SHUKAKU-INC Listed by walocker Ransomware Group

On June 10, 2025, the ransomware group known as walocker added Shukaku Inc. to its leak site, claiming that internal files from the Cambodian real estate developer had been exfiltrated. The breach affects anyone whose personal information appears in those stolen documents, including current and former employees, contractors, business partners, and potentially residents or buyers whose records were stored in the company’s systems.

Reported Details of the Incident

Public reporting indicates that walocker claims to have obtained internal files during a ransomware attack on Shukaku Inc., a private firm known for major development projects in Phnom Penh. The exact number of people whose data was taken remains unknown, and the precise contents of the leaked files have not been independently verified. Available reporting describes the incident as a classic ransomware operation in which the attackers exfiltrate data before encrypting systems and then threaten to publish the material unless a ransom is paid.

June 10, 2025 marks the date the company was formally listed on the group’s leak site. No additional technical details about the initial access method or the volume of data have been made public.

Why This Matters for You and Your Family

When a company like Shukaku Inc. loses control of internal files, the information inside often includes names, addresses, phone numbers, identification documents, financial details, and correspondence. If your information is among the stolen records, it can be used to impersonate you, open accounts in your name, or target your family members. Children’s records, sometimes stored in employee benefit files or family housing applications, are especially vulnerable because they provide long-term anchors for identity theft.

Even if you have never directly done business with the firm, shared records from vendors, contractors, or government permitting processes can still expose you. The breach therefore reaches beyond the company’s walls to ordinary people whose data was entrusted to it.

The Doxxing and Identity-Chain Risks

Stolen internal files frequently contain email addresses, usernames, and phone numbers that attackers link across multiple platforms. A single leaked work email can lead to gaming accounts, social-media profiles, and personal cloud storage, creating a chain that ends in full doxxing. Credential leaks of this kind regularly cascade into account takeovers, especially for gaming platforms where children’s accounts are often tied to a parent’s email or home address.

Once attackers map these connections, they can harass families, demand payment to prevent release of sensitive documents, or sell the compiled dossiers on underground markets. The speed at which these chains form makes early detection critical.

Walocker’s Publicly Known Track Record

Public reporting attributes walocker with emerging in late 2024 as a ransomware operation that combines encryption with data extortion. The group has targeted organizations across several countries, typically gaining initial access through phishing or exploited remote desktop services. After exfiltrating files, walocker follows a standard playbook: it gives the victim a short deadline to pay, then publishes samples or the full archive on its leak site if the ransom is not met. Notable prior victims include mid-sized companies in logistics, manufacturing, and professional services, though exact details remain limited in open sources.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what this claimed breach has exposed.
• Rotate any password used at Shukaku Inc. or related services anywhere it has been reused, and switch on two-factor authentication through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information appears it is caught within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same addresses and emails stolen in incidents like this.
• Let remediation specialists handle takedown requests for any exposed personal documents or broker listings that surface from the leaked files.

The incident shows that even companies you may have only indirect contact with can put your family’s personal information at risk. Acting quickly on the exposed data and maintaining ongoing visibility is the most practical defense. DoxxScan by GalaxyWarden delivers that visibility through continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.