Ransomware Group: AKIRA

VICTIM NAME: CNQC

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the AKIRA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with CNQC, a construction company based in China, details a significant data compromise that could affect numerous individuals and business operations. CNQC was established in 1952 and engages in a variety of activities, including domestic and international construction projects, investment, real estate development, and capital management. The leak page claims the potential exposure of over 90 GB of crucial corporate documents, which includes sensitive information such as driver licenses, employees’ medical forms, financial data, rental agreements, and contact information for both employees and customers. This extensive leak indicates a severe breach that poses risks to the privacy and security of many individuals.

The published date of the revelation coincides with the discovered date of the leak, both dated March 12, 2025. This timing suggests a strategic release by the threat actor, potentially aimed at maximizing impact. The nature of the data exposed highlights the need for vigilance in the construction sector regarding cybersecurity measures. CNQC’s disclosure may lead to significant implications, not only for the company itself but also for its partners, employees, and clients due to the sensitive nature of the documents involved. The leak page emphasizes the operational vulnerabilities within larger corporations, especially those managing extensive documentation and personal information.