Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Cazh.id

bkdp.cazh.id

Cazh.id was listed on the Icarus leak site on May 5, 2026. Information as of Oct 19, 2026.

Country: IndonesiaIndustry: Financial Services
Updated continuously · figures as of Oct 19, 2026
Claimed by
Icarus
First listed
May 5, 2026
Claims recorded
1

Leak-Site Claim.

IcarusConfirmed claim
Posted on the leak site
May 5, 2026
Collected by Brandefense
May 5, 2026
Data claimed
Not stated
Leak-site post text, written by the group
- User DB: 300,000 Users (Email, Hash, Phone, Address, DOB) for [removed] - KYC Vault: 7,800 Government IDs + 4,200 Selfies (including "Hold-to-Face" ID selfies). - 34 SQL Databases for associated schools (Students/Parents/Staff). - Corporate/Financial: Full Investor Database + partner documents - Collateral documents (Vehicle Registration Documents & Property Deeds) - Billing Proofs - Full src code of their services Data stolen: PII, SOURCE CODE, KYC

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Huntress
huntress.com
IcarusUSUnited StatesTechnology3.4 GB
HDS (Hdscorp)
hitachivantara.com
IcarusUSUnited StatesTechnology2.2 GB
Gms-net
gms.net
IcarusCHSwitzerlandTechnology0.13 GB
Cbassociations
cbassociations.com
IcarusUnknownConsulting3.4 GB
Klue.com
klue.com
IcarusCACanadaTechnologyNot stated
thecreditpros.com
thecreditpros.com
IcarusUSUnited StatesFinancial Services0.26 GB
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
Merit Financial Group
meritfinancialadvisors.com
StormUSUnited StatesFinancial ServicesNot stated
Finzly Corp
finzly.com
N0nUSUnited StatesFinancial ServicesNot stated
********rta.ch
rta.ch
CloakCHSwitzerlandFinancial ServicesNot stated
Via Credit Union
viacu.org
QilinUSUnited StatesFinancial ServicesNot stated
coopecaja.fi.cr
coopecaja.fi.cr
INC RansomCRCosta RicaFinancial ServicesNot stated
Telcoe Federal Credit Union
telcoe.com
QilinUSUnited StatesFinancial ServicesNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.