irda.com.my Listed by lockbit3 Ransomware Group

On April 11, 2023, the Malaysian federal statutory body Iskandar Regional Development Authority (IRDA) appeared on the LockBit 3.0 ransomware leak site, claiming that internal files had been exfiltrated during a ransomware attack. The listing does not specify the number of records affected or detail exactly which documents were taken, leaving affected individuals and businesses in the dark about the full scope of their exposure.

Details from the Leak Site

The primary disclosure on the LockBit 3.0 onion site states that IRDA suffered a ransomware incident and that attackers successfully exfiltrated internal files. No victim count, no list of specific data types beyond “internal files,” and no ransom demand figure are provided in the posting. The disclosure indicates the data is now hosted for public download on the leak site, a standard LockBit tactic intended to pressure the victim into payment. Public reporting on LockBit 3.0 confirms the group typically publishes a sample of stolen data and threatens full release if the ransom is not paid by their deadline.

Why This Matters for You and Your Family

When a government development authority like IRDA is breached, ordinary residents, contractors, business owners, and employees whose records pass through the agency can find their personal information exposed. Even though the exact data stolen remains undisclosed, internal files from such bodies frequently contain names, national identification numbers, addresses, financial details, and correspondence that tie real identities to specific projects or grants. If your information was processed by IRDA in relation to Iskandar Malaysia development initiatives, you and your family now face heightened risk of identity theft, loan fraud, and targeted scams that can last for years.

The Doxxing and Identity-Chain Risk

Exposed internal files rarely exist in isolation. A single leaked email address or phone number can be chained with gaming usernames, social-media handles, and family-member records to build a complete profile. Attackers and opportunistic criminals then use these linkages for doxxing, account takeovers, and harassment. Credential leaks of this nature frequently cascade into gaming account compromises, especially for children whose usernames and reused passwords appear in the same datasets. Once an attacker controls a family gaming account tied to the same address or parent email, further personal details can be extracted and sold or published.

LockBit 3.0 Track Record

Public reporting attributes the LockBit 3.0 variant to a ransomware operation that first emerged in 2019 under the original LockBit name and rebranded to version 3.0 in 2022. The group has hit hospitals, manufacturers, local governments, and educational institutions worldwide. Their typical playbook involves initial access through phishing or exploited remote desktop services, followed by rapid lateral movement, data exfiltration, encryption of systems, and dual extortion: demanding ransom for decryption and threatening public leak of stolen files. The IRDA listing fits this pattern exactly, with the group publishing a victim page and countdown timer on their leak site.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you used on irda.com.my or related government portals wherever it has been reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts commonly chained to the same address or parent credentials.
• Let remediation specialists handle takedown requests for any personal data already appearing on broker sites or forums tied to this incident.

The IRDA breach is a reminder that government-linked data leaks create long-term exposure chains that reach ordinary families in unexpected ways. Start your DoxxScan trial today and combine identity-chain mapping, continuous monitoring, and hands-on specialist remediation to shrink the window between breach and discovery while protecting both adult and children’s accounts in one household plan.