Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

Dinas Komunikasi dan Informatika

klungkungkab.go.id
Group Panzer
Discovered 2026-09-03 11:51 UTC
Est. attack date 2026-09-03
Country ID
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation
Data exfiltrated 62GB

Description:

The Central Java Province Communication and Informatics Service was formed based on Central Java Provincial Regulation Number 9 of 2016 concerning the Formation and Composition of Central Java Province Regional Apparatuses and Central Java Governor Regulation Number 70 of 2016 concerning the Organization and Work Procedure of the Central Java Province Communication and Informatics Office. As for the duties of the Central Java Province Communication and Informatics Office, it is to assist the Governor in carrying out government affairs in the communications and informatics sector, the coding sector, and the statistics sector which are the authority of the Regions and the assistance tasks assigned to the Regions.
Infostealer activity detected by HudsonRock

Compromised Employees: 4

Compromised Users: 431

Third Party Employee Credentials: 2

External Attack Surface: 104

Infostealer Distribution
Exposure Report
by ParanoidLab
2847
Passwords
130 critical
59
Cookies
2 critical
Last queried 2026-09-10 14:58 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • No MX records found.
TXT Records
  • google-site-verification=h32Hwxr0AS1fQjAu_bKz2ZEUZuRoIw8tRluKHqIzl1s
  • v=spf1 include:spf.brevo.com ~all
  • google-site-verification=dutsA7UZpMQ_6uuWW0KbcFICIv18Br3CSdCKoaoECB4
  • brevo-code:789c60a7e228413aa0fb2bbb1d774d8f
  • google-site-verification=ED1QF0Izpl-9DPyjReK1cne1tGX2SMC8RZa9_N4v56w
  • google-site-verification=1tsQ8mVuf4BrXavlA94bvJnabiE3bvlkj-NlylJTklo
  • google-site-verification=hgLmt4VKRJ8ImMuwZDIiKHoMgSoC9LqeqVVCyeKwtUs
  • brevo-code:4324dd6286250834f036a8d6c0d1f696
  • v=spf1 a mx ip4:103.152.7.11 ip4:103.152.7.4 ip4:103.200.7.112 include:mailsrv.klungkungkab.go.id include:spf.brevo.com ~all
Cloud / SaaS Services Detected
Brevo

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.