Ransom! KSP TLM INDONESIA (JAN-2026)

Threat actor tengu claims to have compromised KSP TLM Indonesia, a large cooperative savings and loan association in Indonesia that focuses on empowering the community economy—especially small and medium-sized female entrepreneurs. The claim frames this as ransomware activity against the victim in Indonesia #Indonesia

Incident Details

  • Victim: KSP TLM INDONESIA
  • Sector: Not Found
  • Country: ID
  • Actor: tengu
  • Source: http://longcc4fqrfcqt5lzceutylaxir6h66fp6df3oin6mvwvz6pfdbxc6qd.onion/blog/c67e84903e2846c4ee156159fe8d168786be2d7d2c0c624739aaa9ded8bba542/
  • Discovered: 2026-01-27 19:44:08.978073
  • Published: 2026-01-27 19:43:50.150526

Information

  • KSP TLM Indonesia is a large cooperative savings and loan association.
  • Focuses on empowering the community economy, especially small and medium-sized female entrepreneurs.
  • Targeted by the ransomware actor “tengu”.

Disclaimer: This post is based on public claims made by the ransomware group "tengu". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live