Mpaj.gov.my Listed by babuk2 Ransomware Group

On March 21, 2025, the Malaysian government portal Mpaj.gov.my appeared on the leak site of the Babuk2 ransomware group, with attackers claiming to have exfiltrated internal files during a ransomware incident.

What's Publicly Reported from Reporting

Public reporting indicates the listing occurred on the Babuk2 leak site, accessible via an onion address tracked by ransomware.live. The entry states that internal files were taken, although the exact number of affected individuals remains unknown. No sample data has been publicly released in the initial listing, and the Malaysian authorities have not yet issued a detailed statement on the scope or timing of the initial breach. The incident follows the group’s standard pattern of posting victim organizations after an extortion deadline passes without payment.

Why This Matters for You and Your Family

When a government portal like Mpaj.gov.my is breached, the records it holds often contain personal details that ordinary citizens submit for licensing, permits, housing, or public services. If your name, address, national identification number, phone, or email appears in those files, the information can be used to impersonate you, open accounts, or target your family members. Children’s records are sometimes included in the same datasets, creating long-term risks that extend beyond the initial breach date. Even if you never visited the site yourself, shared household data or joint applications can still expose you.

The Doxxing and Identity-Chain Risks

Stolen government files rarely stay isolated. Attackers combine them with credential leaks from earlier breaches to build detailed profiles. A phone number found in one record can link to your children’s gaming accounts; an email can tie together social-media handles and family addresses. These identity chains accelerate doxxing, swatting, and targeted scams. Credential leaks like this one frequently cascade into account takeovers precisely because the same passwords or recovery details are reused across personal and government services.

Babuk2 Group’s Known Track Record

Public reporting attributes the Babuk2 operation to a successor or rebrand of the original Babuk ransomware group that first appeared in 2021. The group has listed municipalities, healthcare providers, and private companies in prior incidents. Their typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files, encryption of systems, and extortion demands backed by threats to publish the data. When victims do not pay, Babuk2 posts samples or full datasets on their leak site, as seen in this Mpaj.gov.my case.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, government IDs, and online handles so you can see the full exposure chain.
• Rotate any password you ever used on Mpaj.gov.my or related Malaysian government sites, and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours instead of months.
• Cover the household with DoxxScan family protection, which includes dependents and your children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle data-broker takedowns and opt-out requests on your behalf while you focus on securing accounts.

The incident shows how quickly government data can fuel larger identity crimes, but early action limits the damage. Start your DoxxScan trial today and use its continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and family coverage that extends to children’s gaming accounts. Protecting your household now reduces the chances that this claimed breach becomes the first link in a much longer chain of harm.