Ransomware victim disclosure
← All victimsKatcon
Claimed by crypto24 · listed 5 days ago
Status timeline
- Listed
May 16, 2026
Current state: Listed for ransom
At a glance
- Group
- crypto24
- Status
- Listed for ransom
- Country
- Mexico
- Sector
- Manufacturing/Automotive
- Listed on leak site
- May 16, 2026
- Data size
- 700 GB
About the victim
AI dossier — public-source company profileKatcon is a global Tier 1 automotive supplier founded in 1993 and headquartered in Monterrey, Mexico. The company manufactures automotive components and operates on an international scale serving major automotive OEMs. It is classified as a leading supplier within the global automotive supply chain.
- Industry
- Automotive Parts Manufacturing (Tier 1 Supplier)
- Address
- Monterrey, Mexico
- Founded
- 1993
Attack summary
Severity: high — The group claims confirmed exfiltration of 700GB of proprietary data from a global Tier 1 automotive manufacturer, representing significant business data at scale. No regulated PII or critical infrastructure impact is explicitly stated, keeping it below critical.The threat group crypto24 claims to have successfully acquired and exfiltrated 700GB of proprietary data from Katcon. The nature of the data beyond being described as proprietary is not further specified in the post excerpt.
Data the group says was taken
AI dossier — extracted from the leak post- Proprietary business data (700GB)
What the group claims
Founded in 1993 in Monterrey, Mexico, Katcon is a leading global Tier 1 supplier
The leak post
captured from the group's site## Qatar Biomedical Research Institute (QBRI) QBRI is a premier research institute under Hamad Bin Khalifa University focused ... Rowad Modern Engineering (RME) is a leading Egyptian construction conglomerate s ... We have successfully acquired and exfiltrated 700GB of proprietary data from the ... Founded in 1993 in Monterrey, Mexico, Katcon is a leading global Tier 1 supplier ... ActionPower is an AI innovation company that automates documentation through 'da ... O'Farrell is a leading full service law firm in Argentina, with the longest trac ...
Screenshot of the leak post

Sources
Source
Indexed 5 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
