☑️ Weekly Darkweb – August Week 2, 2026
🔍 Taiwanese Manufacturer 'Y' Internal Data Leaked by Morpheus Ransomware
• On July 30, Taiwanese automotive parts and custom plastic/metal component manufacturer 'Y' was identified on the Morpheus ransomware gang's data leak site.
✓ Manufacturer 'Y': Taiwanese manufacturer with annual sales of approximately USD 21 million as of 2026, producing and supplying custom industrial parts and automotive components.
• The ransomware gang claimed to have stolen 177 GB of internal data, including HR and PII data, NDA contracts, quality defect records, CAD drawings, supply chain and manufacturing trade secrets, IT infrastructure, and DB backup files. As proof of attack, samples including sales contracts, production part approval process guarantees, and customer vehicle design change docs were released.
➢ The gang targeting key component manufacturers lead not only to the leak of trade secrets and design schematics but also pose risks that could spread across the broader automotive supply chain.
🔍 Israel Defense Forces (IDF) Personal and Military Data Leaked on Dark Web
• On August 5, a 429MB PDF file containing names, phone numbers, home addresses, and military-related information of IDF personnel was leaked on the hacking forum 'PwnForums' under the title 'IDF Leaks.' The file reportedly contains data from 2023–2026.
✓ Israel Defense Forces (IDF): Established in 1948, Israel's unified military organization operates ground, air, and naval forces under a single command structure, responsible for national defense and security policy execution.
• The threat actor 'dhando' claimed that the material was provided directly by the Al-Qassam Brigades, the military wing of Hamas. However, on the same day, another user on the identical forum questioned the authenticity of the source, citing that a file with the exact same name was already circulating in over 15 Telegram groups.
🔍 Spanish Defense Tech Firm 'G' Internal Data Up for Sale on Dark Web
• On August 3, internal data from Spanish defense and aerospace technology company 'G' was posted on the hacking forum 'PwnForums.'
✓ Company 'G': Spanish defense tech company founded in 1987 with approximately EUR 90M in annual revenue, developing defense and aerospace software and hardware.
• The threat actor 'nxe' claimed to have stolen 3.58 GB of data, alleging theft of detailed technical CAD drawings and wiring diagrams for armored vehicles, military equipment maintenance reports, customer contracts and minutes, and chemical specifications for military coatings.
➢ The forum user targeted defense competitors, research institutes, foreign governments, and military officials through highest-bid auctions. Such attacks on defense contractors pose serious risks to national security and military assets.
*The full report is available upon request and for XARVIS subscribers.