GLOBALMalwareManufacturingManufacturingRansomwareToufanRansom DemandedActor NamedMedium

Caesarstone

bd_c65a51a08910e0d6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 19, 2023

To disclose

—

Affected

Not disclosed

Linked

12 filings

Confidence

50%

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group Toufan on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: ManufacturingDiscovered: 2023-12-19

View aggregator listing on ransomware.live View merged incident timeline

Source: Ransomware.live

J jump to incidentP pin to compareR raw source

Incident timeline — mostly unverified

? — ?

Breach window unknown

Dec 19, 2023

Claim posted

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Claim → filing

—

Compliance clock

Not assessable

This filing is one of 12 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (10)

Leak Sitetoufanbd_3950aafc40bd33b92023-12-19Verified by operator
Leak Sitetoufanbd_4785192248c9b5952023-12-19Candidate
Leak Sitetoufanbd_4e0f9da032715deb2023-12-19Verified by operator
Leak Sitetoufanbd_5103d6a72d330fdf2023-12-19Verified by operator
Leak Sitetoufanbd_760e76190e10ccbb2023-12-19Verified by operator
Leak Sitetoufanbd_9cb36faa3d54c2a82023-12-19Verified by operator
Leak Sitetoufanbd_adebe0ba82c8290f2023-12-19Verified by operator
Leak Sitetoufanbd_bcc3e99e33f979e32023-12-19Verified by operator
Leak Sitetoufanbd_d217f618b01778b22023-12-19Verified by operator
Leak Sitetoufanbd_ed826cef4738cd0d2023-12-19Verified by operator

Showing first 10 of 11 linked disclosures.

Name: toufan

Name: Caesarstone
norm: caesarstone
Domain: cspartnershq1.caesarstone.com
Industry: Manufacturingllm

Attack vector: Ransomware· toufan
Threat actor: ToufanExternalFinancial

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.
Confidence context: Single unverified source — the attacker's own description. When a regulatory filing corroborates the claim, it appears in the linked-filings card.

Evidence ladder

Leak-site claimThis record

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source ceiling

actor name
victim claim
ransom/leak status
discovery date
materiality
notification
affected count
confirmed data types
compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2023-12-17

toufan

According to ransomware.live, Pro-Palestinian Group

117 victims claimed globally117 tracked hereFull profile →

Source URL: https://www.ransomware.live/id/Y3NwYXJ0bmVycy5jYWVzYXJzdG9uZXVzLmNvbUB0b3VmYW4=
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 19, 2023
Raw hash: 08566f3c959ee4791100e7234cabeb82a86cb48d1eaa74f40876283270b28964

Linked disclosures

Ransomware claims (10)

Reporting entitytoufan

Victim entityCaesarstone

What this source establishesRansomware

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ransomware.live