Nippon Steel Corporation listed on metaencryptor leak site

• Ransomware group: metaencryptor
• Country: Japan
• Sector: Manufacturing
• Announcement date: September 15, 2026

The metaencryptor ransomware group has listed Nippon Steel Corporation on its leak site, claiming to have exfiltrated 109 GB of data from the organization.

Details of the claimed attack

On September 15, 2026, the metaencryptor group published a listing on its dedicated leak platform targeting Nippon Steel Corporation. According to the announcement made by the threat actor, the group claims to have successfully obtained 109 GB of data from the organization's internal systems. The claim regarding the attack date coincides with the date the listing was announced on the leak site.

In many modern ransomware campaigns, threat actors employ a tactic known as double extortion. In this scenario, attackers do not merely encrypt an organization's files to disrupt operations; they also focus on exfiltrating sensitive information. By stealing data before deploying encryption, the group can threaten to leak the stolen information on public forums if the ransom is not paid. This adds significant pressure on the victim, as the threat of a data leak can cause long-term reputational and legal damage even if the organization can restore its systems from backups.

As of the time of the announcement, the metaencryptor group has not shared any sample files to substantiate their claims. Furthermore, there is currently no information available regarding a specific ransom demand made by the group against the organization.

Data involved in the listing

The announcement provided by the metaencryptor group does not include specific details regarding the content of the leaked data. While the group claims a significant volume of information has been taken, the listing names no specific data types or file categories.

Summary of claimed data

• Total claimed data size: 109 GB

The lack of specific file samples or a detailed inventory of the stolen information makes it difficult to determine the exact nature of the breach at this stage.

About Nippon Steel Corporation

Nippon Steel Corporation is Japan’s largest steelmaker and one of the world’s leading steel producers. The company is a major player in the global industrial landscape, manufacturing advanced steel products that serve various critical sectors. Their products are essential to industries including automotive, construction, energy, and infrastructure.

Potential risks and organizational implications

The claims made by the metaencryptor group may pose potential risks to the operational processes of Nippon Steel Corporation. Depending on the nature of the alleged leaked data, the exposure of sensitive information, such as trade secrets or employee records, may occur. Such an event could lead to various complications for a large-scale manufacturing entity.

From a regulatory perspective, the organization may face legal obligations under Japan's Act on the Protection of Personal Information (APPI). Compliance with such frameworks is a critical component of managing data privacy and responding to unauthorized access. Additionally, a data leak of this scale could create secondary risks for the organization's customers and its various supply chain partners, potentially disrupting the broader industrial network.

In the manufacturing sector, maintaining the integrity and confidentiality of industrial data is paramount. Organizations in this sector often implement defensive strategies such as network segmentation, robust access controls, and continuous monitoring to mitigate the risk of unauthorized exfiltration. While public information regarding the metaencryptor group remains limited, the incident highlights the ongoing threat posed by ransomware groups targeting large-scale industrial producers.