Ransomware Group: FUNKSEC

VICTIM NAME: punjab[.]gov[.]in

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the FUNKSEC Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page related to Punjab.gov.in, the official online portal for the Government of Punjab in India, notes significant exposure of sensitive data. The leak was published on January 26, 2025, attributed to the group known as Funksec. This incident involves the potential compromise of various information detailing the government’s operations and its digital services aimed at enhancing transparency and citizen convenience. The portal is primarily designed to facilitate access to government services including bill payments and online applications. However, due to the breach, vital information including user data may have been jeopardized.

According to information extracted from the leak, there are alarming statistics regarding the number of individuals and entities potentially affected. The post mentions a total of 7,392 users along with other data linked to 450 third-party entities. The infostealer component of the leaked data indicates that there are 49 employees whose information may be compromised, as well as content linked to 28 unique employee URLs. Furthermore, 56 distinct third-party domains were identified in relation to this incident. The leak also features a screenshot that may contain images of documents related to the port, indicating the seriousness of the data breach.