Mexico and USA - Grupo ATC (23 databases, +340 GB and +2 billion unique rows)
by Straight2number1 - Thursday July 2, 2026 at 02:41 PM
#21
(02-07-26, 02:41 PM)thanks boy Wrote:
[Image: atc.jpg]
 
Hey guys! I'm back with multiple databases from Grupo ATC, a conglomerate made up of three different companies (TLE, TLEA, and PHES). After days of trying to negotiate a ransom, they clearly don't care about their partners' and employees' data (most of their files remain encrypted and are now leaked). So, today I'm dropping everything right here
 
As a reminder, this includes highly sensitive information on employees from other companies, which is perfect for spear-phishing, fraud, and gaining initial access for ransomware (again pepelmao ) or other type of campaigns
 
Anyway, here's a list of some of the most important companies included in this leak:
  • Ford
  • Toyota
  • Tesla
  • Honda
  • Nissan
  • Mazda
  • Hyundai
  • BMW
  • General Motors
  • Stellantis
  • Penske
  • John Deere
  • Nestle
  • Mabe
  • L'Oréal
 Here's a list showing some of the type of information you'll find inside:
  • OAuth2 bearer/refresh tokens
  • JWT tokens
  • Cleartext application passwords
  • SFTP credentials
  • API credentials
  • Third-party API keys
  • Password hashes (bcrypt $2a$11$, PBKDF2, custom salted)
  • Email reset tokens
  • GPS position data and GPS providers information
  • Names, email addresses and phone numbers of employees working on the companies listed above
  • Intercepted business email content between Grupo ATC and the companies listed above
  • Employees PII (name, email address, RFC, bank account numbers, CLABES, etc...)
  • Client company identities and commercial relationships
  • Client facility addresses
  • Plant/facility network intelligence
  • EDI transaction data
  • Vehicle identification numbers with routing
  • Operational freight routes
  • Corporate legal structure and RFCs
  • Freight billing amounts
  • Dealer network (North America)
  • Internal API endpoints and hostnames
  • Cloud storage account names
  • SCAC codes
  • SPLC codes
  • Internal source code paths
The price for the full leak is $1,000.00 USD, remember, first come, first served! Enjoy the sample
 
Reply
#22
Based
Reply
#23
thanks
Reply
#24
very nice bro
Reply
#25
let meget thi
Reply
#26
thanks!
Reply
#27
(02-07-26, 02:41 PM)Straight2number1 Wrote:
[Image: atc.jpg]
 
Hey guys! I'm back with multiple databases from Grupo ATC, a conglomerate made up of three different companies (TLE, TLEA, and PHES). After days of trying to negotiate a ransom, they clearly don't care about their partners' and employees' data (most of their files remain encrypted and are now leaked). So, today I'm dropping everything right here
 
As a reminder, this includes highly sensitive information on employees from other companies, which is perfect for spear-phishing, fraud, and gaining initial access for ransomware (again pepelmao ) or other type of campaigns
 
Anyway, here's a list of some of the most important companies included in this leak:
  • Ford
  • Toyota
  • Tesla
  • Honda
  • Nissan
  • Mazda
  • Hyundai
  • BMW
  • General Motors
  • Stellantis
  • Penske
  • John Deere
  • Nestle
  • Mabe
  • L'Oréal
 Here's a list showing some of the type of information you'll find inside:
  • OAuth2 bearer/refresh tokens
  • JWT tokens
  • Cleartext application passwords
  • SFTP credentials
  • API credentials
  • Third-party API keys
  • Password hashes (bcrypt $2a$11$ and PBKDF2, custom salted)
  • Email reset tokens
  • GPS position data and GPS providers information
  • Names, email addresses and phone numbers of employees working on the companies listed above
  • Intercepted business email content between Grupo ATC and the companies listed above
  • Employees PII (name, email address, RFC, bank account numbers, CLABES, etc...)
  • Client company identities and commercial relationships
  • Client facility addresses
  • Plant/facility network intelligence
  • EDI transaction data
  • Vehicle identification numbers with routing
  • Operational freight routes
  • Corporate legal structure and RFCs
  • Freight billing amounts
  • Dealer network (North America)
  • Internal API endpoints and hostnames
  • Cloud storage account names
  • SCAC codes
  • SPLC codes
  • Internal source code paths
The price for the full leak is $1,000.00 USD, remember, first come, first served! Enjoy the sample
 
Reply
#28
coolio

@Straight2number1
can you provide new link?

Quote:{"success":false,"statusCode":410,"message":"Download link has expired or not valid. Please generate a new one."}
Reply
#29
111111111111111
Reply


Forum Jump:


 Users browsing this thread: 1 Guest(s)