Kingcan Holdings Limited and Fuzhen Group listed on radar leak site

• Ransomware group: radar
• Country: China
• Sector: Manufacturing
• Announcement date: November 3, 2025

The threat actor known as radar has listed Kingcan Holdings Limited and Fuzhen Group on a ransomware leak site. The announcement, which was discovered on November 3, 2025, involves a claim of a data breach against the two entities. While the listing has been made public on the group's platform, the specific details regarding the nature of the incident remain limited.

The alleged data breach incident

According to the announcement made by the radar group, the alleged attack took place on January 22, 2024. This suggests that the incident may have occurred a significant time before the claim was surfaced on the leak site. At this stage, information regarding the radar group itself is considered limited, as there is little publicly available data concerning their specific operations or methodology.

Ransomware groups often utilize leak sites as a tool for double extortion. In such scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information. The threat of releasing this data on a public platform is used as leverage to pressure the victim into paying a ransom. If the ransom is not met, the group threatens to publish the stolen data, which can lead to severe consequences for the victimized organization.

Details regarding the claimed data

Despite the listing on the leak site, the group has not provided specific details or screenshots regarding the content of the allegedly leaked data. No information has been provided concerning the volume of the data or the specific number of files involved in the incident. Furthermore, no ransom demand has been specified in the announcement.

• No data types were named in the listing.

The absence of specific data samples or file counts makes it difficult to determine the exact scope of the alleged breach. In many cyberattacks, the lack of immediate transparency from the threat actor can create uncertainty regarding whether the stolen information contains intellectual property, employee records, or sensitive client information.

Organization profile

Fuzhen Group, which is associated with Kingcan Holdings Limited, is a China-based company that has been operating since 1993. The group specializes in the production of aluminum metal packaging containers and tinplate for the food and beverage industries. Beyond the manufacturing of metal cans, the group also offers professional filling services for food and beverages.

The organization maintains a significant production footprint, operating five different production bases across China. This infrastructure allows the group to supply its products to both domestic markets and a variety of international markets, making it a notable player in the global packaging supply chain.

Risk assessment and defensive considerations

The alleged incident may pose a risk of exposure for the organization's operational data and trade secrets. Given the company's extensive production capacity and its wide international client network, a potential breach could lead to secondary risks for its various supply chain partners. If sensitive manufacturing processes or client lists are exposed, the impact could extend far beyond the immediate organization.

The threat actor's intent to publish data may result in significant reputational damage and financial losses for the organization. Additionally, as the entity is based in China, it is possible that legal proceedings under local data protection regulations could be initiated following a confirmed breach. It is important to note that further evidence is required to make a definitive assessment regarding the validity and scope of these claims.

For organizations operating in the manufacturing and packaging sectors, maintaining robust cybersecurity defenses is critical. Common defensive steps include implementing strict access controls, maintaining regular offline backups, and conducting regular security audits to identify vulnerabilities. Because manufacturing entities are often integrated into global supply chains, securing the digital perimeter is essential to prevent secondary risks to partners and customers. Organizations should also monitor for signs of unauthorized data exfiltration and ensure compliance with local and international data protection standards to mitigate legal and reputational risks.