MYINDIHOME TELKOM INDONESIA Listed by Babuk2 Ransomware Group

On January 28, 2025, the Indonesian broadband and telecommunications provider MyIndiHome Telkom Indonesia appeared on the leak site of the Babuk2 ransomware group. Internal files were allegedly exfiltrated during a ransomware attack, with the group publishing what it claims is stolen company data.

What Public Reporting Shows

Public reporting indicates that Babuk2 listed MyIndiHome Telkom Indonesia on its dark-web leak portal. The posting includes samples of allegedly exfiltrated internal documents. No confirmed total number of customer records has been released, and the precise volume and sensitivity of the files remain unclear from available reporting. The incident follows the typical ransomware pattern of initial compromise, data theft, and subsequent extortion pressure.

January 28, 2025 marks the date the listing appeared. The affected systems involve internal infrastructure at one of Indonesia’s largest internet service providers, which serves millions of residential broadband customers under the IndiHome brand.

Why This Matters for You and Your Family

If you or anyone in your household uses IndiHome internet, television, or related services, your personal details may sit inside the compromised internal files. That could include names, addresses, phone numbers, account credentials, or billing information. Once such data leaves a company’s control, it can surface on criminal forums and fuel identity theft, phishing campaigns, or harassment directed at you and your family.

Even when exact victim counts are unknown, the breach of a major broadband provider creates widespread risk. Residential customers rarely realize how much identifying information they share with their internet company until that data appears in the wrong hands.

The Doxxing and Identity-Chain Risks

Stolen internal files often contain more than isolated records. They can link email addresses, phone numbers, account usernames, and physical addresses. Criminals use these connections to build detailed profiles. A single leaked phone number can lead to your social-media accounts, your children’s gaming usernames, and eventually your full identity. This chaining effect turns one breach into repeated targeting through doxxing, SIM-swapping, or account takeovers.

Credential leaks like this one cascade into gaming account compromises. Children’s Xbox, PlayStation, or mobile game logins frequently reuse the same passwords or recovery emails tied to family broadband accounts. Once attackers control those gaming profiles, they can demand ransom, spread malware, or harass your family online.

Babuk2’s Publicly Known Track Record

Public reporting attributes the Babuk2 operation to a ransomware group that emerged in 2021 as an evolution of the original Babuk ransomware. The group has targeted organizations across multiple countries, with notable prior victims including healthcare providers, logistics companies, and technology firms. Their typical playbook involves gaining initial access through phishing or exploited vulnerabilities, exfiltrating sensitive files before encryption, and then pressuring victims with data leaks if ransom demands go unpaid. Babuk2 maintains a leak site where it publishes samples and full datasets when companies refuse to pay.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what this claimed breach exposes.
• Rotate any password you used for MyIndiHome services and enable 2FA with an authenticator app everywhere that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours rather than months.
• Cover the household with DoxxScan family protection that includes dependents and your children’s gaming accounts which often chain back to the same address and credentials.
• Let remediation specialists handle takedown requests and broker removals for you while you focus on securing your own accounts.

The speed with which ransomware groups publish stolen data means you cannot afford to wait for official notifications. Taking concrete steps now limits how far this incident can reach into your daily life. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects scattered online handles to real identities, and hands-on remediation by specialists who manage takedowns for you. Its household coverage extends protection to every family member, including children’s gaming accounts that frequently become the next link in doxxing chains.