Ransomware victim disclosure
← All victimsHarita Group
listed as Fort Rolins Collection Agency · Claimed by Malas · listed 3 years ago
Status timeline
- Listed
May 18, 2023
- Data leaked
At a glance
- Group
- Malas
- Status
- Data leaked
- Country
- Indonesia
- Sector
- Financial Services
- Listed on leak site
- May 18, 2023
About the victim
AI dossier — public-source company profileHarita Group is an Indonesian conglomerate engaged in mining (coal and minerals), palm oil plantation development, and logging operations. The group is described in the leak post as operating across Indonesia with a Swiss partner, Glencore, in resource extraction activities. It is a large diversified natural resources company operating in Indonesia.
- Industry
- Natural Resources & Mining (Coal, Palm Oil, Logging)
Attack summary
Severity: high — The group claims confirmed exfiltration and public disclosure of corporate data including internal emails from a large conglomerate; while the exact volume is unstated, the data_published status and operational scale of Harita Group elevate this beyond medium. No confirmed regulated PII or medical data mentioned, so not critical.The Malas ransomware group claims to have exfiltrated data including internal emails after the victim ignored their ransom note and restored from backups; the group states it is now publishing the stolen data ('restoring their backups for all of you'), indicating confirmed data exfiltration and publication.
Data the group says was taken
AI dossier — extracted from the leak post- Internal emails
- Corporate communications
What the group claims
<p>They act like they don&rsquo;t see🙈 our ransom note🗒 , or they just don&rsquo;t negotiate🤝with cyberterrorists💣. They restore their backups and think ignoring us🙉 makes us go away. So now we also restore their backups, for all of you.</p> <p>Harita Group is dedicated to mining, logging rainforests🐒😭 to plant palm oil monocultures, coal, and anything else that&rsquo;ll make them a profit through destroying their countries&rsquo; environment. Their Swiss🇨🇭🇭 partner Glencore is well documented for it&rsquo;s human rights and environmental abuses in Latin America, including hiring paramilitary killers to drive indigenous off their lands so they can steal it. We think it&rsquo;s likely they operate the same in Indonesia and journalists will like to look through their emails
Sources
Source
Indexed 3 years agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
