Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Darma Henwa

ptdh.co.id

Darma Henwa was listed on the Space Bears leak site on Feb 16, 2026. Information as of Oct 19, 2026.

Country: IndonesiaIndustry: Mining
Updated continuously · figures as of Oct 19, 2026
Claimed by
Space Bears
First listed
Feb 16, 2026
Claims recorded
1

Leak-Site Claim.

Space BearsConfirmed claim
Posted on the leak site
Feb 16, 2026
Collected by Brandefense
Apr 3, 2026
Data claimed
Not stated
Leak-site post text, written by the group
PT Darma Henwa Tbk - established in 1991, is a company that specializes in mining support and excavation activities. It provides services such as metal fabrication, machinery repair, and equipment leasing. The company also engages in road and railroad construction, as well as building and civil construction. Initially a domestic investment firm, Darma Henwa became a foreign investment company in 1996 and went public in 2007.- Employee personal data- Contracts and client information- Financial reports and audits- Projects and developments- Outlook emails- Internal security reports [removed]

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Holistic Health Group, Inc. (d/b/a Suncrafted)
massachusetts.it
Space BearsUnknownUnknownNot stated
Alma Center Servizi Medicali S.r.l.
almacenter.it
Space BearsITItalyHealthcareNot stated
Tomix / Grupo JOPER
tomix.com.pt
Space BearsPTPortugalManufacturingNot stated
D-MAX Engineering, Inc
dmaxinc.com
Space BearsUSUnited StatesNon-profit and Civil SocietyNot stated
Sports Endeavors
sportsendeavors.com
Space BearsUSUnited StatesRetailNot stated
Schwartz, Giannini, Lantsberger & Adamson (SGLA)
sglacpas.com
Space BearsUnknownUnknownNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
Confipetrol
confipetrol.com
QilinPEPeruMiningNot stated
Tharisa
tharisa.com
UmbraCYCyprusMiningNot stated
Ar Valve Resources
arvalveresources.com
WallstreetUSUnited StatesMiningNot stated
Manroc Developments
manroc.com
StormCACanadaMiningNot stated
Dome Gold Mines
domegoldmines.com.au
The GentlemenAUAustraliaMiningNot stated
PT Indo Tambangraya Megah
itmg.co.id
RansomHouseIDIndonesiaMiningNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.