Ransomware victim disclosure
← All victimsT/CCI Manufacturing
Claimed by akira · listed 7 hours ago
Status timeline
- Listed
Jun 5, 2026
- Data leaked
At a glance
- Group
- akira
- Status
- Data leaked
- Sector
- Manufacturing
- Listed on leak site
- Jun 5, 2026
About the victim
AI dossier — public-source company profileT/CCI Manufacturing is an OEM specializing in compressor technology for trucking, off-highway, agriculture/construction, specialty vehicles, and transport refrigeration markets. They design reciprocating, swash plate, wobble plate, and variable compressor systems.
- Industry
- Compressor & Automotive Components Manufacturing
Attack summary
Severity: critical — Confirmed exfiltration of regulated PII at scale (SSNs, payment/credit card data, passports) combined with sensitive business data (financials, NDAs, client information). Data publication is explicitly planned.Akira claims to have exfiltrated 35 GB of corporate data including employee personal documents, financial records, contracts, client/partner information, and NDAs. Data publication is announced as forthcoming.
Data the group says was taken
AI dossier — extracted from the leak post- employee passports and driver's licenses
- social security numbers
- payment details and credit card information
- contracts and agreements
- client and partner information
- NDAs
- financial records
- confidential corporate files
What the group claims
T/CCI is a world leader in compressor technology including reciprocating, swash plate, wobble p late, variable compressor and air brake compressor designs. We are an Original Equipment Manufa cturer for trucking, off-highway, agriculture/construction, specialty vehicle and transport ref rigeration markets. We will upload 35gb of corporate data soon. Employee personal docs (passports, DLs, SSNs, payme nt details, credit cards and so on), contracts and agreements, client and partners information, NDAs, financials, lots of confidential files, etc.
Source
Indexed 7 hours agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
Is this your supplier? Your competitor? You?
Pro plans monitor your domain, corporate emails, and crypto wallets across every new ransomware leak-site post, breach dump and Telegram callout — alerts within 5 minutes.
