They call themselves the largest manufacturer of heating elements in Southeast Asia. The company has a history spanning more than 60 years. They have managed to establish export operations to virtually every region of the world. And apparently, they decided to maintain a global scale in everything they do. The damage from a cyberattack could also be global. A digital failure on the scale of half a terabyte is capable of “freezing” all of the VITAR Group’s achievements for a long time.

VITAR was founded in the 1960s. It began by selling and repairing household appliances. In the 1980s, the company entered the production of wire harnesses, heater assemblies, and industrial heating elements, and in the 1990s, it shifted to supplying heaters as an OEM to international manufacturers of household appliances. According to the VITAR website, the company became the first manufacturer of heating elements in ASEAN to receive ISO 9001 certification.

Today, it is no longer a single factory but a group of specialized companies in Klang, Selangor. It includes VBC Electro-Heat, VBC Manufacturing, Vitar-Ceramaspeed, VITAR Bros. Manufacturing, VITAR-Segatec, and Industrial Automation. Its export markets are quite extensive: the United Kingdom, the United States, Japan, South Korea, Russia, Thailand, Singapore, Saudi Arabia, and other markets. VITAR does not publish consolidated financial statements at the level required for a publicly traded corporation. However, Industrial Automation, a member of the group, reports consolidated revenue of RM130 million, or approximately $31.9 million.

In September 2026, monitoring sites detected an attack on the company’s digital infrastructure. According to cyber intelligence reports, more than 500 GB of corporate data was compromised and encrypted. The leaked files contain invoices, bank statements, budgets, blueprints, and design documents. And even if we take into account that the data may include backups and duplicates, the sheer volume of compromised data is more than enough to understand that this is not a run-of-the-mill ransomware incident.

The documents found in the analyzed dataset provide an inside look at VITAR. One of the files contains a bank ledger for VITAR Bros. Manufacturing, detailing payments to suppliers, purchase order numbers, invoices, bank reference numbers, and mandatory payments to tax and social security funds.

Another document shows a purchase by VBC Electro-Heat from Nippon Electric Glass: 2,500 NEOCERAM N-11 glass-ceramic tubes at JPY54 each, for a total of JPY135,000, to be shipped via Kobe to Port Klang in late August 2026.

The leak also includes an engineering drawing from VBC Electro-Heat for the Copper Tank Heater Assembly Gusto VSH-2983-ASY3, 4.5 kW, 220 V, manufactured for the client Centonia. It contains internal part numbers, component specifications, requirements for pressure testing, welding, insulation, and HIPOT testing, as well as a history of design changes.

Together, these documents paint a picture that goes beyond mere accounting. They reveal the company’s finances, procurement, engineering, manufacturing, and supply chain - literally the company’s nervous system.

The most underestimated danger of an attack is not a simple computer breach, but a disruption of the customer pipeline. VITAR does not manufacture the end product that customers see on store shelves, but rather its hidden heat source: components for washing machines and dishwashers, dryers, water heaters, electric ranges and cooktops, instantaneous shower heaters, storage tank heaters, as well as custom-made industrial heaters and temperature sensors. VBC Electro-Heat supplies OEM components to major home appliance manufacturers in Europe, North America, and Asia; approximately 60% of the company’s output is exported. VBC Manufacturing, in turn, claims more than 65% of the market for custom-made heating elements and thermosensors in Malaysia.

Ransomware doesn’t necessarily have to shut down a machine to bring a factory to a halt. It’s enough to lose access to the ERP system, the order management system, inventory tracking, purchase orders, drawings, or the ability to issue documents and ship products. In 2024, a ransomware attack on Japan’s Casio disrupted several systems, caused delivery delays, and temporarily halted the acceptance of repair orders. An even more telling case occurred at Japan’s Asahi in 2025. Ransomware disrupted order processing and shipments, and production at the company’s Japanese facilities was suspended. The company was forced to switch to manual order processing.

If the 500 GB of data leaked from VITAR includes current drawings, customer-specific specifications, purchase orders, supplier records, and production documentation, the attackers could have obtained a roadmap revealing what VITAR manufactures, for whom, from which components, and through which suppliers. In that case, the damage could spread far beyond the walls of Klang: from an engineer’s workstation to a procurement specialist, from the procurement specialist to an OEM assembly line, and from there to the finished household appliance. VITAR sells heat, but in a situation like this, the entire supply chain gets a cold shower.

VITAR has been making money from controlled heating for decades. Now the company must prove that its own digital infrastructure can withstand the heat. So far, this has not been proven. And if the worst-case scenario plays out, the market may witness a paradox: a company that has been manufacturing heating elements for decades has itself failed to withstand the digital heat, while its customers have begun to cool off.

DATE FOR ANALYSIS PROVIDED BY QILIN