GLOBALMalwareManufacturingManufacturingRansomwareInc RansomRansom DemandedActor NamedData Leak ThreatenedData PublishedHigh

ttmet.co.th

bd_aa0fce555e805ec6 · schema v1 · pii pii-v1

Full breach record for ttmet.co.th →

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group INC Ransom on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: ManufacturingDiscovered: 2026-01-27

View aggregator listing on ransomware.live

Source: Ransomware.live

Post text · scraped from the leak site

The company specializes in the import and export of machinery and spare parts used in the production and quality control for automotive manufacturing. They offer both wholesale and retail sales domestically and internationally, along with installation services, equipment inspections, and maintenance. Their intended clients include automotive manufacturers and businesses in need of machinery and parts. The company is committed to providing comprehensive services to ensure operational efficiency in the automotive sector. Employees: 150 Revenue: $30.4 Million Industry: Automobile Dealers - Retail Phone Number: +66 26255880

Tracked as a single-filing incident — the only disclosure on record for this event so far.Unverified claimView incident

No regulatory filing corroborates this yet. If an SEC 8-K, state-AG notice, or victim statement lands, DisclosureLens will merge it into an incident and link it here.

Source provenance

Source URL: https://www.ransomware.live/id/dHRtZXQuY28udGhAaW5jcmFuc29t
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 26, 2025
Raw hash: 35a655f89ca98598c5745e995dd2278b11db2148b15dd1dc4312040b2c378669

Reporting entity

Name: incransom
norm: inc_ransom

Victim entity

Name: ttmet.co.th
norm: ttmetcoth
Domain: ttmet.co.th
Industry: Manufacturing

What this source establishes

Source ceiling: A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
Attack vector: Ransomware· inc_ransom
Threat actor: Inc RansomExternalFinancial

Compliance

Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.