On January 18, 2024, Indonesian financial firms PT Samuel Sekuritas Indonesia and Samuel Aset Manajemen appeared on the leak site operated by the Trigona ransomware group. The listing states that internal files were exfiltrated during a ransomware attack, although the exact number of affected individuals remains unknown and the leak-site listing does not detail what specific records were taken.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Samuel Sekuritas Indonesia
Get alerted the next time Samuel Sekuritas Indonesia files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Samuel Sekuritas Indonesia’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Primary Disclosure Details
The Trigona leak page states that both entities suffered a ransomware incident resulting in data exfiltration. It lists the companies under a single entry dated January 18, 2024, and claims possession of internal files. No victim count, no breakdown of exposed record types, and no ransom amount appear in the primary disclosure. The notification simply states that the data was obtained through a ransomware attack and is now published on the group’s onion site. Public reporting on Trigona indicates the group follows a double-extortion model: encrypt systems where possible, then threaten to release stolen data unless payment is made.
Why This Matters for You and Your Family
If you are a client of Samuel Sekuritas Indonesia or Samuel Aset Manajemen, your personal or financial details may now sit in an attacker-controlled archive. Even when exact data types are not published, financial advisory firms routinely hold names, addresses, national ID numbers, tax identifiers, bank account details, investment records, and correspondence. Any of these can be used to impersonate you, file fraudulent tax returns, open accounts in your name, or pressure you with targeted phishing. Because the breach involves a regulated financial institution in Indonesia, downstream effects can reach family members listed on joint accounts or as beneficiaries. The disclosure indicates the data is already public on a criminal site, so the exposure window is active now.
Doxxing and Identity-Chain Risks
Financial breaches rarely stop at one dataset. Attackers or buyers frequently cross-reference leaked emails, phone numbers, and IDs against other breaches to build complete identity profiles. A single handle tied to your Samuel Sekuritas account can link to gaming logins, social-media profiles, and household addresses. Once those connections surface, doxxing escalates quickly: harassment, SIM-swapping attempts, or credential-stuffing attacks against every service that reuses the same password. Children’s gaming accounts are especially vulnerable because they often share the same email domain or recovery phone number as the parent’s financial records. The result is an identity chain that stretches from investment statements to family digital life.