Ransomware group AuditTeam hits Demidov Steel Group
Demidov Steel Group — a manufacturing target operating in RU has been listed by the AuditTeam ransomware group on 2026-08-18. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Demidov Steel Group |
|---|---|
| Threat Group | AuditTeam |
| Summary | Demidov Steel Group (ГК Демидов) is a Russian metal products manufacturer and trader, website: demidovsteel.ru. The company owns its own plants (Ryazan, Davlekanovo, Novocherkassk, and others), sells wholesale and retail, and supplies 4,000+ products including steel pipes, structural shapes, sheet metal, and rebar, along with processing services such as cutting and galvanizing, plus delivery. Its network covers Moscow and more than a dozen other cities. The company has been in business for over 20 years and serves construction and industrial clients. |
| Date of Breach | 2026-08-18 |
| Discovery Date | 2026-08-26 |
| Region | RU |
| Target Domain | — |
| Business Sector | Manufacturing |
| Severity | MEDIUM |
Claim by AuditTeam
Demidov Steel Group (ГК Демидов) is a Russian metal products manufacturer and trader, website: demidovsteel.ru. The company owns its own plants (Ryazan, Davlekanovo, Novocherkassk, and others), sells wholesale and retail, and supplies 4,000+ products including steel pipes, structural shapes, sheet metal, and rebar, along with processing services such as cutting and galvanizing, plus delivery. Its network covers Moscow and more than a dozen other cities. The company has been in business for over 20 years and serves construction and industrial clients.
Posted by the AuditTeam threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Leak post (onion / Tor)
http://6tdqqaxftvradka5d2frzgwixis7fmro7rfh4ettzcx7jfapkebe6jad.onion/entity/C1C23C2621D1D387
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.