Ransomware Group beast Hits: Xiamen Tungsten Co. (XTC)

hookphish post ransomware group beast hits xiamen tungsten co xtc

In the latest cybersecurity news, Xiamen Tungsten Co. (XTC) — a company operating in the CN — has fallen victim to a ransomware attack conducted by the group beast. This data breach, discovered on 2026-03-31 15:13:38.433840, underscores the increasing need for proactive cybersecurity defenses as we continue through 2025.

In response to increasing cyber threats, it’s critical to protect your organization with proactive security measures. HookPhish provides enterprise-grade solutions designed to reduce your risk of future attacks:

Protect your organization before it becomes the next headline. Explore HookPhish.

Incident Report

Attribute Information
Target Organization Xiamen Tungsten Co. (XTC)
Threat Group beast
Summary Xiamen Tungsten Co. (XTC) – Full Infrastructure Dump 2026 The market capitalization $13.56 billion USD (600549.SS Shanghai Stock Exchange) Size: 150GB+ (.bak files) with FULL ACCES Content: ERP (Dynamics AX), HR (14GB), LIMS (Lab Tech), Party Committees, ESG, SCM. Format: SQL Backups. FOR SALE IN 1 HANDS ! Price: 20btc This inventory represents a total infrastructure compromise of Xiamen Tungsten Co., Ltd. (XTC). The dataset includes over 160GB of SQL backups covering R&D, ERP, HR, and Government relations. I. High-Capacity Strategic Assets (Over 5GB) ecology202306091936.bak (38GB) � Geological surveys, mine mapping, and environmental resource monitoring. QL_DataCenter_backup (15.8GB) � Centralized corporate data warehouse aggregating all subsidiary streams. QcAdmin20240109.bak (15.5GB) � Master quality control archive; includes all technical specs and product testing history. MCHRDB20260322000000.BAK (14.7GB) � Main Corporate HR database; full PII and payroll of the entire workforce. 11MicrosoftDynamicsAX_model.bak (9.07GB) � Blueprint of the ERP system including business logic and financial structures. smartbi_backup (7.56GB) � Business Intelligence platform with executive dashboards and strategic forecasts. BB.bak (5.89GB) � “Big Business” database containing consolidated financial reporting. QL_SSO_backup (5.38GB) � Single Sign-On hub; contains user credentials and network access tokens. II. Core Operational & Manufacturing Databases (500MB � 5GB) Global_Erp.bak (3.66GB) � ERP system for international trade and overseas branches. QL_ERP.bak (3.68GB) � Domestic resource planning, procurement, and asset management. QL.LIMS.JL_backup (2.14GB) � Lab Information Management; contains chemical formulas and alloy recipes. QL_HSE_GE_backup (1.97GB) � Global Health, Safety, and Environment regulatory compliance records. QL.ESG_backup (1.80GB) � Environmental, Social, and Governance audits and supplier certifications. QL_Scheduler_backup (1.46GB) � Master production scheduling and factory capacity planning. BOStore_backup (1.31GB) � Business Object Store; history of sales orders and transactions. XTCWZ_20210207.bak (930MB) � Material and technical supply database (inventory and spare parts). SCM_DB_backup (906MB) � Supply Chain Management; logistics contracts and shipping routes. QL_MES_backup (721MB) � Manufacturing Execution System; real-time shop floor data. QL_GoView_backup (715MB) � Production visualization and real-time monitoring dashboards. qcadmin20231229.bak (606MB) � Quality control administration and defect analysis logs. GEQYWX_20240313.bak (562mb) � Integration database for WeChat Work corporate communications. III. Corporate, Political & Infrastructure Modules (Under 500MB) ql_party_yj_backup (334MB) � Records of the Communist Party Committee and political leadership. XTC_WorkFlowTest (330MB) � Digital document approval routes and e-signature logic. BFDB2_backup (306MB) � Business Finance database; departmental budgets and planning. QL_Board_backup (288MB) � Materials for Board meetings and executive decision-making. XTHRDB-20190402.BAK (264MB) � Legacy HR archive for historical personnel tracking. SSISDB_backup (222MB) � SQL Server Integration Services; logic for cross-system data transfers. QL_Maint_backup (218MB) � Equipment maintenance schedules and industrial repair logs. QL_DAQ_backup (182MB) � Data Acquisition system logs from factory floor sensors. VUEHRDB.BAK (156MB) � HR database specifically for IT and web-development teams. SpringBootBase.jar (81MB) � Executable code for the internal web API and microservices. TungstenQuote_backup (10MB) � Current commercial bids and tungsten market price quotes.
Date of Breach 2026-03-31 00:00:00.000000
Discovery Date 2026-03-31 15:13:38.433840
Region CN
Target Domain None
Business Sector Manufacturing

 

Don’t wait for a breach to take action — stay informed and take control of your cybersecurity posture today.

You can also check if your organization’s data has been exposed using our free Data Breach Checker.

Disclaimer: HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.

What do you think?

Related articles

Contact us
Partner with Us for Cybersecurity Solutions.

We’re here to answer any questions and help you find the right HookPhish services to meet your cybersecurity needs.

Your benefits:
What happens next?
1
Schedule a Call at your convenience.
2

Meeting to understand your needs.

3

Proposal Preparation with tailored solutions.

Schedule a Consultation