Back to Victim Disclosures

M.C.S. Steel Public Company Limited

rhysidaransomware groupmcssteel.com
Ransom deadline in2d 20h 13m 12s
4d ago

Added Nov 9, 2026

M.C.S. Steel Public Company Limited - largest structural-steel fabricator in Thailand, SET-listed (ticker MCS). Total files: 2,314,625 Total volume: 4.2 TB 'Senior Advisor to Chairmen of the Board' paid 800,000 JPY/month via Trust Engineering K.K. (Tokyo) to Keiyo Bank Chiba account 5376091, term Nov-2025..Oct-2027 - while Mr. Yokoyama Yukio also sits on MCS payroll. Related-party flow outside SET disclosures. Chairman & CEO Dr. Naiyuan Chi carries a PAYROLL 'advisor' gross of 12.92M THB/yr (2023-2026); lifetime net receipts ~79M THB (2015-2026). Advisor/consultant contracts to Haneishi, Iijima, Ogilvie, Yang - overlapping the company's Japanese payroll. Identity documents of staff incl. Chairman's daughter (Thai national IDs, passport, house registration), foreign managers' work permits. Myanmar workshop staff charged 500-800 THB per clinic visit (signed memo, 2023) - labour-protection exposure. Prior Faust ransomware infection inside the network (victim id A2242861-3499) - security failures never remediated; SQL credentials and Windows OEM keys stored in plaintext. Confidential pipeline of Japan's Big-5 contractors incl. site names.

Leak Page Screenshot

Organization Details

Organization

M.C.S. Steel Public Company Limited

Domain

mcssteel.com

Country

🇹🇭 TH

Industry Sector

Manufacturing

mcssteel.com

Leak Data

Data Size

4.2 TB

Published

Nov 9, 2026

Publication Status

Published

Ransom / Auction

15 BTC

Auction Status

for sale

Discovered

Nov 9, 2026

Leak URL
http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/archive.php?company=300
Site OnlineLast scanned 12h ago

Threat Group

rhysida

ransomware group

View full group profile →

Quick Facts

Country🇹🇭 TH
SectorManufacturing
Ransom15 BTC
Data Size4.2 TB
AddedNov 9, 2026