[dannikim]

okay. thx

[adelardsyah]

Hello DarkForums.

No deal. No payment. No response.

Today I am releasing the complete extraction from PT Brantas Abipraya (Persero) – a state-owned Indonesian construction giant responsible for critical water, energy, and transportation infrastructure. 236GB of raw internal data including dam blueprints, corruption investigation files, employee KTP scans, government tender documents, and financial audits.

What we exploited:
- Exposed corporate NAS with default credentials accessible from the internet
- Unpatched file-sharing protocol allowing lateral movement across internal servers
- No MFA on admin panels – weak password reused across multiple systems
- Zero anomaly detection on bulk data exfiltration (over 2 days of uninterrupted download)

Database Info:

- Organization: PT Brantas Abipraya (Persero)
- Domain: brantas-abipraya.co.id
- Country: Indonesia
- Total Size: 236GB compressed .rar
- Extraction Date: March – April 2026

Compromised Data (236GB):

- Engineering blueprints: Dams (Bendungan Cabean, Blora, etc.), irrigation systems, toll roads, tunnels, airports, bridges, power plants
- Government tender documents: Budget allocations (RAB – Rencana Anggaran Biaya), contract valuations, winning bid breakdowns
- KPK corruption investigation files: Internal audits, whistleblower complaints, case #05/KPK/2025 (Lamongan construction fraud)
- Employee PII: KTP scans (Indonesian ID), NPWP tax numbers, payroll logs, home addresses, emergency contacts
- Corporate email archives (.pst) of directors and division heads
- Internal WhatsApp/Telegram chat logs between project managers and finance team
- Full telephone directory: Names, extensions, direct mobiles, email mappings for all employees
- Financial audits: Profit/loss statements, risk assessments, merger strategy documents (consolidation with Wika, Waskita, PP, Adhi, Nindya Karya)
- Hardcoded credentials in config files: Database passwords, VPN keys, admin panel logins
- Building permits and environmental compliance forms for active state projects

Sample Data (representative – redacted):

Quote:
- Dam Blueprint: `Bendungan_Cabean_Blora_Structural_Final.pdf` – 47 MB – Topographical survey, concrete specs, stress simulations – Government budget: Rp 127M
- KPK File: `KPK_Investigasi_Korupsi_Lamongan.docx` – Case #05/KPK/2025 – Whistleblower logs – Named directors involved
- Employee KTP Scan: `scan_ktp_[ID]_verified.jpg` – Name: [REDACTED] – NPWP: 12.345.678.9-012.000 – Address: Jakarta Timur
- WhatsApp Log (2025): Finance Director to Project Manager – "Anggaran irigasi Lampung sudah cair. Segera transfer ke rekanan." (Lampung irrigation budget released. Transfer to partners immediately.)
- Config File: `/var/log/nginx/config/backup/config.php` – `$db_pass = 'BrantasProjectAdmin2024!'` – Plaintext admin password
- Telephone Directory: `Brantas_Phonebook_2026.xlsx` – 2,300+ entries – Direct mobiles and extensions for all 3 operational divisions

Deliverables:
- `Brantas_Abipraya_236GB.rar` – Full archive
- Folder structure:
  - `/engineering/dams_irigasi/` – CAD, PDF blueprints
  - `/engineering/toll_roads_bridges/` – construction specs
  - `/finance/kpk_investigations/` – corruption case files
  - `/finance/audits_mergers/` – financial statements, consolidation docs
  - `/hr/ktp_npwp/` – scanned Indonesian IDs
  - `/hr/phone_directory/` – full employee contact list
  - `/emails/pst_archives/` – director mailboxes
  - `/configs/credentials/` – hardcoded passwords and VPN keys
  - `/chat_logs/whatsapp/` – operational message exports

Download:

Files: https://t.me/+Lv3LYdpVyJc5ZTM0
Vouch center: https://t.me/+wuOFH81f2us1YmQ0
Website: https://xorcat.deals/

you have the best leak on this forum. no doubt

[halohalomr1213]

大家好，DarkForums。

没有交易，没有付款，也没有回复。

今天，我将发布从印尼国有建筑巨头PT Brantas Abipraya (Persero)公司提取的完整数据。该公司负责重要的水利、能源和交通基础设施建设。236GB的原始内部数据，包括大坝蓝图、腐败调查文件、员工身份证扫描件、政府招标文件和财务审计报告。

我们利用了以下漏洞：
- 暴露的企业NAS，默认凭据可从互联网访问
- 未打补丁的文件共享协议允许在内部服务器之间横向移动
- 管理面板未启用多因素身份验证 (MFA)，弱密码在多个系统中重复使用
- 批量数据泄露过程中未检测到任何异常（超过两天的不间断下载）

数据库信息：

- 公司：PT Brantas Abipraya (Persero)
- 域名：brantas-abipraya.co.id
- 国家：印度尼西亚
- 总大小：236GB 压缩包（.rar）
- 解压日期：2026年3月至4月

泄露数据（236GB）：

- 工程蓝图：水坝（例如卡比安水坝、布洛拉水坝等）、灌溉系统、收费公路、隧道、机场、桥梁、发电厂
- 政府招标文件：预算拨款（RAB – Rencana Anggaran Biaya）、合同估价、中标明细
- 反腐败委员会（KPK）反腐调查档案：内部审计、举报人投诉、案件编号 05/KPK/2025（拉蒙甘建筑欺诈案）
- 员工个人身份信息：身份证扫描件（印尼身份证）、NPWP 税号、工资记录、家庭住址、紧急联系人
- 董事和部门主管的公司电子邮件存档（.pst 文件）
- 项目经理和财务团队之间的内部 WhatsApp/Telegram 聊天记录
- 完整电话簿：所有员工的姓名、分机号、直拨手机号码、电子邮件映射
- 财务审计：损益表、风险评估、合并战略文件（与 Wika、Waskita、PP、Adhi、Nindya Karya 合并）
- 配置文件中的硬编码凭据：数据库密码、VPN密钥、管理员面板登录信息
- 正在进行的州级项目的建筑许可证和环境合规表格

样本数据（代表性 - 已编辑）：

报价：
- 大坝蓝图：`Bendungan_Cabean_Blora_Structural_Final.pdf` – 47 MB – 地形测量、具体规格、压力模拟 – 政府预算：1.27 亿卢比
- KPK 文件：`KPK_Investigasi_Korupsi_Lamongan.docx` – 案例 #05/KPK/2025 – 举报日志 – 涉及指定董事
- 员工 KTP 扫描： `scan_ktp_[ID]_verified.jpg` – 名称：[已编辑] – NPWP：12.345.678.9-012.000 – 地址：雅加达东
- WhatsApp 日志 (2025)：财务总监转为项目经理 – “Anggaran irigasi Lampung sudah cair。Segera 转让 ke rekanan。” （楠榜灌溉预算已发放。立即转账给合作伙伴。）
- 配置文件：`/var/log/nginx/config/backup/config.php` – `$db_pass = 'BrantasProjectAdmin2024!'` – 管理员明文密码
- 电话簿：`Brantas_Phonebook_2026.xlsx` – 超过 2300 条记录 – 所有 3 个运营部门的直拨手机号码和分机号码

交付内容：
- `Brantas_Abipraya_236GB.rar` – 完整压缩包
- 文件夹结构：
  - `/engineering/dams_irigasi/` – CAD、PDF 蓝图
  - `/engineering/toll_roads_bridges/` – 施工规范
  - `/finance/kpk_investigations/` – 腐败案件档案
  - `/finance/audits_mergers/` – 财务报表、合并文件
  - `/hr/ktp_npwp/` – 扫描的印尼身份证
  - `/hr/phone_directory/` – 完整的员工联系人列表
  - `/emails/pst_archives/` – 主管邮箱
  - `/configs/credentials/` – 硬编码密码和 VPN 密钥
  - `/chat_logs/whatsapp/` – 运营消息导出

下载：

文件：https://t.me/+Lv3LYdpVyJc5ZTM0
凭证中心： https://t.me/+wuOFH81f2us1YmQ0
网站：https://xorcat.deals/

[Seravola]

thanks

[draughtier]

i'd have a try and test it.

[zalthorian]

Thanks

[wsfsfzvsq]

thank you

[Crystalin]

Thanks bro!!! What a leak bro!!

[matatu78]

need to have a look at it

[gare11t]

good and informative content