Abdainsurance.co.id Listed by IMNCrew Ransomware Group

On May 5, 2025, Indonesian insurance provider ABDA Insurance appeared on the leak site of the ransomware group IMNCrew. The company, which offers policies covering fire, vehicles, engineering, liability, transportation, heavy equipment, machinery and health protection, is claimed to have had internal files exfiltrated during a ransomware attack. While the exact number of affected individuals remains unknown, anyone who has filed a claim, submitted personal information for a policy, or appears in the company’s records could have data now in the hands of criminals.

Reported Details from Reporting

Public reporting indicates that IMNCrew listed ABDA Insurance on its dark-web leak site on May 5, 2025. The data consists of internal files exfiltrated after the group deployed ransomware against the insurer’s systems. ABDA Insurance, formerly known as PT Dharmala Insurance and originally PT Asuransi Bina Dharma Arta, operates from its head office on the 27th floor of Plaza ABDA in Jakarta. No confirmed count of exposed records has been published, and the precise types of personal information inside the files have not been independently verified by third parties.

Why This Matters for You and Your Family

When an insurance company loses control of internal files, the information inside often includes names, addresses, dates of birth, national ID numbers, policy details, health records, banking information used for premium payments, and contact details for beneficiaries. If your family holds any policy with ABDA Insurance — whether for your car, home, business equipment or medical coverage — your data may now be available to identity thieves. Criminals can use these details to file fraudulent claims, open accounts in your name, or combine them with other leaks to build a complete profile of your household. Children’s information is sometimes included in family policies, creating long-term risks that can follow them into adulthood.

The Doxxing and Identity-Chain Risks

Insurance records frequently link your real identity to email addresses, phone numbers, policy numbers and sometimes login credentials for customer portals. Once criminals possess even a partial dataset, they can cross-reference it against other breaches to map additional accounts. A password reused on your ABDA customer login, for example, may also protect your email, social media or children’s gaming accounts. This creates an identity chain that leads to doxxing, account takeovers and targeted harassment. Credential leaks like this one regularly cascade into gaming-platform compromises because families often share similar passwords across work, insurance and entertainment services.

IMNCrew’s Publicly Known Track Record

Public reporting attributes IMNCrew with emerging in late 2024 as a ransomware operation that combines double-extortion tactics with data leaks. The group has listed victims ranging from small-to-medium businesses to regional service providers, typically gaining initial access through phishing or exploited remote-desktop services, exfiltrating files before encrypting systems, then demanding payment while threatening to publish stolen data. Their playbook follows a now-familiar pattern: publish samples on their leak site, set a deadline for payment, and release additional batches if the victim does not pay. Exact success rates and prior notable victims remain limited in open sources, but the group’s activity aligns with the broader rise of mid-tier ransomware actors who target organizations that hold sensitive personal and financial records.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, insurance policy details and real-world identity so you can see exactly what chains back to the ABDA breach.
• Rotate any password you ever used on the ABDA customer portal or related insurance systems, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household — DoxxScan family coverage includes dependents and children’s gaming accounts that often share the same address or reused credentials exposed in incidents like this.
• Let remediation specialists handle takedown requests for any exposed personal records while you focus on securing accounts and alerting your bank if payment details were involved.

The ABDA Insurance listing is a reminder that even established insurers remain targets and that a single breach can quietly expose years of your family’s personal and financial history. Taking concrete steps now limits how far criminals can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts — practical protection that turns early awareness into rapid action.