Perpustam Listed by arcusmedia Ransomware Group

On July 14, 2026, the Malaysian public library authority Perpustam.gov.my appeared on the leak site operated by the ransomware group ArcusMedia. The listing states that internal files were exfiltrated during a ransomware attack and sets a public deadline of July 21, 2026 for the organisation to negotiate or face full publication of the stolen data. The leak-site entry does not specify the number of records involved or list exact file types, only that sensitive internal documents were taken.

Details in the Primary Listing

The ArcusMedia leak page, accessible via the onion address indexed by ransomware.live, confirms that Perpustam — the Malacca Public Library Corporation — was compromised through a ransomware deployment. It explicitly notes that data was successfully exfiltrated before encryption and warns that samples or the full archive will be released if the deadline passes without resolution. No victim count is provided, and the disclosure does not describe the initial access vector or the precise systems affected. Public trackers show this is the group’s standard publication format: a countdown timer followed by incremental data dumps when victims refuse to pay.

Why This Matters for You and Your Family

Even though Perpustam is a government library body, millions of ordinary Malaysians have used its services over the years. Library membership records, inter-library loan requests, event registrations, and staff contact lists frequently contain full names, home addresses, phone numbers, email addresses, and national identification numbers. If those records are among the exfiltrated files, your personal information could be exposed without your knowledge. Children’s library cards, school-group registrations, and family reading-programme sign-ups are often stored in the same systems, creating long-term privacy risks for every member of the household.

The breach is another reminder that institutions holding everyday civic data are attractive targets. Once files leave the organisation’s control, they can circulate indefinitely on dark-web forums, resale markets, and extortion groups.

Doxxing and Identity-Chain Risks

Library records rarely exist in isolation. A single leaked email or phone number from Perpustam can be correlated with gaming accounts, social-media handles, delivery-app profiles, and government portals. Attackers routinely chain these data points to build complete identity profiles that enable account takeovers, SIM-swapping, or targeted phishing. Because many families reuse the same password across library portals, email, and children’s online games, one breach can cascade into multiple compromises. Gaming accounts linked to the same household address are especially vulnerable — stolen credentials often lead to doxxing, harassment, or theft of in-game purchases that expose even more personal details.

ArcusMedia’s Known Track Record

Public reporting attributes ArcusMedia’s first notable campaigns to late 2024. The group has since targeted hospitals, local governments, educational bodies, and cultural institutions across Southeast Asia and Europe. Their typical playbook begins with phishing or exploitation of remote-access software, followed by lateral movement to file servers where they exfiltrate documents before deploying ransomware. Rather than focusing solely on encryption, ArcusMedia emphasises extortion through data leaks, publishing sample files and full archives on their onion site when victims ignore demands. The July 21, 2026 deadline for Perpustam follows this established pattern of timed public pressure.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including any data that may have surfaced from the Perpustam breach.
• Rotate passwords used on Perpustam.gov.my or any related Malaysian government portals wherever those credentials are reused, and switch to 2FA through an authenticator app instead of SMS.
• Enable continuous DoxxScan monitoring across 15.4B+ breach records and 100+ platforms so the next exposure of your family’s data is caught and addressed in hours rather than months.
• Cover the household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same leaked addresses or emails.
• Let DoxxScan remediation specialists manage takedown requests for any exposed personal records appearing on data-broker or extortion sites.

The Perpustam incident shows how quickly a local government service can become a vector for nationwide identity risk. Acting promptly on the credentials and contact details already circulating can limit the damage before ArcusMedia’s deadline expires or the files spread further. DoxxScan by GalaxyWarden delivers continuous monitoring across 15.4 billion breach records and more than 100 platforms, AI-powered identity-chain mapping that connects scattered handles to real people, and hands-on remediation by specialists who handle removal work for you and your entire household, including children’s gaming accounts that frequently become targets once personal data leaks.