tengu ransomware group lists 真言宗智山派 成就院 on its leak site

• Ransomware group: tengu
• Country: Japan
• Announcement date: February 18, 2026

Shingon-shu Chizan-ha Jojyuin targeted by tengu

The Japan-based temple Shingon-shu Chizan-ha Jojyuin has been allegedly listed on the leak site of the threat group known as tengu. According to the announcement made on February 18, 2026, the group claims to have successfully compromised the digital assets of the institution.

The claims made by tengu

The threat group tengu posted a listing for Shingon-shu Chizan-ha Jojyuin on their dedicated leak site on February 18, 2026. Through this announcement, the group asserts that they have obtained access to the institution's data. While the group has made these claims, public information regarding the specific identity and operational details of the tengu group remains limited.

Ransomware groups often utilize leak sites as a component of double extortion tactics. In such scenarios, attackers not only encrypt an organization's data to disrupt operations but also threaten to publish sensitive information on public forums if a ransom is not met. This pressure is designed to maximize the impact on the victim's reputation and operational continuity. While the specific mechanics of this particular incident are not fully detailed, the listing follows this pattern of claiming access to institutional digital assets.

Potential data exposure and content

The listing provided by the group includes screenshots of file directories. These directories suggest the presence of both administrative and religious records within the compromised environment. However, the specific content of these files remains illegible in the provided materials, making it impossible to determine the exact nature of the files or the full scope of the information involved.

The listing names no specific data types in a structured format, though the visual evidence points toward administrative and religious documentation.

Implications and organizational risks

The alleged leak poses several significant risks to Shingon-shu Chizan-ha Jojyuin. The exposure of administrative records and personal data belonging to temple members could lead to serious consequences. Under Japan's Act on the Protection of Personal Information (APPI), the institution has specific data security obligations, and this incident could potentially lead to regulatory consequences for the organization.

Furthermore, the exposed data could be exploited by malicious actors for various purposes, such as targeted phishing attacks or identity theft attempts against members of the temple community. Beyond the direct threat to individuals, the institution may face potential reputational damage and significant disruptions to its operational processes.

To mitigate such risks, organizations typically implement defensive measures such as multi-factor authentication, regular security audits, and robust data encryption. Maintaining strict access controls and ensuring that sensitive religious or administrative records are isolated from general network traffic are also common industry practices to prevent unauthorized access by threat actors.