Disuelas JC SAS listed on tengu ransomware leak site

• Ransomware group: tengu
• Country: Colombia
• Sector: Manufacturing
• Announcement date: January 26, 2026

Tengu group claims Disuelas JC SAS breach

The ransomware group known as tengu has officially listed Disuelas JC SAS on its dedicated leak site. This announcement, made on January 26, 2026, marks a significant escalation in the threat actor's campaign against the organization. By appearing on a leak site, the group is utilizing a common tactic in modern cyberattacks, where the threat actor moves from initial infiltration to public pressure through the threat of data exposure.

According to the claims made by the tengu group, the incident involves a direct compromise of the company's digital environment. The threat actor has leveled specific accusations against the organization's internal response, claiming that the company's IT department has attempted to conceal the incident from stakeholders. Furthermore, the group asserts that they have attempted to establish contact with the company's management to resolve the matter, but they claim that no response has been received to date. As a result of this alleged lack of communication, the group has threatened to leak confidential data and various project documents.

Alleged data compromise and evidence

The announcement from tengu suggests that the breach has resulted in the compromise of sensitive information. Specifically, the group claims to have obtained confidential data and project documents belonging to the organization. While the threat actor has provided some visual evidence in the form of screenshots, the effectiveness of this evidence is limited; although various file previews are displayed, the contents of these files remain illegible and cannot be clearly identified.

Despite the claims of a significant breach, the listing provides no specific details regarding the exact scope or the specific nature of the compromised data. The listing names no specific data types beyond the general mention of confidential and project-related files.

The organization profile

Disuelas JC SAS is a manufacturing firm based in Bogota, Colombia. The company operates as a simplified joint-stock company and specializes in the production and supply of shoe parts. As a manufacturer of footwear components, the company plays a role in the specialized supply chain for the footwear industry.

Potential impact and industry implications

This incident, as claimed by the tengu group, could have several negative consequences for the company. From an operational standpoint, such an attack may negatively impact the company's operational continuity. From a commercial perspective, the breach poses a threat to the company's reputation. The alleged compromise of project documents is particularly concerning as it could weaken the company's competitive advantage and create significant risks related to intellectual property.

Furthermore, the organization may face legal obligations under Colombian data protection regulations. If the breach involves the personal data of employees or customers, secondary risks such as identity theft and targeted phishing attacks may emerge. In the broader context of ransomware, these types of attacks often follow a double extortion model, where attackers not only encrypt systems but also threaten to release sensitive information to force payment.

For organizations in the manufacturing sector, maintaining robust cybersecurity defenses is critical to protecting intellectual property and ensuring supply chain stability. Common defensive steps for organizations facing such threats include implementing strict access controls, maintaining offline backups, and ensuring continuous monitoring of network traffic to detect unauthorized movements. Because public information regarding the tengu group remains limited, organizations should remain vigilant against the evolving tactics used by such threat actors.