NewAI pentesting that proves every finding
INSECUREWEB

Data Breach News1 min read

65GB of Engineering Data Leaked from GIBSIN (Taiwan)

By InsecureWeb Team

This report reflects observations of dark web activity. InsecureWeb makes no representations regarding the accuracy of this data.

65GB of Engineering Data Leaked from GIBSIN (Taiwan)

Data Breach Overview
In February 2026, a massive 65GB database allegedly belonging to GIBSIN Engineers Ltd., a Taiwanese engineering consultancy, was leaked by the Everest Group. The exposed data includes sensitive engineering and design documents related to the construction and operation of the MPGC power facility.

Where Was the Data Found?
The dataset was shared on cybercriminal platforms and includes:

  • Engineering and design documentation: Master plans (e.g., Plot Plans, GA), building and equipment layouts, sections and drawings of foundations, cable ducts, and pipe racks.
  • Process diagrams and P&ID files: Detailed diagrams of technological processes, valves, piping systems, instrumentation and control (I&C), and safety systems, with annotations from FHI.
  • Electrical documentation: High-voltage layouts, 500kV GIS area plans, transformer setups, and auxiliary equipment layouts for power plant units.

Impact and Risks
The leak of such technical documents poses serious risks:

  • Infrastructure targeting: Adversaries could use blueprints and systems diagrams to exploit vulnerabilities in energy infrastructure.
  • Industrial espionage: Competitors or hostile entities could misuse the proprietary engineering data.
  • Supply chain compromise: Shared data may involve third-party technologies or collaborators, extending the risk.

Recommendations for Affected Parties

  • Conduct an immediate internal audit to assess data loss.
  • Notify any impacted partners or subcontractors.
  • Strengthen cybersecurity controls around sensitive documentation.
  • Monitor for any signs of tampering or intrusion in associated infrastructure.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.

More breach reports