Eversendai listed on nightspire leak site

• Ransomware group: nightspire
• Country: Malaysia
• Sector: Manufacturing
• Announcement date: July 1, 2025

Eversendai listed on nightspire leak site

The manufacturing company Eversendai has been listed on a leak site by the threat actor group nightspire. This announcement, which appeared on July 1, 2025, marks a significant development in the ongoing landscape of cyber extortion targeting industrial entities.

Claims made by nightspire

The nightspire group has published an announcement claiming to have compromised data belonging to Eversendai. According to the claims made by the threat actor, the organization's network was accessed on 2025-07-01. This type of activity is often associated with double extortion tactics, where attackers not only encrypt systems to disrupt operations but also exfiltrate sensitive information to pressure the victim into paying a ransom to prevent the public release of stolen data.

In such scenarios, threat actors typically use the threat of leaking proprietary or sensitive information on a dedicated leak site to increase their leverage. While the specific methods used to gain access to the network remain undisclosed in the current announcement, the scale of the alleged breach suggests a significant intrusion into the target's digital infrastructure.

Details regarding the alleged data breach

Regarding the content of the leaked data, there is no detailed information available. The threat actor has not provided any screenshots or specific documentation to verify the nature of the files they claim to have obtained. The listing names no specific data types.

Despite the lack of detail regarding the specific files, the group has made a significant claim regarding the volume of information involved. The threat actor claims that a total of 10TB of data has been exfiltrated from the organization's systems. The sheer volume of data mentioned indicates a massive undertaking if the claim is accurate, potentially encompassing a vast array of corporate, technical, or administrative files.

The organization profile

Eversendai is a global engineering and construction company specializing in the design, fabrication, and erection of structural steel. It primarily executes complex steel structure projects for high-rise buildings, power plants, and industrial facilities.

Potential impact and industry considerations

This incident may pose a risk to the organization's operational continuity. Depending on the nature of the alleged leaked data, identity theft or targeted phishing attacks against employees and business partners may be observed. Furthermore, the organization may face legal obligations under Malaysian data protection regulations due to the potential exposure of sensitive information.

For organizations operating in the manufacturing and engineering sectors, such incidents highlight the critical importance of robust cybersecurity frameworks. When a breach occurs, organizations typically need to review their data security processes and notify affected parties to mitigate further harm. Common defensive steps for organizations include implementing strict access controls, maintaining offline backups, and conducting regular network monitoring to detect unauthorized access early.

Public information regarding the nightspire group remains limited, making it difficult to attribute the attack to a specific known entity or to understand their long-term motivations. As with many emerging threat actors, the lack of transparency regarding their operations complicates the ability of security professionals to predict their next moves or understand their specific targeting patterns within the industrial sector.