Suspicious group. We did not manage to confirm any victims.
11
Victims
Aug 20, 2026
First Discovered
Sep 6, 2026
Last Discovered
38
Days Inactive
0%
Infostealer
2/3
Sites Online
Victims (11)
RTAD GOV MM
MM
Government & Defense
Discovered: Sep 6, 2026 · Attack est.: Sep 6, 2026
Road Transport Administration Department (RTAD) — official government portal providing public transport services, driving license issuance, vehicle registration, and safety regulations. Full databases dump total 1.08 GB. Victim domain https://rtad.gov.mm.
CitizensPay
MM
Financial Services
Discovered: Sep 5, 2026 · Attack est.: Sep 5, 2026
Citizens Pay (also known as CTZPay) is a mobile digital wallet and payment platform in Myanmar powered by Myanmar Citizens Bank (MCB) and Capital Connect Limited. Compromised agent user information...
MBT Telecom
MM
Technology
Discovered: Sep 4, 2026 · Attack est.: Sep 4, 2026
Myanmar Broadband Telecom Co., Ltd. (MBT) is a leading fiber internet service provider and telecommunications network solutions company established in Myanmar in 2013. Full database compromise exposing 209,970 user records...
Netim Company
FR
Technology
Discovered: Aug 23, 2026 · Attack est.: Aug 23, 2026
Netim is a French domain name registrar and web hosting provider. Full compromise of internal systems — source code, infrastructure IPs, payment processing databases, customer PII, and internal business data.
Yoma Fleet
MM
Transportation
Discovered: Aug 21, 2026 · Attack est.: Aug 21, 2026
Yoma Fleet is a leading vehicle operating lease, rental, and financing company based in Yangon, Myanmar. The platform provides centralized administration and management for vehicle orders, employee financing, repayments, users,...
The University of Delhi (DU)
IN
Education
Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
The University of Delhi (DU) is a major public university in New Delhi, India, founded in 1922. It is one of India's most well-known universities, offering undergraduate, postgraduate, and doctoral...
AYUDHYA TH Insurance
TH
Financial Services
Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Leaked data from AYUDHYA (TH Insurance / Allianz Thailand). Internal batch-control system used within the financial/transaction batch-processing ecosystem behind the Allianz customer-facing web platform. Includes admin credentials (TBH2CASH:AAbb1234).
GUSTO College GLMS
TH
Education
Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Compromised user accounts from GUSTO College's GLMS (Global Learning Management System). Exposed user credentials from the Moodle platform at gusto-education.com.
Indonesian Police Database
ID
Government & Defense
Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Database containing records of 52,000 Indonesian police officers including email addresses, phone numbers, first and last names, passwords, location details, and 4,000 facial photographs.
Job Net .COM.MM
MM
Professional Services
Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Normal Hunters operation compromising Job Net .COM.MM business data, exposing corporate information, user accounts, and business operations data.
Strategy First International College
MM
Education
Discovered: Aug 20, 2026 · Attack est.: Aug 20, 2026
Normal Hunters operation compromising Strategy First International College (SFIC) student accounts, exposing personal information, academic records, and financial data.