The agency βBadan Pengelola Keuangan Hajiβ (BPKH) in Indonesia has fallen victim to a ransomware attack purportedly carried out by the threat actor blackshrantac, affecting its financial management operations. This incident compromises the security of funds allocated for the Hajj pilgrimage, impacting Indonesia. #Indonesia
Incident Details
- Victim: Badan Pengelola Keuangan Haji
- Country: ID
- Actor: blackshrantac
- Source: http://b2ykcy2gcug4gnccm6hnrb5xapnresmyjjqgvhafaypppwgo4feixwyd.onion/targets/32
- Discovered: 2025-11-29 16:16:10.603278
- Published: 2025-11-29 16:15:44.075480
Information
- The agency is overseen by the Indonesian Government and located in Jakarta.
- Its primary responsibility is to handle and manage finances related to the Hajj pilgrimage for Indonesian Muslims.
- Recognized by Law No.34 of 2014, it is accountable for optimizing funds, managing risks, and ensuring the financial demands of Hajj participants are met.

Disclaimer: This post is based on public claims made by the ransomware group "blackshrantac". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.