Ecuacorriente S.A.
thegentlemenThis record tracks a ransomware attack claimed by the thegentlemen group against Ecuacorriente S.A.. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
https://ecsa.com.ec https://www.emis.com/php/company-profile/EC/Ecuacorriente_SA_en_3950413.html https://www.***.com/business-directory/company-profiles.ecuacorriente_sa.ef08074bdfb377fb12cd904184c089bc.html . Revenue - $1.11 billion USD. Ecuacorriente S.A is a mining company. It is operated by China Railway Construction Copper Crown Investment Co., Ltd. The company is involved in mining and has created over 2,400 direct jobs for the local area, as well as over 10,000 indirect jobs. Ecuacorriente S.A has a mineral processing capacity of 20 million tons per year and operates the Mirador Copper Mine, with an annual production of 354,000 tonnes of copper concentrate and 96,000 tons of copper. The company is also engaged in environmental governance and ecological recovery work.
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.