Ransomware Group: FUNKSEC

VICTIM NAME: tirtaraharja[.]co[.]id

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the FUNKSEC Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with the victim, a regional drinking water company in Indonesia, indicates a serious breach involving the access to a SCADA system that controls pipelines. The auction for this access is set to commence on February 5, 2025, and is advertised for a price of $1,000 through the platform FunkBID. This alarming sale highlights the potential risks involving critical infrastructure and the urgency of cybersecurity measures in the utility sector.

Perumda Air Minum Tirta Raharja has established itself as a key provider of clean and safe drinking water, recently earning four awards at the PERPAMSI Award event in August 2024, including recognition for innovation in technology. The data leak not only compromises the company’s operational security but poses significant risks to public safety and service continuity. The page also features multiple images depicting the breach context, further emphasizing the need for enhanced safety protocols against ransomware threats. Importantly, there are no download links provided on the page, yet the presence of several images suggests a substantial leak of sensitive information.