Ransomware victim disclosure
← All victimsBadan Pengelola Keuangan Haji
Claimed by blackshrantac · listed 6 months ago
Status timeline
- Listed
Nov 29, 2025
- Data leaked
At a glance
- Group
- blackshrantac
- Status
- Data leaked
- Country
- ID
- Sector
- Financial Services
- Listed on leak site
- Nov 29, 2025
About the victim
AI dossier — public-source company profileBadan Pengelola Keuangan Haji (BPKH) is an Indonesian government agency established under Law No. 34 of 2014, headquartered in Jakarta. Its mandate is to manage and optimize the financial funds associated with the Hajj pilgrimage for Indonesian Muslim citizens. It oversees risk management and ensures the financial needs of all registered Hajj participants are met.
- Industry
- Government Religious Pilgrimage Fund Management
- Address
- Jakarta, Indonesia
Attack summary
Severity: critical — BPKH manages funds and personal/financial data for potentially millions of Indonesian Hajj pilgrims, representing large-scale PII and regulated financial data belonging to a government-overseen institution. Data has been confirmed published.The group 'blackshrantac' claims to have compromised BPKH and has published data, though no explicit description of encryption or specific exfiltration volume is provided in the post. The disclosed status indicates data has been published, suggesting exfiltration of government financial and potentially personal pilgrim data.
Data the group says was taken
AI dossier — extracted from the leak post- Hajj pilgrim financial records
- Government agency financial data
- Personal information of Hajj participants
Original description
AI-summarised, not from the leak post"Badan Pengelola Keuangan Haji" (BPKH) is an agency overseen by the Indonesian Government. Located in Jakarta, its primary responsibility is to handle and manage the finances related to the Hajj pilgrimage for Indonesian Muslims. Recognized by Law No.34 of 2014, BPKH is accountable for optimizing funds, managing risks and making sure every Hajj participant’s financial demands are met.
Sources
Source
Indexed 6 months agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
