« All threats

Ransomware in Indonesia

In the last 12 months, 37 organisations in Indonesia have been claimed by ransomware groups, 6 of them in the last 30 days. The figures come from the groups' own leak sites and are not verified unless stated; many victims pay and never appear.

Claimed victims37Indonesia · last 12 monthsClaimed victims6Indonesia · last 30 daysConfirmed by press0Indonesia · last 12 months

Explore with filters →🔔 Get alerts for Indonesia

Victims per month

  1. Nov 250
  2. Dec 250
  3. Jan 260
  4. Feb 260
  5. Mar 261
  6. Apr 268
  7. May 265
  8. Jun 263
  9. Jul 266
  10. Aug 268
  11. Sep 266
  12. Oct 260

Most active groups (12 months)

  1. Nova8
  2. Coinbase Cartel6
  3. Panzer3
  4. Everest3
  5. The Gentlemen3
  6. Ransomhouse2
  7. Eraleign (Apt73)2
  8. Lockbit52
  9. Stormous1
  10. Killsec31

Most affected sectors

  1. Government9
  2. Energy & utilities4
  3. Finance & insurance4
  4. Healthcare3
  5. Pharma & chemicals3
  6. Construction2
  7. Professional services2
  8. Education2
  9. Transport & logistics1
  10. Hospitality & tourism1

Recent victims

OrganisationGroupSectorClaimedStatus
SolariaThe GentlemenHospitality & tourism9/29/2026◌ Claimed (unverified)
PT PertaminaKillsec3Energy & utilities9/27/2026◌ Claimed (unverified)
PKF HadiwinataMetaencryptorProfessional services9/26/2026◌ Claimed (unverified)
PertaminaRansomhouseEnergy & utilities9/17/2026◌ Claimed (unverified)
Dinas Komunikasi dan Informatika Provinsi Jawa TengahPanzerGovernment9/3/2026◌ Claimed (unverified)
PT Intraco Penta TbkDirewolfOther9/1/2026◌ Claimed (unverified)
Indonesian PoliceDysphor1aGovernment8/29/2026◌ Claimed (unverified)
PT Perusahaan Jamu Air MancurCoinbase CartelPharma & chemicals8/29/2026◌ Claimed (unverified)
PT Bank Perekonomian Rakyat BintanCoinbase CartelFinance & insurance8/29/2026◌ Claimed (unverified)
PT Perusahaan Jamu Air MancurCoinbase CartelPharma & chemicals8/22/2026◌ Claimed (unverified)
PT. Bank Perekonomian Rakyat BintanCoinbase CartelFinance & insurance8/22/2026◌ Claimed (unverified)
Frisian Flag IndonesiaPanzerAgriculture & food8/20/2026◌ Claimed (unverified)
PT All Cosmos BiotekGunraPharma & chemicals8/6/2026◌ Claimed (unverified)
Universitas SurakartaPanzerEducation8/5/2026◌ Claimed (unverified)
PertaminaThe GentlemenEnergy & utilities7/31/2026◌ Claimed (unverified)
Vinilon GroupDeadlockManufacturing7/24/2026◌ Claimed (unverified)
Koperasi Karyawan PT Aplikanusa LintasartaNovaProfessional services7/22/2026◌ Claimed (unverified)
KOPKARLANovaTelecommunications7/20/2026◌ Claimed (unverified)
Rumah Sakit Universitas IndonesiaNovaHealthcare7/20/2026◌ Claimed (unverified)
Directorate of Shipping and Maritime AffairsNovaGovernment7/19/2026◌ Claimed (unverified)
KliknKlik.comEraleign (Apt73)Retail6/23/2026◌ Claimed (unverified)
Balai Besar POM di BandungNovaGovernment6/14/2026◌ Claimed (unverified)
Universitas NasionalNovaEducation6/6/2026◌ Claimed (unverified)
Badan Pangan NasionalNovaGovernment5/29/2026◌ Claimed (unverified)
Bank of IndonesiaTriple XFinance & insurance5/21/2026◌ Claimed (unverified)
JEC Eye Hospitals and ClinicsLockbit5Healthcare5/19/2026◌ Claimed (unverified)
Pemerintah Kabupaten BojonegoroNovaGovernment5/19/2026◌ Claimed (unverified)
PT Kereta Api IndonesiaStormousTransport & logistics5/17/2026◌ Claimed (unverified)
Indonesia's Customs Analytics PlatformEverestGovernment4/28/2026◌ Claimed (unverified)
Medika PlazaEraleign (Apt73)Healthcare4/27/2026◌ Claimed (unverified)

Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.

Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, Google News.