On October 13, 2025, the Malaysian design firm eastdesign.com.my had its internal files published on the dark web by the obscura Ransomware Group after a ransomware attack.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch eastdesign.com.my
Get alerted the next time eastdesign.com.my files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about eastdesign.com.my’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates the company, which generates under $5 million in annual revenue, had data exfiltrated and later published on the obscura leak site. The exact volume of data is listed as xx GB, and the status is marked as Published. Available reporting describes the incident as a classic ransomware operation in which the attackers first gained access, encrypted systems, and then threatened to release the stolen files unless a ransom was paid. No confirmed victim count has been released, but the nature of the exposed material — internal files — suggests employee records, client information, project documents, and possibly personal data were included.
Why This Matters for You and Your Family
When a company like eastdesign.com.my suffers a breach, the information inside its files can easily contain details that point back to ordinary people. If you or anyone in your family has ever worked with a design agency, marketing firm, or small business in Malaysia, your name, address, phone number, email, or even national identification details may now be circulating. Internal files from such firms frequently hold contracts, invoices, customer databases, and employee payroll records. Once published on a ransomware leak site, that information does not disappear. It becomes available to identity thieves, stalkers, and fraudsters who search these sites daily.
The breach also highlights how quickly your personal data can move from a seemingly legitimate business relationship into the hands of criminals. Even if you never directly hired eastdesign.com.my, shared credentials or contact information stored in their systems can still expose you.