Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

CitizensPay

ctzpay.com

CitizensPay was listed on the Dysphor1a leak site on Sep 5, 2026. Information as of Oct 19, 2026.

Country: MyanmarIndustry: Financial Services
Updated continuously · figures as of Oct 19, 2026
Claimed by
Dysphor1a
First listed
Sep 5, 2026
Claims recorded
1

Leak-Site Claim.

Dysphor1aConfirmed claim
Posted on the leak site
Sep 5, 2026
Collected by Brandefense
Sep 5, 2026
Data claimed
Not stated
Leak-site post text, written by the group
Citizens Pay (also known as CTZPay) is a mobile digital wallet and payment platform in Myanmar powered by Myanmar Citizens Bank (MCB) and Capital Connect Limited. Compromised agent user information, total data size 30 GB. Price range $7,000 to $25,000. Victim domain [removed]

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
RTAD GOV MM
rtad.gov.mm
Dysphor1aMMMyanmarGovernment and Public SectorNot stated
MBT Telecom
mbt.com.mm
Dysphor1aMMMyanmarTelecommunicationsNot stated
Netim Company
netim.com
Dysphor1aFRFranceTechnologyNot stated
AnnouncementDysphor1aBDBangladeshConsultingNot stated
Yoma Fleet
yomafleet.com
Dysphor1aMMMyanmarTransportation and LogisticsNot stated
The University of Delhi (DU)
du.ac.in
Dysphor1aINIndiaEducation and ResearchNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
Merit Financial Group
meritfinancialadvisors.com
StormUSUnited StatesFinancial ServicesNot stated
Finzly Corp
finzly.com
N0nUSUnited StatesFinancial ServicesNot stated
********rta.ch
rta.ch
CloakCHSwitzerlandFinancial ServicesNot stated
Via Credit Union
viacu.org
QilinUSUnited StatesFinancial ServicesNot stated
coopecaja.fi.cr
coopecaja.fi.cr
INC RansomCRCosta RicaFinancial ServicesNot stated
Telcoe Federal Credit Union
telcoe.com
QilinUSUnited StatesFinancial ServicesNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.