The Everest ransomware group claims to have breached K Subsea Group, a prominent provider of commercial diving and subsea engineering services headquartered in Singapore.
According to the actor, the leak contains 142,370 files totaling 293.44 GB, encompassing a massive archive of operational, corporate, and personnel records. The allegedly compromised data includes:
-
Complete operational archives, including technical documentation for diving systems and vessel safety management systems.
-
Extensive tendering history, audited financial statements, commercial proposals, and corporate bank details.
-
Comprehensive HR databases containing payroll details, visa information, and expense claims.
-
Highly sensitive personal data of crew members and divers across multiple countries, including passport scans, medical examination results, decompression incident records, and private WhatsApp/Teams conversations.
-
Proprietary operational data and underwater inspection reports from major contracts, including detailed infrastructure databases in AutoCAD format.
-
Confidential client data affecting over 15 major energy and maritime partners, such as Saudi Aramco, Chevron, Shell, and Petronas.
-
Corporate data including Singapore registry extracts, insurance policies, proprietary diving tables, and black box recordings of diving operations.
