Tan Teck Seng Electric (Co) Pte Ltd listed on 8base leak site

• Ransomware group: 8base
• Country: Singapore
• Sector: Professional Services
• Announcement date: February 1, 2025

8base claims data breach at Tan Teck Seng Electric

The threat actor known as 8base has listed Tan Teck Seng Electric (Co) Pte Ltd on its leak site, claiming to have exfiltrated the company's data. This announcement, made on February 1, 2025, suggests that the organization has been targeted in a cyberattack involving the theft of confidential information.

The 8base group has listed Tan Teck Seng Electric (Co) Pte Ltd on its leak site, alleging that data belonging to the company has been compromised. The threat actor claims to have uploaded confidential files and suggests that this information may be shared with third parties. The listing was created on February 1, 2025, and is being utilized by the group as a double-extortion tactic. Double extortion is a common ransomware strategy where attackers not only encrypt a victim's systems but also steal sensitive data, threatening to leak it publicly unless a ransom is paid. This method increases the pressure on organizations by threatening their reputation and legal standing.

Alleged sensitive data involved in the leak

According to the claims made by the threat actor, the leaked information contains a wide variety of sensitive documents. The group alleges that the following types of data have been compromised:

• Invoices
• Checks
• Technical tables
• Passports
• Medical forms for employees
• Work permits
• Letter scans
• Various internal documents

The nature of these files suggests a significant breach of both corporate and personal information. When such data is exfiltrated, it often includes highly sensitive identity documents and financial records that can be exploited for various malicious purposes.

About Tan Teck Seng Electric (Co) Pte Ltd

Founded in 1973, Tan Teck Seng Electric is a company based in Singapore that supplies electrical products to electrical engineering contractors and the construction industry. They specialize in steel and flexible pipes, cable support systems, and lightning protection and grounding systems.

Potential impact and security implications

This alleged breach may increase the risk of identity theft and targeted phishing attacks for the company's employees and business partners. Given the company is based in Singapore, the incident may lead to legal implications under the Personal Data Protection Act (PDPA). The sensitivity of the alleged data may create negative impacts on the company's operational continuity.

The double-extortion tactic employed by 8base may result in reputational damage and the exposure of trade secrets through the publication of data. While 8base is known to have used Phobos-variant ransomware, it appears to remain active despite operational interventions in early 2025. This persistence highlights the ongoing challenge posed by ransomware groups that continue to operate even after law enforcement actions.

For organizations in the professional services and supply sectors, such incidents underscore the importance of robust data protection frameworks. Implementing strict access controls, maintaining comprehensive backups, and conducting regular security awareness training are common defensive steps used to mitigate the risk of such attacks. Protecting sensitive employee information, such as passports and medical forms, is particularly critical to preventing secondary crimes like identity theft.