HackerFeeds
All ransomware incidents
xiamentungsten.com

Ransomware group beast hits Xiamen Tungsten Co. (XTC)

MEDIUM
·Manufacturing·CN·2026-03-31

Xiamen Tungsten Co. (XTC) — a manufacturing target operating in CN has been listed by the beast ransomware group on 2026-03-31. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.

Incident Report

Target OrganizationXiamen Tungsten Co. (XTC)
Threat Group
beast
SummaryXiamen Tungsten Co. (XTC) - Full Infrastructure Dump 2026 The market capitalization $13.56 billion USD (600549.SS Shanghai Stock Exchange) Size: 150GB+ (.bak files) with FULL ACCES Content: ERP (Dynamics AX), HR (14GB), LIMS (Lab Tech), Party Committees, ESG, SCM. Format: SQL Backups. FOR SALE IN 1 HANDS ! Price: 20btc This inventory represents a total infrastructure compromise of Xiamen Tungsten Co., Ltd. (XTC). The dataset includes over 160GB of SQL backups covering R&D, ERP, HR, and Government relations. I. High-Capacity Strategic Assets (Over 5GB) ecology202306091936.bak (38GB) � Geological surveys, mine mapping, and environmental resource monitoring. QL_DataCenter_backup (15.8GB) � Centralized corporate data warehouse aggregating all subsidiary streams. QcAdmin20240109.bak (15.5GB) � Master quality control archive; includes all technical specs and product testing history. MCHRDB20260322000000.BAK (14.7GB) � Main Corporate HR database; full PII and payroll of the entire workforce. 11MicrosoftDynamicsAX_model.bak (9.07GB) � Blueprint of the ERP system including business logic and financial structures. smartbi_backup (7.56GB) � Business Intelligence platform with executive dashboards and strategic forecasts. BB.bak (5.89GB) � "Big Business" database containing consolidated financial reporting. QL_SSO_backup (5.38GB) � Single Sign-On hub; contains user credentials and network access tokens. II. Core Operational & Manufacturing Databases (500MB � 5GB) Global_Erp.bak (3.66GB) � ERP system for international trade and overseas branches. QL_ERP.bak (3.68GB) � Domestic resource planning, procurement, and asset management. QL.LIMS.JL_backup (2.14GB) � Lab Information Management; contains chemical formulas and alloy recipes. QL_HSE_GE_backup (1.97GB) � Global Health, Safety, and Environment regulatory compliance records. QL.ESG_backup (1.80GB) � Environmental, Social, and Governance audits and supplier certifications. QL_Scheduler_backup (1.46GB) � Master production scheduling and factory capacity planning. BOStore_backup (1.31GB) � Business Object Store; history of sales orders and transactions. XTCWZ_20210207.bak (930MB) � Material and technical supply database (inventory and spare parts). SCM_DB_backup (906MB) � Supply Chain Management; logistics contracts and shipping routes. QL_MES_backup (721MB) � Manufacturing Execution System; real-time shop floor data. QL_GoView_backup (715MB) � Production visualization and real-time monitoring dashboards. qcadmin20231229.bak (606MB) � Quality control administration and defect analysis logs. GEQYWX_20240313.bak (562mb) � Integration database for WeChat Work corporate communications. III. Corporate, Political & Infrastructure Modules (Under 500MB) ql_party_yj_backup (334MB) � Records of the Communist Party Committee and political leadership. XTC_WorkFlowTest (330MB) � Digital document approval routes and e-signature logic. BFDB2_backup (306MB) � Business Finance database; departmental budgets and planning. QL_Board_backup (288MB) � Materials for Board meetings and executive decision-making. XTHRDB-20190402.BAK (264MB) � Legacy HR archive for historical personnel tracking. SSISDB_backup (222MB) � SQL Server Integration Services; logic for cross-system data transfers. QL_Maint_backup (218MB) � Equipment maintenance schedules and industrial repair logs. QL_DAQ_backup (182MB) � Data Acquisition system logs from factory floor sensors. VUEHRDB.BAK (156MB) � HR database specifically for IT and web-development teams. SpringBootBase.jar (81MB) � Executable code for the internal web API and microservices. TungstenQuote_backup (10MB) � Current commercial bids and tungsten market price quotes.
Date of Breach2026-03-31
Discovery Date2026-03-31
RegionCN
Target Domainxiamentungsten.com
Business SectorManufacturing
Severity
MEDIUM
Data Size150GB+ (.bak files) with FULL ACCES

Claim by beast

Xiamen Tungsten Co. (XTC) - Full Infrastructure Dump 2026 The market capitalization $13.56 billion USD (600549.SS Shanghai Stock Exchange) Size: 150GB+ (.bak files) with FULL ACCES Content: ERP (Dynamics AX), HR (14GB), LIMS (Lab Tech), Party Committees, ESG, SCM. Format: SQL Backups. FOR SALE IN 1 HANDS ! Price: 20btc This inventory represents a total infrastructure compromise of Xiamen Tungsten Co., Ltd. (XTC). The dataset includes over 160GB of SQL backups covering R&D, ERP, HR, and Government relations. I. High-Capacity Strategic Assets (Over 5GB) ecology202306091936.bak (38GB) � Geological surveys, mine mapping, and environmental resource monitoring. QL_DataCenter_backup (15.8GB) � Centralized corporate data warehouse aggregating all subsidiary streams. QcAdmin20240109.bak (15.5GB) � Master quality control archive; includes all technical specs and product testing history. MCHRDB20260322000000.BAK (14.7GB) � Main Corporate HR database; full PII and payroll of the entire workforce. 11MicrosoftDynamicsAX_model.bak (9.07GB) � Blueprint of the ERP system including business logic and financial structures. smartbi_backup (7.56GB) � Business Intelligence platform with executive dashboards and strategic forecasts. BB.bak (5.89GB) � "Big Business" database containing consolidated financial reporting. QL_SSO_backup (5.38GB) � Single Sign-On hub; contains user credentials and network access tokens. II. Core Operational & Manufacturing Databases (500MB � 5GB) Global_Erp.bak (3.66GB) � ERP system for international trade and overseas branches. QL_ERP.bak (3.68GB) � Domestic resource planning, procurement, and asset management. QL.LIMS.JL_backup (2.14GB) � Lab Information Management; contains chemical formulas and alloy recipes. QL_HSE_GE_backup (1.97GB) � Global Health, Safety, and Environment regulatory compliance records. QL.ESG_backup (1.80GB) � Environmental, Social, and Governance audits and supplier certifications. QL_Scheduler_backup (1.46GB) � Master production scheduling and factory capacity planning. BOStore_backup (1.31GB) � Business Object Store; history of sales orders and transactions. XTCWZ_20210207.bak (930MB) � Material and technical supply database (inventory and spare parts). SCM_DB_backup (906MB) � Supply Chain Management; logistics contracts and shipping routes. QL_MES_backup (721MB) � Manufacturing Execution System; real-time shop floor data. QL_GoView_backup (715MB) � Production visualization and real-time monitoring dashboards. qcadmin20231229.bak (606MB) � Quality control administration and defect analysis logs. GEQYWX_20240313.bak (562mb) � Integration database for WeChat Work corporate communications. III. Corporate, Political & Infrastructure Modules (Under 500MB) ql_party_yj_backup (334MB) � Records of the Communist Party Committee and political leadership. XTC_WorkFlowTest (330MB) � Digital document approval routes and e-signature logic. BFDB2_backup (306MB) � Business Finance database; departmental budgets and planning. QL_Board_backup (288MB) � Materials for Board meetings and executive decision-making. XTHRDB-20190402.BAK (264MB) � Legacy HR archive for historical personnel tracking. SSISDB_backup (222MB) � SQL Server Integration Services; logic for cross-system data transfers. QL_Maint_backup (218MB) � Equipment maintenance schedules and industrial repair logs. QL_DAQ_backup (182MB) � Data Acquisition system logs from factory floor sensors. VUEHRDB.BAK (156MB) � HR database specifically for IT and web-development teams. SpringBootBase.jar (81MB) � Executable code for the internal web API and microservices. TungstenQuote_backup (10MB) � Current commercial bids and tungsten market price quotes.

Posted by the beast threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.

Sources

Victim website

xiamentungsten.com

Leak post (onion / Tor)

tor

http://beast6azu4f7fxjakiayhnssybibsgjnmy77a6duufqw5afjzfjhzuqd.onion/card/xiamen_tungsten_co___xtc_

Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.

Disclaimer

HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.