Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

M.C.S. Steel Public Company Limited

mcssteel.com

M.C.S. Steel Public Company Limited was listed on the Rhysida leak site on Nov 9, 2026. Information as of Nov 10, 2026.

Country: ThailandIndustry: Manufacturing
Updated continuously · figures as of Nov 10, 2026
Claimed by
Rhysida
First listed
Nov 9, 2026
Claims recorded
1

Leak-Site Claim.

RhysidaConfirmed claim
Posted on the leak site
Nov 9, 2026
Collected by Brandefense
Nov 9, 2026
Data claimed
Not stated
Leak-site post text, written by the group
M.C.S. Steel Public Company Limited M.C.S. Steel Public Company Limited - largest structural-steel fabricatorin Thailand, SET-listed (ticker MCS).Total files: 2,314,625Total volume: 4.2 TB'Senior Advisor to Chairmen of the Board' paid 800,000 JPY/month viaTrust Engineering K.K. (Tokyo) to Keiyo Bank Chiba account 5376091,term Nov-2025..Oct-2027 - while Mr. Yokoyama Yukio also sits on MCSpayroll. Related-party flow outside SET disclosures.Chairman & CEO Dr. Naiyuan Chi carries a PAYROLL 'advisor' gross of12.92M THB/yr (2023-2026); lifetime net receipts ~79M THB (2015-2026).Advisor/consultant…

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Tribunal de Justica do Estado de Minas Gerais
tjmg.jus.br
RhysidaBRBrazilGovernment and Public SectorNot stated
Treuhand & Immobilien Abt AG
abt-treuhand.ch
RhysidaCHSwitzerlandConsultingNot stated
El Cajon, CA
elcajon.gov
RhysidaUSUnited StatesGovernment and Public SectorNot stated
Juge, Napolitano, Ruli, Putfark & Pittman
jugefirm.com
RhysidaUSUnited StatesLegal ServicesNot stated
Pope County Title Company
popecountytitle.com
RhysidaUSUnited StatesFinancial ServicesNot stated
Phoenix Charter Academy
phoenixcharteracademy.org
RhysidaUSUnited StatesEducation and ResearchNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
sumoteks.com
sumoteks.com
KrybitTRTürkiyeManufacturingNot stated
tekra.com.pl
tekra.com.pl
CloakPLPolandManufacturingNot stated
IE & E Industries
ie-e.com
OrovaTRTürkiyeManufacturingNot stated
Modehaus Schnitzler GmbH & Co. KG
schnitzler.de
MajinahanashiDEGermanyManufacturingNot stated
Daeah E&C
daeahenc.co.kr
MetaEncryptorKRSouth KoreaManufacturing100 GB
DAEWON Chemical
daewon21.co.kr
MetaEncryptorKRSouth KoreaManufacturingNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Nov 10, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.