Tong Kong E & E Sdn Bhd listed on Black X ransomware leak site

• Ransomware group: Black X
• Country: Malaysia
• Sector: Manufacturing
• Announcement date: July 29, 2026

Black X claims data breach at Tong Kong E & E Sdn Bhd

The threat actor known as Black X has listed Tong Kong E & E Sdn Bhd on its leak site, claiming to have obtained sensitive data from the organization. This announcement follows a pattern common in modern cyberattacks, where threat actors utilize dedicated leak sites to pressure victims by threatening the public release of stolen information.

According to the claims made by the group, the incident occurred earlier this year. The threat actor alleges that it successfully gained access to the organization's network on July 24, 2026. Following the initial intrusion, the group posted the organization's name on its leak site on July 29, 2026, asserting that it has compromised sensitive data belonging to the entity and threatening to release it to the public.

In many such ransomware scenarios, groups employ a tactic known as double extortion. In this method, attackers do not merely encrypt a victim's systems to disrupt operations; they also exfiltrate sensitive data to use as leverage. By threatening to leak the stolen information, the attackers aim to increase the pressure on the organization to meet their demands, moving the conflict from a technical recovery issue to a significant reputational and legal crisis.

Details of the alleged data theft

While the specific volume of data and the total number of files involved have not been disclosed by the group, the samples provided in the leak site announcement suggest significant exposure. The information released by the threat actor includes various sensitive documents intended for internal or private use.

The content identified in the provided screenshots includes:

• Customer data
• Banking records

Specifically, the evidence displayed by the group includes samples of documents such as Citibank bank account statements, transaction details, and various pieces of customer information. The presence of such financial documents highlights the potential impact of the breach on the organization's operational integrity and its relationship with financial institutions.

Organization profile

The target of this alleged attack is Tong Kong E & E Sdn Bhd (95907X), an organization operating within the manufacturing sector in Malaysia.

Impact and organizational risks

This incident may pose a direct risk to the organization's customers and its financial assets. The alleged theft of banking records could lead to secondary attacks or fraudulent attempts specifically targeting the organization's financial operations. Furthermore, the exposure of customer information places individuals at a heightened risk of identity theft.

From a regulatory standpoint, the organization may face significant legal obligations under Malaysia's Personal Data Protection Act (PDPA) due to the nature of the compromised information. When sensitive data is exfiltrated, organizations often face a complex landscape of compliance requirements regarding notification and mitigation.

For organizations operating within the manufacturing sector, such incidents underscore the necessity of robust cybersecurity frameworks. Defensive measures typically include implementing strict access controls, maintaining comprehensive logging to detect unauthorized network access, and conducting regular audits of financial and customer databases. Protecting the integrity of banking and transaction records is critical to preventing the secondary fraud attempts that often follow such breaches. At this time, information regarding the specific capabilities and methods of the Black X group remains limited.