Hyundai Elevator
Attack Intelligence
Hyundai Elevator was compromised in a ransomware attack attributed to everest in March 2026. The organization, operating in the Manufacturing sector in South Korea, was added to the group's data leak site as part of an extortion campaign.
everest operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
[AI generated] Hyundai Elevator Co., Ltd is a South Korean company specializing in the production of elevators, escalators, and related equipment. Established in 1984, Hyundai Elevator is a part of the Hyundai Group. It offers comprehensive services that include designing, manufacturing, installing and maintaining a variety of systems including moving walkways, dumbwaiters, and parking systems. It operates mainly in the domestic market but has expanded globally.
Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2026-3300, which may have been leveraged as initial access vectors or for lateral movement.