Disuelas JC SAS Listed by tengu Ransomware Group

On January 26, 2026, Colombian shoe-component manufacturer Disuelas JC SAS appeared on the leak site of the tengu ransomware group. The company, based at Calle 26 Sur 29 49 in Bogotá with phone number 6016296011, is claimed to have had internal files exfiltrated after a ransomware attack. While the exact number of people whose personal information may have been exposed remains unknown, anyone whose data was stored in the company’s systems — employees, customers, suppliers, or their families — may now be at risk.

What's Publicly Reported from Reporting

Public reporting indicates that tengu actors breached Disuelas JC SAS, a simplified joint-stock company dedicated to the fabrication of shoe parts. The attackers exfiltrated internal files before encrypting systems and later published a sample on their leak site. Available details confirm the company’s physical address, main telephone line, and corporate status, all of which are now publicly tied to the incident. No confirmed victim count has been released, but the nature of internal files in a manufacturing business typically includes employee records, supplier contracts, customer invoices, and financial documents containing names, addresses, identification numbers, and contact details.

Why This Matters for You and Your Family

When a company that handles everyday business records is breached, the information can reach criminals who combine it with data from other leaks. If you or any member of your family has ever worked with, purchased from, or supplied goods to a business like Disuelas JC SAS, your details could already be circulating. Names, addresses, phone numbers, and Colombian ID numbers are valuable because they allow identity thieves to open accounts, apply for credit, or impersonate you in government systems. For families this risk extends to children whose school or medical records sometimes sit in the same shared folders.

The Doxxing and Identity-Chain Implications

Stolen internal files rarely stay isolated. Criminals use them as starting points to map connections between email addresses, phone numbers, usernames, and real-world identities. A single leaked supplier spreadsheet can reveal home addresses that link to children’s gaming accounts or family social-media profiles. Once these links are established, targeted doxxing, harassment, or financial fraud becomes far easier. Credential leaks of this kind frequently cascade into account takeovers across unrelated services where the same password or email was reused.

Tengu Ransomware Group’s Track Record

Public reporting attributes the attack to the tengu ransomware group. The group emerged in late 2024 and has targeted organizations across Latin America and Europe. Notable prior victims include mid-sized manufacturing and logistics firms whose internal documents were published after ransom demands went unpaid. Their typical playbook involves initial access through phishing or exploited remote-desktop services, followed by exfiltration of sensitive files, deployment of ransomware, and extortion via dual pressure: encryption of systems plus public leaks on their dark-web blog. They set short deadlines, often 7 to 14 days, before releasing additional data batches.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what chains back to the Disuelas JC SAS breach.
• Rotate any password you ever used at Disuelas JC SAS or related vendor portals, then enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information appears it is caught within hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become entry points for doxxing chains when corporate data leaks.
• Let remediation specialists handle takedown requests for any exposed personal records while you focus on securing your own accounts and alerting family members.

The incident shows that even companies outside the spotlight can expose your family’s information without warning. Taking concrete steps now limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, including coverage for your household and children’s gaming accounts that frequently get swept into these cascades.