Ransomware needs a way in. Stolen credentials are the cheapest one.
Hanwha Renewables Ransomware Attack
hanwharenewables.comRansomed
Data has been published on the ransomware group's leak site.
Overview
View group profileDomain
hanwharenewables.com
Industry
Energy & Utilities
Country
South Korea
Discovered
about 1 month ago
Attack date
Aug 28, 2026
Confidence
100%
Severity
Critical
Status
Data Leaked
Threat group
emperadorTotal victims
73
First seen
Aug 2026
Last seen
Oct 2026
Group status
active
Sophistication
0
Impact score
79
Threat level
4.1/10Aggressiveness9/10
Lethality0.7/10
Criticality2.4/10
Status breakdown
Data Leaked
this victim
6.8%5Negotiating2.7%2
Claimed90.5%67
Victim's position within group
Industry
Energy & Utilities
Known target sector
Country
South Korea
Not a listed target country
Other victims
View all (74)Same group · emperador
Group activity
Monthly attacks · emperador
73
total · avg 24.3/mo