Samuel Sekuritas Indonesia & Samuel Aset Manajemen Listed by trigona Ransomware Group

On January 18, 2024, Indonesian financial firms PT Samuel Sekuritas Indonesia and Samuel Aset Manajemen appeared on the leak site operated by the Trigona ransomware group. The listing states that internal files were exfiltrated during a ransomware attack, although the exact number of affected individuals remains unknown and the leak-site listing does not detail what specific records were taken.

Primary Disclosure Details

The Trigona leak page states that both entities suffered a ransomware incident resulting in data exfiltration. It lists the companies under a single entry dated January 18, 2024, and claims possession of internal files. No victim count, no breakdown of exposed record types, and no ransom amount appear in the primary disclosure. The notification simply states that the data was obtained through a ransomware attack and is now published on the group’s onion site. Public reporting on Trigona indicates the group follows a double-extortion model: encrypt systems where possible, then threaten to release stolen data unless payment is made.

Why This Matters for You and Your Family

If you are a client of Samuel Sekuritas Indonesia or Samuel Aset Manajemen, your personal or financial details may now sit in an attacker-controlled archive. Even when exact data types are not published, financial advisory firms routinely hold names, addresses, national ID numbers, tax identifiers, bank account details, investment records, and correspondence. Any of these can be used to impersonate you, file fraudulent tax returns, open accounts in your name, or pressure you with targeted phishing. Because the breach involves a regulated financial institution in Indonesia, downstream effects can reach family members listed on joint accounts or as beneficiaries. The disclosure indicates the data is already public on a criminal site, so the exposure window is active now.

Doxxing and Identity-Chain Risks

Financial breaches rarely stop at one dataset. Attackers or buyers frequently cross-reference leaked emails, phone numbers, and IDs against other breaches to build complete identity profiles. A single handle tied to your Samuel Sekuritas account can link to gaming logins, social-media profiles, and household addresses. Once those connections surface, doxxing escalates quickly: harassment, SIM-swapping attempts, or credential-stuffing attacks against every service that reuses the same password. Children’s gaming accounts are especially vulnerable because they often share the same email domain or recovery phone number as the parent’s financial records. The result is an identity chain that stretches from investment statements to family digital life.

Trigona Ransomware Group Track Record

Public reporting attributes Trigona’s emergence to mid-2022. The group has targeted organizations across Southeast Asia, Europe, and North America, with prior victims including manufacturing, logistics, and professional-services firms. Their typical playbook begins with phishing or exploited remote-access tools for initial access, followed by lateral movement, data exfiltration, and deployment of encryptors only after sensitive files have been copied. Extortion demands are delivered via email and leak-site countdowns; non-payment usually triggers full publication of stolen archives. The Samuel Sekuritas Indonesia listing fits this pattern exactly.

What to do

• Rotate any password you used at Samuel Sekuritas Indonesia or Samuel Aset Manajemen and enable 2FA through an authenticator app on every account where that password was reused.
• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that can chain back to the same breached records.
• Let remediation specialists manage takedown requests and broker opt-outs on your behalf while you focus on securing day-to-day accounts.

The incident underscores that financial-service breaches continue to feed long-term identity theft and doxxing campaigns even when exact data volumes stay undisclosed. Starting proactive defense now limits how far attackers can travel along your identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage including children’s gaming accounts that often become the next target after credential leaks like this one.