Tan Chong Motor Holdings Berhad Listed by crypto24 Ransomware Group

On July 9, 2025, Malaysian automotive group Tan Chong Motor Holdings Berhad appeared on the leak site of the crypto24 ransomware operation after attackers claimed to have stolen more than 300GB of internal data.

Reported Details from Reporting

Public reporting indicates the attackers exfiltrated customer databases covering multiple systems including NAV, BRASSTAX, VTS, CRM and E-INVOICE. They also took legal and HR documents, financial and employee records, and contractual agreements with partners and customers. The company has not yet stated the breach publicly, but the crypto24 leak page lists the data as available for download or extortion. No exact number of affected individuals has been disclosed, yet the breadth of customer and employee records suggests the exposure could touch thousands of Malaysian motorists and staff.

Why This Matters for You and Your Family

When a large car dealership group loses control of customer databases, the information inside often includes names, addresses, national identification numbers, contact details, purchase histories and financial arrangements. If you or any member of your family has bought or serviced a vehicle through Tan Chong or its subsidiaries, your personal data may now sit on a ransomware leak site. That exposure creates immediate risks of identity theft, loan fraud, and unwanted targeting by scammers who already know you own or financed a car.

Employee records and HR documents add another layer: current and former staff could face tax fraud, employment scams or blackmail attempts based on salary details and personal files. Families feel these breaches long after the headlines fade because stolen data keeps circulating on underground markets for years.

The Doxxing and Identity-Chain Risks

A single breach rarely stays isolated. Customer records frequently link email addresses, phone numbers and vehicle registration details that attackers can chain with information from other leaks. Once criminals connect your Tan Chong data to gaming accounts, social-media handles or family-member profiles, they can launch coordinated doxxing campaigns or sell ready-made identity packages. Credential leaks of this type regularly cascade into account takeovers, especially for children’s gaming profiles that reuse the same email or password patterns parents use for car-related services.

Crypto24’s Publicly Known Track Record

Public reporting attributes crypto24 with emerging in late 2024 as a ransomware-as-a-service operator. The group has listed manufacturing, logistics and retail victims across Southeast Asia and has typically followed a double-extortion playbook: first encrypting victim systems, then exfiltrating data before threatening to publish it unless a ransom is paid. Their leak sites display sample files and countdown timers, a pattern seen in earlier incidents where initial access was gained through compromised remote desktop credentials or phishing emails. Exact success rates remain unclear, yet the group continues to post new victims weekly.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers and real identity, then use the included cleanup of data-broker listings tied to the Tan Chong exposure.
• Rotate any password you ever used on Tan Chong Motor systems or related partner sites, and switch on two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught and acted on within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same addresses or parent emails leaked in incidents like this.
• Let remediation specialists handle takedown requests and follow-up with data brokers and leak sites on your behalf while you focus on securing your own accounts.

The Tan Chong Motor breach is a reminder that even routine transactions can hand your family’s information to criminals who move faster than most people check their credit reports. Taking concrete steps now limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers that protection through continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts at risk from cascading credential leaks.