names
- SCAC codes
- SPLC codes
- Internal source code paths
The price for the full leak is $1,000.00 USD, remember, first come, first served! Enjoy the sample
Telegram: Straigh2number1
Tox: 4D163BB14B3350DF7D919375D63A7BE3DB0E9253614073182A260A68714C7A7205D9D20189DB
Tox: 4D163BB14B3350DF7D919375D63A7BE3DB0E9253614073182A260A68714C7A7205D9D20189DB
