Tag: PH

  • Ransomware claim: Ivan Smith Furniture (sarcoma)

    For 65 years, Ivan Smith Furniture has believed that great service starts with treating people like neighbors. What began as a small-town furniture store has grown to 40 locations across Louisiana, Texas, and Arkansas, but the values that built our business remain the same.Geo: USA – Leak size: 500 gb – Contains: Files and data bases

    • Group: sarcoma
    • Country: PH
    • Sector: Retail & E-Commerce
    • Discovered: 2026-10-31 10:31 UTC
    • Attack date: 2026-10-31 10:31 UTC

    This entry reflects a claim published by an extortion group and collected by a public tracker. It has not been independently verified.

    Source: ransomware.live — Recent Victims · 2026-10-31

  • Ransomware claim: KTU Shipyard (Whitearmor)

    Company: PT Karya Teknik Utama (KTU Shipyard)
    Location: Batam, Indonesia
    Founded: 1982
    Industry: Shipbuilding & Marine Engineering
    Website: https://ktushipyard.com/
    What the company does
    KTU Shipyard is an Indonesian shipbuilding company specializing in the construction, repair and maintenance of commercial vessels.

    Its main products and services include:
    – Tugboats
    – Barges
    – Tankers and cargo vessels
    – Crane barges
    – Ship repair and maintenance
    Company size
    – Privately owned company.
    – Approximately 501–1,000 employees.
    – Multiple shipyard facilities in Indonesia.
    – Claims to have built approximately 2,200 vessels.
    Annual Revenue
    ~USD 200 million
    Key Business Information
    – Business model: B2B shipbuilding and marine services.
    – Customers: Shipping companies, marine logistics operators and offshore businesses.
    – Main market: Indonesia and regional maritime markets.
    – Competitive advantage: Established shipbuilding experience, multiple facilities and diverse vessel manufacturing capabilities.

    What was accessed: Internal ticketing systems, All users drive (including business, customer, confidential files over 3tb of data), customer data, etc. You have 20 days to reach out or let it be your downfall.

    Attatched: Is a sample file from recent user drives, and a screenshot showing POA (proof of access)

    We can be very reasonable and this can go well or it can not. You can start contact at the email: whitearmormember@proton.me

    https://gofile.io/d/G981x5Rl
    https://gofile.io/d/99sTtibR

    (backup sample files)

    • Group: Whitearmor
    • Country: PH
    • Sector: Transportation
    • Discovered: 2026-10-30 21:38 UTC
    • Attack date: 2026-10-30 20:02 UTC

    This entry reflects a claim published by an extortion group and collected by a public tracker. It has not been independently verified.

    Source: ransomware.live — Recent Victims · 2026-10-30